This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          BWw9fvnvZI/GvzpF+rURET2EbUGejzT9FqIFuEUlkgc=
Subject key identifier:   AC:75:55:32:4F:CF:C8:A2:04:8B:FD:43:CE:5E:F7:88:6E:F0:F7:56
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       019BF5E3EC3EF25DD4C245AD1BB6E203CBB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          10E1
Signing time:             Sun 25 Jan 2026 16:01:53 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:53 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:53 +0000
Files and hashes:         1: 2MBWyl5KjpR2d1Q3Tfe1fmaw1cs.roa (hash: hSEPcTmeRmUuQfaQKnQ/zcOXepkHDDHZ8GMknAXPBM4=)
                          2: 6cANbFm-EJrK8-PMA7NyEk83u6k.roa (hash: jYdd/eqOCPnLV/a9ltPhyg+PE8hVFdwnP1KBbgFBkI8=)
                          3: AHDv73qMQL9wbDKFTRsjL6r00oQ.roa (hash: AVkBVXP0K0ecnq2H74GPC3d5N3jhZ95iI/h0cjx0eMI=)
                          4: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: ngK5uY9aiAnM6jToX0KijGyw/T/4v0Rx2Re9Z26LI+0=)
                          5: EUwfZnTgmTUn4QtAFdLnAe6QBxM.roa (hash: 4b2ykqXoTUYqZCfEtXihVGEUx4Y2lUrciWgYbHCZrP0=)
                          6: EuqppgZcuvBd77APj6BJDc66El0.roa (hash: Pou/5mkV9ShqmcqFaVCa6/FpNsjCyEKxq/5LPM8oRyE=)
                          7: F5f-3aC06oFfat6kysD7KzPEy7s.roa (hash: uf9RFkZjIVlqZ17DS35sOy7dY67XFR7qpT1cpxsxJnM=)
                          8: GkG94oLLyaWn0LlA7PecrXl0W9M.roa (hash: Vz1DhIY+rwizM8CF8BSBpl44BncSNC0p93dQaqvmHIk=)
                          9: HAJo40Wzweef0-HmgppS7_KBVno.roa (hash: Md/aD3NC3DChGRJq6Yp2XnMr5nwvrS2wV2tIMtwOW50=)
                          10: KTMyv7vLJL4RhzKJMxYv2Q04XU0.roa (hash: qlz3neHso26dPUfoq0gD9odJX4heiGA404bEQ8650r4=)
                          11: MDkr1mPINhLWlbE7zVQDBRRtERo.roa (hash: rKzUC6Ga9NHbbH+PBR/UbbD9eWJNxuXrWwtzpzRiJgk=)
                          12: MKJ3r_4TKeocUaOcCqRhoBecjmM.roa (hash: E+tQHI9Z8HzAp+AQr7VOtuEt3TaI3sVfC37jnLib12o=)
                          13: NpomuMBzJVKQYcl-LphdVCYzfR0.roa (hash: ItHWcgevCY69vj6UIFo76di+HZvWbt6e/RbdJHhjvCE=)
                          14: OX8T0Loeee2SJyDfY3tEnifOFiY.roa (hash: WUtUuVCFbswJZDfkLKymBevKbkG13uZEO19XKdd+n8M=)
                          15: YGyJEvwnW0WQ_NWAEj7vFCxCxWA.roa (hash: 2C2bEc32YpX5NyOiU/D+IWaEQi+cpjyPUf9gHuyinOg=)
                          16: ej_ULItssuJKfpG-aO3TpOCfAcM.roa (hash: MuVT+NmseLKCBtNzkD2hqoLRxqqBtVBwn/7W4rZMBJE=)
                          17: h6iTojqaXm32u7BLTwm0z2ziaCY.roa (hash: LjbU3TQQa1ApTEOwMzVmaLwPfpE+NGA0goG5pwMkhxw=)
