This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          nYUGn69nGhChkMcXNB+hJUDXzSQh2tMhKwj47XSosO4=
Subject key identifier:   AC:D9:48:DD:72:CA:C8:63:A8:84:20:55:4B:7A:96:47:82:F6:D7:A8
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       019BF3F55FB4CEF076BA7401FB1D9B98FAEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          198B
Signing time:             Sun 25 Jan 2026 07:01:42 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:42 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:42 +0000
Files and hashes:         1: 0_sA20PwpvlNaZkMADnVSmGAkR8.roa (hash: 6wh9b6GmF3z8gD+E8s8//e7R/HdUNKvFyQY2ioew+40=)
                          2: 1-WYkIdzKkj8TINRHVagZ4a-pJJw.roa (hash: cuvojjHdfFWhgViYfrdABCjH/GrYxt90mUjKR3SVJe0=)
                          3: 2seAXHyzsjxKcx9vONA5t8NDpKo.roa (hash: Ss780hXc9q/xSZtDwQf9FFDagk9C3ewnlo2owJwuyeM=)
                          4: 36Ig8KXXgR0Hlx81Dbivt2_KKB0.roa (hash: XmKDOfpv97+OK9767hQierWSri2mDMDLUz/VmA73yaE=)
                          5: 4aREn_htEzwNxW4Z_ze_U1SiWgg.roa (hash: 0wIkVh4NUPk/fqAOYTqdE+f13v3Gj6K5bPbVYoinhdk=)
                          6: 6bD6h1-onzkXBaAZM1hqhF9Bb2c.roa (hash: giCx0eVX291Dreg5SkuFj7Pkk9gcu9uSackcOGQwEUA=)
                          7: 7CU_Saf57sM-1yN004kvK8zmk90.roa (hash: 5bpO+sXcLPXisvn+5cMGZDrHN6oZNZR0ne9tf2cns+o=)
                          8: 9fkLcboDV5K8RkYKhccms358mIY.roa (hash: pbdhIi6MiVydNKAR2SbpSVV5HF+j7v+gpPuq/bft7UU=)
                          9: 9zHOxpyIXqRlDC726eMkIL_3in8.roa (hash: 5IwHDdTrqf8yPsGKKg1ULI3+RzopP4UflBbqS3upMps=)
                          10: EKCNCx3V2xF3VclZ7utIL40yaPg.roa (hash: K7KWgqrfq6YXduizKcr7xnLXbTxGjXC/k7/Tint9RHg=)
                          11: EMoPkX_a-X1Y6x2h3SqdsPV5rq4.roa (hash: hIZTV4maC/yVAgh1G3bbgkey5mVA7V6TvYPLh5uDEMk=)
                          12: ES1lahPFgcwTztwXyOfhZ5VVmvc.roa (hash: Ew+ImBSHPbFzPIU+4Pej0vRiFBv0R3uwB1KeV4mUWqo=)
                          13: Em7pM6LssXKO1GMawm5HobIjg0w.roa (hash: DbDxVhfNZgsFuUXgnBHHjMTFBOymplRBN3L8VW1JUTQ=)
                          14: FZKmtD-UKaibZ9zRkcn0AXz38jQ.roa (hash: lcged29v8IqNvfygirrGZPjQSlChjxHF9bRH0GjQsG4=)
                          15: G9XCoEEqmG6F8jKDbOEtKOEenMg.roa (hash: /j0h0z4BCzWyDUNUJ7Q+TvpGPHpbsnL1Xrpb74f78/8=)
                          16: HBxIhJQTEPlpkLB0ZPYkHZSJiik.roa (hash: eG6f7ib9tGK1jAHCC+qT2jC4Ebjo/wZvqFlp98jpIUQ=)
                          17: IKE4CLlQcBFlE9ScVAvy_idMxEU.roa (hash: 6gmHjXx4JLDJRUdc8fU3OlLmdxkf8KNQJpv3y9A2lUo=)
                          18: Ia3WxJ4E9TqR5H8goAOL2URQgII.roa (hash: c7Sq9aBefC9FbsCEReCs8PjML6m8fkyaIUcwK37ZNC4=)
