This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          NCejHuca3DynDx2ltxDNinty+i3gokQhvjw2qiEx3zU=
Subject key identifier:   7A:D8:A3:BE:26:83:FD:83:98:A2:18:3F:BC:1F:24:AA:96:60:CE:BA
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019BFE4190E67ADF489BAB7ADD0FA962AC33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          06EA
Signing time:             Tue 27 Jan 2026 07:01:08 +0000
Manifest this update:     Tue 27 Jan 2026 07:01:08 +0000
Manifest next update:     Wed 28 Jan 2026 07:01:08 +0000
Files and hashes:         1: 0fOlVdIS1WEADHFx-rX9EuojXD0.roa (hash: HVN1Ks0lRzr25kk3tVqnsRKtbl6GiFv09oBIP/8lLHs=)
                          2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          3: 2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa (hash: Gkxl6cgCKu5SSnDSK3cxhOt4JBhAs9jevpskTltEVbU=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          8: EwPzuIXXAY5u8_S6Cn0AasfKr5Y.roa (hash: ZLQXJBiU/cJ5PgC0zxsFgBpflI2UY+bKrzKvcAF0V1M=)
                          9: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          10: GOanlWDUzk69YG0eCePJEpU9BnM.roa (hash: nrCNFfv+/Z1ic8g3j7yWk+DMZXSXMkw06k0jEv6zp3M=)
                          11: K-khbksQ-2sabX4zr3q8PxzSit0.roa (hash: xDFWiYoyDY13IMLCQNkMrZzkvNnytsrYJpcMXHkSwMs=)
                          12: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          13: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          14: QRmycAO-pHfT7FsE99BsqZ0Jl18.roa (hash: pDVrAH7IIAQbYj9HezybCfvc4KXVjiS/nu2UCu/rDRY=)
                          15: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          16: TrLgt6O4kepcEuMxF4qEbgp9fso.roa (hash: 6t22oRdt1hxqWXIDOjdGE92BzuYNUoFqu24pLal79dQ=)
                          17: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          18: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          19: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
                          20: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          21: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: G20EBtXbaCX5ShgsmfdfOhIkIgCXXIKUo1zPppm7PSs=)
                          22: h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa (hash: W51bGgmV1Q00x0gxca0kLqnlV5L62pIb8f8ybi2p/SU=)
                          23: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          24: kLlSZbzpmsYIvWwfO8jg_8rW4tQ.roa (hash: 12QL3G7J65T63O8QiRkOFH0drKrRxRKrU7LN/3R4Z+U=)
                          25: m20soYBRpBwWiwOYMWjeGQImDiI.roa (hash: SDDzIethQc2Sphm8d/FR7CDzvSB4niKjDOZEJjKEs4s=)
                          26: rjXWPmSkIQn4DiTNE6XPf1HGXYM.roa (hash: I0XKmy6kJPF5JUMuVfOLMBlmWwkJuYBjUKJtDfOHETE=)
                          27: shgwIpHUjkTES4WuZvl4q6J14j4.roa (hash: K9w+6O3bog4NXLdj4nneOheN9As20p3zZapy86hUWMs=)
                          28: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:41:90:e6:7a:df:48:9b:ab:7a:dd:0f:a9:62:ac:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jan 27 07:01:08 2026 GMT
            Not After : Jan 28 07:01:08 2026 GMT
        Subject: CN=7ad8a3be2683fd8398a2183fbc1f24aa9660ceba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:53:a3:79:7d:d3:2f:a1:19:9c:39:82:db:7e:
                    49:85:a8:d5:be:65:ab:79:5d:b8:5b:3d:8b:a5:92:
