This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
File:                     BR8pRi56fafrX0XaeHPxTkA_46s.mft (raw, json)
Hash identifier:          fAI2GuwzQjihM7XPpr3QPHuBzuqvPoSAxhK709HAxi4=
Subject key identifier:   7E:F9:63:F8:36:16:CA:E8:49:B7:1C:62:C2:17:B9:CF:BD:C1:02:03
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Certificate issuer:       /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial:       019BF5AC089231D4BCC0EEF24A6A0387668F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
Manifest number:          040D
Signing time:             Sun 25 Jan 2026 15:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:50 +0000
Files and hashes:         1: 1-TF_DNYPytFCDM9ob70FwezU19M.roa (hash: d02a+8r6UEOH7tUcT4ldHX7Qn837ccWleqSz8aMVP1Y=)
                          2: 1-kAeRcYs8N834iNDMDprOqJ8Dbg.roa (hash: JGYkH4jrc0W9U8ZV3mJqPcgKRn06DtzcgGerdHLNLUc=)
                          3: 5n2b9maD-WKBvGsJL4HCi6NMYJI.roa (hash: Nn5OtfAxQwpd29OmMbi7586ulW0AdmiqrnApRdvkbGg=)
                          4: 8JBVMlgJrEeMkQUmPSoIQ2RUnn4.roa (hash: VZnlb0yKuhiG0Ts3EoKkO1PeRAsc+rIKQY3PrkAaF7E=)
                          5: 9EjUnibhEJq5bLfdbGt92aCmGYY.roa (hash: DnS2jnsGqE15sINmHwk3fDd3mcW2MTDLdlWaO67YF34=)
                          6: 9LQRctI2YftbEKVnyItaOOy3d_M.roa (hash: pgk2Inrux/7lL/EYb6kKY+A+qh5ghGB3qij7g35sOh8=)
                          7: A1bQAOXZNhA4xD0DYsbXMY1DEE4.roa (hash: eGOJmOh8umGTdfiUy3BddRThCQh7xj1QJBNZ6Dmw0So=)
                          8: BR8pRi56fafrX0XaeHPxTkA_46s.crl (hash: 6ue6iA22fYVHA7xnsfsocyILeHEcYqdJ6rUQADjmfTA=)
                          9: FS2smUh78VcAx1pJo864e-lr3gI.roa (hash: mixZibFB0hFz56z+JYqSccSF9Jdi9meBEB5gjBMrGmw=)
                          10: GyzajySXFNptPE7l10xphbAf9qs.roa (hash: VEbjGiU3gcrEFTJiy6XlNzZm8FBAw6pBZ84W77N6V9E=)
                          11: HUfPguDLv61FjwhE83RjHvo6SG0.roa (hash: TVSqZsAvt2m9gNwVr8IK6jrYRpSQJdNbVnyELUQDzIY=)
                          12: HvvYce2lyVlZo0K5qONasUupbiM.roa (hash: kk/JmVvld/s18l7uimHCEPJ58RJkP9Sl4O6TUSKa5vQ=)
                          13: HyAI8oS_M9RrtnBFX4mgVsfZ3EI.roa (hash: tOuIfCuuSHHG5cx/angD7pz9vkeVH3Nbhnif6O6zKS8=)
                          14: J_dwoac2_h9_W-5D3aMWAkrgLHg.roa (hash: SCIAKzIm+vtezURZIxJ2QGlLa7UQxEem2JdisgUb7+M=)
                          15: LEC1offLjwJrFzx8Dpv7xkLNEyg.roa (hash: dFznU7yxG8+kgv1O/dEk2D3HMFQlxv6V3RwD+q16duc=)
                          16: LOsKKPB0HhM0tMDj5Xy2Likr-Mg.roa (hash: V2v+4vi1fkAuP3HFSTiQqZk5Ych9yvJZ2q3KENPbMwg=)
