This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
File:                     xlodocsckgri-bdIJw_e2HN6kYQ.mft (raw, json)
Hash identifier:          7tvmn0XqIl6C3yXxaGJqokwbNgpltPVw1fcW9jsgyU4=
Subject key identifier:   5B:16:23:E1:48:A9:94:9E:4A:D2:20:5D:09:6A:35:AA:96:AF:C2:AD
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Certificate issuer:       /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial:       019BF34FE54C9CF07194796B255F01560064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
Manifest number:          0176
Signing time:             Sun 25 Jan 2026 04:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:57 +0000
Files and hashes:         1: 1-DD4o6xbuV6samukDs3vaP8tu6k.roa (hash: 7AU6fV8RAb68tAatAXOQGyf+DldTsJty373d6zKIAZc=)
                          2: 1-eFVKmGWJEdXxYxER_6NTgHg9nM.roa (hash: UWlmQISqK1Q3Nfe8AMftm7uDs9PdmCWhPYuq7XWFlJc=)
                          3: 28elMHIYvn3pcU0OGIrU2epJeiA.roa (hash: Hfg+/ah1i9raUfwV0xuMkx9Crie6y92PxJXcwV0p494=)
                          4: 4eGJZ7JzqCsRPOoXTW2ORTeiP8o.roa (hash: ITGD8b+FCm11c80KFD5+ZoRZrONhlzxP1zvlRlrSgkM=)
                          5: 7E96DTfT004BumK2TWn6X-KStr0.roa (hash: 4dVQ5tEe28gAbBR2YECy/CnG4r5KNVR2jJdh36ss1Ro=)
                          6: AUJBwqUEGRl5pOinQQhewx3XNN4.roa (hash: 00r5IYJwyUKYgINfARqOjf3C3sp+DUhl/0cWO2KBAGQ=)
                          7: Bj-sb0mQpbmYapiUX3wlUb00RYE.roa (hash: Q+c9LnetW9OE+r5uMdb5YH/qdA8Hh9wEoBB8GBwKZg4=)
                          8: DQhTwetKIx7QrxENsfS05iKPQPo.roa (hash: 5lzpBvDrPdFco+9NiNxSQ9yHdeo5ANCeJh4HTPeL1Vk=)
                          9: FdFBOG_czA7j6v6Y4dm7gddEJ7Y.roa (hash: 9YtYGIO+vZ5T2hyxv7HeDob3cHulk/JcKTCyZ2ktJl0=)
                          10: GICLEj3ymdfbxLRaQ1STYZ1HQm0.roa (hash: R8hNe/xkDTsv6hzz2dGuX7HG2B9Hsj+cN7gQT4HGaWo=)
                          11: GXtyBoKwJa_8udE5jlYgWB7VYaI.roa (hash: 5g97zlCVWlo32hpHqRVgpaG704TgHvygtVvbPhPxh4A=)
                          12: MEpnn_UIBaXHk3JMf7tw8C-sp0A.roa (hash: +buMoz8blTj/Jno2gmUOhshJfC2X8Bq4gZI/d0LapjU=)
                          13: Nov3Xdv81LcnCnmcgAD3CjUmLBc.roa (hash: 0g1yBQKOARCcC9wdHPfwblffWNg4AeJ6Qn3DYGoPcnw=)
                          14: Otk0FG79gmtURrbs9qBFw9Z1oYE.roa (hash: a7mLkMf4TxITC/PYCxNaVolYF/WwFtTrcxfr0qmRb9E=)
                          15: RKaybm4puvMHQhQpClzAoK5EGkg.roa (hash: Rw8BoqEJ+XOx00/IUrG/sI05DoCPOaxoODu9OIjPMrw=)
                          16: Spi55eI2JrifMv5ym0HwLqyglo8.roa (hash: Js2piaBVieot3w/NY7INh7FCYo3taWHPYAVu8oowvZc=)
                          17: gwpdq_NkP7xGLzmZAueCQIGLNMM.roa (hash: Zzjd6w649CZmKiqH/d7WSYa+l7hvrSIPU7guX3LLEFs=)
                          18: lIu0H0yuC3-BywTkSb56YA1zcUs.roa (hash: 3DBYGsn6K7uF1Bw9p2Jse1TYdY1cQKyXCA9E5NJekWw=)
                          19: vNvu3CipEQ22NPrTCm5toxcdUV4.roa (hash: js4t+SXfMQKXRL4QtWfYNg6zeuXvSb2Q6gaWblLMLx0=)
