This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
File:                     0H11c6rK6CHIfW02Qxz-SygBq0E.mft (raw, json)
Hash identifier:          s0e+PnWiignKM5KQtK7oZqazeEt0lZHon+IMFlayz8I=
Subject key identifier:   9A:AF:2B:40:5A:63:4E:13:34:7B:B5:D9:D4:52:8E:3B:57:6A:9B:60
Authority key identifier: D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41
Certificate issuer:       /CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
Certificate serial:       019BF5E2FDF3A1A2CBD3A789FD8636B790AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
Manifest number:          1539
Signing time:             Sun 25 Jan 2026 16:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:52 +0000
Files and hashes:         1: 0H11c6rK6CHIfW02Qxz-SygBq0E.crl (hash: vpZjgHjkuGFKGx41mvT/pPor8JAvWdUOobIb4VC3gyU=)
                          2: 8xUINwR_MZF2v4_Uc8NHq55tEu4.roa (hash: BeND2ovC8Tb4Nwoyh9HxRMDQdbkz3PoJwktwooDxVhk=)
                          3: 9yRC7zAUCj4WsEYWohBubnEg-To.roa (hash: BAP4Q9Aas18vDD1GYMHWN+ne8d9I+odSYSc4FqyAAMk=)
                          4: B2YoZgrpQEDb8UGkfFFcmk1C8WU.roa (hash: lrmThkzbXwEgonP8nGIi95OkJtxQ+u0aZhl33JVnnGg=)
                          5: HvxaqPnCVzCzJqdTxy9QM7dhpvo.roa (hash: jvJDycM8Kwx/kDrj1W5EYQK9WGSm7y5sJzrsu3gD7EA=)
                          6: KVWGAtNaDYuCLBDqyjhmNTSUsco.roa (hash: I+mYgzLuOkLdrV2nmEsQLkeZAGwvKj2fiTFinUQhLus=)
                          7: O4wX-zREvFToFPAF8_QrfeHlFV8.roa (hash: AuJD+oGrEuzjm5RNbgKhP3+ewZtfDa45xvNHgyGDnu8=)
                          8: Q5KjtFuA4b13GYFReAXac6ikxMM.roa (hash: C9lFOLqvB3UVVYIvZafTYRaPsoOOXhpw7/LoWS9f3HY=)
                          9: SigdKS7JtTEVYXgED4DdixD6OgM.roa (hash: NfamlOUNbIv4AqwK/fv2VF3gtE7JmiXqUNd8ZVZzSIc=)
                          10: T7CuE8sM8Qd3oo0RRa_h_Cc-W5M.roa (hash: ZWBCyQYdJoW8TuwkXaB5bNFnPnWKEyVuntW9B90XJeU=)
                          11: VtpjoWz0RdFNmkffYS2weF5bVAs.roa (hash: HVKb03zFb2eoY7pvE7f8ruqUNxZJTuKgQsAR9YLQhCs=)
                          12: ZJ56n3Y17TFJk-Tqc_ycphu8qgc.roa (hash: J+O1IkyhA+FTfPaWOGsyaFo/vFHRN64aMyNig4w0a6g=)
                          13: ZWqzQW9YD9i4oAqI2NU1KN-k8BA.roa (hash: m/dMgskCu/LRhEwHUxPFbSCbCpuefF8R5De3vG7ME3g=)
                          14: _1Ck2zOMmaEKy6jWTA2To4WXHOc.roa (hash: PosaMGaTcyPhx+0qx4rcwdvlDm/JVQKWlg+9OoGTG24=)
                          15: _XNB-uxfsS8Bg-aoGqYMaoc-YB4.roa (hash: +2E5bdIK9sFDQ0WQhkQrjROrGKFuw2mz7mQOzFxJQT0=)
                          16: _g5wGZfyMy3-AkUPnKNuMg5TWV8.roa (hash: lBSsBrgpgGHjUcWq8qlYBX3qnVmb+Y5QAoDDvYZngGA=)
                          17: aj3l0yv9XLpdil7kCp_8ryv10IE.roa (hash: PrL6FnkTyQ9oBvc6R+GpyIsFkpSpBE166q8B3+Lb9OA=)
                          18: c_cnoepM2LH--kK93huc5LFtAGM.roa (hash: yf0pYWUbz2m2vPji81gl+P3qnDg6ATcYw6U5kY+PL4w=)
                          19: eVgfq36VRdQ-XOngEBCyoqvAPkI.roa (hash: +CVzb6eA5CbaFxZDloliVM6kDTn+ZGIaxtZcOdNZ3+w=)
                          20: hRBOq97yc0j5iPcr4gfDn3KJQyY.roa (hash: Xy2a29JOYTMfN3fVGwk03l3mrjFbTa3ns9VGhqHF9bU=)
                          21: n7vhvJ9MIGIgZBvpGwhhnNShRAQ.roa (hash: htARq6EX3Sp+hmNjOwGerogqy143+hwQcapChVQW1G8=)
                          22: oIIbuj2FHcGESIdrcnZdquUCmAw.roa (hash: IYUyIGj5ktu8xidYz/ZKK6vrmLnBBGD3Tn1bdnoOMEY=)
