This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          OCvf9mBWB4bAS61m9uABaZHDou9tEgBe7N1fD+MMD0Y=
Subject key identifier:   6B:30:7A:53:C4:36:70:E6:18:59:10:E1:37:A8:0F:92:C5:0A:7F:A8
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019BF31920AD9DCE9B1BD447BB0B82206F48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          160D
Signing time:             Sun 25 Jan 2026 03:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 03:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 03:01:08 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          3: 5UvdzILVHJWE0eYDXOH064SrAyc.roa (hash: pPOponYaHvS1hb6FWYB+9p4o/T0YW4X1pjbXTgk4m6I=)
                          4: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          5: 93YoVMIY7ylmcQEL3cvEgJj4oGw.roa (hash: ANftHE+2A3C6m0fWjR7K8HCo16o35LQbSpULE7tNKFI=)
                          6: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          7: DK1XJlLvGIlABfg3yMSUd-Eb7bI.roa (hash: VdJ4I4lgQaQqewChk8pQg1jLmRqjBk/Zm6SiIEvD6QU=)
                          8: EFI7XXeZ17ZBffn-Wfvsz9LcbO8.roa (hash: EbS1EZ23bqhn/fD3NbB82R2Gx/DZplinJXkjF/CHl78=)
                          9: EQ-EfFO_ZBBj99VscFnVb4fq07A.roa (hash: DY7PoRA98xpOY2HaDNBjw4bCPlr72zs8Ed5OmX/GYQk=)
                          10: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          11: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          12: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: an2CN/zxMmfqo4S4H3Bl8AuoxuBj/Ymfl9PFlwfiWTU=)
                          13: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          14: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          15: OQtpXprjxRHSnuDGtbFRD3pTl94.roa (hash: tpn+zzvg1QWooSRqE2MLkFA+bMlho6X8Maf1/MfavB4=)
                          16: PUYBt3EvzWm6QM2OI0SM1D5m1qY.roa (hash: tkkFt1Gf0WZmv2nn4kPhqy9uMCNjjS6CTqfk578Y+hc=)
                          17: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          18: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          19: QzSn7_MvD-krfzVQr82060hV_uI.roa (hash: 6BxiAS1MqQVVxcupc1s9IZHFBYfQSIKRY5kWLrhudOY=)
                          20: SJrSIkNkCVFe6nfB0uQO_MeAu5Y.roa (hash: F5YlyVH6nJJVWDdy+znUqiWaL4/wtjIJh3etV+AoVuA=)
                          21: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          22: X1QUPUOF4tV54plhF2_u5LSjURI.roa (hash: clnxlY4CuaOzSpARYUZerQTWC9Y8i99sNzE5VhkafSQ=)
                          23: X6bKafUHkhkpou4OCxL8fuWQRK4.roa (hash: WoLzQ8S7RBA73Yq2Vk2wSQeggqTkifN1MdLrz3kjqRM=)
                          24: YhJKl7AH9KvyQ9rlDo_0amk0ptk.roa (hash: PIyIy62ey151jJrTV3rH4pTgvt8halTI4IYk/dvJ1HU=)
                          25: Z0AdFl_CwyfMQZLv3ZoD_aLvzkc.roa (hash: K3NNVdFjKnNzHLIoQrzWu15fZZcASrLzQF5r6/PQDHM=)
                          26: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          27: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          28: bRCoZlZEjsn19N8iwX7NKYJdRec.roa (hash: I2feAPuCgVuFJtjAk2KKGQzm8rIoyJnoWIWWnGv1SZs=)
                          29: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          30: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
                          31: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
                          32: fVCgve75g5R98_-xURrB2xygaQo.roa (hash: 52RGA6SelKNk+dolsvrzXHbR/GGI/H7RTi0a7BsEzdA=)
                          33: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
                          34: hG2m9zhj2oAi1CZYuqKEfm2OJwE.roa (hash: IvuSOBxaQjHsxy41UzNEtvNVsu+Q1Fkvr9KK8SxpSjQ=)