                          18: ivG7FB0OuHZtaPx3ueruCQJm-VI.roa (hash: 5+fSISaJZ6MVlJNLKKnuDnQodZYydtzTRLt+3siDb90=)
                          19: kEEHiJ2_DoC2VfYdw5LhFhqepV0.roa (hash: wMCNRdrXjQmrhxah3XAz6wjU2Gf/YcDDzzpq9SAnAXc=)
                          20: k_yt6Ew5vZOiqYJGMvVI2kUV5V0.roa (hash: CUNe6MGDt6axlDbgIXUKB8iPiYMZNW/hw7m/AwCnfis=)
                          21: ladaJsKVTuv3YGDi38_Qd9THC0w.roa (hash: ElU3llDhKBNskVBOfdbOzFuE0cAaPwlyq6retebHVjQ=)
                          22: mHQ5lGsBLY58ZqsoI4KyEoGAaCY.roa (hash: qjy47Jf6cTEpCMuTgzO1n5sViPKiS4UbTibv345I4as=)
                          23: qG2nNWb8MqqDopUB1tVODEkVl6w.roa (hash: cfGFab+OgFf7ubny/5LdmUqIORuyuUqS67/jyuUGkNM=)
                          24: t0bWLuL94obKt0o74dC0nCo7fYU.roa (hash: tfVFhgnQItxhSLrWx/IEzAzrrjR+KQ0zeBMzi4U648M=)
                          25: uuHljZPCvASdL1cahmx3sk-UM6k.roa (hash: YZhlBGblOcfxdLBJ41C2ivgjxSeLyB952u1KN3aoLfw=)
                          26: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (hash: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU=)
                          27: zetNVI_5RmQ_9yMT7BWp_EHTd7k.roa (hash: BSZVF8mXcpYwrxryg8NDVMtvr+dxn8y1JxLoHLq3VvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:ec:3e:f2:5d:d4:c2:45:ad:1b:b6:e2:03:cb:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Jan 25 16:01:53 2026 GMT
            Not After : Jan 26 16:01:53 2026 GMT
        Subject: CN=ac7555324fcfc8a2048bfd43ce5ef7886ef0f756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4d:5d:82:3a:1f:fd:a9:39:06:20:ad:c7:58:
                    f1:f5:58:c6:dd:11:dc:b1:e1:6f:fc:3a:61:99:76:
                    36:f9:c6:78:2e:cf:c0:db:75:96:01:58:a9:7f:4f:
                    0c:03:25:2a:e5:af:1f:39:a2:db:ea:9d:8a:89:27:
                    c4:eb:aa:1b:38:d5:cc:ad:4d:e3:cb:fb:06:c4:e2:
                    20:fa:29:34:7e:23:49:9a:13:4f:72:d8:9c:20:24:
                    84:78:61:aa:2b:f3:e4:03:56:70:17:af:2e:59:d2:
                    52:99:1d:b6:0b:85:82:65:34:f3:56:2e:c6:f2:8e:
                    51:76:1f:fc:01:37:20:50:7c:5e:3f:14:bf:7d:f2:
                    d8:08:e5:12:a5:4a:70:97:ba:ad:44:97:7c:be:66:
                    96:fd:c3:2d:82:3f:bd:e1:15:fa:e4:9c:b1:cd:54:
                    45:ac:f3:1f:52:01:7d:9b:11:c1:3a:00:da:fd:6d:
                    dc:16:35:9c:15:4c:c3:4f:d5:eb:ad:49:75:17:ae:
                    cc:c6:60:60:aa:6b:50:23:a6:98:30:a9:ea:08:ef:
                    3b:b0:3d:0d:8f:72:e4:7d:2e:50:50:38:70:4c:74:
                    43:c7:21:29:95:39:f9:cf:52:b7:6f:e0:27:b1:ba:
                    70:5d:39:bd:d7:58:c9:4a:3f:9f:1d:b4:70:6f:f8:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:75:55:32:4F:CF:C8:A2:04:8B:FD:43:CE:5E:F7:88:6E:F0:F7:56
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:56:0f:e1:d6:7e:1e:e1:c4:80:df:9e:f2:03:60:31:8c:68:
         49:07:5d:4b:00:ce:fc:ed:69:45:b6:f1:a5:f2:39:07:1d:55:
         c1:2c:15:de:15:98:a2:39:bd:d6:40:f5:5e:14:e8:90:99:60:
         f9:26:24:a3:d6:ee:cf:48:8b:9e:a2:3c:e7:78:b2:0f:0a:8a:
         17:61:cb:d2:0d:40:4d:a6:27:04:95:8b:b7:d8:75:77:8f:90:
         66:e9:ec:60:0e:1b:af:21:95:90:9f:e1:d3:63:c3:cd:09:e1:
         bb:17:54:c8:b8:52:5e:c1:d8:ac:db:48:f1:ef:3c:7c:09:04:
         e7:20:87:35:eb:b0:36:c9:21:19:a8:df:9c:99:a5:94:89:23:
         be:5e:64:14:70:a9:bd:10:73:9e:78:61:13:26:df:33:40:59:
         2c:97:c6:81:ec:78:8f:9f:8b:9b:67:34:a3:6c:a9:2e:ad:3e:
         0f:0b:b7:3d:cc:2d:0d:55:af:fa:b2:a6:63:2a:4b:8c:5b:f4:
         ec:b7:cb:11:99:2b:d8:00:6c:2f:ae:db:de:f6:34:95:9f:80:
         d4:58:6a:03:4d:58:e7:90:a5:83:84:64:c4:e8:42:03:9b:7c:
         2e:8a:f3:40:08:c8:2a:fa:8d:4d:d4:96:d1:45:c3:a1:4c:88:
         0f:61:0b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv14+w+8l3UwkWtG7biA8u0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjYwMTI1MTYwMTUzWhcNMjYwMTI2MTYwMTUzWjAzMTEwLwYDVQQD
EyhhYzc1NTUzMjRmY2ZjOGEyMDQ4YmZkNDNjZTVlZjc4ODZlZjBmNzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuE1dgjof/ak5BiCtx1jx9VjG3RHc
seFv/DphmXY2+cZ4Ls/A23WWAVipf08MAyUq5a8fOaLb6p2KiSfE66obONXMrU3j
y/sGxOIg+ik0fiNJmhNPcticICSEeGGqK/PkA1ZwF68uWdJSmR22C4WCZTTzVi7G
8o5Rdh/8ATcgUHxePxS/ffLYCOUSpUpwl7qtRJd8vmaW/cMtgj+94RX65JyxzVRF
rPMfUgF9mxHBOgDa/W3cFjWcFUzDT9XrrUl1F67MxmBgqmtQI6aYMKnqCO87sD0N
j3LkfS5QUDhwTHRDxyEplTn5z1K3b+AnsbpwXTm911jJSj+fHbRwb/hnOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKx1VTJPz8iiBIv9Q85e94hu8PdWMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPFYP4dZ+
HuHEgN+e8gNgMYxoSQddSwDO/O1pRbbxpfI5Bx1VwSwV3hWYojm91kD1XhTokJlg
+SYko9buz0iLnqI853iyDwqKF2HL0g1ATaYnBJWLt9h1d4+QZunsYA4bryGVkJ/h
02PDzQnhuxdUyLhSXsHYrNtI8e88fAkE5yCHNeuwNskhGajfnJmllIkjvl5kFHCp
vRBznnhhEybfM0BZLJfGgex4j5+Lm2c0o2ypLq0+Dwu3PcwtDVWv+rKmYypLjFv0
7LfLEZkr2ABsL67b3vY0lZ+A1FhqA01Y55Clg4RkxOhCA5t8LorzQAjIKvqNTdSW
0UXDoUyID2ELAA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:03:31 2026 by rpki-client