                          17: MxXFFNbnKeVGQoJUUSPIFAh3HFE.roa (hash: jJ9eXrKVZallfBng8qzQIoukBNtwZT2XORL8UeAPSWU=)
                          18: ON_ctMOAUZaapm2VNE4MUGlm5s0.roa (hash: 4OAfdVogeIliIwtkxx+7QSj3X/gCNixWQKVjGlrxtEc=)
                          19: QKCRwXV0KlqGb8GAJmYwpUO-0EA.roa (hash: Rr+NwshtCQpa7LHQuWVgydY+wZTnKwGAZ6E2PxjHpcw=)
                          20: SVPLS2ubDGmz996fszQp7r_8WjM.roa (hash: zb6o8Pz5mahpV7VTvHHDSV5gjebzFr1Ex6x7GDwi1/I=)
                          21: VkW9wv564hDafmgem7iN4Pq0eg0.roa (hash: rHiCzFG5HzMXM3bkuQnCSkoGdPunuITBDMRZQXzh+hU=)
                          22: XBrtcFkYFYn1d8wOUs-MH4MggIg.roa (hash: 3la0XwUD6TEcGr6MZx4dbGc7QsVb0VebdIcmX6590Pg=)
                          23: Xb1Ypft5Y54bcYQ8b79qIwrScbE.roa (hash: Ptw9WulLvCzzd5LJ241CpZZU4h4IU0B2dm9/idnoGHM=)
                          24: XcMHnxKZY2e5dQr9lhfnKoyrzgg.roa (hash: uL7kMGiEjQGkL0k1PwdcqBNO3gC59+oxrHmDwgqaEOM=)
                          25: YB5-PVFC4-1M_27aTkD19hw9m_E.roa (hash: GP+RmSVrQepJPKNkXbeY0l/FXQ7OQNxujEOGXoYX2Ug=)
                          26: ZDi90lCOoT-neW4pUMgJFdXU8PI.roa (hash: azZat8GbEZpHjBhSI2j6PNAQyebDIp1fU7Eg9y7wZrs=)
                          27: apcs4_oanmR8NCDusffG9AvEfsM.roa (hash: sHeaDVArieWiT+UWIxgi2mojPq8GGVCZyBNdboptcLo=)
                          28: ci0ptYRrl3soT0-X9BF8_u2tuDM.roa (hash: JO6OUsm1lQx/mMSgHEn0FT4Fg0+OMrrpuHf6e9wSXno=)
                          29: eY-jbaTO9qAMmUNm2U_mUvD9oXw.roa (hash: DE4ibWon9YTdJq0az/Rzpdn4yRH/8+IxBFpWlTJrvso=)
                          30: fay_KIPQYeRk21dJN7RLGfTf3ig.roa (hash: rgA8dGwQgdG2uChHAnDIz4pqzfnVDZx8vl1RsRoyjNc=)
                          31: fq4Ew_A_fioISiNqHSgmJitAwlY.roa (hash: I1TA5DBYGE2CE9MFt2QJJ+Lh1L2n39xQZ1WwsXssVQ0=)
                          32: gpt4tsVlr92QGxcr1kp4hk9GZLk.roa (hash: ynZtdfE+YEDV/1HH49Virb4Hc0ZG8v+eXOdK/wc+KcU=)
                          33: kqwgQwpaGv-qjbJtnBbAhvql_1M.roa (hash: IaMnuVL7JGmrqGqpSLQSd14hY/SD7WineiRtNHWYaGI=)
                          34: oK-l_3d_vcNuFOm12ibmb0cbNHs.roa (hash: lVkSdNlZrQRcuVVCpchBeA9OcY08H6oNlvysY5acQSI=)
                          35: ogG7djAUZ8yRMRdAyuw_W5nzzh8.roa (hash: 1t+gbYROFrlM9v5CjlELwyTvLHT7IFgBhc/IPtaYyfY=)
                          36: wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa (hash: PlqJyT9jtqG0tUJWI/AH+Gyp3H4OOPzXZR3URdxEA3U=)
                          37: ybFM2VhDt-PJfuRiqUD4GxYaaCg.roa (hash: RDvUS8pHVizW8pmNMU1sdXDcvQ1oYZCPSqetmqO0J8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:08:92:31:d4:bc:c0:ee:f2:4a:6a:03:87:66:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
        Validity