                          19: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: fEtrx4rM7WKCJ79sltqDOo6ZCVpBWiaP6Uot2892TQA=)
                          20: RGQPe1T8MeyQWsW4Fl1KwDODHYQ.roa (hash: oslfuWjZo2gABJUOk5sP8W0ctRygM1qKyUjzPS91gOA=)
                          21: RL2hMxLt8_7tP_oSaX71ZrVeYlU.roa (hash: WuW+kAVdi/p0IrSzhb4fa25p/RWfxuiBYYZTZl8qcwE=)
                          22: TY2edwLnnLqH5l1j4TBXgICCA8k.roa (hash: VYYAHhSRkyTo4Cm2JG0elCOvcEdrtRIUUl7ZbUK1FNs=)
                          23: XpZ5Lgqrcb8hh-ESR5GkV2cLlYk.roa (hash: gjwnOftX6s/jpe8bXicWK/CMaY8kCk+g+/5+gZ8Raxk=)
                          24: YGHRshzP7E3xrzqnk97S3WYr9W8.roa (hash: 95Dgw4ivjEo5sVG3WVF9wjEoITYvVf6my/+W1sj4/iM=)
                          25: ZhgFo8vJjypW853FGea_-uf50hg.roa (hash: WtV1iHQCdff6PMY3ugAhRxvlGjCUXcNcn2CkTq861BY=)
                          26: aUPHv82Bqhuun81grUdJW_UVgLM.roa (hash: GC6ehY/pZwrw30U0AFJsHvq5vW5Icu4QsaWDm7j6VFo=)
                          27: d7fttKbQaEBMM4pWwcBEUFN5DTA.roa (hash: Kr1gRui3uolObyy8BSptmtAQfNotYsTnJEgGbLvOibk=)
                          28: fsQJcnWuwD2Xcd8eeK-QG8g2MbQ.roa (hash: OpfPA+dHb1RUv8oJj/SuD/47PIzkgKxK97TBT0p1+UY=)
                          29: h8WHPE-DLjC-fOR5gMRdseFV3jc.roa (hash: YQ88sWnqWVrNelZLFoTBX4eB7iIKZuZNquUMZZMKO9E=)
                          30: ignmWqVMjjkDQN5Y4qDeyeuZ_Ac.roa (hash: A6u9y5FYE7PBQc9qb3iiT8u1JhXp3QhjdHb1npZ1D9U=)
                          31: l6SM6ptT76dYR0t29i5gSk-UFyA.roa (hash: Opm4hqwU9LDFmKQW44d/WAHM+r1NrW68F7x/ZNHRjrc=)
                          32: n_65L3iBhAS8nTX_oI-jDuomJaI.roa (hash: oelUgRW5esSmGJ/6JOEyZ16/FbXRtDOw4ZL4wVs4j4o=)
                          33: ndlZT1RVv5Lim-1fHD9mGSZd5eQ.roa (hash: cCjtDCQeEswQW7ARKMVR+Qsmady+QzPg4SnlqpKDtiU=)
                          34: pdnZEzBIHzqwB0hRF0zciB4I5AQ.roa (hash: 4wKIdMhhOpixinv3B0GRH4iqbq2UNr/kEqwKvFPfjxQ=)
                          35: qgnJ6rleR1BLD9l4jRYO4wkNgPA.roa (hash: B+h7D3nmEJYVvQZsDHrV2hBfqxIy+VQ4OQ8EgALC36k=)
                          36: sj4WoR0pK3o9Cpa-Y1nrHOoXpkI.roa (hash: +woHvnKUvjlFOtldAvZbs9Ud6X9DPUWePpuRt9RpD6g=)
                          37: totemjld6kSUSAOsfxrB5I4cA20.roa (hash: kkFG6tpw3ltBlQqcrCwhTlI44EpzS3lf+yVUh05dYgM=)
                          38: uG2s2RZS4rlCLvYv5d0LRKF25KE.roa (hash: 11Qjv+Obpp8wz3r1eAnLIYMRHJ0o7ALLZxGFpcwmIVE=)
                          39: yAfSs3t-avJ35nOve-CJuiZ7-ho.roa (hash: gipYf09Mg+lZZ79yPz1ymuBTYnjsvP1+FOOgVHdC5z8=)
