This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File:                     8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier:          kaAkStemMH4xlXHLvbot/HFh8Q+HGGeO4xoPFyiJGoQ=
Subject key identifier:   3C:5E:B2:70:4C:2D:B9:4C:D9:03:85:36:B5:AA:49:6E:99:90:F3:4B
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer:       /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial:       019BD546B04241C14DA270D58A207B92B3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number:          0287
Signing time:             Mon 19 Jan 2026 08:02:18 +0000
Manifest this update:     Mon 19 Jan 2026 08:02:18 +0000
Manifest next update:     Tue 20 Jan 2026 08:02:18 +0000
Files and hashes:         1: 085Ouj6r61iFfHOta5gBK38YcLI.roa (hash: +dcjb4qLRxfEpIYg0fxx4jk7ltlYnwP0GJy1QwyeW6s=)
                          2: 0WDRBcA8T2_vPd-Ea1ZI0Vwq9sU.roa (hash: YIGHUkbXGWhQksuZIMwjVtJ16rFfhT94Ptqfh71jHlI=)
                          3: 1YwxvX8gyqCOEysmt0qqybMCHNk.roa (hash: 7FYwyB2+5ONzIUgMmr62DZ1GVH8LQaI+zbpkQWQzE00=)
                          4: 7OkR-ee7FhTD9TOvFg0TB3LjHL8.roa (hash: swhyxFYwn+CnBqFhVrbs4y23f0EZqZETzSH1AeaYUII=)
                          5: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: 94oN8z7ypWLQRWK6JSmvUWoMisYMjaHDrlPpRh1fgB4=)
                          6: AzQcC11ESzLHrBK-dTivzNW3KAk.roa (hash: Qv/b4Iwxqe4a3Bb0a4E5kPXh7hWyERaV6fHHMv4Rwjs=)
                          7: CRVYj4NZDsTYLr2ztmZUTQipvSM.roa (hash: 7cWK9n6qHCABKdb0qA8BH/bJaK98KOF3av748QQa8AM=)
                          8: Co9EBzH3FQeVmuqgSnvlZLtyBUs.roa (hash: Tz0AYGnnSruzndjtcc2996lF3mrEc9QKF4xL5BBOObY=)
                          9: D8iXuTiRXYqEkJFvJ6uAf8IIke4.roa (hash: SPNOBHWtTKROWkEPCTbPZeikMWIykdbg4/O6u08XSt4=)
                          10: EkRuyKFWRjbMdDOcs1dsKgqjrbM.roa (hash: 0FQSgLPvp5qGU4zNiDnUwC5JF+/wMdIauGkL3MoX+Ks=)
                          11: GJhh8vWiqWpiHiP3VYi3X3ItnvA.roa (hash: tNirVmxjlbrQuQ0TS8mgziEdfotI43SAU47hWmclcD4=)
                          12: GvboGrQIvM4Aa9xVL2-TfC6TrQ8.roa (hash: +/48cJgrArlo6mfgDzfzRcH8s7/Ae3+DsHBX0W2Y8io=)
                          13: H37Ete5wwerLRgrUxyw0AjT9IeI.roa (hash: 1+wJnEiTXXKkwxBFLngYDir5dg37NRndLSie1sCtdOM=)
                          14: He3WNkgL7nlF2HnV3BdHEQWrALs.roa (hash: z1HcC+X1IG3bBYzg10cK+dY1EeC1ADljcmtSP53WeY8=)
                          15: IV2STCCIKUBvceivIA9sMZYZz4E.roa (hash: NWK88nLTPVw+zgkCFtTK6JB4BF6rMCxtCHK+mBrJ6To=)
                          16: Lfs6BstrmZxglB6NzeIcAn5Ecgg.roa (hash: GCu25rg6JmUHgPzrD5apuulfXOFbXsjPKJgQYmFXjNA=)
                          17: NqqIrZ8uo0wifrfzlyKUR8DlK38.roa (hash: TUMkRBkVNigjdsEZc2aJ6TrbXEDIDiIK85/cCLMD+Zg=)
                          18: OhqmFIGIvINLi29go-GBo9V89h0.roa (hash: 2mKCCY2dNPMKK3cxtc1UfN7vUi2jnLAoSCa9h6Ix5GE=)