            Not Before: Jan 25 15:00:50 2026 GMT
            Not After : Jan 26 15:00:50 2026 GMT
        Subject: CN=7ef963f83616cae849b71c62c217b9cfbdc10203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:20:82:6a:6d:b4:e8:a5:b3:e0:f0:07:d3:2f:
                    c6:7d:25:0d:ae:3c:94:12:9d:a9:7a:11:91:d5:a5:
                    41:1d:85:5c:e8:30:f6:32:3a:9b:3a:0e:0c:d6:9e:
                    bd:d6:36:71:2e:d6:8a:2f:6c:c4:96:9c:ac:4a:60:
                    6b:fc:44:51:9b:04:f4:bc:6b:dc:07:13:bf:9e:c0:
                    a3:64:f0:18:d1:97:f5:64:72:c8:de:2d:93:3c:91:
                    c7:d8:78:3e:f2:20:4e:ba:8c:ac:1c:db:7b:16:6e:
                    f8:05:fd:4d:8b:a8:d9:ad:96:96:ec:76:bc:b2:8d:
                    da:3a:ab:65:ca:fa:a7:2c:47:da:7c:7e:db:de:7a:
                    ff:e2:1a:fb:35:2c:b6:5e:3e:aa:01:9c:70:42:7c:
                    43:04:15:f2:3c:c9:96:4d:65:43:7c:73:df:1a:05:
                    e1:4f:70:c9:5e:16:20:63:be:5e:4d:88:0d:93:35:
                    99:ed:50:ae:38:07:2e:a1:f3:ea:71:af:5d:3a:8c:
                    9c:de:76:f3:93:a3:0a:a8:fb:19:d6:ea:cf:c1:ad:
                    36:33:a7:08:f2:11:5f:86:09:01:ae:d0:1a:37:cd:
                    cb:50:af:ef:9c:3f:77:a4:1b:b2:20:0c:f0:9a:c7:
                    78:57:dc:8f:e9:db:27:bd:25:eb:7b:f1:9e:0d:ad:
                    48:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:63:F8:36:16:CA:E8:49:B7:1C:62:C2:17:B9:CF:BD:C1:02:03
            X509v3 Authority Key Identifier:
                keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:2e:aa:bf:97:91:7e:ee:24:71:18:5e:e3:27:47:15:56:28:
         1c:ba:e0:ba:9c:b8:57:d2:62:22:58:85:b4:a4:ed:d1:a3:27:
         e3:54:75:1f:e3:ba:0a:4d:a9:f2:0e:50:23:76:cd:af:ee:8d:
         73:fc:06:bf:d3:3e:7c:19:77:44:14:6a:d3:9c:09:22:b4:13:
         31:72:59:76:9f:3b:5d:77:a0:ea:3c:77:90:66:3f:87:27:53:
         72:ff:88:b9:5c:41:e5:f2:09:da:a8:a8:77:e7:9e:a1:d9:6e:
         80:e8:e1:ef:e9:1a:51:9d:dd:63:f1:55:59:50:be:85:d1:b2:
         db:5d:cb:7e:3e:54:c8:8b:77:14:ad:15:fd:1c:ae:2c:f4:d3:
         ab:10:55:cf:ef:06:e0:2c:e5:bc:80:6b:f8:07:91:8f:2f:65:
         5a:d7:53:0f:58:b9:41:e8:94:d4:24:b5:ec:68:a1:2b:ea:d1:
         d3:c3:0c:0b:ca:6d:d7:dc:c2:07:a4:ad:00:a1:2e:c9:f8:1d:
         27:e0:04:bf:10:68:4c:96:b4:ff:ee:9e:a1:69:b9:db:54:b3:
         5a:58:41:b6:c2:76:ed:ab:aa:49:cd:53:e9:20:28:3a:59:05:
         53:2b:45:c3:8f:c6:ab:c8:1b:b8:50:c2:39:73:aa:64:df:c3:
         21:33:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:07:35 2026 by rpki-client