This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
File:                     CIRls3stTp9BOjHce35suioz25Y.mft (raw, json)
Hash identifier:          BrXNtHacSvC67j571QfAVPhKkvU4NhFAI0H/5OQJ3iE=
Subject key identifier:   9F:78:B6:7C:E3:44:0C:28:0C:11:B5:B2:49:EE:0D:8E:BD:AB:41:1F
Authority key identifier: 08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96
Certificate issuer:       /CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
Certificate serial:       019BF507A8DB8B7B22FCB5682ED0FD1CD5CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
Manifest number:          0BCA
Signing time:             Sun 25 Jan 2026 12:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:18 +0000
Files and hashes:         1: 0ASsrcIDZnw7ewpaNwG4VPlmmRQ.roa (hash: e4Bbe8kx9J+937mRPuAmB54EfUg5NEO0i53Wrek6DuQ=)
                          2: 1D80X6-qVIYAnOAvvrQS3ByRSj8.roa (hash: 4tsrZkox1d3v6AYzNSSWp1UU44lmigpWQW+WOHH2fOE=)
                          3: 2zmc64_qwTQPhyAIjVjoeagXv0Y.roa (hash: HxpPRAL0eOabdVSfebhoMXHXX5y42SyM5Qp7Hj3S3Bo=)
                          4: 3GeqF2lR4psQ6viBzLvWfiU_DKw.roa (hash: pTID3KmsjhTmWth9pwDywbq6pym6nxlRSsdR0RuW44o=)
                          5: 3XPriRsnrECkZ-RiN0z2mZpe4cw.roa (hash: dWhNv/YEpql87FAc9PA3+cBPtmKe44FQYidRCffkBO4=)
                          6: 3rljXm2FPelovuEsz9lonKQ60jw.roa (hash: mq3/ioypNdduHfMdu6OIxWXRkC670oFKXaUKL9/32QU=)
                          7: 4lbOoMU8vYue75lPLU273Wz0rGY.roa (hash: OKc6RjBIjQuLZxQQ8vPAven5oO4U2p+P2GxzKo6rhOE=)
                          8: 8AeGR_x2yGUoR-BzZ7lBLSETixo.roa (hash: ESSxA3CwqC4vvWIMRdWeDuFi/Wsf/VMkq9soSqJMlDI=)
                          9: Ag66ALejSbiH1pRxlS05WWGEZEg.roa (hash: oqQLEmI1BDc7amRlULpva3qfjUZCTdLKCNzKPu2d6tI=)
                          10: BLvck3jtH0yiq7mj0oSIpxGzim0.roa (hash: rNoyDTYrAexTBbf0FBqXytC/SgHvT/1Wqrx2FO97F4M=)
                          11: CIRls3stTp9BOjHce35suioz25Y.crl (hash: w4s86rNkDSk5DBlm4LvXG9uZ4D4A63TxQwBzOVcthQQ=)
                          12: Ca8Lzw8zNfJDh1Ly0_qC-fHiM6E.roa (hash: C4RNhoeAXLEJghqWzvBuSPRqznDdmFIllRZiSPyy5uI=)
                          13: CiFeE-oLSQO3PEjZOrMRX3dtWbw.roa (hash: nzg9XMkO6QYtc2rGKEDL2Su5KlvnyOmtGDyQbcbez9w=)
                          14: ENH5Rc7fQyWjB2bbdsrHx4uVjYc.roa (hash: 83ywIsnDuxVaovsUOnYYrLb1JxlJot8bxmB1jRR+by8=)
                          15: FoyH-uxga7QutQZC2Zwty6QbNW4.roa (hash: hesFwTnVowJoCi86cxMfE9UyTQSH44grKS2DATmYHaU=)
                          16: Ojccpt6PXIjVPE6KsXsIl0xR4xg.roa (hash: qxyOGoR8Wod4FdQBMKKBbpkBt/WZQYeVXJhIKDf74AM=)
