This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
File:                     l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json)
Hash identifier:          udlLjf19j8j54mNcSb3tZfTVSAQlkfguHuJ5iNO0QBY=
Subject key identifier:   DF:6F:13:5B:02:E5:A4:BB:97:BA:AB:2B:7F:B7:61:28:86:AD:F2:64
Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF
Certificate issuer:       /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
Certificate serial:       019BF3509E207C6927844C71B7D98B7D4147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
Manifest number:          15E1
Signing time:             Sun 25 Jan 2026 04:01:45 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:45 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:45 +0000
Files and hashes:         1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=)
                          2: A_tEVik7EkSJhTC7T2FJIfD4hWE.asa (hash: 68EPop8TjMmm4peaii/vw95NHeqqlpJpXRJzZBSJs7g=)
                          3: DdZL2Ei2USqI1D8JQatISOxbCY0.roa (hash: A+x4OgPFDFV1yfcXqtt93yKXONOhfjjQIV2HOaMfwnQ=)
                          4: H2Gc0qKN46gAjUldVFBNpV93Xk4.asa (hash: KSarBkAjc6GXQsV+kmM1pcYpqDoYggEF4OpcfqU5XxI=)
                          5: HOso74W1VokYtKvyq7cUzsjtneE.asa (hash: XkgHTIUgOHbFT9e9eq8+M1TVv1ndaqq7zAajOmv3wN8=)
                          6: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=)
                          7: RatTcANG4U3IM7MOV2hXua2pFMs.asa (hash: USM3oAd7uLAkywhJUjv79wjdyCIZfb2jA72kwTjAHbY=)
                          8: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=)
                          9: b-VQSWuLpLV93gdEDV9Lftl-uXw.asa (hash: Em1YerFm1QMulEXhz/0NYeLEV5IMD8Fh+85COdjHx64=)
                          10: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=)
                          11: cszYTkQVDcY76z8Av8ncweFdHcQ.asa (hash: xNxgKjmWZqB0F8LoHh9M3iOQxo1YlNVcpRWSs0jkU1w=)
                          12: fU0ZQGxEIbYd-Y96okGNTpozeFs.asa (hash: sffo6lZCXVJqfJc7Hp2QR59SPfkJdF9crEZwTQ2dkII=)
                          13: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=)
                          14: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: gcuEs+visGE9uLQiasuRgDRQiNid2AIS41KNYFkmvbk=)
                          15: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=)
                          16: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=)
                          17: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=)
                          18: zdQE3nljteAvytR7FrZorPU0jyc.asa (hash: 7eznpWbdCzFgvZgA9g8kyOLAHMzeIfPZoCln8oZBAvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:9e:20:7c:69:27:84:4c:71:b7:d9:8b:7d:41:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf
        Validity
            Not Before: Jan 25 04:01:45 2026 GMT
            Not After : Jan 26 04:01:45 2026 GMT
        Subject: CN=df6f135b02e5a4bb97baab2b7fb7612886adf264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f4:29:8c:de:81:40:87:3c:39:71:72:81:4c:
                    f8:36:d5:54:2c:19:0a:d2:2f:4f:64:0a:a5:34:b2:
                    9d:77:d6:90:e3:62:44:2a:16:f1:e9:a1:68:f4:2f:
                    b0:be:ae:da:6e:b9:47:e1:32:9b:9d:2b:d2:02:41:
                    f8:3b:43:f3:05:3b:92:7d:53:cf:ff:00:c6:2a:a1:
