This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
File:                     DimJADVf30JUwggx8tfuO-xCm9s.mft (raw, json)
Hash identifier:          M3zBCyWw8L7UhmGaz0KLOVvuP0jlfGL1g8hv4iAuzE8=
Subject key identifier:   70:33:FA:4F:D4:FD:DA:1E:CD:49:BF:E7:2F:8B:5C:28:79:56:53:FD
Authority key identifier: 0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB
Certificate issuer:       /CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
Certificate serial:       019BF318B52D8EDE0B80D31631119C77BD5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
Manifest number:          4D
Signing time:             Sun 25 Jan 2026 03:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 03:00:41 +0000
Files and hashes:         1: 5mS0a5DKsKUWo9swyJpnqpHouXc.roa (hash: Ex+vAEyQsrUoaiDO20Pjp4tHdlovsh4eps8dvFj9mfk=)
                          2: 7pEkRCRTdZIVM9C6QrnRF_4BA2w.roa (hash: J9c3D333d9omF5Ue1D/HpfERS76gWMFu+byG/QbhcWY=)
                          3: DimJADVf30JUwggx8tfuO-xCm9s.crl (hash: Koq9DcMJgrHhiqEpgRLO631cuVRGsWfYgBjNJ8dUl/U=)
                          4: EJCxpMqO_3L2hhD7DEajsG5R4G4.roa (hash: RyaRFqoui2dNP2kbmLeH5dCdfOnH4VJIMS/8wRVXHdw=)
                          5: FBbI-chpDfInFPQFSTPQicClgxU.roa (hash: UDB0xrzsJ6UqEihfhCIpxKl0a7I/CsBPB1Jxqd+ggpk=)
                          6: I0FnsRSHuCIlE5UfwEVWK3D0hR8.roa (hash: dR+nGhBOUGjcCFb5F8ZxMzX7iIcWLc6xb1ZqHmYGR/c=)
                          7: IkrFRF3Ttgw4FIDBgBDVg0dJ4b4.roa (hash: WGPpKc4dj5grwNnhEEktJ194QdHxK76K6rqlpp7lrFs=)
                          8: WScdMd0aWt_OtbcvgTIGER8O-qU.roa (hash: 8o7qzj0f2oKlSlfetwvAe5E/ZOiSOP7vaR/Yzo4OTdo=)
                          9: Yte9L4xekX_uW58axTYZcgt8FmY.roa (hash: VZMJbU3AsKOjrEeywUZWh1wAyOqk7L0RVRYGi611mv4=)
                          10: ZbbPFYZ5et4E0DLQLx7QgD_-n_4.roa (hash: kpo5V1Kis4etv3McfweDJYMJDNmzmYsbcpdv1gAavks=)
                          11: dkWWGb3-IWBVxRW9IJktktg89iU.roa (hash: 7/IsdgeK6yl0IUjq8qy/te40MYPjkzlfyF/tgjYBMrQ=)
                          12: iWbURYC9976jpptISSnJC4qKMnM.roa (hash: 3l4IQnaqkURDoIpOrRXySs9lZm9jAE0fFP3SBTyEQ0Y=)
                          13: wfJt5mTsUXow9fCWX31R-Dkmuu0.roa (hash: Ogc3m/G0BZohp0lL37SmmZBmPpDZV56wfDB8yNtIYXE=)
                          14: wxAG3X_yNVOiL2lU8MWKtnA7yu8.roa (hash: 1/q+7+8/xJC9sx0Oq0j0TwpS9hM9lMperyMfuXBmbDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:18:b5:2d:8e:de:0b:80:d3:16:31:11:9c:77:bd:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e298900355fdf4254c20831f2d7ee3bec429bdb
        Validity
            Not Before: Jan 25 03:00:41 2026 GMT
            Not After : Jan 26 03:00:41 2026 GMT
