This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
File:                     Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json)
Hash identifier:          rCgNGCjVKrrd5MvDzUAu4okqnp9Ach0HKP8VK1tn1oA=
Subject key identifier:   74:0F:A6:8F:9D:35:AE:35:6E:59:0A:67:F3:D1:D0:8E:6B:F2:D1:E0
Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC
Certificate issuer:       /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
Certificate serial:       019BF42C24AA436917F380AD3FC6AF7F2B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
Manifest number:          1048
Signing time:             Sun 25 Jan 2026 08:01:32 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:32 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:32 +0000
Files and hashes:         1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=)
                          2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=)
                          3: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=)
                          4: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=)
                          5: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=)
                          6: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: 3NVzK/7ZalVfZabHAO/zGXXBPxr8aISMrDwwBH/Ym6g=)
                          7: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=)
                          8: f9oKfNhX89jf9Pvy-Ba5oQaSTUU.roa (hash: pVZsMNdaHsUDa/+umrQSX9j6u35GXdOWv7ti1zKHLtA=)
                          9: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=)
                          10: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=)
                          11: lghuLDymBAtVV8bMgyPVXddGVW0.roa (hash: B36YhYDgnjsRZPrOKTnsUPdD0R4neS1yQGS5w0kCMHw=)
                          12: m3QG645Jxe5JU10VjtLZCAwTzqE.roa (hash: qQhuxCc/6YQx1PHrhefGoXSV5uHGKCWCPmjs33OuAHk=)
                          13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=)
                          14: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=)
                          15: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=)
                          16: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=)
                          17: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=)
                          18: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=)
                          19: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:24:aa:43:69:17:f3:80:ad:3f:c6:af:7f:2b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc
        Validity
            Not Before: Jan 25 08:01:32 2026 GMT
            Not After : Jan 26 08:01:32 2026 GMT
        Subject: CN=740fa68f9d35ae356e590a67f3d1d08e6bf2d1e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:10:45:53:a7:ae:82:c4:08:fa:1a:ac:25:26:
                    aa:20:78:37:6c:ec:5c:48:01:3e:26:24:f4:94:3d:
                    58:51:c3:93:f0:5b:67:65:a6:5c:83:20:92:96:70:
                    ef:80:ee:94:6c:79:2f:16:67:e6:e3:22:81:63:90:
                    29:67:e1:cc:9e:f7:09:37:46:15:ee:53:24:76:be:
                    f6:fe:86:f4:7b:ce:38:a1:60:b9:59:25:f4:2d:8f:
                    95:4a:78:fe:b6:2f:23:e5:77:ca:43:58:c3:86:12:
                    92:66:0a:b4:c0:59:14:3a:13:e5:d3:6b:00:86:84:
                    08:7d:8e:5f:c1:fa:e3:4b:44:22:ff:0c:12:ba:f7:
                    60:b3:6f:33:68:b3:34:4c:ad:f7:2b:7d:45:73:47:
                    1b:51:fc:ed:5b:cd:eb:9d:18:d0:c3:94:c1:41:cd:
                    2e:b7:81:ee:d0:87:96:a5:00:23:57:7f:b3:2f:92:
                    c5:0e:e5:86:20:02:97:e6:cd:00:c6:dd:f2:80:72:
                    b9:3c:b2:30:b3:4e:f2:12:bf:53:8f:1e:a7:55:92:
                    41:77:18:7e:b0:03:0d:d1:9e:b4:98:0c:be:fa:14:
                    f1:63:bb:ce:05:ff:f5:79:32:01:52:e7:cb:e0:bd:
                    90:30:ed:84:ee:16:42:dd:1f:e3:06:03:a6:ff:44:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:0F:A6:8F:9D:35:AE:35:6E:59:0A:67:F3:D1:D0:8E:6B:F2:D1:E0
            X509v3 Authority Key Identifier:
                keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:16:88:90:c4:7a:76:52:2b:61:0d:2c:98:10:5e:0a:fb:60:
         41:f2:98:57:8b:b8:40:3e:af:85:ea:69:14:50:a2:7d:2b:42:
         5d:27:71:b2:d2:c5:af:d8:83:c4:d5:cc:46:ff:b2:41:18:18:
         21:00:c6:32:d7:52:22:49:56:4d:38:53:cd:97:5a:be:93:f0:
         da:51:72:f3:dc:02:ed:2c:73:ae:81:d5:bf:e9:a2:6a:48:1b:
         b6:58:50:8b:ca:22:0d:5a:4a:4a:72:fd:39:8e:0a:a1:b4:54:
         b3:73:bd:ae:6e:a2:de:66:39:d5:7c:30:28:71:46:45:27:c6:
         0f:c6:ef:94:8e:30:92:4c:ad:39:73:4e:dd:ee:82:f2:91:38:
         e6:bd:40:e7:7c:85:b9:43:ca:ff:33:49:b2:71:c4:90:2f:d9:
         ef:d3:a5:af:7c:88:20:c8:31:ae:80:20:0a:47:32:3f:80:30:
         76:8c:db:58:4a:09:26:57:ee:c6:df:a1:37:3c:39:4a:c4:06:
         ba:62:3c:e5:2e:c6:d4:5f:80:80:00:ba:c7:b9:6d:93:fb:4b:
         a5:77:62:2a:3f:b8:40:cf:f6:5e:92:e0:ca:7c:06:a9:42:20:
         ff:aa:15:59:3e:5a:ff:8f:be:74:27:e9:ef:e5:06:97:0b:c6:
         cb:89:4d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:47:17 2026 by rpki-client