This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
File:                     KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json)
Hash identifier:          EUX2GFcu/yDZ3sMCjNWZaBeEogSwAjWTnQZQIERbXD4=
Subject key identifier:   7F:B6:27:3F:31:F6:B6:D5:F8:31:09:0D:DD:07:4B:3C:C2:F7:D1:4B
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Certificate issuer:       /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial:       019BF6F5837BBFD90FDBF4E14FC49255F2D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
Manifest number:          160F
Signing time:             Sun 25 Jan 2026 21:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:43 +0000
Files and hashes:         1: 0KkzjJoUdmms8Cy-yXghKss_oLA.roa (hash: mgQUcNbwY7ms0YRzjkNyKBa0aaFMe997jnsK2dIjNiQ=)
                          2: 3fsO2B5vgNbgc1ylzCjmk4YwFY4.roa (hash: pH/jmnyRRRJWz/5uh87gHrIOJvcbi1U0X4XzPOTDOiU=)
                          3: 5UvdzILVHJWE0eYDXOH064SrAyc.roa (hash: pPOponYaHvS1hb6FWYB+9p4o/T0YW4X1pjbXTgk4m6I=)
                          4: 8guMM5jdW6I2GhaccAeh8CfPtYE.roa (hash: xLSnQyE7nyOgBXyQfoGIZ75rfB0HbdgfmbYXOXoZLno=)
                          5: 93YoVMIY7ylmcQEL3cvEgJj4oGw.roa (hash: ANftHE+2A3C6m0fWjR7K8HCo16o35LQbSpULE7tNKFI=)
                          6: CqxYYMvpUa_dBJO7-VsFWkXi0c8.roa (hash: +f6zrEF5HXbMRilxh7AXmSoErsjgcFAhD5nPlVuC2xo=)
                          7: DK1XJlLvGIlABfg3yMSUd-Eb7bI.roa (hash: VdJ4I4lgQaQqewChk8pQg1jLmRqjBk/Zm6SiIEvD6QU=)
                          8: EFI7XXeZ17ZBffn-Wfvsz9LcbO8.roa (hash: EbS1EZ23bqhn/fD3NbB82R2Gx/DZplinJXkjF/CHl78=)
                          9: EQ-EfFO_ZBBj99VscFnVb4fq07A.roa (hash: DY7PoRA98xpOY2HaDNBjw4bCPlr72zs8Ed5OmX/GYQk=)
                          10: FkspHalIwIkZCKpbSC02h5C66Zo.roa (hash: Akg2umi4Fv2YwTSn0H7MJVr1BR1ZOgtwB6Lgwj9jITc=)
                          11: Ga2f5ckntsVsSnMUH7wxVmGQqA4.roa (hash: 3VV+qZoBPPOycQY8T+vaQGapx47PhvSvd8EZs4gtlAk=)
                          12: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: s+USwWV25GBDbPs7IkiAqZdT8H32Bc7TbvHlpjvSzxM=)
                          13: LmuTg5dDspbqRPTBIWwdfeiT78w.roa (hash: Sl44BhbHkcXiSVufKgwHC3fpJYG2caWsavUOUcQMMRY=)
                          14: M-rJwrdbDhPh3bSHBUlQSth5wnQ.roa (hash: qGOzWyx4yT2xJsLlwB2qhjuVT4xaePH/K4QMxlWnIQ8=)
                          15: OQtpXprjxRHSnuDGtbFRD3pTl94.roa (hash: tpn+zzvg1QWooSRqE2MLkFA+bMlho6X8Maf1/MfavB4=)
                          16: PUYBt3EvzWm6QM2OI0SM1D5m1qY.roa (hash: tkkFt1Gf0WZmv2nn4kPhqy9uMCNjjS6CTqfk578Y+hc=)
                          17: PvTMLSeb_nWvqEst2_x8g8RXxJQ.roa (hash: fvgJnmbIAKrjW+FiS4cGgxRqVaHYeBYKIzFTp6TGMiY=)
                          18: QUdCUlUsoCyZqN5f-O915_8oVao.roa (hash: JDFDPqp4VJZLhoSwLZjwMNZ+atwdl24icRpAGMXNUYQ=)
