This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
File:                     1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft (raw, json)
Hash identifier:          FdnOukTTPhqFU9/FMPJRqDythvF3GvAh7w7uUYasa/c=
Subject key identifier:   EF:AB:A6:8B:AA:AF:9F:B6:46:07:D8:56:33:8C:69:4C:24:0F:C3:67
Authority key identifier: D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F
Certificate issuer:       /CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
Certificate serial:       019BF79AEEA31670007448C66871BF196105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
Manifest number:          03FD
Signing time:             Mon 26 Jan 2026 00:01:24 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:24 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:24 +0000
Files and hashes:         1: 1-zfvela3gTtSU0Zxk_qmMqiWGy0.roa (hash: OQAOpz82CSjUEMjy/IwaBDn+AK3uYtqBMtS2qxamScE=)
                          2: 1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl (hash: ncnBhIshqirP5wXiSKlZbolDfV+ub5Gm6KQ0Gn0JrAI=)
                          3: 1tDO2kZf8pr-8iZADbEzqQLQaR0.roa (hash: gMrFJw8Q0bmNo850HuhdmmUsKGihc8vZODk4pNnk1n4=)
                          4: 3NH2sdioISEJI45kPXSkVZvUldU.roa (hash: NrfDSmOx/pWg7aHFmWwUVpvGFkVt9HkGBGabFsaeXmk=)
                          5: 8SAtM8IMR2YkrpygIGIpM4TdRCA.roa (hash: paNW3tKH+SaFHT3KIqEpy4lTXiy0sBoaMdBNqSt4tE8=)
                          6: HCMuPgAm8z1fvC37neNdLNYmyVQ.roa (hash: XnbL4kUc3JM5FzhhaRTVF3FbJ0cLQr60q/FLwJBODsY=)
                          7: KDJCV2KWqxqP4itFZc0vnyWHg-M.roa (hash: ZdQlom/XrmZVTovIG/Wu0KyZZPE8vYBX2PPuyHGQT0o=)
                          8: cI-L7pef_AdHI_QGBFTE5PiVJ0U.roa (hash: jgu+5sRPCpckA/cZ1yBuc9ZXcWSw0y0C+/Lk+J+5CkI=)
                          9: cbh1si2A2Ydkejw2Rg2PChEcZkI.roa (hash: g8srghuNNX3ZtaA38+TVjTMeN5WNvR+zb2DXvokXiYM=)
                          10: dlS92to4A9f1S912SRzTLHEbE0A.roa (hash: OW3lsvHVvV3otwUqyxdsIOlk7EGfRauMAO6mtR1SKds=)
                          11: g-Dw0lZsOsb9XuKWb3g0E47UyIs.roa (hash: nsgNEhjHAiGOzBMeJvhHNadyfL9YZc5PQ6L4B/Mp7pU=)
                          12: iWLnguhSOb7-X7cfTiILpKUal74.roa (hash: SwM3PBqqQru24uepnr2dP9tkAA5XkqKgSM154kLrCcM=)
                          13: n2qaysiqOxYybG2o_t96d-JWP-0.roa (hash: eHISssRI0wVI8jcyz3iPD9ed/F8IfOhPuqU8QqlNado=)
                          14: nOjA58wyDiQ_zRw7avoPEh5_s40.roa (hash: V7B/P97cRl0fsQwMRzVez4oDaZWFnkjVorYQBWfrtpg=)
                          15: ufeaEv-3eKHSc6JjPhYxwQeX60M.roa (hash: 0mZCXU4Xdtb89TKVYgFQCqLe0BNeQgmbzRQEWsmGEqI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:ee:a3:16:70:00:74:48:c6:68:71:bf:19:61:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4b95330734c9aaf66d11bcd2bedd380f410f93f