                    5b:0f:36:12:95:42:eb:a2:ec:20:04:8b:da:8e:a9:
                    ee:29:8b:cb:18:fe:30:e8:03:14:d5:0a:6f:0a:0e:
                    20:3a:b7:84:9c:f3:eb:0f:7a:4a:ff:ee:57:9b:5a:
                    f2:10:d2:a3:59:22:e5:bb:8c:87:0b:c3:5a:99:ff:
                    f1:58:ff:76:94:cb:1c:fc:00:2c:e6:16:a8:17:c2:
                    83:f3:0d:bb:b2:c6:ed:3f:80:60:3e:df:b8:48:10:
                    be:6e:30:04:24:ad:73:5d:25:ca:fd:69:7c:e6:97:
                    98:ea:c1:4c:5b:ed:c9:a5:b1:45:7e:66:c9:74:c8:
                    d4:af:5a:34:0a:18:61:81:a7:50:06:50:e8:06:bc:
                    f9:bc:34:d0:d7:2b:d6:e9:f8:05:0e:a6:d3:64:29:
                    b9:5b:7c:84:df:d3:58:ea:b9:2f:30:a6:d3:e8:f6:
                    a2:a5:19:36:88:bc:b0:cd:fc:81:29:28:3c:38:03:
                    5b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:6F:13:5B:02:E5:A4:BB:97:BA:AB:2B:7F:B7:61:28:86:AD:F2:64
            X509v3 Authority Key Identifier:
                keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8e:41:69:55:73:bb:88:34:14:e1:d0:9a:c2:6f:bf:68:eb:
         88:4c:80:47:83:94:88:3a:bc:7a:5b:d3:f7:20:d2:54:a1:42:
         f6:a3:e4:be:77:19:1f:9c:1a:1c:1c:b3:b0:e5:4d:58:89:29:
         0f:6f:19:b9:88:27:c3:aa:85:21:7d:31:8f:41:9b:c0:5d:ff:
         0b:2c:49:d8:d8:1d:80:89:18:ca:00:d0:d8:9e:50:64:8f:68:
         7b:48:21:c4:c8:26:95:3d:cf:96:9a:8d:b7:d2:dc:f3:c7:3d:
         35:3c:c1:70:35:7b:68:b8:92:0d:ba:40:7f:26:61:a3:80:4c:
         b7:f9:c6:7d:32:09:df:f1:04:fd:60:fa:87:69:f2:20:fe:4c:
         c0:7c:68:01:05:ad:77:8a:3c:4c:e5:b5:8e:51:5a:1c:f7:e9:
         c5:06:de:ac:21:30:c9:46:56:b4:4c:ed:75:08:84:b5:11:25:
         d7:9b:b3:71:b8:b5:75:b9:71:0a:08:70:dc:d3:28:49:e7:03:
         79:f0:d0:ba:18:7b:73:3d:9a:f8:66:f1:bd:52:1d:e3:4b:7e:
         1f:de:09:68:7c:8e:09:db:ac:da:a9:b0:b8:89:32:dc:a0:47:
         29:80:9f:aa:b7:b2:ee:ec:f1:f9:70:1f:3e:8f:fc:71:97:7d:
         41:2d:20:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUJ4gfGknhExxt9mLfUFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi
NjMwYmYwHhcNMjYwMTI1MDQwMTQ1WhcNMjYwMTI2MDQwMTQ1WjAzMTEwLwYDVQQD
EyhkZjZmMTM1YjAyZTVhNGJiOTdiYWFiMmI3ZmI3NjEyODg2YWRmMjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QpjN6BQIc8OXFygUz4NtVULBkK
0i9PZAqlNLKdd9aQ42JEKhbx6aFo9C+wvq7abrlH4TKbnSvSAkH4O0PzBTuSfVPP
/wDGKqFbDzYSlULrouwgBIvajqnuKYvLGP4w6AMU1QpvCg4gOreEnPPrD3pK/+5X
m1ryENKjWSLlu4yHC8Namf/xWP92lMsc/AAs5haoF8KD8w27ssbtP4BgPt+4SBC+
bjAEJK1zXSXK/Wl85peY6sFMW+3JpbFFfmbJdMjUr1o0ChhhgadQBlDoBrz5vDTQ
1yvW6fgFDqbTZCm5W3yE39NY6rkvMKbT6PaipRk2iLywzfyBKSg8OANb7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9vE1sC5aS7l7qrK3+3YSiGrfJkMB8GA1UdIwQY
MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt
MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy
LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqI5BaVVz
u4g0FOHQmsJvv2jriEyAR4OUiDq8elvT9yDSVKFC9qPkvncZH5waHByzsOVNWIkp
D28ZuYgnw6qFIX0xj0GbwF3/CyxJ2NgdgIkYygDQ2J5QZI9oe0ghxMgmlT3PlpqN
t9Lc88c9NTzBcDV7aLiSDbpAfyZho4BMt/nGfTIJ3/EE/WD6h2nyIP5MwHxoAQWt
d4o8TOW1jlFaHPfpxQberCEwyUZWtEztdQiEtREl15uzcbi1dblxCghw3NMoSecD
efDQuhh7cz2a+GbxvVId40t+H94JaHyOCdus2qmwuIky3KBHKYCfqrey7uzx+XAf
Po/8cZd9QS0g8Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:37:50 2026 by rpki-client