This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
File:                     C047O4QkIliGMULtOhl5LZfLvHQ.mft (raw, json)
Hash identifier:          djaOMl9G5qkoiEvOkNLBXcaYW/6wXXl8JJLYsrrbbK8=
Subject key identifier:   8F:AA:33:C6:46:C1:27:33:DD:34:74:53:9B:97:90:C7:45:C3:E3:32
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Certificate issuer:       /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial:       019BF3F4E9233EDD86267C775A6D7D98461D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
Manifest number:          04E7
Signing time:             Sun 25 Jan 2026 07:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:12 +0000
Files and hashes:         1: 0rhF20B9J0l57DDXD5PI3Mlgck4.roa (hash: IsJTlAtlEK1wuKb/L+IEKig4AE4TBarY7Xe4bFwDMpI=)
                          2: 6A7Z4yaWiKfLJS4IZp2FohYa6Uw.roa (hash: YhYHdgtyXLrN6UK3gca5g/ETRBRMUucTWNMNaEy2z0k=)
                          3: 7M34N_8c18kwYN5DXzfuwEhrmZA.roa (hash: ldXuTTIrM9/cmADJD+iI7DaLo5yereXOVCE9PkpSmcA=)
                          4: C047O4QkIliGMULtOhl5LZfLvHQ.crl (hash: /SM+SL+8yVaP7hBjlKQzptakQBwvzA8SI6ekSg2EjRI=)
                          5: CX2-XqJbgxFtfbz1ZXOm-VfI4xk.roa (hash: zBpyaivrS8dLO7I1EYJl3tAX+exEI6hLkdP3m9an98o=)
                          6: CZDKIGwWhnI-INEGACnwv7AgaTg.roa (hash: dVa9P5hdVe5LY0y46KggHZSlq4Z8c9qXOpPcVSps3Is=)
                          7: CyAy99lvFfxEeefYC3YDjAbci7s.roa (hash: kbK1HAU7102mQpjWbsfSJZ2xs2+GlLtaq/XWg70vXxc=)
                          8: EqprGk5kowrimby1Je14qsse7Lo.roa (hash: LFHwUVenT9McibVbW2ZQmoL89oEmwzTC9qG4B4kc9jc=)
                          9: G3HN66IsyUqcyb4IdBzNqnOqqc0.roa (hash: sDJ2LPZQc8/0xG/uRBZ6QNwDRUd4YGJewkn7EWmexdg=)
                          10: GQ8G8-7vI6X_9ipMuVEkqHZe5E4.roa (hash: Q4GuX3aVEvIlMgK5veVPusvhLwaRKg/Xs093or8mHOo=)
                          11: JZWlbgGs77-K_lBvMrRD_aczpko.roa (hash: 7WDxDeue9uY3onqd6ZcYQ+v+RK9TTwQALQaKXD0UqfQ=)
                          12: Jne2uZQQNK-7k_qqfXs0lFjgHD4.roa (hash: 7bEw241lSph/pFPVrb7MGNFqem6TlLpWsbHL+81LqTk=)
                          13: KsFOJDttqy_VpUv2R0gz7Gxx5hY.roa (hash: YswPe/O5Azk6ROeO91VP12JoIIylqp2zfZQX3SqmIMA=)
                          14: LVNDdtLYnujMWbq0swLbShC0Y-g.roa (hash: 8HctQXfZBPB92/kv8TD0DdrdmIMzx8hg2wfACFjK79k=)
                          15: M-2rME5iw6DM-f47-QFFb7VzGFU.roa (hash: vtu0N2tgrIN8s3d7nrEfJQ8SnAhHAVxXwjju8rnYHgE=)
                          16: MWV90LWxUa-WUsz9LX9npKKVr3c.roa (hash: VJ3UQ6OcyZGRtcoJAmyUvcMKs1qQ6scCd0up5rRWI+s=)
                          17: MwvZOBj0s4qjbTXNydp_HEWBFGg.roa (hash: H3cu739yBXQz+abiITzDIfyl+CQIjQK1P9/7W80OXIc=)
                          18: NUC_LFMe2cNtzU5aCrIgV-H-cMA.roa (hash: NpATbiFrt9IYp6v1R73idi7OcNugJKN3KPoGaMp8IYk=)
                          19: NfntwoXD_O0scdxf60MFJ4QAEsM.roa (hash: fJxzALYVA6cDE1yHGT4WjIHIwKWY+JaHack97oaMMaY=)
                          20: QrZBpVrINYvtt8eQ3BUierAVaEo.roa (hash: otF3M+RO1u8J3AFXZCe+jAflY8Wg53WcaWXyGwSEsJ4=)
                          21: T9HYPrCqI1Lwx1ICx4gg3y9EaPs.roa (hash: 8WBx6rryQFW8qB2gn0UcoHoZSKFuIQe/bNKvBOdNkz0=)