                          19: QIQWz5LjRr3-eZJiI14h8jJ12GA.roa (hash: Qo9fA/hq8NKORTUtyMsNENCfVu9yLZUnC+mLgPsCyGk=)
                          20: RrcZBLWHensW4zI_-vOluMC8vUk.roa (hash: u//AksjLoFGyJfMpcGAy4pCUVqvkgMuwzOBgLgKdnVk=)
                          21: T9C9mSfUzTgvxqZJLjWuayrILKE.roa (hash: jbBkfXN2XtW57R+Xos+HqO04xHgS8FtWq55RRuKfCzM=)
                          22: a6AW8erSgL4cyC7RB0KFlvz16WI.roa (hash: rfXhxRN3Mr6NGEn48dAtVk+dzIWU793BYF95HmzV6sU=)
                          23: aAM7MPx5ExZMCsJFazi1Jrhvjgw.roa (hash: FsUGMRauBaoNijE/VGFvcLi0/H3k8dln+uP1XPba3kg=)
                          24: bBxPW_zCXUaubRtG39KVnEQLrDk.roa (hash: 6JqVWigaUqWLIrSVZPhejuc/cdeerKyT5VxfwlA17pg=)
                          25: be28BkxFxZLQVi19h_PxhvrDxv4.roa (hash: ErkhyWUL7IeWfO/G4gKn/lMtd8yFq776RnWqwjXgqzk=)
                          26: dIi4Sd6A0woxUOrDa0aIPMxZeKA.roa (hash: guube1BWqaZ3lHZMwDTgjnu3u/KgBDszavN68xccEaU=)
                          27: e_-cDL9S-PwlVQ_DKjwnfW0tt7c.roa (hash: 6PChnQpINtih6r77OhVxWKRB4JPj4g8KJ34c75c/92Y=)
                          28: fkwW7vQ7hztwijIVZvUQHj1qigg.roa (hash: uzOmNHDNSP9AIZ+LDCuR9nVTUUtFCpsVotW5tlN/vQA=)
                          29: gCfjL-3SvYyiT3WrM2LlYTWwgkY.roa (hash: EiG5DzSKz6tAYp29UWL2CcDw/nWlCYzW/1PC1TLd15o=)
                          30: gdkG9J28VtKge69Dtz6nYxoWS4E.roa (hash: 8XwMXuWP61QIVZw8vtY3HHl4aNq7qQ8km37pm++lPVA=)
                          31: i5FPBdnKsXw64xDyOCC1mnQz9Nc.roa (hash: jslAP5bC5fn7g9kGmwk3vh8WxrZdD72DU7Ti1zOMxRc=)
                          32: iXK6_smiFzBTEFuOum3bjBSjlak.roa (hash: y6nsF83Zy7iKgp3+BWL++U3NO7f81mX6D4p46sUrhhI=)
                          33: jBd826A8cxmy1TNeXWDNCyZqVY0.roa (hash: 8u0pP3dG+KCwBOrG2AKj3JYXrg0WwOnfMYUSBZbe9vM=)
                          34: kN3CKGYk23jQrOwQ6USFJSSUGSo.roa (hash: uwQr4Amla+dPIAoyBEwo7M2r1NunJ5/9MN/5rJVR5IM=)
                          35: l4rcFgc3CjyrI9KrcS2jjR14BH0.roa (hash: PJtnob7yOMI5k7D8JCs1IdsL1ZqcpSi3bvSxPr9KbEI=)
                          36: pRvUJqk2YIK32FXKqRhubG5xKQw.roa (hash: LfT6/KbbWOdFJ/9LHrdfUEsEVQTe89HYGACVUWRNkhk=)
                          37: qyQMkaFhK0_l9HWkLZKgdqyT294.roa (hash: KH+mm2gb9IuiTAVvGPUNOLjd4I2d6HpdpPsFgXNFJn0=)
                          38: s0DKTB-WwsVhzWKoi8hN1rh2N-c.roa (hash: 07d3h4sls+mebkuKMOSsHuF9QXCiDOJiXihhE6GwphY=)
                          39: tYJC_RLkea-R9DGyiP5WpibL6t8.roa (hash: 5v6gsOIATskbh1Ml478fq/pv1vDgXJirdgTuXOCN7Mc=)
                          40: uHbsD8VdMvyuW3wv40ww1CrTIh0.roa (hash: J5w3L50Klh2IAzoXITphGMCyA9UYv12K9YFcNuXFmE8=)
                          41: wpG9PWpUhr6GqC2eisrwoTZXDC0.roa (hash: UzCVZpdigBJ2p9V8fY9Ow84FKsH/rZ2hqhow5aQQ0pc=)
                          42: z1A9j3Rv4TvtLtaD1Nnq_X_sOwQ.roa (hash: G2CHvYhf4pvbtn9bn6ExRtKBsl13SB1ScEQ3QJbOvI0=)
