This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
File:                     1DTxaGECh2xiFrzqKKXlAuwNe2s.mft (raw, json)
Hash identifier:          qjPbl9hnJpesurynXFKg7He3xLnzlUXCp+foXepnDgc=
Subject key identifier:   22:D5:EF:63:B2:5F:19:06:23:58:9D:4A:1A:E7:5F:70:9E:3C:4E:5E
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Certificate issuer:       /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial:       019BF9892C1FCF880619288AB87E30ABBA7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
Manifest number:          1849
Signing time:             Mon 26 Jan 2026 09:01:15 +0000
Manifest this update:     Mon 26 Jan 2026 09:01:15 +0000
Manifest next update:     Tue 27 Jan 2026 09:01:15 +0000
Files and hashes:         1: 1-vNISdAgr1vxuSu-Toco8sAAfmc.roa (hash: FafBdHtMW1cgxu/h4FqfgmHc5gJkbiyqRpvw+bdoRVc=)
                          2: 1DTxaGECh2xiFrzqKKXlAuwNe2s.crl (hash: 000oNIZeZofnFpY1qopRqfE5aKwdeghPrZp0vwwDhrI=)
                          3: 3NoAtRyFyT3mqxuhl8rikGi6CPw.roa (hash: UkQRBoygiIXUDqnF/nZfu6Z2PAxT1DRUs4/Fx1lQwIc=)
                          4: 88GXt-Nj8epfXsaOzg77sNdRo5s.roa (hash: xLg/Jf5JnayYecy0KNeCwmuhUM+tMuNIkboAxtbEGYM=)
                          5: 9SzKR2jRUVwOaueZVAhbWUN2hKk.roa (hash: FVohvzzEsQ8ZWQ3bVSw2whz2W6Fbc2vk/r+zxXJ8JGo=)
                          6: 9a7DiM85xWW0SUOHj55_qdtGlrM.roa (hash: /wdQL253QIgX63BRfrM9hjhyJ7le6nAjEl2iFxxdTHQ=)
                          7: BEr_R-Y76jDsSzh3bfESjoOwl0Q.roa (hash: XKEvtHfwkP1nMOaRrnUEt9y98qABQkwe3lGvAnv9row=)
                          8: FI0PrHiRp4GLEljk1REP72tG5aA.roa (hash: y2UC3YKNbq+ByIed2y8ZO0cXFgTY2+9nY++3BTMrn2E=)
                          9: HNnkcaU2Hh5IuZWTx2ax25PCVFo.roa (hash: QEMvN1hGawGHGM/XJD+BepVtmnpndyGrmsYjk5D0vXk=)
                          10: JBmh4xJQPOrgXhW8afp75WMHXtU.roa (hash: Eu21koGIAierUmhNQZ3QsI0F1soGks0wdE/brAHqtA4=)
                          11: Lj4vCV3CzpslBrQs2uQPQz0J-lI.roa (hash: 4PkaGjUOJQRMD/3HjoXORV26Z0v+UJe+d4n4F+P5Bew=)
                          12: QKHbb50TAHm9VAPXAR06iAOvMdc.roa (hash: ZdEkeSpvINEI3pMWjJ+RrFeaf0OhTcGlCF0AYxffU7c=)
                          13: RMFqaLIJrXHt-_YOGji1ilLJROc.roa (hash: QQQKjhswWsKoEbYzVi7KTXOzLabCgatO2tMsPwkwiQo=)
                          14: U-vM5k7kX-abfGLQNLBMdCq5aJw.roa (hash: bJBvjK0cokVnLIfc7kCrIZ00FbL6Ke3KrGBJupQgo1c=)
                          15: Ul9RpH6oBexBY5C_PA23LHZoBkc.roa (hash: XRUFccREziuIDl6+6nxzRgNDnHGi0XuldvNlFW7whIw=)
                          16: VEJFTWLInqVBVVVzjcXE8u0k4jU.roa (hash: MDCdlTYX/q6OjZDJTysgXveF6ZbyFuxNgUow4xZBH2M=)
                          17: Y_FLWnuNhEx2wO3ILnJnHpE8S50.roa (hash: 4sjgJfec1CI7poYdj8/LooNLid4ueqSY+AsJdUDwJp0=)
                          18: cGR-cZXHq1SVvLMV3yudMjgOmWE.roa (hash: 5J+DPS65ZibV4JHjVNRUad5cnyzzDzeOQ+1szjLfH/U=)
                          19: dMUsL87HVH-hWFe6QaT2O1cjz80.roa (hash: aQSqen+T1CnOwM6TpzsdO+vcc77lV4HKUI++ospju5c=)
                          20: f_VCnUgXclXXJeFK4ehEKaPm8bU.roa (hash: NU+9MIVHryfjHTTYgjstCko8E5LtsVYshqXivZ7/0Mw=)
                          21: sUsR2HbNhIh9JqR1GXAHv-XYNhk.roa (hash: LoJvTK9+s4JOnlu993MYngefm22Ld/sOhXf+dIa030s=)