                          17: SaE6oyWy9mR7RyqKQqeD-3Ffwjs.roa (hash: EzQjZ/V3K+8VkrS77OJhZYbqaLqQUUV5oMi3fASt1vQ=)
                          18: TFc4dRXqXi6kK69a7IEbm7cQHsI.roa (hash: r9xRa0cuMKB041JBke8hZDTuXuIEHcgQ+gdhlGFiuto=)
                          19: V7zz5RYIeaD1rKbwrR61Qzmy0cE.roa (hash: Bp1wY3wHba5l7UrAhDBjOEjjo7+NQ6Cmh+UiV252fLs=)
                          20: W-RxV_b4H1Q0qApAgW_ZZINL5f4.roa (hash: VsS3OZqPtVzXeu3oeLIkDEifPtVcvvgiHyu0vYriLJ8=)
                          21: dMeBF-kn-NkRDRRVpgIYc7U7Gzg.roa (hash: 6oHNnUyVSeR7K0ZmgkLZ6A6vdOgja/OQQJDLB1PEGxU=)
                          22: eniv0P8LXa9GHk4FDlQMKWB7KG8.roa (hash: fdbfbdiY0hhSBBF1G2HM4gKiYEAtqxK+M5Gsam0dogo=)
                          23: h2A4IvIcxRFa1JJuHZI1sAnmrig.roa (hash: LY0M16Kx8WxVQ+952wod9DVNs/KlcrAeqPDuxhRnexQ=)
                          24: hqaui3y0dJBb-G_swK9JTqsP15I.roa (hash: IYmlHOKbbIfZroL4w4V7fPkYaUorBcPfFwoIP2cIOs8=)
                          25: iI7xLboa7mEZTIbddDCXnP5vHMU.roa (hash: l1gOEktDNyT5wyXeiyrREcT0TszwTr6ef8RWw/aj+04=)
                          26: ig6CxLt422fb0w55Ai-BAtsyFBo.roa (hash: w2wc2g3pxBo4n+JBhdDwHszJkyLuwMN41Qa7DIdra0M=)
                          27: kjrIZIW45KaOyNR8g_TQidHhKxQ.roa (hash: azT5mOJbUfFEST0Ir7ouylIomcyXSpCUxWYnorkrsXI=)
                          28: l4I0d-2QSNxm-8IJy9LHnheP1Lo.roa (hash: GEOYp5avEZR2sEy40QrdDcc1+R3ftqFBUw/3LTp08L8=)
                          29: mU500IrDA34-_DZykJnyPTlrppE.roa (hash: +vAVh1Yr0k044C+InehYRlf3YBv6rAWFpbl7IasP7yg=)
                          30: oaaK-SykNHj4NMtAlojIzptkrl8.roa (hash: s9ElKRoJMX78rcJ0exfOAn6uy9x5N+KQ6zeX8pI3px0=)
                          31: pGtQQai-dxwqAqhELvcpGWvnJZQ.roa (hash: bWty7Pjo+KwFzlM1rDtQDVkiqqU12gvaV9LDUSEaGgU=)
                          32: pTpGty7SoOlULzj4dFHlP8-2JxY.roa (hash: jwYePEgcBQVLY261Fm3BhfP9W/eR3MhlrFnRKYIgSt4=)
                          33: pfuka-u0WrGvOqlK-XirDGIRyv4.roa (hash: 6oF8zl5VC7iyVSE6WbnmbjA98YnQlB7pOlEhgsgUaIs=)
                          34: xdV6BMUZwA6HK6ackAXJc9L3G8U.roa (hash: qL+/RVIhCRk9UXo6uWsZ6mzt5EaHjBCt/5Hbb7yGo78=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:a8:db:8b:7b:22:fc:b5:68:2e:d0:fd:1c:d5:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088465b37b2d4e9f413a31dc7b7e6cba2a33db96
        Validity
            Not Before: Jan 25 12:01:18 2026 GMT
            Not After : Jan 26 12:01:18 2026 GMT
        Subject: CN=9f78b67ce3440c280c11b5b249ee0d8ebdab411f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:05:91:35:c9:61:5e:6a:0a:85:99:60:6a:
