This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          341IYYFLx3E1NKZr6f3RKGPl60kNnGJGvyAuVfe2SVg=
Subject key identifier:   E5:23:12:A7:EA:64:A4:E4:45:C6:93:59:13:A0:03:9B:5D:31:DF:F4
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       019BF3BDB19CF87AED7EFB88010DA242A1FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          1811
Signing time:             Sun 25 Jan 2026 06:00:53 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:53 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:53 +0000
Files and hashes:         1: 0GWzWdP_CqvJbo6pX-07OtEcNiM.roa (hash: kiIdkcmgITB/VMOeKq1aKbEVCCJHgE5RPDv/q7gJ1GQ=)
                          2: 37QPNayYR3ZU8r-eTrm1uGcfPCI.roa (hash: ZUsLdCpyT7UaA5AoKljXpYTd3YXwxVK1Al2G4yLoz8A=)
                          3: 3meO9SxoWZRDxtrmg7_0QH46siU.roa (hash: ITch6GOLfek7I3B0GTxz98rAKbdabM3Dc8LSMYGyfT8=)
                          4: 4DB0vccVjfoUjQfveiXJhpnSOUM.roa (hash: 3T1tRCR1ciZc+zXi+bfe1bkJ2o9rpXgaX91zFNkyvSM=)
                          5: 7heerGQUVM2NoqBGyJhyehohjOk.roa (hash: UIFcGcsWGAqkq5UEo2aGOtCYPQ+zsoxDP1sifMcfHL4=)
                          6: 8sTa5_Tg9IW9SkjWiRJngRgxj88.roa (hash: 4WxANZr+fEiTPHwBBRkIvB/zY6w54CwTs2/eAYzOZR8=)
                          7: CZtGpLAUhYdLU22gYJ3M8sldtRE.roa (hash: dqMfLW0eVcLT+nytfHwV4Lxmua3438Ke47oKR7OOxJ8=)
                          8: CaSZ9xc7ASpTwCYKy2d0Jn7GHFE.roa (hash: wwxwhBHuGfwVI2vRfll8L/KgFdHdj7xOlD09cJwT5qc=)
                          9: EwEAwaqNHf561X6ESt5fUc4qEvM.roa (hash: dADc7/n3GiQ5KQfcfqyZ4vohLTK/4Wso69sE0etaJy4=)
                          10: I38z1CqJvRm1Nl5j6Z-33NN5uvg.roa (hash: avgYUqvVsET7xYPeCJJv2xxpjCrR+aeuMs6c9IPatwM=)
                          11: IeiCDVePhxHEq5aHqduCoYRncLM.roa (hash: 0vQL+IVJ7CeAzoMZqWscwH7rkD1596Lu7zyfecDusY4=)
                          12: L-Em4Qwd1SGlApEe2jCd6OIqSQI.roa (hash: wiTpvgWeu86taeNRcVHiPGZqRDTAGiEQ5bjuWnbAxHc=)
                          13: LJ7nmXSfmdwbJSSPRQyUayUtbF4.roa (hash: FGqj4OOPlduTYqT1Tbk3Nh5c9UIkiI6T3ixfxXbzPTQ=)
                          14: Lk6MHJqbLJwPya4Np54xeRkrP5Y.roa (hash: tbEgbXkmW9qHuVSGUjOVErC6z6ahNtBuKdGhXGRxRnw=)
                          15: NY7s3CjoRndP7RHHfX-mb2WY1Os.roa (hash: MkCHZqtAZZQFQpHlNrKtJxiEqthOxKGE98KrFMqKbSk=)
                          16: P5my2LyeHZB2ZzBRtQLViTnvHV0.roa (hash: tlqVmLCBxPj9ih6r5SR1ckZlqR/325Dm7JbstNLCaL8=)
                          17: Q8ms6dHOqhiwDxEc5idzqyyZRUk.roa (hash: 2GXJ33Dr4S4I4v3yZpn2MEA0G+YkALmc+OG+HXlP1Uo=)
                          18: SN_hOoDnXXBMcILu8asIJSSFU6k.roa (hash: xhiPqOnTIih2H9KpMIJWF1OUuAAkuYs+jap/kl2QWL8=)
                          19: SdunA_LDw0GRKRoiCnE3mJkO0Yw.roa (hash: MfBUBFXa/V19ZpDZGtMMW39vhsV5gaWS9vnCnnOqJh8=)
                          20: VFR_MohEdR-AKxxl4vGLPNK27CY.roa (hash: JS+jvJUmKaNtVU9pGMwE/woeoj4MhFmkTkScbCYs158=)
                          21: YkJBxQSqvpt04FPzKvCEg11P2gA.roa (hash: 2raFfmxwB64g0fRztSSGCpWN1mso29dZ5E++UIR4mL4=)
                          22: ZJi9nyB3KhwoHVy-mH9nKRmgrcc.roa (hash: vq5dW4lo/8wKiY7BGW/gsAc/w8DKMU+AyKx8isQ4h/A=)
                          23: aP2-Feb22DDe9b731OjQtkUPH78.roa (hash: X3OXQluZ5/umWFVjL/eQ4ZpWVRlg/ukYlZ4T3oX81d8=)
                          24: buvY-1Dnlbk4Qrc7RIFRlKa70YI.roa (hash: VCY5nxJnOHaqQQtvXIxTn62canJnkKWgYXuAmGOhKJ0=)
