This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
File:                     G58hugTl4wd7OR49SP9bClCzNp8.mft (raw, json)
Hash identifier:          o9FFKB00fXcJCtlqKEGOSkbwe3klcmfqMwrVS5L8ipw=
Subject key identifier:   2C:78:5A:F9:A1:D3:FD:4F:E2:EF:C0:28:B6:7F:5D:4B:8B:40:71:3C
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Certificate issuer:       /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial:       019BF3BE18F3BA3DD518230DD3525777A188
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
Manifest number:          0C1F
Signing time:             Sun 25 Jan 2026 06:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:20 +0000
Files and hashes:         1: 1EvV1vtb7xJaf2f3RQDJ0Ukuy8U.roa (hash: eC+mZscuKYFGh3jGSwYrM/zwgdkrzy7mnebI0W8HJjI=)
                          2: 1xyHsYNUFoJ-pAioaST7r-4iNoY.roa (hash: wxDqW3rd3N4FjlubcyoVvj1qY2eHpaWt4iZm04KnwmU=)
                          3: 8xyDaKXsDnV4pvSfD6Zi67leEh0.roa (hash: 1qsVMvOFnBXVT6ErwFRrHBk8i2fu6F56aLWn7B6Thbo=)
                          4: ArZg-qm8lEntEril04_eQVh-D58.roa (hash: 6ZG3jmP+1JYRU8rVmpDqUwMETM2Rl/USJi5tT1v2KOU=)
                          5: B7mKkJOQIDMNFDDRLxnggLv2QZ0.roa (hash: Mi1l3jAauhlk+iIu6HPrxpd0H99Ta8USVmSJWxkvFOc=)
                          6: FcpBxzBs-mUGpJZGFFeEKOoVc84.roa (hash: DdKbCIauyMh+ERMZDyRdDWbQHa/GNAQTeKFJAN9XkKI=)
                          7: G58hugTl4wd7OR49SP9bClCzNp8.crl (hash: 9b5FuPNREEF8ok9gjH7JgbgdjMYhkKEffWJa6bnKRgk=)
                          8: HEBMMFCN8-2lBFekdiQRcYWnvrg.roa (hash: snCaNhSPR2tWzl8KWki9lG1jT29WpUoT1k50wbz95JE=)
                          9: IPb5d35plrMJG2iIT309KL2lmj0.roa (hash: KRvF/nchRUjNO7qEjTuRMT/eoA6wApPgVHaxY0nL3kc=)
                          10: O7Gej2bS_5hKcBi8mcz3JmNEOSw.roa (hash: h9gK6E3GHEkt+S79YiKfgPJlXrJcrfRQGLu5O6pt61U=)
                          11: PfDqVJ2AuhPLDK1F25vWraX2zng.roa (hash: 8kYADqUwxwWR6TitwtDD0haDphbCu9nP+tkQXOwbbYg=)
                          12: TzcrPtQyygSQdE_9ZpW0U258FWA.roa (hash: XHB179G1NkuoxHUDA2RIeIaiHXV5LoFis8B7rN9rC4w=)
                          13: XMyxg50FUIvcPAmn3dgQAD2rX5A.roa (hash: p3P3/d+pjMB4dPGP7cLvPY1UtOYfXIrBb9Vr7UC3pqg=)
                          14: gp1wlgGo5vivn7gfDRwXZtwctws.roa (hash: KehzF0g+L+PNvyC/IBXZK4NamgKmadqbNbXSvh4706E=)
                          15: h-YKHLBpdlMPlGTD2x8ny3EBvoE.roa (hash: kaocMh2GRL2VpSQbIazDPnOu2/38Foo0BooOmaJVLx8=)
                          16: iJAh4MzVUxgXIicmX1BF9DyiVJc.roa (hash: i5znTUbRnDwQdx+fd6qQhbrZflv2THSPw2LRl2jp6kY=)