                          22: sl1JvwMo_PnxNUT0n7b37VjHYBI.roa (hash: 4s59F4JeRBM9UIf8FZMIueAYaOBneqDZ1z5HCj442e0=)
                          23: xvqiP1uUbaodSEMAQDXDC58GS80.roa (hash: oaCy9//PkG6/HUpYGlrrSEfQitLFp/CqGYs5ulfXPTo=)
                          24: yt9D2jLsreAMWCWEdKVQm0MM7k8.roa (hash: lKhmu0VxkSr9o+yCKmoctbtSS//EnsnvUzIyvtwGci0=)
                          25: zSfbkXSSTZ9b4VM38AL0y2ev5KM.roa (hash: qh9HWWdJnJjIlbbHx9ULyJvN/7KGQA0brIGqvUHqcAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:89:2c:1f:cf:88:06:19:28:8a:b8:7e:30:ab:ba:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
        Validity
            Not Before: Jan 26 09:01:15 2026 GMT
            Not After : Jan 27 09:01:15 2026 GMT
        Subject: CN=22d5ef63b25f190623589d4a1ae75f709e3c4e5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f1:bd:02:7a:27:0c:0c:8c:9a:16:5f:68:1b:
                    af:3d:7c:cb:25:37:30:e0:98:4a:29:46:1f:fa:17:
                    2b:a5:68:ea:fc:5b:d6:08:93:86:5f:02:4d:2e:06:
                    7b:82:80:b7:37:8e:8b:ce:8a:24:76:6d:9d:df:8b:
                    7a:d5:45:fb:61:db:ba:cb:40:eb:0f:45:da:bd:87:
                    d5:63:ee:ad:93:89:a1:c8:ae:44:67:61:2b:dc:19:
                    be:ad:0d:86:be:09:90:df:81:f9:11:1a:c1:2d:37:
                    11:c2:5d:87:2b:65:08:3c:01:c6:f0:0c:02:11:19:
                    83:2a:73:47:54:71:9b:88:66:70:60:52:38:30:e8:
                    c3:a1:6f:2f:a4:11:f2:5c:ff:f2:8e:44:8d:01:10:
                    9b:36:a4:70:2b:86:02:4d:1f:2f:56:f7:01:73:90:
                    72:a6:ac:34:39:82:65:ab:db:fe:fe:30:8c:96:04:
                    f8:1b:99:fc:9b:39:f3:eb:24:3a:4f:83:2b:ee:92:
                    2a:32:30:c1:75:8d:75:62:73:1b:d8:e8:d6:00:f4:
                    0e:80:69:e1:39:6c:91:ad:49:af:09:01:b2:9f:9c:
                    60:b2:fe:03:38:11:77:ae:80:d9:bf:df:81:2b:2a:
                    27:64:cc:48:11:5c:56:75:1e:11:f1:55:ed:59:e9:
                    db:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D5:EF:63:B2:5F:19:06:23:58:9D:4A:1A:E7:5F:70:9E:3C:4E:5E
            X509v3 Authority Key Identifier:
                keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a2:8c:6b:54:55:10:b9:5f:ae:59:fc:4c:66:e4:96:59:85:
         ab:01:59:f1:a4:ed:99:57:13:32:4e:04:5c:1b:b5:da:7a:58:
         6f:82:f3:23:72:cc:2b:18:5e:37:4e:b9:a2:71:e9:3e:36:58:
         d3:c0:b4:d3:9f:65:2f:23:5f:0e:63:50:8a:be:4e:d4:a5:98:
         d0:b6:37:7f:37:d4:a8:ea:f6:12:99:4d:1e:62:e6:35:da:ef:
         e6:40:13:20:50:f9:7f:03:9d:dc:94:35:44:06:0d:2a:57:52:
         97:0d:bc:0b:77:aa:8e:38:59:11:eb:5b:e3:fe:3a:ae:66:c1:
         0f:26:4b:b2:8e:f1:4d:0a:8f:1c:8f:a1:81:58:47:6d:81:4c:
         99:52:02:a8:9f:00:42:ce:75:c5:63:91:77:99:d8:b4:bb:2c:
         cb:e0:4b:51:88:92:61:6f:9b:2a:91:f0:aa:d1:0c:90:c9:22:
         77:73:ae:5e:85:03:13:38:49:c9:1e:b1:cd:08:1c:b7:2f:fa:
         03:f6:25:20:6b:ac:d4:89:b1:e8:62:94:eb:59:32:06:13:ff:
         7a:85:e2:3b:35:39:ad:18:ed:76:20:a7:5d:11:d9:a5:e6:ac:
         3c:2e:d5:04:cd:d0:47:a6:37:83:a1:3e:37:ef:f4:bb:9a:b6:
         dd:8e:ab:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 19:19:10 2026 by rpki-client