                          19: QzSn7_MvD-krfzVQr82060hV_uI.roa (hash: 6BxiAS1MqQVVxcupc1s9IZHFBYfQSIKRY5kWLrhudOY=)
                          20: SJrSIkNkCVFe6nfB0uQO_MeAu5Y.roa (hash: F5YlyVH6nJJVWDdy+znUqiWaL4/wtjIJh3etV+AoVuA=)
                          21: WLFdh2O1nSvlRwnko7x5rDoSHXM.roa (hash: hkTyK/jVyj89y1hav/PMIvLwzOTZeIMtutsTIniO214=)
                          22: X1QUPUOF4tV54plhF2_u5LSjURI.roa (hash: clnxlY4CuaOzSpARYUZerQTWC9Y8i99sNzE5VhkafSQ=)
                          23: X6bKafUHkhkpou4OCxL8fuWQRK4.roa (hash: WoLzQ8S7RBA73Yq2Vk2wSQeggqTkifN1MdLrz3kjqRM=)
                          24: YhJKl7AH9KvyQ9rlDo_0amk0ptk.roa (hash: PIyIy62ey151jJrTV3rH4pTgvt8halTI4IYk/dvJ1HU=)
                          25: Z0AdFl_CwyfMQZLv3ZoD_aLvzkc.roa (hash: K3NNVdFjKnNzHLIoQrzWu15fZZcASrLzQF5r6/PQDHM=)
                          26: ZdCdDiaVYNNGWHk2giMF7Jc4Psc.roa (hash: dUO7JtaFhT894/XBSf1WeNvB2B7nOAigDkpa6ed99xk=)
                          27: bCbSRpo9jNoO9CpJUdBcEKEjcQw.roa (hash: 47rQmHfOJ1S8UG7NR7LWpGu++NtuuKGj420kr6vIwW4=)
                          28: bRCoZlZEjsn19N8iwX7NKYJdRec.roa (hash: I2feAPuCgVuFJtjAk2KKGQzm8rIoyJnoWIWWnGv1SZs=)
                          29: cDSQq20gFl_xw2vaBzzC1ta9JTo.roa (hash: /Ac0ImH0W/C2SS4AmjgkecpmTVgHtcQgsuAKjPmP9Kg=)
                          30: c_j3yg5BcCKfjWJSyLhPsoCl8fo.roa (hash: weVyx7PM+QIce0xZCK8Hvkau7tg9BgiipAufz6BRHN4=)
                          31: fDvTCb65T0NBgfyYMw8klNFzoZc.roa (hash: iBd2cBxyy2dAUeAKty88sfgipeeadpR8WNmR7CuYLUc=)
                          32: fVCgve75g5R98_-xURrB2xygaQo.roa (hash: 52RGA6SelKNk+dolsvrzXHbR/GGI/H7RTi0a7BsEzdA=)
                          33: f_FM5aYYFD8ySbs3-yt5otduaRM.roa (hash: lIl1eF0+KnIkUbSdLUIqNysQ5npLcyCf9ozlvmFKa8A=)
                          34: hG2m9zhj2oAi1CZYuqKEfm2OJwE.roa (hash: IvuSOBxaQjHsxy41UzNEtvNVsu+Q1Fkvr9KK8SxpSjQ=)
                          35: hiNoXDhQ3Bbn1_DpSesyiJvU0U4.roa (hash: AzYstRzFBaF+YCS7pGLTFHcZC75FnJUSCFUbexm0r0I=)
                          36: i_jDxQlns2GJJCWhsafnRSJG5lY.roa (hash: vKYc/VcYUEue/nd2jqUZ9dCra3lK9N+8hJAZzreyVfw=)
                          37: jgB1BVjnSKjwrRYXRD9mqswIqgg.roa (hash: P69vvjLIDAW8RokNa2JlifEO8AoFeyWx23eDMWo0u6g=)
                          38: jlKOUasUa3u-JFxkn5nWNnzfPhQ.roa (hash: O/0o4/opctywwuKVoo/Apk7Kdx6pGh1wrVruR7K1RrM=)
                          39: kXw_F87vDYBM8LWj0kizss8a-Yc.roa (hash: 14DcTz8/BNnOXOqnb9wBGiZL6rOUzYIXPVXxKDQ+Oag=)
                          40: nwRskVFO7jVpgv0FgU_I-l_JL24.roa (hash: jE2BzVrznI2L2o690JEPpHV4meuzDSDEB31wOas8YwE=)
                          41: ox76ZhFyfb5NKfqzaNwPdW4jg_8.roa (hash: ifvLosBJIFWZZ6onaFw2/Uoq86wvUCcmDLTiUhlwA6s=)
                          42: p40iuKxiw3-sHAL9jxdUpNkkeD4.roa (hash: uEdVEgA7C9Cn43awEqryuYQCQHKWlCvT8PCH2NnfOgc=)
                          43: qaeo-nsoJ9IpdT7Mh_4f0O6GEgI.roa (hash: 5ws+QfO+47Y2CkrAKIeBRPKaV9zlQ18zYJMp0BMrx1A=)