        Validity
            Not Before: Jan 26 00:01:24 2026 GMT
            Not After : Jan 27 00:01:24 2026 GMT
        Subject: CN=efaba68baaaf9fb64607d856338c694c240fc367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d5:22:fa:c3:de:99:ba:cc:4b:d1:a2:46:47:
                    e0:fa:d5:6e:f0:e5:92:fd:71:e1:99:91:df:d0:36:
                    24:aa:f7:d2:51:7b:92:5b:d7:08:3e:bf:42:11:e2:
                    64:78:ba:b9:b8:54:1f:2c:2a:4e:f1:c2:2e:0d:29:
                    cf:0f:f1:c1:3d:47:b7:10:80:91:35:0c:ae:17:98:
                    56:20:fe:ea:a5:bb:2d:ad:91:93:84:ff:9a:dc:59:
                    93:13:01:4b:f3:53:3b:e6:da:38:6e:d4:2d:39:29:
                    80:79:de:53:22:c8:25:56:51:8d:63:55:19:e2:c4:
                    5a:7b:80:3d:02:d0:a0:0c:55:1a:21:71:b9:21:56:
                    42:a8:29:bd:21:90:9d:ee:b9:78:49:81:04:21:35:
                    bf:be:94:82:af:33:94:71:09:55:9f:52:d1:35:85:
                    fd:39:3e:e5:e9:e6:1a:21:47:d5:10:88:6f:22:81:
                    2d:28:13:15:e1:90:47:51:59:8c:f5:84:91:af:c0:
                    4c:35:83:33:5a:78:7e:b4:79:38:bd:e3:34:d9:aa:
                    24:09:b7:8b:42:f9:99:e3:d5:04:ed:8c:69:42:da:
                    06:01:59:a9:fc:68:32:34:2d:be:10:85:b3:4f:cc:
                    e3:38:46:30:bb:c3:f5:90:62:0c:11:34:9e:57:f8:
                    70:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AB:A6:8B:AA:AF:9F:B6:46:07:D8:56:33:8C:69:4C:24:0F:C3:67
            X509v3 Authority Key Identifier:
                keyid:D4:B9:53:30:73:4C:9A:AF:66:D1:1B:CD:2B:ED:D3:80:F4:10:F9:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/15d271-05cd-461e-a7b6-43013b28d9d6/1/1LlTMHNMmq9m0RvNK-3TgPQQ-T8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:26:30:d8:0e:56:4d:77:9b:b7:6f:7c:32:2c:7f:62:f4:0d:
         95:ce:5d:68:9b:59:16:47:35:53:22:22:c7:e1:23:5d:c2:18:
         98:a9:a1:fb:47:cd:93:03:a5:4f:14:6d:78:d8:61:6e:f6:4c:
         dc:19:d9:1a:23:b4:b0:02:3c:6b:c6:d2:ca:51:2d:1b:67:98:
         53:d6:58:06:7c:91:c4:26:d1:73:c2:40:57:96:97:fb:01:ea:
         49:01:ec:4c:e2:ce:93:76:29:fd:e2:11:50:c3:c9:b3:6b:b3:
         e1:88:53:6c:ec:29:7c:e0:e2:ce:47:09:bf:90:98:99:af:36:
         2b:86:3a:33:b8:e6:18:3d:5b:a0:9c:53:ab:4e:08:6b:89:be:
         8a:20:8b:9f:a0:a2:e2:ac:f8:41:b0:17:b9:60:6a:41:e7:de:
         98:54:d7:7e:c5:d4:55:ef:98:38:59:18:b4:66:14:93:87:4b:
         4d:a1:a9:90:47:36:43:a8:58:d8:cf:6c:d2:17:ff:94:4e:62:
         91:1c:0d:f4:0b:cd:e0:32:5c:98:4f:1f:04:30:70:1b:d1:15:
         4e:ca:4d:99:76:29:21:18:f8:9b:dd:8f:c6:87:cb:3e:80:a0:
         fe:37:7c:16:97:a2:ec:5c:82:2c:b1:83:7b:26:4d:8d:a1:9f:
         32:98:f7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----