                          23: qa4AJBW86Czjko9NBPVz9ex8J2A.roa (hash: SNkj/qaNSHoPn945qKVgvTpVHs/z2BHkGTHMKbZzEpM=)
                          24: uaMX8OCYbSxBlbpnUENrRiTwaY0.roa (hash: AZg0zm8r8ZxZT3h6KfhtY2c5WsXYcVXS9ecTWb+mM/M=)
                          25: vBIP5l9f7rLOmxHW6g1Sox18wCU.roa (hash: RfnJ5Sz3BFVwYnK6CAz5XEIDTL6Yuu7HFULOecFrd74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e2:fd:f3:a1:a2:cb:d3:a7:89:fd:86:36:b7:90:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d07d7573aacae821c87d6d36431cfe4b2801ab41
        Validity
            Not Before: Jan 25 16:00:52 2026 GMT
            Not After : Jan 26 16:00:52 2026 GMT
        Subject: CN=9aaf2b405a634e13347bb5d9d4528e3b576a9b60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:07:da:a3:f5:c3:eb:50:b5:25:22:f5:31:d4:
                    c4:5d:54:7c:2f:a8:2d:77:cf:91:50:1d:56:0e:43:
                    6e:7b:f4:bb:03:f4:bc:6f:b7:d6:93:ad:01:e9:83:
                    1d:46:79:03:c2:a6:bf:b3:f3:d2:9e:31:e1:5d:2c:
                    ce:9a:77:78:f5:e1:dd:61:ce:cb:94:44:f1:93:61:
                    00:c9:0f:f8:5d:df:57:e3:28:b3:48:c3:5a:68:8c:
                    68:fb:cd:89:b1:97:dc:7e:4e:71:c2:04:ad:2a:74:
                    8f:86:68:86:73:73:63:94:ba:86:84:63:ca:49:0a:
                    bf:9a:48:8c:69:be:06:12:33:55:8d:dc:4a:4e:0c:
                    b4:ce:c2:ce:43:ec:c6:2d:16:81:44:76:4c:1e:73:
                    e8:38:59:8c:d7:6a:a0:d1:c2:4d:65:d7:a2:a4:1d:
                    ee:ed:f4:27:66:a6:e6:67:47:bc:f3:5f:a4:73:a1:
                    c7:f7:fc:c0:51:fd:50:06:3d:1c:87:26:14:fd:49:
                    b4:ed:80:00:1d:3f:6d:06:68:4c:bf:4b:23:ff:3a:
                    5a:dc:68:00:d9:ec:14:b0:52:4a:d8:48:29:8e:1a:
                    07:ea:a1:4c:fa:22:36:6e:55:47:ab:86:b7:cc:be:
                    84:92:34:b8:3e:b2:00:c9:95:4f:69:6b:65:54:c2:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AF:2B:40:5A:63:4E:13:34:7B:B5:D9:D4:52:8E:3B:57:6A:9B:60
            X509v3 Authority Key Identifier:
                keyid:D0:7D:75:73:AA:CA:E8:21:C8:7D:6D:36:43:1C:FE:4B:28:01:AB:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0H11c6rK6CHIfW02Qxz-SygBq0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5725cc-ad70-46f8-bb62-cf9dc5baaa79/1/0H11c6rK6CHIfW02Qxz-SygBq0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:de:55:fa:c0:a1:eb:b0:6d:c0:c1:56:69:7b:45:2d:53:19:
         c2:36:81:b4:9e:12:b2:a9:c9:57:06:57:fe:f5:b2:1c:39:04:
         e9:bb:1e:62:15:b4:45:9d:08:af:00:dd:c4:b8:1a:bb:e6:dc:
         a5:df:85:1a:7c:29:36:e7:1e:d0:07:75:c2:21:d3:d6:ce:81:
         50:75:38:9d:9a:2d:d6:f5:65:00:3f:66:6c:a8:8b:0a:79:0c:
         2f:1e:54:0c:f4:52:4c:14:bd:f0:19:fa:c6:eb:f9:f5:20:aa:
         be:7a:71:11:2c:7f:f5:2d:50:ac:3c:2f:d5:4c:ac:3c:6e:ac:
         88:3c:11:15:64:66:c5:0b:2a:8f:24:23:1a:07:b3:f1:c9:e0:
         36:4e:71:5e:2f:b5:32:fd:bd:a0:d4:dd:df:a3:44:9a:55:c3:
         b9:f6:7f:fc:10:07:b1:8d:ff:5a:1a:35:72:3b:aa:9c:cd:55:
         6f:0f:4b:e6:4a:ec:91:68:1a:f8:78:90:48:2f:f4:36:23:62:
         02:bb:ad:13:ec:43:66:a9:75:78:fe:68:36:72:b1:d2:00:c9:
         bf:87:ee:59:e5:d3:3d:a5:e9:26:88:3d:50:14:2e:21:56:1b:
         1f:82:5a:e2:fb:75:ba:8f:86:be:a4:e5:cb:7a:a2:0a:f7:f6:
         7f:a3:d5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:01 2026 by rpki-client