                          35: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          36: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
                          37: jgB1BVjnSKjwrRYXRD9mqswIqgg.roa (hash: P69vvjLIDAW8RokNa2JlifEO8AoFeyWx23eDMWo0u6g=)
                          38: jlKOUasUa3u-JFxkn5nWNnzfPhQ.roa (hash: O/0o4/opctywwuKVoo/Apk7Kdx6pGh1wrVruR7K1RrM=)
                          39: kXw_F87vDYBM8LWj0kizss8a-Yc.roa (hash: 14DcTz8/BNnOXOqnb9wBGiZL6rOUzYIXPVXxKDQ+Oag=)
                          40: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (hash: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE=)
                          41: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          42: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          43: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          44: vHJI_V1koWk_BvwK1njfPWWkxqM.roa (hash: jwRcQRvR6Az+iXcPkGYLsjnX2xgKxhjx3qipCyzt+oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:19:20:ad:9d:ce:9b:1b:d4:47:bb:0b:82:20:6f:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jan 25 03:01:08 2026 GMT
            Not After : Jan 26 03:01:08 2026 GMT
        Subject: CN=6b307a53c43670e6185910e137a80f92c50a7fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:88:c5:93:d3:61:66:4b:12:30:e7:91:27:68:
                    3a:6b:27:9e:62:99:ee:7f:ac:d1:a2:85:15:a2:e4:
                    b9:72:31:90:11:e3:71:b4:4a:62:68:08:20:bb:ce:
                    3d:6d:0b:b2:ba:95:4c:93:e8:46:73:82:88:8e:1d:
                    c4:7e:04:17:63:c5:8e:d1:8c:24:a9:03:b4:e9:48:
                    a1:48:5b:ff:5d:e3:af:bc:52:8c:89:1f:1e:bc:2b:
                    68:ed:dc:29:87:aa:82:45:c3:cb:8b:d3:df:5d:e3:
                    2f:fa:6d:77:a4:88:b5:63:c7:d0:93:08:e4:43:d4:
                    e9:ba:15:79:6e:84:06:22:f6:bb:c5:7e:f8:76:a9:
                    14:a7:c9:f7:03:6a:68:d4:b2:f5:35:7a:df:8e:d4:
                    c5:0c:2a:de:8e:d2:d5:f8:74:cb:5b:86:b3:d0:e6:
                    dc:76:c0:f2:bd:0e:ad:d5:52:0d:15:3d:d7:e7:37:
                    c0:95:7a:e5:26:e7:98:2a:5c:37:29:65:f0:51:32:
                    62:f0:79:79:8b:7e:59:46:82:56:00:89:11:f5:b6:
                    57:b2:f2:a4:0a:f6:52:45:ad:34:bf:fa:77:ae:37:
                    e6:d6:a1:7c:5b:39:64:18:de:e6:87:59:af:e0:dc:
                    d0:b9:07:e9:d4:67:b7:34:be:dd:35:49:51:5d:10:
                    e8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:30:7A:53:C4:36:70:E6:18:59:10:E1:37:A8:0F:92:C5:0A:7F:A8
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:32:9c:35:59:e6:44:77:7e:ab:92:5c:73:ef:a7:36:0a:7b:
         5b:26:fa:28:7e:d9:d5:79:00:2d:9d:11:f7:db:83:83:af:68:
         f2:a9:76:a5:6c:e6:c6:ab:90:9a:83:7d:f2:73:e8:18:2c:08:
         41:11:b6:d4:fb:db:16:86:45:bc:c5:84:d0:24:9e:a9:32:ae:
         5f:fa:2d:bf:f9:0e:f3:cf:38:93:0f:c6:2b:5d:75:8f:a5:44:
         7f:21:04:08:ec:c4:a4:4e:08:bd:5c:ca:b4:d3:04:de:e9:4c:
         a3:76:4a:46:8c:8b:58:b5:f4:ad:17:ff:06:93:59:24:99:c9:
         23:2f:05:ff:8e:42:c4:c6:de:b3:c3:43:0f:37:ff:b1:29:f2:
         34:35:39:16:0f:bc:4a:8d:02:17:01:ab:e1:9f:c6:89:19:63:
         b2:a3:83:ca:83:86:f0:c0:1b:64:8f:9f:37:c8:43:4f:fc:d3:
         31:94:23:b6:0c:fd:d6:92:d2:6c:62:3f:e3:1a:a1:09:53:d0:
         3f:04:26:92:5a:c4:71:be:61:02:e5:95:fd:b4:cc:41:72:b6:
         bd:9d:3b:b7:8e:e7:f7:1e:d7:f5:54:09:c2:f0:fe:ce:f5:ea:
         9b:63:95:9c:9f:cc:df:1c:a9:26:a0:28:f8:f2:85:09:d8:60:
         79:39:63:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:43:56 2026 by rpki-client