                          43: zN4xIcyuKdReWz88lELFd10OniM.roa (hash: yTZG3oZJlBmSpnKDhcxunCfxKUZwKaHWTWtPKvOIooY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 08:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d5:46:b0:42:41:c1:4d:a2:70:d5:8a:20:7b:92:b3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
        Validity
            Not Before: Jan 19 08:02:18 2026 GMT
            Not After : Jan 20 08:02:18 2026 GMT
        Subject: CN=3c5eb2704c2db94cd9038536b5aa496e9990f34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ce:c6:8f:72:25:5f:0c:52:69:84:8e:ba:ee:
                    c2:aa:a6:aa:c0:4f:0e:d0:4f:8e:eb:64:ce:cc:52:
                    c7:30:0b:c4:8d:0c:9e:0a:18:c0:c6:30:85:84:35:
                    76:28:f2:a0:3e:41:12:48:4c:bd:c6:a4:30:42:a6:
                    e1:9a:9f:12:70:52:0e:71:0b:fc:57:7e:ba:39:c0:
                    bd:0c:58:a5:80:ce:2c:e5:57:c9:de:d2:8a:a6:fe:
                    05:e8:00:e0:f9:ca:db:44:01:96:9b:b3:57:ac:2b:
                    3e:89:7e:9f:a5:08:f8:be:6b:13:e1:59:b0:2b:c9:
                    fe:7e:0f:db:4b:d4:90:af:66:47:9a:0c:45:f0:38:
                    71:e5:00:9e:29:34:c4:17:44:a4:1b:75:06:0e:82:
                    99:76:4c:4e:33:83:ad:30:2e:36:ba:a5:54:dc:eb:
                    51:06:9f:81:1b:51:4b:a9:30:c2:02:ad:6d:1d:ae:
                    cf:4f:f4:0f:3a:2b:36:3f:1e:78:26:20:15:8a:2e:
                    50:ff:4d:5b:09:92:5d:09:8a:81:b7:18:67:c5:25:
                    fc:2c:96:5d:c5:10:d3:37:d9:9f:6e:0e:a8:df:d7:
                    38:e3:88:6b:c7:12:07:46:30:96:a6:2d:f0:7d:de:
                    37:fd:06:c4:ec:60:d2:da:22:39:90:f2:b7:d0:09:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5E:B2:70:4C:2D:B9:4C:D9:03:85:36:B5:AA:49:6E:99:90:F3:4B
            X509v3 Authority Key Identifier:
                keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:4b:78:5d:aa:f4:0b:ff:58:6d:20:b4:4f:40:63:b2:30:dc:
         ad:56:41:20:1d:7d:a9:bf:10:d2:37:63:f8:9e:fe:a9:80:5d:
         d1:04:92:5f:e1:d6:d5:c4:f0:5e:b5:59:9e:26:a4:ce:bb:86:
         32:17:46:a5:0d:d8:d8:b6:dd:a9:91:b2:ff:70:61:7c:07:5b:
         30:fb:b1:a5:d0:49:f7:5f:1a:1c:4a:b9:b0:f2:79:d8:15:2e:
         6d:45:61:0f:b4:6e:4e:a5:71:8d:a1:e4:27:9f:c8:5f:af:84:
         68:3a:a8:d4:44:56:d4:62:5c:26:3f:14:77:ad:5a:3a:67:51:
         85:80:30:5b:18:3d:95:82:25:75:04:ee:1e:5b:f9:c6:f5:3f:
         ed:2b:0f:34:1a:46:ad:04:23:e8:7b:0f:f1:aa:13:64:30:c1:
         b7:ea:4c:1e:26:f5:0a:0e:f4:88:ea:5d:a4:52:50:d6:c6:75:
         b0:dd:ae:4e:c0:8c:bc:f6:0c:85:0d:3e:01:7c:a8:40:36:70:
         9d:85:45:f1:47:33:47:60:af:e1:43:16:d9:45:0c:0d:09:38:
         85:3f:11:0d:40:57:02:68:d4:5d:0f:2e:a1:00:7d:ba:24:3f:
         14:30:e4:22:b4:45:8e:24:d8:bc:f1:bb:cb:df:7b:ff:6c:9e:
         52:ad:3b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----