                          20: xlodocsckgri-bdIJw_e2HN6kYQ.crl (hash: eLjdTVb+9953QzgLUNn8k2SVYNkO6rBEyLoHZ2MaHQc=)
                          21: xzVQ9anEUlcxJQu6lg_eI-EK6QQ.roa (hash: 86Kt24lcILhRy/GfUx34Xk5McTjh1tptJAhmbF8EPxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:e5:4c:9c:f0:71:94:79:6b:25:5f:01:56:00:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
        Validity
            Not Before: Jan 25 04:00:57 2026 GMT
            Not After : Jan 26 04:00:57 2026 GMT
        Subject: CN=5b1623e148a9949e4ad2205d096a35aa96afc2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:b6:31:21:bf:46:29:94:8e:54:d5:50:30:
                    ca:c9:d3:fa:79:1d:a0:52:a6:23:26:cd:30:08:19:
                    18:2b:8d:c4:7e:01:fc:bc:51:9c:b8:59:30:3f:c9:
                    37:f4:1f:a5:66:20:57:d8:cd:92:0b:38:07:8f:49:
                    e5:87:6a:ca:bd:2d:13:2a:ca:e4:c6:e4:53:fb:72:
                    c7:a6:e9:47:02:84:d0:fc:44:e1:24:d6:e4:38:db:
                    2c:85:e4:7e:6b:cd:cb:25:f5:1c:f4:cc:f6:d0:2b:
                    a2:9e:da:74:98:c4:c2:73:5f:ed:ed:c1:a7:8a:4d:
                    80:ca:c2:d9:a6:06:9a:94:ba:94:3a:2b:69:9f:2c:
                    3a:f1:23:d1:40:64:02:18:7d:49:5a:be:96:41:49:
                    b0:50:6d:02:98:9b:84:c1:8c:71:43:b3:4d:c1:6d:
                    b7:85:5b:65:e0:dc:cd:41:94:c6:f7:ff:4f:73:32:
                    78:20:f9:5b:a7:6d:db:62:bf:d6:f5:b3:0a:ea:12:
                    65:81:28:b7:20:24:24:46:d0:07:1a:c6:56:7f:b1:
                    e4:b6:e2:c6:b5:57:af:ab:37:43:19:a4:d9:22:ea:
                    38:cc:1b:e8:6d:90:65:91:a8:17:e5:41:ac:dc:a4:
                    94:4f:2c:4a:03:60:3d:55:25:86:9a:6c:86:a8:28:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:16:23:E1:48:A9:94:9E:4A:D2:20:5D:09:6A:35:AA:96:AF:C2:AD
            X509v3 Authority Key Identifier:
                keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:a8:f2:95:35:44:b6:ca:ed:1d:84:84:6c:9b:08:df:9a:1d:
         16:60:29:5a:1b:74:6b:0c:a2:4a:43:37:f7:4f:d7:08:a1:4e:
         dd:91:92:6b:50:b2:e3:31:d4:e7:34:94:65:44:94:1e:b2:f8:
         9a:3e:17:da:2f:af:a4:0c:2f:b1:e7:66:2a:ba:b9:5f:dd:48:
         50:63:43:7f:55:bb:b3:d6:69:3d:0f:2c:8f:00:d1:66:ab:57:
         1e:65:e2:5e:da:9d:e7:b2:42:93:a9:74:ee:5b:dd:2c:af:8d:
         00:81:b0:17:01:56:6f:46:7d:cc:fb:c4:c8:6d:52:7d:1b:9b:
         80:a0:51:05:c8:7b:c6:d6:9e:54:fc:7f:46:ff:22:16:d3:cc:
         ed:79:40:68:f3:72:12:de:5d:87:e6:28:c9:4c:41:ad:fe:08:
         4e:a7:fb:60:8a:3e:81:c6:93:06:e4:a5:e4:5e:1c:12:72:3e:
         9d:bf:be:e5:b2:fd:67:9b:86:b6:65:97:d0:fe:44:de:47:b6:
         15:ca:ed:73:cc:1a:49:d5:7d:75:9d:e5:1c:74:ba:9c:1d:82:
         5b:5d:d2:2c:08:27:8f:38:e7:07:eb:65:47:b0:de:a8:54:07:
         3b:67:fd:b4:4f:0e:b0:67:a6:9e:11:56:64:93:2e:5e:fa:03:
         e5:4b:a8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:38 2026 by rpki-client