        Subject: CN=7033fa4fd4fdda1ecd49bfe72f8b5c28795653fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:03:e8:6f:a9:a9:17:bf:34:17:59:a8:8f:
                    99:94:e3:d3:82:a0:ba:e9:b5:35:38:03:61:e1:3f:
                    f5:e7:fd:19:2f:cb:f2:ce:1a:e2:7d:c3:9a:84:03:
                    b3:de:89:fc:99:29:e3:eb:a2:38:b0:de:3f:93:5a:
                    91:dc:6c:f9:cc:97:c4:dc:d2:ed:0b:8b:27:2c:95:
                    cc:f2:8b:f6:64:0c:93:d4:c1:13:25:20:70:93:f0:
                    2d:95:3e:b2:f1:5b:31:94:c8:3b:33:7f:39:13:5f:
                    d8:f6:74:c1:8d:48:a3:b9:ed:17:b9:6b:e2:54:24:
                    00:14:4a:a3:0e:40:45:da:72:d8:5b:89:36:d5:8f:
                    85:78:02:c5:1d:11:3c:b3:0f:cb:e6:7a:7e:8a:5f:
                    d9:c9:70:fe:a9:ed:66:a1:0f:89:dc:03:7c:f9:80:
                    b0:d4:1a:b6:ae:fb:76:11:76:e7:93:dd:15:4b:0e:
                    b6:33:91:e2:e6:5f:56:bb:6a:2d:4c:d7:b6:4c:68:
                    7d:85:db:40:f0:28:d9:ad:8d:a9:ca:a5:5e:f9:30:
                    97:9f:ee:7d:56:ea:b8:32:b8:bf:06:fc:32:09:7b:
                    4e:a2:d3:ff:6d:32:fb:06:76:a6:c6:54:8b:8b:f1:
                    cf:5a:c5:9e:38:a9:b4:e3:84:9d:3f:82:cc:f7:26:
                    4e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:33:FA:4F:D4:FD:DA:1E:CD:49:BF:E7:2F:8B:5C:28:79:56:53:FD
            X509v3 Authority Key Identifier:
                keyid:0E:29:89:00:35:5F:DF:42:54:C2:08:31:F2:D7:EE:3B:EC:42:9B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DimJADVf30JUwggx8tfuO-xCm9s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/cfea9e-bee2-4bcb-8def-3e4b74dd058d/1/DimJADVf30JUwggx8tfuO-xCm9s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:83:ed:92:15:fe:90:f8:e7:8a:28:5c:79:da:59:3c:29:cf:
         22:73:75:e8:4b:d7:29:f9:2c:64:6e:3e:c8:2b:a0:20:f2:c5:
         68:ca:cf:80:2b:50:48:eb:0f:76:26:77:7f:07:bf:54:85:c6:
         48:4f:9e:c9:58:d9:59:0f:48:4f:f4:df:d3:b1:b1:55:1c:f5:
         64:47:de:1a:28:8c:27:da:37:9e:80:e3:35:72:a3:a7:30:1f:
         15:13:38:75:60:fc:e8:aa:6a:22:38:43:ee:07:5d:a9:9d:26:
         ea:c1:0c:4c:e9:ec:58:4f:80:e5:23:0a:fe:c4:a3:df:ed:8a:
         c1:d6:6b:8f:ef:ab:d5:77:79:cb:6b:3e:c2:29:a0:85:6a:b3:
         cc:37:ed:bb:59:75:84:68:33:c9:45:28:5e:91:a3:2c:04:38:
         c7:32:1b:80:88:65:bd:4b:75:7c:2d:f9:30:a8:f0:d7:67:37:
         59:7e:b3:4f:a2:ec:c5:d9:89:8d:c0:67:41:56:80:cd:f3:c8:
         4c:5c:00:d7:54:a0:30:ce:de:47:a0:fe:a4:14:9a:07:8c:a2:
         a7:2d:b8:5d:e5:25:7a:8c:7b:30:ff:25:55:66:79:4d:47:25:
         4a:65:02:6d:18:fe:d4:c0:51:fa:ec:64:eb:1d:9a:d4:36:ea:
         a1:59:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:38:26 2026 by rpki-client