This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          ZUaUuHC79OP/Ii7gvD2NDhTA82uD9drxG+DU7g7zM/4=
Subject key identifier:   3C:48:CB:D0:C6:1C:F1:D8:0C:87:76:D6:D8:8C:9F:5A:9D:48:50:1F
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019BF0BCBB8869F2716CA64866DDE4CDDAC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          14DE
Signing time:             Sat 24 Jan 2026 16:00:59 +0000
Manifest this update:     Sat 24 Jan 2026 16:00:59 +0000
Manifest next update:     Sun 25 Jan 2026 16:00:59 +0000
Files and hashes:         1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=)
                          2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: iOoqmTwp/vqrLVMumflijrPsc3OON+TuVquUNuseI/g=)
                          3: 7pQQkDgyHd9o7yqZVlBZ4xtQ0fY.roa (hash: xZK00iWUDxNKvXeXgverCH60vwnzNexd4AxkHPVf2aU=)
                          4: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=)
                          5: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=)
                          6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=)
                          7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=)
                          8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=)
                          9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=)
                          10: PE77Z5wen-eVZ16iGf2_1c1Jaws.roa (hash: h7zUrN0KBvEcmYXd1dCIRMPxZTqT4501CRk4u67n9zo=)
                          11: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=)
                          12: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=)
                          13: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=)
                          14: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=)
                          15: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=)
                          16: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=)
                          17: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=)
                          18: qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa (hash: JyfpyyKWFy47CPyUQtytdwQPJBc0llD8HdRl1HrFy6k=)
                          19: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=)
                          20: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=)
                          21: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f0:bc:bb:88:69:f2:71:6c:a6:48:66:dd:e4:cd:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Jan 24 16:00:59 2026 GMT
            Not After : Jan 25 16:00:59 2026 GMT
        Subject: CN=3c48cbd0c61cf1d80c8776d6d88c9f5a9d48501f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b5:0f:85:18:92:6f:b5:4b:9c:54:35:95:62:
                    a5:5c:b9:6e:21:c1:6f:22:9d:dc:8e:96:63:a8:64:
                    e7:5e:87:29:d1:15:98:23:ae:b8:75:08:c3:f6:a4:
                    a6:5c:40:60:b4:3c:64:c3:aa:e0:af:17:61:d2:a7:
                    68:51:20:61:8e:b6:11:2f:64:d3:d2:a4:a6:79:69:
                    5d:b3:e9:05:e6:f5:12:62:dd:4c:64:8d:b7:16:6f:
                    36:c2:06:d2:2d:98:43:4f:dc:66:11:53:b4:84:e7:
                    2d:70:ff:26:28:d6:23:32:35:fb:85:76:34:a7:76:
                    3d:45:ac:82:e2:f9:42:92:81:21:0c:d7:b4:b3:bf:
                    32:87:b4:a3:a0:65:c9:d7:e4:1a:02:10:9e:16:c8:
                    c4:01:c3:94:6f:26:73:6b:a6:ae:95:08:97:de:c9:
                    b1:06:48:8d:5b:7e:ff:16:fe:25:22:e6:24:4d:76:
                    65:0b:cf:71:11:90:2b:85:90:29:16:5f:c9:5e:a5:
                    ff:ed:75:c0:5d:87:3b:da:ec:02:72:ef:55:5b:81:
                    b4:3f:ab:94:e0:39:ef:aa:ba:b9:ca:7b:00:39:1d:
                    aa:7b:78:5c:2f:3e:b1:99:30:ff:56:e9:84:6e:38:
                    1b:b3:22:ac:a9:4c:31:76:c5:5e:9b:c8:f3:89:8d:
                    85:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:48:CB:D0:C6:1C:F1:D8:0C:87:76:D6:D8:8C:9F:5A:9D:48:50:1F
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9d:35:ce:da:e4:5b:d6:3f:ea:86:49:f2:66:ec:c7:12:3f:
         c7:db:1f:f4:72:fb:0a:fa:b3:32:50:f8:4a:ba:22:0f:52:f2:
         fe:43:10:ee:6f:69:10:77:97:82:cf:a3:84:85:04:84:bc:84:
         ec:eb:43:72:6a:ee:4a:1c:a0:c0:a7:16:1c:0d:1b:4a:72:dd:
         d1:e6:d4:43:68:23:d3:25:cd:f1:bd:2f:25:82:09:9a:76:bf:
         7b:e4:62:0e:75:9c:10:31:53:c3:a6:7d:78:87:2e:23:1c:97:
         b2:cc:e0:89:e1:c2:35:48:04:64:26:b6:76:dd:b7:f4:80:f2:
         b4:c8:47:4c:78:5a:95:be:89:6b:d8:1c:ce:8f:e4:5d:eb:fe:
         d7:17:ca:23:77:11:ec:64:99:03:94:41:52:09:0c:4a:76:bc:
         f2:39:32:c3:5b:95:fa:ab:b3:2f:79:a7:35:a6:e6:8d:c6:1f:
         7c:96:45:e8:e3:2c:3c:88:fd:3d:9f:56:0e:00:2e:0d:13:1f:
         0b:3c:86:5a:c8:ca:87:42:46:ac:5d:b4:e9:c5:60:67:7e:0a:
         4c:b2:33:ff:90:dc:d0:c4:d3:55:a9:52:9e:af:3b:b4:0f:90:
         65:f8:37:57:60:62:c5:40:28:23:7f:b6:fd:49:46:a6:24:42:
         78:90:18:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 01:51:53 2026 by rpki-client