                          17: jTk2ghaEMDC7CYJ_QaO8Kuls2VI.roa (hash: wXuTm3VvMxF7Fy+o/HgTRq0XIiaxh+LU1Nqi3XYzQ+w=)
                          18: la8gZB1qceC66CXnaIMpn1d6kfk.roa (hash: JvuyiLdyaWhi31x9Fsi4BLtHOme+Sv8lI2ldqt6pCN4=)
                          19: rpVmcRWK9Zhy_VaIn_bvOzXSQ6k.roa (hash: ZuY1ZDdDENsieUHmA5f7BeysqfqkQXy2jQwGzKSjHsE=)
                          20: sv4FoJpHxihbjQVOHGih_J_ffUs.roa (hash: aDxEXYa4qCra57+aM/aAUjJp5FE00bEh1/avX6X6ENQ=)
                          21: utnxuCdQ1PAwYtBIQdlWNiNR4Uc.roa (hash: 4Zxs7imh2v9OypwWBLyvUBMlzHoY/4pgzfFtHfz7Sbw=)
                          22: xJPb4f4rCehz8TLUSv0N6n8_MiE.roa (hash: MEW0AHLyPDoZAygBiCZTzYIaCJijNL4VVMa21hRooaY=)
                          23: zrpx2qONMlsehUMBf0ui700KaQs.roa (hash: rQCz92YTBiLjMsPmrkI3y1kzmH/U/hqwcfTTPZ9f40I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:be:18:f3:ba:3d:d5:18:23:0d:d3:52:57:77:a1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
        Validity
            Not Before: Jan 25 06:01:20 2026 GMT
            Not After : Jan 26 06:01:20 2026 GMT
        Subject: CN=2c785af9a1d3fd4fe2efc028b67f5d4b8b40713c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:59:6e:75:c3:60:7e:5d:13:51:c8:05:2d:6d:
                    9b:75:02:cf:16:02:65:e7:6d:04:d2:48:12:6d:56:
                    c4:03:38:c0:8a:d8:cb:47:d7:d1:12:9a:0d:61:b2:
                    ce:ee:62:cc:40:16:67:85:0a:d1:84:7c:ae:7d:fa:
                    49:97:eb:28:96:36:1b:7f:ed:57:5a:21:77:a4:29:
                    ff:2e:e9:4b:0a:4c:c3:42:44:83:8f:5e:c2:8c:1a:
                    16:13:c6:5e:f0:dd:0c:4c:9b:ca:19:f9:e3:bc:e4:
                    75:1d:5e:5d:e9:5b:a9:c3:21:be:dd:c0:db:7e:d1:
                    24:0a:fa:5f:71:55:18:5f:4a:31:44:7b:1e:7b:bd:
                    e8:63:4b:37:ac:ab:92:8e:a7:0e:3e:2c:b0:d1:7a:
                    59:cf:2e:97:fe:2e:56:8d:6a:e9:ea:ee:f8:65:f1:
                    3f:7e:6f:46:00:4c:02:5f:3e:51:8f:24:03:d9:e5:
                    b0:19:44:d9:d8:d7:5c:96:83:3a:57:2d:3a:fa:07:
                    14:9c:24:c5:6a:02:96:ab:b5:af:6a:85:42:fa:53:
                    a5:0e:a4:41:cc:82:c4:a2:df:96:6a:b9:e5:cd:ea:
                    94:9f:d9:12:74:d4:55:60:21:25:2f:74:63:e6:0d:
                    52:d3:27:6d:d0:91:8b:a6:47:ab:54:91:1b:6c:e7:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:78:5A:F9:A1:D3:FD:4F:E2:EF:C0:28:B6:7F:5D:4B:8B:40:71:3C
            X509v3 Authority Key Identifier:
                keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:9b:4e:ee:2f:44:51:e9:db:56:05:09:4f:7a:26:f2:d8:69:
         de:b7:eb:40:a5:af:77:a2:24:fe:f0:76:71:28:14:a6:6a:27:
         c2:a9:25:20:d5:b2:a1:e8:6f:4d:d0:89:c8:c4:10:00:2e:18:
         94:86:d1:ae:6d:ac:31:33:e1:a3:03:44:fc:d9:3b:7d:95:c5:
         7b:09:c6:72:31:d4:ab:f3:ac:7c:a0:09:d7:a2:08:74:62:f9:
         1b:05:13:8e:e6:ce:d5:bc:22:0f:b5:aa:e8:ac:4e:22:e4:e7:
         08:7a:4a:c3:55:7a:f3:ea:63:ce:a1:b4:8c:68:ea:0e:d3:5b:
         7d:a9:ec:b3:1a:2a:87:d1:0e:f4:d1:61:4e:1e:a1:94:fc:01:
         10:41:61:31:c2:c3:98:fd:ca:9f:e4:81:5e:3f:81:e1:45:ec:
         be:8c:02:01:ef:f8:00:e2:d5:62:21:da:e9:22:db:0f:50:d3:
         64:71:25:1d:cc:7d:18:95:27:82:dc:a2:6e:1e:20:e4:13:89:
         8c:48:dc:2c:28:19:df:29:f1:dd:da:12:e5:36:09:a9:63:e6:
         f5:0c:be:19:86:f4:3d:e4:f6:9e:01:8e:89:f5:84:5f:57:d7:
         37:2d:7b:7e:f3:31:e4:9a:54:e6:a9:42:54:94:dc:4a:0a:9a:
         c6:89:87:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzvhjzuj3VGCMN01JXd6GIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOWYyMWJhMDRlNWUzMDc3YjM5MWUzZDQ4ZmY1YjBhNTBi
MzM2OWYwHhcNMjYwMTI1MDYwMTIwWhcNMjYwMTI2MDYwMTIwWjAzMTEwLwYDVQQD
EygyYzc4NWFmOWExZDNmZDRmZTJlZmMwMjhiNjdmNWQ0YjhiNDA3MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FludcNgfl0TUcgFLW2bdQLPFgJl
520E0kgSbVbEAzjAitjLR9fREpoNYbLO7mLMQBZnhQrRhHyuffpJl+soljYbf+1X
WiF3pCn/LulLCkzDQkSDj17CjBoWE8Ze8N0MTJvKGfnjvOR1HV5d6VupwyG+3cDb
ftEkCvpfcVUYX0oxRHsee73oY0s3rKuSjqcOPiyw0XpZzy6X/i5WjWrp6u74ZfE/
fm9GAEwCXz5RjyQD2eWwGUTZ2NdcloM6Vy06+gcUnCTFagKWq7WvaoVC+lOlDqRB
zILEot+WarnlzeqUn9kSdNRVYCElL3Rj5g1S0ydt0JGLpkerVJEbbOchJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCx4Wvmh0/1P4u/AKLZ/XUuLQHE8MB8GA1UdIwQY
MBaAFBufIboE5eMHezkePUj/WwpQszafMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUt
ZjUxYzVmYjNkZjlhLzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9mNjdhNzgtMTgzZC00OTRhLTk5NWUtZjUxYzVmYjNkZjlh
LzEvRzU4aHVnVGw0d2Q3T1I0OVNQOWJDbEN6TnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZtO7i9E
UenbVgUJT3om8thp3rfrQKWvd6Ik/vB2cSgUpmonwqklINWyoehvTdCJyMQQAC4Y
lIbRrm2sMTPhowNE/Nk7fZXFewnGcjHUq/OsfKAJ16IIdGL5GwUTjubO1bwiD7Wq
6KxOIuTnCHpKw1V68+pjzqG0jGjqDtNbfanssxoqh9EO9NFhTh6hlPwBEEFhMcLD
mP3Kn+SBXj+B4UXsvowCAe/4AOLVYiHa6SLbD1DTZHElHcx9GJUngtyibh4g5BOJ
jEjcLCgZ3ynx3doS5TYJqWPm9Qy+GYb0PeT2ngGOifWEX1fXNy17fvMx5JpU5qlC
VJTcSgqaxomH4Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:49 2026 by rpki-client