                          22: TskIBboLcFBuqPn_MOgE03hfzQA.roa (hash: mdOwXyGLiZ3kiLeepuX9bG0ElkLvweofxQqMwNHkNZM=)
                          23: UJpCXx5oIh9hc9g8auJXqdNaBpc.roa (hash: zfnC57zmuYkrC5OEiIWpUIW8D69Vc8CmCbVPonz5g+A=)
                          24: ZLUEmByOiobrhmfNh__npJOjTZI.roa (hash: jsI1IQp+AglclYgjL62S68CLg27R4VrCqoouYs5JfJI=)
                          25: ZrBNPjEycZrANxNyVIzzzbkmbro.roa (hash: xRKEM4Adn5RZtYpllrg5Vg4AZHQgUo0g7tJdnV0uOgQ=)
                          26: _ryzMmjmSU7ZGAZCZXgl3zhi790.roa (hash: bcxS6uMI7fATL0M6h1j5zg3SrS8sl6NPvR5jNoM7/MA=)
                          27: adYPWxXEK-EyO-cYHcJ3jz8xmTk.roa (hash: 1Kwboaf94lcPqOMax8VtYSaq7bYuJ9QQ+t9XDkOoZZ8=)
                          28: bXvQDzztgR20YUmWOPJv3-d7kbs.roa (hash: Yu03wDPl98lP1gZjiDY9V7dBNvUsvmd/sPZMcHPqSFo=)
                          29: c--NfYyQ6E-hR59TJgivWxwrXVM.roa (hash: tL2NGDcvc+5rAS2b+OMbEZsDoupyJSLpPH625LDD0s8=)
                          30: dAQ6Yalce-mSw3JzJGnHTG3anHQ.roa (hash: 2mIrdQ1ciiXVimVbz20GsghWRPI8l/oYrrPopxaFDQg=)
                          31: ggAlU2FvvMVt8QnyY4zRaT2PLhk.roa (hash: SC4t7+i4rHmGw8cE2pQbNtpAxChfBbrVKnQs9mBdyuU=)
                          32: hZx6c939vE298FUQwwkrOAv6B6Q.roa (hash: LSd/7r0KJ4VgUY7Gw3QL0WCTt5PCLASbfDO+3RvzeGc=)
                          33: knNwFqOSUSmwnzIGTZTBkXny7vM.roa (hash: Xuq/XGETEu+nAPlO71gTOdaRVSzyfoQNkrNuyE5V+lc=)
                          34: n1rxwfyEu4ovtxs-PIPRbHD7WkE.roa (hash: I78sxSB0+1+LczQU4FM6Dhvmm31U8fYmSaTLfz+uB/Q=)
                          35: t1u2Kj146HTOnxMMmEJaATvs5Ig.roa (hash: QYOvdX36IlpkGRO8V/ydJ2DD58WF5UuPoJ4HyYXbCMo=)
                          36: t7vqBSGhovS4012cVOMWJBs1sqw.roa (hash: /XopIYi0JbnszG1jIAU2dDD3+WTYzo0tSbwoFenxjUc=)
                          37: xTZJJpGpeUxMY5LeQXBMUN19dnA.roa (hash: HbnsCO3ZsmJagmIfOuDUR7M7F04yDmonV5hrdy2TpFM=)
                          38: zB1uc6k_qAdWt66X8InqZqHDntM.roa (hash: hWYMua5mstmbOSm8yc4WQRkHL7pc/tOGsprl+gVmDkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:e9:23:3e:dd:86:26:7c:77:5a:6d:7d:98:46:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
        Validity
            Not Before: Jan 25 07:01:12 2026 GMT
            Not After : Jan 26 07:01:12 2026 GMT
        Subject: CN=8faa33c646c12733dd3474539b9790c745c3e332
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9e:29:69:18:1b:e6:c8:35:87:d0:3e:b8:c9:
                    50:ea:4e:1e:fe:a4:42:86:71:32:52:a3:d6:fa:90:
                    ec:83:a1:45:f5:89:bf:99:fe:37:db:ad:b9:58:d9:
                    c1:d1:6e:66:f5:65:a8:58:b6:87:d8:25:ea:dd:64:
                    b3:31:f5:70:9f:ac:29:c2:75:ed:40:4b:d8:12:1b:
                    89:f9:4a:7c:0d:9f:7e:60:db:2e:b1:fb:4c:2a:13:
                    41:28:e8:f4:b1:9c:74:e4:9a:ab:8d:66:77:66:5b:
                    d3:4b:3a:ae:fd:e6:2c:4e:65:8d:2e:27:43:fb:24:
                    6e:08:c3:1c:ec:a7:cc:3e:d5:f5:f1:55:1c:06:a0:
                    0e:46:f6:81:d0:cd:61:a9:70:d0:7e:3b:7b:d5:15:
                    a9:f4:4a:f8:4c:01:2c:ba:cc:17:b0:3b:40:72:01:
