This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
File:                     39F66F45A59B837ED24D6B9F20C60702114B70BB.mft (raw, json)
Hash identifier:          CSSokctxTXSf32AbdfNZOgAaTEgxwkgsY3FUl8cRYl0=
Subject key identifier:   98:AE:2F:8F:E1:CE:22:88:43:ED:40:95:33:A9:E6:E0:82:37:69:7B
Authority key identifier: 39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB
Certificate issuer:       /CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
Certificate serial:       1C47112636B5A146B239EE044D8B98CEFC96C397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
Manifest number:          096E
Signing time:             Mon 26 Jan 2026 10:51:07 +0000
Manifest this update:     Mon 26 Jan 2026 10:46:07 +0000
Manifest next update:     Tue 27 Jan 2026 13:31:07 +0000
Files and hashes:         1: 326130343a366630303a3a2f33322d3438203d3e2033323134.roa (hash: lza3nPkj8SCKG8eAvBV5dByEl4Di+o6phLpaa4Ix6jU=)
                          2: 326130623a323534323a3630303a3a2f34302d3438203d3e20313937373330.roa (hash: TyZ7Osf5p0okGYrGqwsy7VlHGA6WCaMU75I8FXD9FRs=)
                          3: 326130343a366630373a3a2f33322d3438203d3e2033323134.roa (hash: VugVK1D3/SoIJFLCzYDlkKyW1ghJzP8MnQoi6CCQXmQ=)
                          4: 326130623a323534323a3930303a3a2f34302d313238203d3e2038323239.roa (hash: nafu6Z+JM7pvpzQDAE35HEyxOLGLNwRfEwkZyIaCEN8=)
                          5: 326130343a366630363a3a2f33322d3438203d3e2033323134.roa (hash: qJqIdb2BkZHf6O6GnVlZJYkvHc3SRNCRrZkRQAO4Erg=)
                          6: 326130623a323534323a313330303a3a2f34302d3438203d3e20323132353132.roa (hash: HOFAAGtTRbMuWWbAWrzmI3hRwSi9Bn6GOPIwDKufE5w=)
                          7: 326130623a323534323a3830303a3a2f34302d3438203d3e20313937373330.roa (hash: MdHX3mAcwm0rR7kOpnjhXT8f7asD2NipkfCJ6A5LIZE=)
                          8: 326130343a366630303a3a2f32392d3438203d3e2033323134.roa (hash: rI+uuAcr6OYO8coDJAIPzCjRsmauRve/IBaqqKXdQuU=)
                          9: 3138352e33372e3235322e302f32322d3234203d3e2036323333.roa (hash: NQ8pxT6KvvjRNyQokVIrEnGmAOiDApTs0f7Qxh1y+W0=)
                          10: 326130623a323534323a3330303a3a2f34302d3438203d3e20323036333135.roa (hash: QWl30p14TV0yaWJBRRDe71K4drJf3CoB3A0YNNsfHrM=)
                          11: 3138352e33372e3235352e302f32342d3332203d3e203233383538.roa (hash: VWPLpMhD5gFEQvg3MuBKWfEeg3FwVU68VyTabvkKo5k=)
                          12: 326130613a616363323a3a2f33322d3438203d3e2036323333.roa (hash: hZE+vEGDZx2Bg6RDX3aP8EnjCJJ1jlWFpbcnYOy9mYQ=)
                          13: 326130343a366630323a3a2f33322d3438203d3e2033323134.roa (hash: B+eOg+cAHMNqKY5MUdSl9SF8tG5/ZSo65z1pbIoUn8s=)
                          14: 3138352e33372e3235322e302f32322d3234203d3e20393439.roa (hash: XynEk1ENcpt1hdf6m4sAL1J3bFc9aBMJEvDognvtVR4=)
                          15: 326130613a616363303a3a2f33322d3438203d3e2036333639.roa (hash: OwID8gO2jk+VGsKbfEMUf65BdizR/gGmOykDlIjdlsM=)
                          16: 326130623a323534323a3430303a3a2f34302d3438203d3e20323035363033.roa (hash: 5MzdV7SsTw+uVjfvtDbdSpi0OvBcACNPgDA0vdXnZqw=)
                          17: 326130343a366630353a3a2f33322d3438203d3e2033323134.roa (hash: KdCFn6uhtHbYv9BqISC3k4vc4h0cOZ6GXxUW7n+GP0k=)
                          18: 3138352e33372e3235322e302f32322d3234203d3e2033323134.roa (hash: QX4yO7G/n+hKsC7Wp21v0zHius4AHSE69/OGgWHAizI=)
                          19: 326130343a366630333a3a2f33322d3438203d3e2033323134.roa (hash: VZJ9xS1sUtMSa++9W7Z8a5auxT4c5bOMXWTaS4Ut5ME=)
                          20: 326130623a323534323a3a2f34382d3438203d3e20313337323536.roa (hash: b8AnzXFe1r4SzYOIv8Wh1VSgJql09o6QAfvtXQXiK+0=)
                          21: 3138352e33372e3235322e302f32322d3234203d3e2038383838.roa (hash: XkglN5Mh6nmlJzRWren/Gzie7x9eKfQKoFu7Q+AziC4=)
                          22: 326130343a366630313a313a3a2f34382d3438203d3e203335353337.roa (hash: 7T9Fe0EbjjAgOtRZHx1Mmhg/MzCghRYjize5g5pxPKc=)
                          23: 326130623a323534303a3a2f33322d3438203d3e203537383438.roa (hash: L9YTO2KOeyrNBRJd4xc0xWiFPXNRNF1hK0uUGHRswho=)
