This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
File:                     dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json)
Hash identifier:          k883jMsU2+RrgpzC1EIZrv7f7AXLRNlO/6OOI1R5RSY=
Subject key identifier:   EC:56:84:7B:0F:B8:C6:ED:00:1E:E2:21:50:55:08:5D:16:D6:89:D2
Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9
Certificate issuer:       /CN=74e3c336972094b1a8c13d41816857d197a3aae9
Certificate serial:       019BF1CF03E3512B0B6B5994BC6E8B7D2F44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
Manifest number:          150B
Signing time:             Sat 24 Jan 2026 21:00:34 +0000
Manifest this update:     Sat 24 Jan 2026 21:00:34 +0000
Manifest next update:     Sun 25 Jan 2026 21:00:34 +0000
Files and hashes:         1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=)
                          2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=)
                          3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=)
                          4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=)
                          5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=)
                          6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=)
                          7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=)
                          8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=)
                          9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: BEkuVNENL4KV3CszsOl36Ue4BQiIz6zeM01Y+LdiBoE=)
                          10: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=)
                          11: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=)
                          12: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=)
                          13: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=)
                          14: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=)
                          15: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:cf:03:e3:51:2b:0b:6b:59:94:bc:6e:8b:7d:2f:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9
        Validity
            Not Before: Jan 24 21:00:34 2026 GMT
            Not After : Jan 25 21:00:34 2026 GMT
        Subject: CN=ec56847b0fb8c6ed001ee2215055085d16d689d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2d:b4:21:73:40:a4:fd:09:35:c5:e5:44:0f:
                    cc:3e:57:ac:13:fa:47:ea:68:3c:35:0b:ca:20:af:
                    fc:9f:25:19:89:bc:06:25:38:2f:9d:10:94:19:c2:
                    91:ed:3e:cc:d2:84:f8:17:ca:88:17:1c:c9:57:07:
                    a3:2a:4f:0c:ba:17:41:41:de:72:88:e0:e1:00:02:
                    a7:7f:31:e7:c2:8a:7b:e5:3f:8e:e4:d7:29:35:b6:
                    db:f5:76:28:96:61:8a:00:b9:d2:e1:f1:e2:cd:ac:
                    58:bc:70:a9:d7:19:f5:0b:7f:de:04:b0:de:24:e1:
                    fc:01:8c:96:1d:5b:a9:54:af:a1:c8:e0:1a:30:7f:
                    c1:fc:97:24:46:89:83:0f:bf:dd:6a:04:c4:d6:39:
                    63:35:be:9b:5e:de:f7:b9:33:f6:41:0b:06:26:b3:
                    23:59:8a:e5:93:7a:e8:8f:16:b4:07:7b:8b:cb:d3:
                    03:67:c7:61:db:68:f1:5e:9d:8d:c8:d2:e2:26:26:
                    95:fe:df:cb:8c:b5:d5:f2:a0:e8:4f:ee:83:d1:a6:
                    3a:71:bc:b9:f0:fb:99:33:00:e7:58:1f:24:a9:72:
                    f0:94:a5:a7:80:5c:fe:9b:b6:b0:57:46:6f:6e:75:
                    ef:90:2f:9f:88:54:4b:19:75:82:22:f6:ef:1d:3a:
                    1c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:56:84:7B:0F:B8:C6:ED:00:1E:E2:21:50:55:08:5D:16:D6:89:D2
            X509v3 Authority Key Identifier:
                keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:4d:be:a6:c2:d5:58:bc:9b:e7:23:75:24:00:44:21:17:f2:
         a5:c6:71:9a:34:61:16:37:0f:9f:2b:ec:d2:14:6a:37:9b:cc:
         f7:c6:e3:ef:9c:14:9d:b0:91:40:4b:9e:ec:0a:fc:00:3c:8a:
         36:30:dd:f3:88:76:55:6f:41:69:23:19:29:bd:b5:24:c7:48:
         a3:5f:4c:87:5f:08:8e:5f:20:cf:60:ec:69:0f:42:d9:d1:fc:
         cf:bc:d0:66:c8:23:9b:23:80:cd:88:f9:22:9f:5c:eb:14:c2:
         72:c5:68:cd:26:74:e3:9a:29:5a:16:3c:cf:75:aa:84:5d:88:
         e7:57:03:31:b7:16:08:34:b5:15:d5:86:6e:8a:47:14:04:3f:
         95:8d:e0:17:19:70:07:0c:bd:9f:06:8d:cc:7a:9e:cb:2d:4b:
         ad:b5:cf:d1:1b:36:0c:e8:c2:6d:48:77:55:42:73:6c:e8:21:
         a6:c1:36:b8:c2:ec:38:1f:ab:78:ef:cf:7e:7b:cc:be:2a:17:
         23:cf:06:f7:af:a1:e8:72:d7:36:43:34:0a:3d:f0:a2:10:56:
         b0:24:b7:05:60:5b:22:a0:8d:91:cb:a5:d0:ab:28:d3:43:55:
         cf:e1:da:94:05:83:63:76:70:d8:4f:8e:9e:7c:76:60:28:3a:
         b9:11:31:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvxzwPjUSsLa1mUvG6LfS9EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh
M2FhZTkwHhcNMjYwMTI0MjEwMDM0WhcNMjYwMTI1MjEwMDM0WjAzMTEwLwYDVQQD
EyhlYzU2ODQ3YjBmYjhjNmVkMDAxZWUyMjE1MDU1MDg1ZDE2ZDY4OWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C20IXNApP0JNcXlRA/MPlesE/pH
6mg8NQvKIK/8nyUZibwGJTgvnRCUGcKR7T7M0oT4F8qIFxzJVwejKk8MuhdBQd5y
iODhAAKnfzHnwop75T+O5NcpNbbb9XYolmGKALnS4fHizaxYvHCp1xn1C3/eBLDe
JOH8AYyWHVupVK+hyOAaMH/B/JckRomDD7/dagTE1jljNb6bXt73uTP2QQsGJrMj
WYrlk3rojxa0B3uLy9MDZ8dh22jxXp2NyNLiJiaV/t/LjLXV8qDoT+6D0aY6cby5
8PuZMwDnWB8kqXLwlKWngFz+m7awV0ZvbnXvkC+fiFRLGXWCIvbvHTocUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxWhHsPuMbtAB7iIVBVCF0W1onSMB8GA1UdIwQY
MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt
YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3
LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu02+psLV
WLyb5yN1JABEIRfypcZxmjRhFjcPnyvs0hRqN5vM98bj75wUnbCRQEue7Ar8ADyK
NjDd84h2VW9BaSMZKb21JMdIo19Mh18Ijl8gz2DsaQ9C2dH8z7zQZsgjmyOAzYj5
Ip9c6xTCcsVozSZ045opWhY8z3WqhF2I51cDMbcWCDS1FdWGbopHFAQ/lY3gFxlw
Bwy9nwaNzHqeyy1LrbXP0Rs2DOjCbUh3VUJzbOghpsE2uMLsOB+reO/PfnvMvioX
I88G96+h6HLXNkM0Cj3wohBWsCS3BWBbIqCNkcul0Kso00NVz+HalAWDY3Zw2E+O
nnx2YCg6uRExzQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 06:07:43 2026 by rpki-client