This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
File:                     xoxl5pm1dqsROnm-iCiUjx5swmA.mft (raw, json)
Hash identifier:          1QpzFpuYPsDijGGrIZ2wWxGN8dIfqOc9bGS4fo305q8=
Subject key identifier:   1E:47:BD:0C:77:26:E0:3B:5C:74:C0:FC:CC:D3:22:B9:B3:5E:18:7C
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Certificate issuer:       /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial:       019BF3F5430255C87D9D42D090DBD08C0D7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
Manifest number:          1803
Signing time:             Sun 25 Jan 2026 07:01:35 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:35 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:35 +0000
Files and hashes:         1: 2VGlQCljw9cFJl5EHzBeMDJwXVo.roa (hash: Do0oxRXzURqrwthzVRT/8OMjdF0dAGArF8nmDv/TCrU=)
                          2: Azzq-GPNmgEzF12yB55hFBGmQ5Y.roa (hash: gQCxAX0kGUP6fOqE0f4xg6Y7BKr1YkDG2KCm3PY3vks=)
                          3: ChcDyRnaAHF3OD9h8CZLxTYLnd0.roa (hash: 6ABtGMwyDO/6lM571vE9Iuqd9TQr+m5PP3ymm7KdDMo=)
                          4: FqgScginFUes_17Ndt6kdOrzAkA.roa (hash: a3G9kD/8P4BMkG64yuvOvu/MjxsZVk5qCgCtyW3lY6c=)
                          5: IsrXRGLVffEPsnHVbl_BeBHARaA.roa (hash: 2bYUOyrmy0HgRWN9bHIQfD3C31xnJN8Zzbysmp0r1Aw=)
                          6: T6pXE_xgE4WrCZgfLS6PwaHzerg.roa (hash: G4WSUskcjpTP61QhWQEI/av+RXa/41Ip20fNLeEJAoQ=)
                          7: VLiSP46DJX8Dog7Og_5_Z19OaAw.roa (hash: 3gWIgE8p9hzKRB2RaJcWZL2QSZhVwmUm6N+ESpdKpAQ=)
                          8: WzL_Le9qToZCW6aHE2N-2HuJYvQ.roa (hash: XiM6tnhPeoo8/I0UsVcX68fQNBFdvSj5FK8MxmFwo94=)
                          9: b_n3Z3GxujBB68-zb1vahju6Fp0.roa (hash: fBmej85zCOTwohAZSrZlJvl4CdYQMz+WBefO+9bGgMc=)
                          10: leefmemMjsnYBH_PRIls4mGDQQg.roa (hash: H8hE7idzBRzXS/SDOwJGlem7diQp5JTlS92HhAhqaHk=)
                          11: oSUSV9XksEu-hj7frAtIPDI4QUc.roa (hash: Ba7z9fv3oVKNrP/ZNMw28ZH2Y9v/Nbz2kHCWUqIYg+s=)
                          12: sVlG1_wshTtHh3K3-dmfU3V-ohU.roa (hash: bMT/BHfnv5hKh+kUsN5whSknK8wJI4XccjCUKzZX56c=)
                          13: xoxl5pm1dqsROnm-iCiUjx5swmA.crl (hash: Q/x8Vikt26l9NVdc5dK0NI4YiLhfmK/m3D3rre1nQLs=)
                          14: zGuXwu3v-M9bXZipAlRCLhWgY9Y.roa (hash: q3HTdT+bmIS7eJfWEweBp4+RgfhLQ35j5qT2Y42OjrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:43:02:55:c8:7d:9d:42:d0:90:db:d0:8c:0d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
        Validity
            Not Before: Jan 25 07:01:35 2026 GMT
            Not After : Jan 26 07:01:35 2026 GMT
        Subject: CN=1e47bd0c7726e03b5c74c0fcccd322b9b35e187c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:78:a7:68:f6:66:8f:6e:59:74:7c:95:08:54:
                    7b:f2:36:a9:43:a6:eb:25:75:cc:c8:8e:d8:2c:33:
                    79:52:17:14:72:c9:3a:4d:dc:ca:fb:dd:5d:1c:36:
                    88:c1:d7:9f:34:a5:17:8a:f8:53:72:0b:8a:b5:3b:
                    08:96:5f:53:49:62:ee:44:bd:75:20:85:7d:84:35:
                    22:cf:26:cc:98:47:92:6b:d2:00:ec:a1:eb:0b:f1:
                    b2:b2:4f:63:68:da:f3:a0:3f:fd:92:bf:2f:e3:96:
                    a0:7b:78:0b:e2:fd:a5:1a:4a:7f:16:c9:21:33:62:
                    8c:68:0e:dd:72:e3:5e:98:65:65:5a:8a:b5:54:d4:
                    39:b3:14:cc:3e:10:9a:d5:3e:5e:88:6d:6b:7b:c2:
                    f6:d6:cf:b3:96:0e:50:8f:fd:80:7e:46:31:4b:df:
                    e1:6a:8f:ab:82:33:7b:10:40:bf:5b:19:03:4f:27:
                    d6:3a:d9:44:c4:50:4d:ab:7c:81:78:84:14:3a:4c:
                    ee:ef:e8:03:b1:2c:07:01:f3:bf:c4:37:fd:50:92:
                    cd:96:4b:3f:fc:a7:d9:fb:d8:0b:00:19:10:db:c6:
                    4d:a4:fd:05:ce:38:ee:31:cf:40:df:77:e8:ad:4d:
                    42:21:d0:61:56:50:6e:07:e2:b6:42:ad:95:d2:d7:
                    84:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:BD:0C:77:26:E0:3B:5C:74:C0:FC:CC:D3:22:B9:B3:5E:18:7C
            X509v3 Authority Key Identifier:
                keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:0e:a6:34:a5:34:21:e9:0b:65:f0:e3:1b:60:f9:5c:cd:43:
         cd:0e:cf:45:67:d1:ec:90:32:a1:1c:8a:ae:36:34:b7:9e:dc:
         16:3e:1e:7b:d0:6b:cf:d5:7a:ac:a6:fa:74:67:9f:76:8a:39:
         a5:aa:d2:b1:59:a3:27:ae:6d:02:ef:75:60:51:01:de:c2:88:
         49:79:cd:29:c2:c6:cb:e2:f2:13:ef:86:2d:21:4c:91:4c:68:
         f9:98:70:bf:e7:68:f7:4a:07:aa:58:1a:ef:2c:d5:18:7c:64:
         9f:21:a7:9e:7c:15:e1:75:d2:bb:a2:96:01:41:68:52:70:e0:
         03:a3:5d:9d:5c:12:de:e5:5e:5a:a3:e3:34:15:10:71:c3:df:
         37:98:d1:e7:68:4d:92:40:c5:28:54:a0:6b:ce:be:bb:c1:c0:
         bb:3f:f7:e3:4c:26:33:80:a3:cc:d2:17:98:7d:8c:ca:1c:89:
         ab:1b:ab:9c:ff:d1:d1:94:07:96:12:95:46:18:e4:85:07:07:
         df:99:10:b6:91:d8:65:df:a8:34:36:b1:88:f1:c6:12:d6:48:
         de:90:43:9d:18:4c:cb:d4:5b:d7:50:bc:ca:b7:3c:dc:31:22:
         ad:d6:df:5f:a4:20:ed:47:48:e8:a0:cd:03:d9:e2:41:49:ce:
         29:72:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:35:12 2026 by rpki-client