                          24: 3138352e33372e3235352e302f32342d3234203d3e2038383838.roa (hash: iwj2dkWNST/aC4LGrhxuxUl05Rhii7JUdOGNhJPrgSc=)
                          25: 326130623a323534323a3530303a3a2f34302d3438203d3e20313937373330.roa (hash: GpRavTvGYs7uKFvkWN3pBB5tsJ8nHQ9NvPvPNgMyH1Q=)
                          26: 326130623a323534323a3130303a3a2f34302d3438203d3e20313334363636.roa (hash: 8NPkck9mOPVLLl5F7GAgX3FxzVXZYPqFLTI17jRSfC0=)
                          27: 326130613a616363313a3a2f33322d3438203d3e2033323538.roa (hash: k3WhvlOw33fbL/Ek9DrslMmOnw7yG0zjYzxS5Y1LXoU=)
                          28: 326130343a366630343a3a2f33322d3438203d3e2033323134.roa (hash: oLK+iWNpkqEox711Ok/KQ7gh4NtTBcpPyfu0aFt6RZ8=)
                          29: 326130623a323534323a3730303a3a2f34302d3438203d3e20313937373330.roa (hash: gTieBvQnMaK1cIhBSZkfWrKYAsZXnEYpc10y0g+Oh3c=)
                          30: 39F66F45A59B837ED24D6B9F20C60702114B70BB.crl (hash: xZLMsKRFM48BNZD79bXeSbS+6YtCNbF9tG4z6N0H99s=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl
                          rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:47:11:26:36:b5:a1:46:b2:39:ee:04:4d:8b:98:ce:fc:96:c3:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39f66f45a59b837ed24d6b9f20c60702114b70bb
        Validity
            Not Before: Jan 26 10:46:07 2026 GMT
            Not After : Jan 27 13:31:07 2026 GMT
        Subject: CN=98AE2F8FE1CE228843ED409533A9E6E08237697B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:5c:e8:84:e0:e7:01:a1:ed:4c:b5:73:81:
                    3e:b0:9b:8a:63:46:4c:42:73:e0:91:9e:ac:77:59:
                    b0:6e:50:e3:c7:5b:41:d1:4a:7b:f5:0c:1e:87:f1:
                    94:eb:77:ac:a8:0f:72:3b:d6:c9:a5:62:09:e7:a9:
                    cc:92:ff:ec:dd:78:10:f2:bd:f4:a0:99:0b:c9:0b:
                    c7:0d:d8:38:c5:13:83:b4:ae:1a:7a:44:1e:50:c3:
                    e6:d8:cc:97:3c:2f:a3:eb:27:01:c7:58:0b:fd:13:
                    9d:e2:55:6d:66:6c:62:2f:51:5d:af:29:c3:1a:3c:
                    a2:fb:fa:ef:74:78:f6:2f:ee:25:42:9e:7a:15:22:
                    79:84:cd:4e:f2:c6:0f:32:9f:4a:fc:03:36:e7:40:
                    a4:f2:3c:25:03:12:a7:64:32:e4:64:85:e3:12:00:
                    00:cd:76:3f:e5:b2:46:5b:29:eb:bf:fc:08:9c:9e:
                    bb:b4:2c:8d:f0:6b:36:5a:d4:7f:90:3c:79:0b:59:
                    e9:3b:18:fd:d4:bd:05:9c:92:68:5c:f6:e5:d0:25:
                    f3:de:7b:f0:6f:34:73:69:e7:bf:8b:0b:ee:57:96:
                    88:d2:ab:e2:a1:63:c3:ea:26:9d:ca:05:c6:28:fd:
                    21:a8:8b:90:dd:a2:ae:0b:59:84:ef:b1:96:b7:48:
                    93:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:AE:2F:8F:E1:CE:22:88:43:ED:40:95:33:A9:E6:E0:82:37:69:7B
            X509v3 Authority Key Identifier:
                keyid:39:F6:6F:45:A5:9B:83:7E:D2:4D:6B:9F:20:C6:07:02:11:4B:70:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OfZvRaWbg37STWufIMYHAhFLcLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/41/39F66F45A59B837ED24D6B9F20C60702114B70BB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:ae:d9:33:18:96:5f:38:e1:34:08:9e:89:4f:e0:31:45:4b:
         e4:1b:f3:2a:9c:7d:ad:98:48:5c:59:96:6e:a4:e8:1f:08:97:
         9c:a9:fd:d2:78:a1:09:17:fb:bd:99:37:97:c3:9c:75:b7:77:
         62:29:9b:39:b7:74:5b:0c:ad:6a:a4:14:93:d6:73:6a:92:74:
         1a:f6:0f:7b:20:11:a2:38:ef:c0:be:d0:28:9d:28:70:74:54:
         a9:b9:8c:4b:4c:24:2a:98:66:a6:8f:d7:8c:89:7d:27:15:37:
         41:51:49:e2:3d:23:a1:75:ba:7e:b3:59:69:3d:d9:16:b0:f9:
         31:36:d5:d0:d5:18:bd:e9:4a:90:8f:55:b2:c7:cc:98:df:a2:
         32:c4:d1:9e:a3:64:fd:1f:cc:df:2a:4e:99:a8:5f:e5:ee:6a:
         2a:07:2a:fa:fc:c9:d8:fd:ba:2c:19:1a:90:48:e1:bd:75:cc:
         8b:1b:84:53:56:f6:2d:46:50:bd:8e:97:57:e5:52:74:5f:f7:
         87:67:d8:fd:de:39:90:aa:0a:5c:88:17:d0:ca:5d:cb:2c:47:
         bb:86:d6:f2:49:3e:91:be:23:3c:00:41:fd:07:f3:05:a5:87:
         9a:91:71:83:52:e5:7d:e9:83:31:2f:87:8f:9a:f2:31:f3:16:
         8c:12:b2:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:21:45 2026 by rpki-client