This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
File:                     zV45ZYo-9vE8ohzBGk4z682UZwI.mft (raw, json)
Hash identifier:          +7trFRYfrZX5FuccUxsMwNtGI4ZHC5ZMr9/nOYIwQcM=
Subject key identifier:   96:D3:27:94:2A:30:82:7A:10:B9:13:AB:0A:5F:81:59:23:4E:2E:5D
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Certificate issuer:       /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial:       019BFB40354B96324E2AFF7597DD7930E773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
Manifest number:          194D
Signing time:             Mon 26 Jan 2026 17:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:47 +0000
Files and hashes:         1: 4SontICRZepqhi2c2wljkxPah0s.roa (hash: Nimrgsb188scWuYKAZEhB2xd2ymPPPU3TB5W7QzdKF4=)
                          2: 5deMRBbWVqmht1sOWTPO9NesZX8.roa (hash: C1Nush/54sAAZxYCTt1+o50yyXszTnYgfSJMssdqdQs=)
                          3: CqA9cr2DE41pKD1teATFElzNQMM.roa (hash: Yu9pGPZlVEZb08k6hKWvmkKjxaboZondaohylKtbBNE=)
                          4: DDQuSRchUsTONQFDXN241i8makQ.roa (hash: 9Bakhxfn/ZSz8KdwGJaTawgcJWGxI/ZViAwYdC6JLp8=)
                          5: DZlCXtJccLP5CvH1IidVE75-VBU.roa (hash: GSRgLFliaDL+yaLYBTmTuTWDmh/1GTiBHJVvOOeVvME=)
                          6: FtjOuaGj6XuKQSprHYyjG7mq5BY.roa (hash: wmFztbGgVo+esEAQ1u/hISwsJhzp/aC8gT6aH5GO5u4=)
                          7: Hm5D_L_-X8N6Ngn0-sFiNZd3VnY.roa (hash: h/3w7HTeHzCXjM18AkUy2ZC4OLV5zp/8BEXLvTQ7pKs=)
                          8: IKMD8ag6jfyANNW_ZHHAmtoE8QU.roa (hash: 8g8dm3d3mbXQPnC1GQKn4g6IkfIUVku9Os+wN+fxyKI=)
                          9: JsIHfHpPQrnekdFAPCzTMnYw164.roa (hash: UKlA4LZ7sAnV+fNaTjO88sVLgs0VMiuV7lCEsjs5P4E=)
                          10: MsSlk3WQ80ETXzZv-_xFc70cB4o.roa (hash: UXtaZaFGO7Pek5r3b1Q7L+7LS6p3gDK8oAU7N1F6XHk=)
                          11: Nz-Qe8mnaPAmA7aeYjFa2RQZbi0.roa (hash: pgdQfCVii0tZJ2RyRo580T4O0JCC2mcRd1QEO6ECB2U=)
                          12: QLfh8QwO12RWWMJBR5QhVS6dgQQ.roa (hash: bXd6j/Agfn0Rdepo1CUkaCAq5JVFgCLN7MB9bLtEyjg=)
                          13: QPRoi0yT75-ubkX7PkD-gC3lgjQ.roa (hash: JLC6T3gloruu7glMw++YQSZ+CxmCxYVfu7O7HVXEONg=)
                          14: QkQat_PSicCGu8KQr65qaIs6Bek.roa (hash: q5fpggcrO0H1q8A29ksIPQ1SBgvNbMv81BZ6RhZHHN4=)
                          15: _dg99Pgu9sXy9n61V1SOyIAsz68.roa (hash: ljG6pKAy2VwHE3QsWNyoPRAh/FEzLDZlVIYW5TWBjuw=)
                          16: fcMKvvIc-uKMyXaXItl6BhOvYAI.roa (hash: bWIhwQ/lkTMKHU5pAtIRLA+s+dpO6uWcSZa145VsykM=)
                          17: jiIhZii3j4Bqym72DQeyWI_m29Q.roa (hash: +SPdj+zBKoxWRkJS1U/YY6cllApr1BpaKaVGD0dmzRo=)
                          18: kIBDemKkLzXeU67JQ9zAxAjs0Qw.roa (hash: ZgKOQA+PHq9i2ji6e+ts+3wSCdikkWfp1S4fKo671JU=)
                          19: kUL_GvYXS_94QSofdFlMNZdISv4.roa (hash: Mxp3nUXiwwphpooQtwG7jgdbNv/OEx4oNKjtwZp8Mv8=)
                          20: p18QyzNAN5RUJPiJZuSELMEw3Ak.asa (hash: 9RZhItiZOf789G2xrmC/EQ9K4w2RGZGUazP0P1LuwbI=)
                          21: qmF9fRcumk7X2oJN5OkS-C8FSYI.roa (hash: kNN2YWGRgsIQUTPdz3mbK/nIsN9Wk7Pw3UUk2fdqFdo=)
                          22: rClGIIO13EpmdapGJJLWbhKvgxk.roa (hash: RZrN3iBPqEfE4qlggDEYCJgP0mBpmcurRx75k/eSElw=)
                          23: s9XpH50IUJBDqGm5liaMw7s6Njs.roa (hash: 3HgZKcrh15EUGsnYKA6GPUieZc8k28J7WsTmBzdNTZs=)
