This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
File:                     0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json)
Hash identifier:          8+o8gP2BIQlPJI4oJK56IPLuUdHKeaSvG8nkcxEZ+/Y=
Subject key identifier:   27:68:47:B4:CE:03:D3:0E:71:1D:3A:49:EF:61:F8:B8:4E:EC:E8:85
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       019BF42BFBC1575144B45D901F5313AEC14E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
Manifest number:          1883
Signing time:             Sun 25 Jan 2026 08:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:21 +0000
Files and hashes:         1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: bQsAQyh7Gbxy6erDdGwDnYOjQ6lcfNuPMTi6ke+MUP0=)
                          2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=)
                          3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=)
                          4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=)
                          5: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=)
                          6: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=)
                          7: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=)
                          8: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=)
                          9: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=)
                          10: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=)
                          11: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=)
                          12: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=)
                          13: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=)
                          14: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=)
                          15: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=)
                          16: KE8wPpi49xiO7rZJQ7uhlqOLLHw.roa (hash: 2TxPIJ9ZSPXuWkn0jdm0N4HJMJsSy4jeH/o6WF6Nqr8=)
                          17: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=)
                          18: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=)
                          19: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=)
                          20: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=)
                          21: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=)
                          22: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=)
                          23: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=)
                          24: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=)
                          25: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=)
                          26: e7ZRCUtIh9dNd1c2dQgbzZ1PkIE.roa (hash: ola1jxgSJVggUzsMIQQgKUN+JxfJCKNy5d2i98vKYBs=)
                          27: fEH6GXoroSfAEDj0z55rGNitKMU.roa (hash: Zmq+V4G0nlMIUgVrJqMNAD4Dj5EQvHd5LCZ6hw/cQJg=)
                          28: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=)
                          29: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=)
                          30: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=)
                          31: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=)
                          32: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=)
                          33: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=)
                          34: t4VzSYm8jZxHXra8a1gQU_oCZrg.roa (hash: nhJnac8mfQfMue/8D0r8n0jxVEck6bnRlVwo/77WvNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:fb:c1:57:51:44:b4:5d:90:1f:53:13:ae:c1:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan 25 08:01:21 2026 GMT
            Not After : Jan 26 08:01:21 2026 GMT
        Subject: CN=276847b4ce03d30e711d3a49ef61f8b84eece885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:0c:1c:f5:f8:25:fe:66:0d:ed:2c:6d:90:ba:
                    28:bd:1e:c5:00:75:54:3b:7f:fc:97:42:6b:04:2b:
                    9f:84:9a:1b:51:98:11:cc:65:c6:f8:7e:b3:b3:13:
                    91:79:9f:32:a1:a6:32:0e:46:80:8d:79:da:c7:1d:
                    fd:58:d4:55:86:35:6a:c5:64:b5:67:af:83:33:9b:
                    38:7c:17:0c:88:9d:cb:06:8b:d3:6f:fd:d7:6f:79:
                    f2:53:ed:47:e2:dd:92:ee:04:00:b2:bc:56:76:74:
                    e1:94:f3:5f:17:a0:c4:75:ee:c8:f9:60:35:3b:08:
                    2c:a9:97:5b:11:c4:90:7b:63:b1:59:b0:f4:58:f0:
                    30:5b:11:85:b7:9e:70:8e:a8:c2:7d:3c:3c:d0:f0:
                    5b:62:58:63:eb:e7:a0:a3:57:fa:45:0e:01:0f:d7:
                    c0:f9:ad:6b:29:5e:9f:04:d5:01:1d:e5:37:31:c1:
                    d0:b5:68:80:07:63:df:e7:b7:46:cc:94:e5:dd:e4:
                    03:d1:a2:1f:81:9b:e8:0c:e5:4b:2d:93:e1:0c:cd:
                    d8:a7:67:cd:15:c5:83:4a:17:98:4a:80:f1:a9:2d:
                    be:38:31:aa:c2:71:a9:18:bc:d2:f6:e6:89:d8:2f:
                    f9:0b:f9:95:14:0b:5f:be:57:1a:8b:6a:63:58:ee:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:68:47:B4:CE:03:D3:0E:71:1D:3A:49:EF:61:F8:B8:4E:EC:E8:85
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d3:0f:ae:be:5c:87:7c:e9:f5:e0:cf:81:c5:b8:6e:12:a5:
         d0:fc:7c:6a:be:ea:fe:14:f5:12:82:32:e8:60:cd:14:be:80:
         c1:2d:63:69:80:b4:a2:de:bd:e1:02:4b:c4:d0:4f:a6:6a:d9:
         d8:4d:b0:69:48:59:83:0e:9d:d1:a0:9c:10:d1:a7:17:b1:57:
         4a:be:d9:81:7d:73:b5:f9:af:a4:1f:5e:fd:b2:2a:4d:4d:c5:
         6f:4f:4e:4f:bc:6b:70:c1:d1:6f:84:61:60:80:16:0f:20:54:
         f9:d1:f7:89:a4:1e:d2:02:35:e8:91:6e:d9:2d:a7:7a:47:28:
         da:75:4f:e3:9d:f9:ed:4c:8d:2b:99:b5:d0:fe:13:ee:11:75:
         5f:5f:5f:db:45:09:2f:ab:2a:de:42:6e:3e:b5:a7:3d:9f:98:
         ba:17:bd:b6:80:bf:05:7e:9a:c3:c7:57:0a:82:15:f0:af:e8:
         3a:2f:e2:52:21:5c:99:7a:2a:ad:6d:00:de:d9:a7:3d:cf:a5:
         22:1a:d7:68:dc:42:98:3d:a3:38:f1:e7:3b:e2:db:5d:db:b2:
         cf:f4:25:cb:b2:94:7a:6a:58:a8:96:63:fb:30:0c:49:3f:66:
         2f:5d:e4:e8:28:d8:2e:cc:34:ce:0e:e3:da:a2:8c:b0:3b:71:
         fd:92:40:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----