                          25: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: cun+I02nrJppCozEGa+rQ7dmcPFKwlJpAgPJCf94az0=)
                          26: kInKZypR3Yvkxg9NAZ7gpb3-dTI.roa (hash: pKey+tQl5JvNpi5ziaNcs7L0bJUXZdpr2J8u+DLpr84=)
                          27: tzc__lKb8h4wwSuZ-hH8wXsLoc8.roa (hash: /TIFVCryUKLe+qC5ophnFPWxCQdj7ytlyN2nr4rjE6Q=)
                          28: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (hash: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s=)
                          29: xYBM-hY_brlJg65f-G8CvN-m7yE.roa (hash: zEmAKnE9dRo89iUmw+snI86RIgHtrd0cYS5/27hlva4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:b1:9c:f8:7a:ed:7e:fb:88:01:0d:a2:42:a1:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Jan 25 06:00:53 2026 GMT
            Not After : Jan 26 06:00:53 2026 GMT
        Subject: CN=e52312a7ea64a4e445c6935913a0039b5d31dff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:76:5e:51:06:67:49:49:a2:a1:f9:8a:a7:13:
                    30:b2:11:df:73:5f:a4:4b:12:d2:53:0c:42:83:79:
                    9c:e8:ca:17:c2:ee:16:94:a4:25:31:2c:1c:e1:07:
                    93:52:59:14:46:bd:00:52:cf:c1:66:99:53:a3:67:
                    26:75:11:b7:d7:83:85:6d:db:bd:dc:b0:a2:3b:cf:
                    0b:50:b2:9c:8d:c3:d7:9c:71:81:70:b1:f9:cc:4c:
                    8c:27:63:ab:aa:37:cc:59:40:d1:65:17:a4:aa:c4:
                    1c:d2:16:7e:bd:55:13:a5:94:20:9a:f5:8f:06:d0:
                    fb:89:fb:50:b2:88:7d:67:98:91:e1:ce:b2:97:d2:
                    ea:ba:a9:94:09:1a:8d:f5:07:30:3a:2b:0e:63:b9:
                    5e:24:8a:56:57:44:30:85:81:a9:85:7e:bb:70:d4:
                    7f:c6:6d:85:93:8d:04:76:ae:9b:f5:8b:a0:fa:90:
                    99:b9:d4:66:df:52:e8:c7:06:29:db:3b:92:ba:71:
                    a8:8f:28:8f:0e:a1:af:a0:d7:d8:4d:f7:f6:9d:c7:
                    f8:c4:0b:01:ea:55:15:1e:5e:69:2f:8d:6f:e0:31:
                    42:a0:11:78:9b:26:ab:c1:d0:5e:2f:9c:7e:c9:dc:
                    b2:00:8b:86:25:6e:79:63:8b:e0:0d:5f:a1:7b:48:
                    2d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:23:12:A7:EA:64:A4:E4:45:C6:93:59:13:A0:03:9B:5D:31:DF:F4
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d5:da:62:52:60:f1:64:94:08:90:de:26:00:01:af:8a:63:
         ab:2b:ea:8a:63:5e:23:d0:b7:9c:8f:ba:f3:dc:06:e6:c0:fc:
         73:9d:5d:ad:13:ee:01:cb:06:6d:c3:d8:c4:94:ba:d5:0d:10:
         ad:7a:8c:b8:a8:7e:55:eb:70:2c:8f:c5:05:24:1f:43:06:6f:
         d6:81:09:4a:8e:83:3b:49:a8:50:bb:59:21:6d:f5:f1:8a:aa:
         53:d5:86:06:47:cc:21:d4:10:ff:32:7b:bd:fe:e0:3e:2e:81:
         63:a7:3f:01:a6:b3:d1:ff:6e:c2:1f:e5:13:ed:58:ea:5e:f0:
         61:4f:93:1f:9a:93:42:0d:7d:c0:fb:8b:0b:93:4e:97:c4:98:
         f5:fb:84:1f:64:c4:a5:b1:cc:1b:2b:da:5f:d1:9f:33:91:f2:
         87:47:70:0d:41:23:b5:b6:91:e9:79:50:54:d3:11:dd:d5:ff:
         e1:67:90:ef:30:ec:eb:30:52:8a:6d:bf:20:6c:9a:93:47:85:
         8d:df:70:ba:b1:5b:cf:27:54:f9:64:1f:3b:c1:62:54:6e:1a:
         58:8f:63:ef:4e:a0:34:24:2a:78:b0:50:c1:08:a1:dd:5d:43:
         f9:8e:b9:7e:3b:64:95:84:db:1a:5a:c6:d6:d5:f8:02:59:ea:
         45:f6:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:34:46 2026 by rpki-client