                          44: vHJI_V1koWk_BvwK1njfPWWkxqM.roa (hash: jwRcQRvR6Az+iXcPkGYLsjnX2xgKxhjx3qipCyzt+oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:83:7b:bf:d9:0f:db:f4:e1:4f:c4:92:55:f2:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
        Validity
            Not Before: Jan 25 21:00:43 2026 GMT
            Not After : Jan 26 21:00:43 2026 GMT
        Subject: CN=7fb6273f31f6b6d5f831090ddd074b3cc2f7d14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:92:0b:29:01:34:4d:f0:2e:39:8e:99:30:
                    e4:79:97:b2:70:3e:c1:14:f9:49:f3:14:17:69:7f:
                    ac:3b:d6:3d:81:0a:f8:0f:9c:c8:96:28:e2:55:ff:
                    dc:24:29:65:e5:a5:e9:c6:36:4d:60:d7:ba:e2:dc:
                    84:b9:ac:36:34:d6:70:b0:b1:4e:e1:63:de:b4:09:
                    ca:89:ca:f0:78:21:8f:f9:28:2a:94:23:10:20:cd:
                    f6:f0:90:af:14:cb:d2:b6:e8:48:f8:c3:fe:1d:d8:
                    36:b3:5f:7e:86:d0:39:ab:89:39:bb:a8:99:cb:5f:
                    1a:7f:e7:18:38:94:90:6d:f1:c4:ea:79:7f:2f:c5:
                    09:ce:22:51:2a:86:45:ba:07:cf:dc:b0:bc:c8:25:
                    0a:77:2e:b8:e6:44:83:9c:90:ee:de:b1:26:0b:bb:
                    b9:76:1b:05:9f:83:da:41:45:51:30:7b:a5:8e:46:
                    4e:c3:d5:10:9c:33:af:36:6c:22:2e:b0:0f:d4:40:
                    64:21:52:75:c3:90:ad:87:c8:60:82:be:18:47:48:
                    33:17:5c:73:86:68:45:fe:c1:f5:f1:91:0e:1f:6d:
                    50:2e:ac:be:49:a9:79:c8:53:e5:45:27:14:67:cc:
                    5a:f7:dc:2c:43:95:d9:4b:67:d5:61:08:0a:6c:6e:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B6:27:3F:31:F6:B6:D5:F8:31:09:0D:DD:07:4B:3C:C2:F7:D1:4B
            X509v3 Authority Key Identifier:
                keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:09:ba:87:b6:ce:db:85:6b:95:10:14:b0:77:ed:c3:36:0a:
         63:9b:76:f7:ce:b3:a8:74:31:07:a1:3e:4a:6c:d0:96:f7:5c:
         e6:e7:ef:4f:b3:05:c7:a1:65:b1:02:f8:84:2c:06:17:f5:3f:
         1d:68:8b:cc:65:a3:e2:85:b9:c8:e6:e2:e8:28:17:cc:54:fe:
         05:2c:31:eb:be:e0:5e:07:7e:a6:e4:ad:c4:9c:12:e5:bc:7b:
         8f:f3:7f:ac:fb:bc:fb:5e:5b:f3:1e:88:ba:45:47:99:6a:c2:
         1f:be:08:18:6c:02:49:cd:d2:cf:fb:73:ea:26:30:ec:9f:13:
         19:dd:32:84:3e:81:68:7e:3a:d5:8f:1f:50:c1:1f:95:38:b3:
         1b:20:ea:04:fa:04:a1:5a:5c:f7:94:f5:02:c7:5b:fd:d0:ec:
         83:e6:f5:69:b2:db:96:14:33:76:aa:47:a9:b8:49:8a:aa:22:
         79:42:e8:1e:bd:04:e7:ee:2c:c4:21:02:9e:55:60:7b:a3:60:
         c7:15:c9:64:7b:14:96:c4:f3:d4:ba:e4:ca:f0:2d:d0:60:d6:
         bb:f7:22:c5:f6:c8:62:7d:ee:d5:ca:17:34:83:2a:fd:cf:a5:
         09:df:ca:21:a7:7b:24:71:5a:60:87:ea:38:30:35:a7:c6:e1:
         c5:60:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----