                    d7:78:c1:31:d4:61:f9:44:a8:ed:1d:d1:d4:bd:d2:
                    13:9c:d1:ad:c6:47:7b:8a:14:5d:3d:18:88:a3:12:
                    6d:c4:40:28:7d:09:f4:93:66:69:e6:ff:79:b9:af:
                    43:c5:30:77:04:b6:0c:52:54:4a:a2:5c:e0:a4:1a:
                    32:e7:c9:6a:06:05:b9:11:ff:7c:80:c5:38:eb:e9:
                    ea:18:be:cc:de:69:f5:ea:d0:c6:15:a0:58:66:6d:
                    63:2d:c6:b4:61:5f:f9:13:0f:a4:69:2a:22:79:2c:
                    1c:b1:13:20:7d:38:51:f4:32:5f:b8:a5:18:fe:43:
                    ee:6a:ba:32:a4:00:81:d6:2d:1e:79:5f:a0:cf:41:
                    72:29:cf:ce:6d:ba:d5:4b:35:90:eb:57:08:17:a5:
                    cc:49:07:97:14:27:1c:b6:b4:47:0a:c3:b5:bd:a5:
                    1a:34:54:a7:04:d6:f3:2c:b7:9b:68:a5:2a:e5:dd:
                    f9:c1:4a:5d:75:83:56:a5:ed:26:29:1d:14:a8:7b:
                    36:8b:ad:c8:89:35:bf:b5:21:c6:e8:c5:1a:e7:ea:
                    90:82:ae:20:55:6d:c1:8b:59:5c:9b:67:1f:92:d0:
                    f8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:A3:BE:26:83:FD:83:98:A2:18:3F:BC:1F:24:AA:96:60:CE:BA
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:b3:c1:fb:0d:aa:55:18:e7:2f:88:87:7d:d4:cd:0b:10:74:
         28:79:69:47:c0:be:15:36:39:92:1b:57:8b:bd:f1:8c:e3:9b:
         3a:6e:51:d7:59:50:46:70:84:f0:c0:78:25:7f:17:9a:94:fc:
         4f:97:17:b9:6e:55:c7:50:54:b8:76:4f:5d:6a:78:e7:1d:06:
         98:06:16:7c:33:85:5d:67:b1:5e:eb:fe:75:d3:2f:92:cc:60:
         5a:6a:e0:20:a0:19:1a:1f:d6:a7:27:9d:89:80:d3:ec:9a:12:
         1c:f1:58:26:b2:0f:c1:05:5a:45:47:de:61:80:09:e5:d8:ae:
         8d:1a:6c:56:11:f2:8b:1a:60:1f:69:2e:5b:d9:49:d1:c6:30:
         d2:07:b5:3a:ab:7d:bb:fc:ec:8e:8b:39:99:51:52:a0:c9:be:
         ba:2a:e8:75:e8:47:cc:5d:26:57:fd:6f:64:cc:fe:dc:0e:f5:
         c5:ec:45:a4:a7:b3:71:c7:58:bc:2c:b2:b0:1f:29:fb:30:e1:
         73:69:b3:33:17:5b:d7:eb:79:da:7c:3b:3c:a1:9a:db:7c:e2:
         a5:74:64:d3:a1:bc:23:06:db:a2:8f:95:d9:fb:c1:d6:4e:2b:
         98:36:de:8e:de:8e:a1:95:27:a5:da:96:ab:00:f8:e0:71:61:
         41:42:1f:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+QZDmet9Im6t63Q+pYqwzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMTI3MDcwMTA4WhcNMjYwMTI4MDcwMTA4WjAzMTEwLwYDVQQD
Eyg3YWQ4YTNiZTI2ODNmZDgzOThhMjE4M2ZiYzFmMjRhYTk2NjBjZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolOjeX3TL6EZnDmC235JhajVvmWr
eV24Wz2LpZLXeMEx1GH5RKjtHdHUvdITnNGtxkd7ihRdPRiIoxJtxEAofQn0k2Zp
5v95ua9DxTB3BLYMUlRKolzgpBoy58lqBgW5Ef98gMU46+nqGL7M3mn16tDGFaBY
Zm1jLca0YV/5Ew+kaSoieSwcsRMgfThR9DJfuKUY/kPuaroypACB1i0eeV+gz0Fy
Kc/ObbrVSzWQ61cIF6XMSQeXFCcctrRHCsO1vaUaNFSnBNbzLLebaKUq5d35wUpd
dYNWpe0mKR0UqHs2i63IiTW/tSHG6MUa5+qQgq4gVW3Bi1lcm2cfktD44QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHrYo74mg/2DmKIYP7wfJKqWYM66MB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzrPB+w2q
VRjnL4iHfdTNCxB0KHlpR8C+FTY5khtXi73xjOObOm5R11lQRnCE8MB4JX8XmpT8
T5cXuW5Vx1BUuHZPXWp45x0GmAYWfDOFXWexXuv+ddMvksxgWmrgIKAZGh/Wpyed
iYDT7JoSHPFYJrIPwQVaRUfeYYAJ5diujRpsVhHyixpgH2kuW9lJ0cYw0ge1Oqt9
u/zsjos5mVFSoMm+uirodehHzF0mV/1vZMz+3A71xexFpKezccdYvCyysB8p+zDh
c2mzMxdb1+t52nw7PKGa23zipXRk06G8Iwbboo+V2fvB1k4rmDbejt6OoZUnpdqW
qwD44HFhQUIfHg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 10:23:01 2026 by rpki-client