This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
File:                     IOQloyti05gYxMuwCBB1aG_EyOg.mft (raw, json)
Hash identifier:          IZSjF0Pken9Pdt73g1ipqYo4YV938g7hxEIL/CGZduo=
Subject key identifier:   27:AD:49:1A:9E:2C:6D:ED:82:BF:C4:CD:F5:C1:9D:82:D8:FD:93:20
Authority key identifier: 20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8
Certificate issuer:       /CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
Certificate serial:       019BF2E2C77429941BDC075EA3525DB0E8FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
Manifest number:          180D
Signing time:             Sun 25 Jan 2026 02:01:46 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:46 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:46 +0000
Files and hashes:         1: 0_Pb5F5fJXaFeCjYZWdP0Hbzw0U.roa (hash: q7lijpZcsnauEAX8HT2zNssS2eyKaRgPKnXCYMxmnow=)
                          2: 1-Wgz1wJ6Ji1IcKk_P2cW9QZv8uc.roa (hash: a2WWRTi85qtiWX9jSpPt6KLXf/eSt441S1fdhlmq/do=)
                          3: 4E35N4YoprisFyljnxoxMkR64es.roa (hash: etv1L/gZm5KpspXvAsTMAxMqprgBv0WBCdkcjzS9EzM=)
                          4: 5tH7LLAkdhTinMcBwA5ZehHy3T8.roa (hash: FSVoKMxOOpnoQfuC/EJwrwRY/Zx+oB/dMyYOIOIr+Us=)
                          5: 7ca-yqYFy5zkEtowaK37eO4cWhw.roa (hash: qkXi06WNJoj9N2Ed/7Tck+0n8JOBZBK4mD8Jxcj+240=)
                          6: Cbas0g2gR07ffn-dISh755Oa8jI.roa (hash: JrumCEaLcChVR162sO+6/nHAKdNjmGrmpSa1y3KAZ/A=)
                          7: EIOYZpIbkL6BC-x4564aTLDYD5I.roa (hash: z0WBT/Sycw1oUBchenD/iEcWbUKjtiNpM4WnCTpU/AQ=)
                          8: IOQloyti05gYxMuwCBB1aG_EyOg.crl (hash: l9R2Lhnmgraou8X4HduTYdBY+TGFFCngwZRRINVIyto=)
                          9: NfpbtdoH2GzbqDfenHlYbv5zt_c.roa (hash: 89a648b6W+muQqrxylg+B9lJhIqBGoKMRio9Dz7PXhw=)
                          10: PPESAjOluG0r72hY04n2ZYGpgHw.roa (hash: mhVONTOIhHYKXmbxcwocnnHsFr8MJrSXQz8rRIN4d/I=)
                          11: Pgo33BD8jGVxYgy5H6AMmCdzcAY.roa (hash: q7YHcdCh9F7coMkqBLs/n4ogOysBTN1Tb4sKyyXw0Uw=)
                          12: Qt-feGoA8-9E6Dhl7ZscFkTMSKI.roa (hash: trEGbh/W18kqxNXY/PaAExVg1jfIAWPTVVeIDtCCH4s=)
                          13: YpU7gaQKuIKkN-T0VtBGTRqYtvM.roa (hash: /+pWCkv4pOpaQQ3pOwrh5OujER/vlTj+p3hHLSIAK64=)
                          14: aizTiTr3JBAyofrdSN5dAv2TZSE.roa (hash: zJwdzGPf1h0q9TZ+Muv6Cl42qffhVJBeW6ntkeRkbts=)
                          15: cXInX8MThhr-Q2P_0TCbxEVEnFM.roa (hash: 58A2aZSuymaJoOD/zxSFuC/w3QnUk8DmmWAzRDbCkH8=)
                          16: tMOM49mON-wD8zTtajFPDha_yco.roa (hash: X25vCvqdM17ldWbN+OsedMb7/hCVvVUgdyyal0kP0OU=)
                          17: zhgzrN7ONz-uEq7CvrDk_OA0fhY.roa (hash: BR8H+FH7cC76xmp4k0PsChjJpaCt0+iuHvjXz9F5Vfs=)
                          18: zib85lalNfDUXLnbOxY6qMczZjs.roa (hash: jphImNCP2svx9og7fDdI/KwoYuS28d452U+DOyXWGsw=)