                    5e:98:92:50:ea:2d:3a:c2:82:b4:48:59:53:f9:c6:
                    69:27:5e:45:ee:21:99:23:67:bf:be:47:40:4c:f4:
                    00:19:1b:23:b1:de:2b:97:c9:fe:72:82:49:e9:27:
                    22:39:ac:fb:6f:7d:70:cc:24:2f:82:40:97:72:54:
                    da:1e:ea:ff:95:5c:d4:42:95:d5:2f:2b:bb:97:9e:
                    24:b8:16:d8:71:e4:a2:57:74:ea:82:df:be:36:e7:
                    69:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:AA:33:C6:46:C1:27:33:DD:34:74:53:9B:97:90:C7:45:C3:E3:32
            X509v3 Authority Key Identifier:
                keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:01:4c:25:87:57:fe:3a:f7:c3:68:a9:5d:c8:c1:33:b7:39:
         7f:45:1d:bd:be:fb:d9:a0:a4:33:12:48:00:de:1b:8c:e3:76:
         95:d3:b1:3a:c9:8c:2a:02:ab:fd:63:df:1e:89:c1:5d:3d:0e:
         a2:30:c8:09:2f:ca:cc:ce:98:5b:68:14:0d:54:2d:ba:b0:91:
         62:8c:2f:84:84:e7:64:5e:4e:3a:9f:3f:ee:aa:93:aa:bc:02:
         b2:8b:90:56:d2:9c:51:47:99:ff:70:97:5d:19:ca:4d:ae:0a:
         fe:13:e5:1e:e9:83:92:c2:1b:79:8e:62:41:ea:8f:cd:b5:9f:
         c3:b3:44:08:c2:63:a6:2e:b7:35:b9:01:b4:c2:32:53:60:a8:
         0d:d6:4d:e5:99:d6:d4:0f:63:41:4d:4b:24:82:a4:ee:25:67:
         d1:02:e6:89:dc:39:72:0f:d8:37:28:01:bf:66:ee:a3:99:76:
         3a:77:d5:d8:a5:a4:b4:af:de:26:bc:ad:94:1b:e1:fb:3b:a0:
         7c:50:c2:d3:94:3e:94:76:0d:8c:ba:d6:ef:85:14:65:5a:5a:
         c2:af:b7:0e:6d:41:8f:79:1d:0c:02:ff:a7:40:54:5c:9f:a9:
         65:91:6e:2a:5f:c3:8f:82:ef:40:11:5c:e7:4e:f5:bd:b4:0c:
         ac:f3:cf:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvz9OkjPt2GJnx3Wm19mEYdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGUzYjNiODQyNDIyNTg4NjMxNDJlZDNhMTk3OTJkOTdj
YmJjNzQwHhcNMjYwMTI1MDcwMTEyWhcNMjYwMTI2MDcwMTEyWjAzMTEwLwYDVQQD
Eyg4ZmFhMzNjNjQ2YzEyNzMzZGQzNDc0NTM5Yjk3OTBjNzQ1YzNlMzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp4paRgb5sg1h9A+uMlQ6k4e/qRC
hnEyUqPW+pDsg6FF9Ym/mf432625WNnB0W5m9WWoWLaH2CXq3WSzMfVwn6wpwnXt
QEvYEhuJ+Up8DZ9+YNsusftMKhNBKOj0sZx05JqrjWZ3ZlvTSzqu/eYsTmWNLidD
+yRuCMMc7KfMPtX18VUcBqAORvaB0M1hqXDQfjt71RWp9Er4TAEsuswXsDtAcgFe
mJJQ6i06woK0SFlT+cZpJ15F7iGZI2e/vkdATPQAGRsjsd4rl8n+coJJ6SciOaz7
b31wzCQvgkCXclTaHur/lVzUQpXVLyu7l54kuBbYceSiV3Tqgt++NudpDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI+qM8ZGwScz3TR0U5uXkMdFw+MyMB8GA1UdIwQY
MBaAFAtOOzuEJCJYhjFC7ToZeS2Xy7x0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQt
MTRkMjM4NTI3ODM1LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83YmExYjEtNTU2Mi00YTMyLTlmNWQtMTRkMjM4NTI3ODM1
LzEvQzA0N080UWtJbGlHTVVMdE9obDVMWmZMdkhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawFMJYdX
/jr3w2ipXcjBM7c5f0Udvb772aCkMxJIAN4bjON2ldOxOsmMKgKr/WPfHonBXT0O
ojDICS/KzM6YW2gUDVQturCRYowvhITnZF5OOp8/7qqTqrwCsouQVtKcUUeZ/3CX
XRnKTa4K/hPlHumDksIbeY5iQeqPzbWfw7NECMJjpi63NbkBtMIyU2CoDdZN5ZnW
1A9jQU1LJIKk7iVn0QLmidw5cg/YNygBv2buo5l2OnfV2KWktK/eJrytlBvh+zug
fFDC05Q+lHYNjLrW74UUZVpawq+3Dm1Bj3kdDAL/p0BUXJ+pZZFuKl/Dj4LvQBFc
5071vbQMrPPPhQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:48:04 2026 by rpki-client