                          24: tP-ezWKWhAkf4p1w49tg891CKc0.roa (hash: qn7gDz9gLjNXw/+mpQ3scMnhqsd9j8XgUWH/XG1i/XQ=)
                          25: t_kih-rt9Twd4sL8OIS8YKLw_G0.roa (hash: +7vAxOA2ZybB1j6SfDxXEkpU+iKjAT4cj8AEzqFfcsU=)
                          26: xNnQfct2h92PaIKS74sD9CM4o4U.roa (hash: QGuW5QKxtse8707nSPUJuzi0XsZ2TE2pxDMoVhy4gvQ=)
                          27: yVrNXqNEpQPVCD5-s0QzcdjfSt0.roa (hash: MPF8hnJnGT4tCUF+yYI/sK+YJjujYjlpvRajTbmYFa4=)
                          28: zV45ZYo-9vE8ohzBGk4z682UZwI.crl (hash: fFsB3p5+Ry4n6I1zuARIGWYaMzlgfJNEw69JNlOxdkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:35:4b:96:32:4e:2a:ff:75:97:dd:79:30:e7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
        Validity
            Not Before: Jan 26 17:00:47 2026 GMT
            Not After : Jan 27 17:00:47 2026 GMT
        Subject: CN=96d327942a30827a10b913ab0a5f8159234e2e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:b7:fa:37:77:52:66:21:c4:2c:bc:89:93:
                    a7:8b:69:95:52:12:5d:2f:cd:78:e2:08:d8:84:b9:
                    61:5e:3c:91:e3:22:26:a2:52:a3:a9:65:c1:fb:f3:
                    1f:55:12:1e:64:9b:b7:1a:88:c9:67:b2:c4:1c:79:
                    ff:9c:c5:9e:ce:88:73:aa:57:29:04:01:b3:a2:48:
                    4e:6f:40:7a:55:49:01:72:54:31:1e:5f:f2:9e:a1:
                    61:ff:95:5c:8f:b1:4f:f3:49:e5:45:68:bb:25:0b:
                    99:29:c8:2e:ec:99:31:3d:37:21:49:bd:3b:d8:a3:
                    71:fd:31:66:df:ad:7a:1c:eb:e1:35:c8:88:23:d3:
                    8c:2b:ca:a4:2f:3e:d8:89:83:65:07:a8:dc:f8:91:
                    78:ec:23:1d:af:b0:39:28:6d:05:22:32:ec:57:12:
                    bb:63:17:7e:b7:0a:c7:11:0e:95:02:bd:08:c1:17:
                    26:45:48:e3:fe:34:24:3c:9f:c2:2d:8b:56:ae:54:
                    27:45:4f:e4:fc:55:bf:ec:f1:5f:87:bf:75:3a:a9:
                    3c:bc:fd:bb:f9:9f:25:ef:5b:0e:bd:5e:a1:14:44:
                    b2:a7:11:ce:fb:0f:a7:73:8e:bb:ea:ba:c6:f6:e0:
                    8e:15:b6:1c:fb:81:2e:32:cb:e0:61:f2:d4:58:a8:
                    d4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D3:27:94:2A:30:82:7A:10:B9:13:AB:0A:5F:81:59:23:4E:2E:5D
            X509v3 Authority Key Identifier:
                keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:eb:c2:a7:41:f9:58:63:9f:69:d1:8a:61:ad:4a:dc:a5:
         63:86:5a:7b:f7:16:91:d6:b3:2e:19:cf:e3:e8:14:f9:74:c6:
         2e:12:95:90:9f:31:f6:51:66:66:86:52:c7:f4:85:47:7d:fd:
         f2:bf:d5:47:0f:de:6e:75:85:50:18:6b:81:d4:2e:51:91:2d:
         20:62:50:21:be:df:5f:e1:19:ea:e2:cf:23:38:8b:b8:66:4a:
         f9:df:d6:38:2f:e2:dd:be:cd:11:0d:52:0f:d4:9f:de:b1:a2:
         33:43:da:93:3b:9d:0b:82:3c:ba:87:20:42:19:49:c4:c9:1e:
         13:d1:cd:ee:49:ef:31:e9:82:44:49:c1:5c:a1:7a:b0:1f:ab:
         7b:e7:b2:b6:95:24:2d:ac:4b:69:89:07:f2:c2:66:20:26:1c:
         8f:dd:9b:53:de:2d:46:15:90:2c:06:33:0b:f9:7b:ec:fe:42:
         76:00:ad:c9:26:d1:9b:66:0f:92:44:3d:1c:aa:49:78:8a:32:
         6a:45:cc:c4:09:a2:83:ab:98:a5:d9:c8:17:8a:d7:ea:8d:4b:
         1b:c7:7c:d2:fa:aa:ee:34:8b:d9:dc:f2:47:07:97:3d:8b:a6:
         9f:93:eb:57:46:3f:36:47:3f:96:b5:d0:3c:a3:87:f1:4d:60:
         d3:54:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:11:54 2026 by rpki-client