                    88:4a:11:82:22:a8:50:dd:21:0d:04:54:79:b9:c0:
                    cf:1f:38:b6:fd:8f:6d:64:1b:2b:a6:b0:db:ca:75:
                    7a:02:90:58:c1:20:4d:bf:73:fa:ac:1a:a2:37:ad:
                    df:fe:6c:62:de:2c:49:28:35:ce:35:61:40:44:bb:
                    8a:b0:66:fb:80:a7:d7:81:e4:41:8c:76:46:af:b6:
                    92:40:23:24:08:25:24:ee:b1:83:d5:1f:f9:d4:8c:
                    7a:bf:24:c1:69:c3:3b:66:16:bf:59:b6:92:91:f1:
                    78:2b:69:e9:1a:2b:38:77:55:3a:8a:30:b6:1b:4c:
                    e2:db:4d:66:f3:54:e1:9f:b8:54:af:a6:fd:25:df:
                    a1:d5:58:7a:25:69:ab:05:be:b4:85:aa:17:0f:80:
                    b0:38:74:4c:79:c5:92:95:e6:9a:60:3d:da:f7:41:
                    f0:9f:8e:3c:41:7c:12:3b:4c:f0:11:85:55:91:c0:
                    9c:8d:45:7e:77:17:79:de:d7:dc:b1:43:4c:3d:ca:
                    f7:d8:b0:71:db:b2:64:43:f5:c4:31:c6:93:5c:b6:
                    a7:c8:1c:d1:44:56:6f:05:58:da:c8:29:02:e6:a7:
                    f1:ba:0c:c9:ba:90:f7:1b:32:d7:9b:a4:6e:33:57:
                    33:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:78:B6:7C:E3:44:0C:28:0C:11:B5:B2:49:EE:0D:8E:BD:AB:41:1F
            X509v3 Authority Key Identifier:
                keyid:08:84:65:B3:7B:2D:4E:9F:41:3A:31:DC:7B:7E:6C:BA:2A:33:DB:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIRls3stTp9BOjHce35suioz25Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3e2b18-55c9-4180-8c6e-2c7086fded93/1/CIRls3stTp9BOjHce35suioz25Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:18:57:87:32:fc:65:45:a0:35:f9:f0:59:7b:fd:3c:70:a0:
         7d:af:11:e5:d1:bd:23:48:0b:81:9b:f8:47:17:b5:ec:b8:48:
         3f:96:ca:4a:5a:44:95:92:0b:71:3a:ba:6c:49:06:4e:b6:44:
         99:9f:47:db:57:9c:0c:86:5d:4a:22:32:d1:24:fa:7f:d7:4e:
         a9:e4:10:fd:be:b4:cd:0c:5b:05:9a:bb:64:98:81:2e:b8:6c:
         84:a6:8b:a9:e6:05:7e:ba:ba:4f:a1:76:22:4f:63:6f:73:9c:
         3f:1b:87:d8:72:9c:10:6d:75:d4:65:67:fe:8a:77:de:35:b9:
         6a:93:21:fd:11:a6:42:32:c4:27:ef:51:a7:88:ef:68:13:35:
         ca:c4:d1:ba:4f:67:10:7a:a5:14:dc:90:40:a8:9e:e1:ea:69:
         a1:a7:87:bc:02:11:6a:8c:73:5b:95:a2:c6:e9:f1:14:71:ef:
         92:7f:29:b0:93:c2:1b:e9:6d:ad:e6:da:0a:e7:5d:1b:61:97:
         18:5a:c5:d7:0f:52:77:6e:5a:a8:af:5c:8e:df:c1:9f:c4:da:
         5d:0b:68:e4:e6:11:94:75:e1:d1:b9:c9:a2:04:5b:e3:86:b3:
         a5:35:fd:07:78:43:62:ca:9a:d2:bd:31:eb:d8:10:81:34:f2:
         6d:21:31:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:31 2026 by rpki-client