This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          mLDmObzPGV67/DaBjYoFUrVnef1+LR3EBN4oFGczmm8=
Subject key identifier:   B6:16:8F:2D:DF:A7:E2:61:8D:47:07:46:C6:D9:FD:F8:C1:2A:3B:19
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019BF462DED5E7937071961CCFE92C0C2AA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          17FD
Signing time:             Sun 25 Jan 2026 09:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:18 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          9: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: zrTGQGMz2EMc2IS//YYTBExOqRsNSXHYTIb4V0rztQ0=)
                          10: V9xlTmLwNKweV-zsTwryoAjMjQE.roa (hash: LIOx8KKkz2konfrXlfZi+6hVeDXTVaCFSb7b61C2Cs4=)
                          11: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          12: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          13: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:de:d5:e7:93:70:71:96:1c:cf:e9:2c:0c:2a:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jan 25 09:01:18 2026 GMT
            Not After : Jan 26 09:01:18 2026 GMT
        Subject: CN=b6168f2ddfa7e2618d470746c6d9fdf8c12a3b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ae:36:93:6b:66:09:70:60:8e:b6:fd:e4:b1:
                    2a:28:c3:13:1c:ed:1a:af:5d:ed:59:6d:f9:5b:88:
                    27:a2:26:49:aa:61:7a:2b:38:ba:3e:d8:83:15:4d:
                    70:be:94:a7:0e:f3:24:1f:31:bd:7a:15:20:88:32:
                    27:24:c2:53:91:cd:0f:a3:5e:33:00:ed:8b:1b:ef:
                    13:75:c6:79:83:68:c0:e2:7e:a3:29:f2:38:6d:6c:
                    26:c0:08:48:27:e3:98:14:8c:43:58:49:fd:7e:b3:
                    c1:be:f6:6f:eb:33:9b:b0:9e:22:0a:62:a7:a6:91:
                    0d:4d:f7:09:65:df:03:84:89:2e:2a:01:b4:9f:80:
                    c6:ea:f1:50:93:97:b2:d7:8e:b3:48:9e:1f:5d:4d:
                    69:5b:ca:16:e1:91:98:d9:e9:b7:0d:f1:1f:b0:10:
                    11:06:57:f8:40:83:ed:5b:2b:bc:3d:1b:97:44:f2:
                    29:d5:3b:6e:e8:d5:29:1c:de:87:59:f9:c1:27:96:
                    9b:a5:a2:03:cf:b5:e5:0d:86:1c:8a:17:f5:49:d9:
                    9c:08:00:fc:c5:e0:5d:06:d5:f8:5d:c8:fc:59:e9:
                    62:5b:74:57:57:7b:2f:da:44:e8:80:ce:b9:b9:39:
                    1f:33:97:ee:07:03:ca:af:d4:dc:49:c1:4e:10:e3:
                    e7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:16:8F:2D:DF:A7:E2:61:8D:47:07:46:C6:D9:FD:F8:C1:2A:3B:19
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9d:0a:30:a5:f1:01:17:55:c4:af:8d:82:60:6f:5f:92:57:
         b9:46:aa:97:fe:50:90:04:1e:7e:20:ac:6f:6b:ec:94:b8:b7:
         87:cf:4b:2b:ac:1e:b6:a4:b3:64:e3:54:7d:5b:a7:a7:17:06:
         65:a7:e5:13:67:91:0b:e3:cc:dd:9a:48:bb:30:63:e2:4d:62:
         bd:2c:60:3f:34:05:79:80:51:9c:15:5c:80:b1:70:4c:c1:4a:
         18:23:3d:9c:dd:9a:6f:45:b4:da:83:25:80:94:ac:6b:9b:05:
         b0:84:c9:f8:d2:de:27:17:b3:ca:b3:14:43:4d:f0:57:38:c9:
         16:b8:b5:55:fa:b9:72:d3:b5:a9:bf:b9:57:59:fa:50:c8:23:
         21:92:b9:cb:71:bb:ee:95:84:32:14:b2:d6:40:9a:e3:ea:09:
         29:b9:37:96:d0:96:92:68:be:93:0b:27:2a:53:ed:61:6c:1d:
         53:77:54:4e:cd:63:ab:5d:33:0d:6d:13:76:77:80:17:0c:66:
         fb:d1:60:39:88:fd:fb:46:45:46:b6:e4:9e:5a:f8:90:8e:7a:
         79:01:95:d5:63:79:74:76:d3:db:26:e9:92:11:4d:94:b2:3b:
         01:71:76:7c:77:bd:0e:fa:b0:fe:c4:f0:1c:99:5b:cb:59:1f:
         0e:25:7d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:53:25 2026 by rpki-client