                          40: ygJihJoEFTH2yDRR0Sl-jcxqC0Q.roa (hash: 8ZQ1qiEiuvsIkgBswJAnf3eGUcB29l0qukHGlnRR4w8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:5f:b4:ce:f0:76:ba:74:01:fb:1d:9b:98:fa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jan 25 07:01:42 2026 GMT
            Not After : Jan 26 07:01:42 2026 GMT
        Subject: CN=acd948dd72cac863a88420554b7a964782f6d7a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:34:e9:a0:d6:f9:1e:20:e3:ee:16:ab:24:
                    80:4d:8c:27:a3:c8:27:b1:f0:61:e6:86:e0:78:68:
                    7d:f9:4e:5b:17:c3:0e:16:32:0b:9b:11:82:36:35:
                    c8:3c:8a:89:58:11:20:af:20:36:a7:d7:51:50:e4:
                    79:44:1f:26:c5:19:81:c8:6d:c5:1c:f8:b1:98:33:
                    c1:e8:1d:2e:c6:10:36:8f:6a:31:02:3b:ee:1a:5c:
                    d8:f7:24:cb:aa:1d:4d:c5:c9:20:ab:13:3d:0c:34:
                    52:c4:4e:04:3b:9f:dd:bb:67:5d:29:7b:66:36:38:
                    ec:f5:1c:cf:05:cb:ae:5e:cc:e1:9d:6d:08:b3:7b:
                    8b:22:5d:93:f8:d7:96:8a:25:60:0a:86:1c:d9:66:
                    52:3b:05:24:e7:1e:4d:94:ca:0d:9f:3a:f8:22:a4:
                    a1:b0:44:91:36:57:0e:98:53:21:07:fb:ed:65:6d:
                    7d:61:af:0f:df:05:b0:36:a6:8b:d7:4a:d2:e7:21:
                    ea:e6:e1:ba:79:8f:64:a0:d3:b6:a3:64:d8:d6:f0:
                    09:c0:73:47:9e:82:f0:b8:58:ad:93:3f:f8:53:d1:
                    9e:12:0c:9c:6d:0d:5e:95:d4:f1:03:fb:a5:01:47:
                    14:36:59:47:f6:9b:9b:b7:c3:02:5b:49:88:f3:cf:
                    db:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:D9:48:DD:72:CA:C8:63:A8:84:20:55:4B:7A:96:47:82:F6:D7:A8
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9e:e8:7c:e7:54:1a:0d:19:cb:49:f0:65:da:b2:b8:51:ba:
         ab:bf:fd:6e:d5:18:83:6f:eb:ac:8a:db:46:24:9f:6b:3a:37:
         91:b8:72:5c:31:c0:1a:ea:d3:d9:37:ae:52:67:79:e1:53:b6:
         7c:be:d5:60:ad:0c:03:20:0e:4a:20:d0:f7:79:b9:ec:2c:58:
         a7:9c:54:f2:08:1d:30:e1:d4:bb:43:6e:e9:ba:17:14:a5:27:
         98:f4:b8:a5:71:a0:51:0a:a7:4d:cc:7d:c0:df:f5:30:53:b2:
         4e:f5:b2:43:1f:90:3c:1c:78:49:62:d7:15:67:f4:1b:01:8e:
         40:09:9e:e0:a8:4a:b4:06:08:7b:82:cc:db:7a:86:1f:2d:08:
         12:12:c8:38:bb:75:81:57:ab:59:58:54:17:ca:66:ce:7c:00:
         90:8c:41:e8:1a:ad:b7:2c:ef:f8:11:f0:31:48:85:20:37:74:
         fc:14:76:61:39:20:41:06:cd:1a:d0:af:49:dd:91:c9:43:88:
         6f:14:13:87:40:c5:61:69:8e:16:63:b5:73:c3:28:1d:64:0a:
         8f:e5:52:f1:1d:dc:64:0e:86:bb:19:fd:d3:6c:a7:85:19:30:
         81:15:a1:6c:47:6e:c6:e6:4a:63:a1:52:b9:28:63:4d:50:6d:
         e6:18:d7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----