                          19: zm_zTtidrEiuyGIJ9xC0dYOYVsw.roa (hash: J1GJgdFWQEf7k64nQl0mr5yPcHotjObvTQFYDrnoDYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:c7:74:29:94:1b:dc:07:5e:a3:52:5d:b0:e8:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e425a32b62d39818c4cbb0081075686fc4c8e8
        Validity
            Not Before: Jan 25 02:01:46 2026 GMT
            Not After : Jan 26 02:01:46 2026 GMT
        Subject: CN=27ad491a9e2c6ded82bfc4cdf5c19d82d8fd9320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:69:0f:1e:63:47:88:66:2d:8a:9d:12:cf:3b:
                    38:c4:5d:dd:d4:74:90:fb:a2:6a:44:cc:90:ab:56:
                    e2:ab:af:ab:0c:b6:f1:5a:49:bf:7c:90:f7:7d:52:
                    12:40:1e:09:b8:31:d8:89:98:9f:17:12:39:c1:06:
                    7c:9a:2a:9d:8c:a6:83:fe:d0:7b:5f:3e:b7:23:b4:
                    32:79:a2:9c:40:ac:d6:86:e3:2f:60:14:13:a9:7a:
                    83:76:fe:18:49:89:ac:87:15:38:43:89:c2:02:ac:
                    21:26:c9:21:04:4f:e3:be:47:67:18:c0:03:13:22:
                    37:ce:cd:31:34:d6:6f:5a:9c:3f:99:a0:83:af:f4:
                    20:ab:98:57:d2:af:2a:af:df:b1:37:f2:8d:a1:77:
                    24:8c:41:68:3d:e4:a6:1d:33:43:ce:de:2e:c4:c8:
                    23:d6:dd:7a:fe:fc:76:e7:99:44:08:84:ab:31:e4:
                    aa:4e:e2:bf:dd:5a:12:a7:0e:43:91:4b:cb:82:8d:
                    80:39:44:77:31:01:0b:77:42:14:ff:23:24:02:1d:
                    77:c4:06:ac:7a:72:c6:b4:90:fb:52:7b:88:98:f0:
                    da:46:d5:70:fd:f1:7a:f6:85:3f:11:be:2e:97:a6:
                    b4:52:33:28:7c:88:c5:68:7d:4e:fc:84:f1:cb:ab:
                    bb:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:AD:49:1A:9E:2C:6D:ED:82:BF:C4:CD:F5:C1:9D:82:D8:FD:93:20
            X509v3 Authority Key Identifier:
                keyid:20:E4:25:A3:2B:62:D3:98:18:C4:CB:B0:08:10:75:68:6F:C4:C8:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IOQloyti05gYxMuwCBB1aG_EyOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/fd8c01-7b71-442c-9adb-ecd2965cb7e7/1/IOQloyti05gYxMuwCBB1aG_EyOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:69:31:27:ba:dd:22:8d:ae:3f:20:9c:4d:b4:cb:6f:71:2f:
         14:18:79:fa:41:2f:ec:09:a2:a3:67:d4:82:7b:e7:b2:fd:5b:
         8c:fd:fa:bf:32:0d:1c:3a:55:31:d0:23:98:f1:aa:16:bc:75:
         f2:b7:76:fe:3a:7a:36:d8:bd:5e:76:3a:65:46:a0:c2:6e:b9:
         d6:ba:bb:91:eb:6f:52:27:fd:53:f6:35:d3:26:33:59:3a:42:
         7f:a0:0d:1d:8b:47:67:dc:cc:ff:3c:8d:f1:d9:80:c0:28:0f:
         c9:ae:60:e4:8e:58:26:20:0d:2d:a9:46:fc:b6:28:97:48:29:
         e1:83:a8:a8:e7:16:bb:f3:42:2f:30:b9:fd:d3:99:fc:53:6a:
         a4:db:04:ba:a2:94:c5:d4:49:da:4c:67:88:13:24:c0:81:43:
         f8:4b:2c:b7:ca:ee:d7:50:94:68:28:e1:54:5a:12:c0:2c:f7:
         2b:1b:96:e8:3f:ce:e3:1c:c2:12:53:0a:8b:03:34:ef:aa:6d:
         e2:9b:88:52:73:94:e0:29:d8:ed:45:89:1e:8d:e2:9f:96:4f:
         66:77:6c:0e:23:07:e2:11:1e:e7:b3:52:dd:92:32:95:d9:bb:
         31:bf:a7:b9:4a:a3:4e:2e:11:70:f3:a9:11:c2:46:3d:1f:8a:
         de:68:a7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:11 2026 by rpki-client