This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
File:                     pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json)
Hash identifier:          BX5KEFrT+cxxItKRl+kv3qjV6KBlZjkfdKiMNkexwTo=
Subject key identifier:   D0:FE:6E:67:CC:91:4B:D6:2A:31:BF:06:54:C5:25:3D:49:92:81:E9
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Certificate issuer:       /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial:       019BF20710D8815B49DA5BC8949B95180AA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
Manifest number:          1069
Signing time:             Sat 24 Jan 2026 22:01:47 +0000
Manifest this update:     Sat 24 Jan 2026 22:01:47 +0000
Manifest next update:     Sun 25 Jan 2026 22:01:47 +0000
Files and hashes:         1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=)
                          2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=)
                          3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=)
                          4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=)
                          5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=)
                          6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=)
                          7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=)
                          8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=)
                          9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=)
                          10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=)
                          11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=)
                          12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=)
                          13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=)
                          14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=)
                          15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=)
                          16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=)
                          17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=)
                          18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=)
                          19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=)
                          20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=)
                          21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=)
                          22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=)
                          23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=)
                          24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=)
                          25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=)
                          26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=)
                          27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=)
                          28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=)
                          29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=)
                          30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=)
                          31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=)
                          32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: 2z6qhrvT2/yRUaDiJeey+HsSqyszReJZMRsELK+aYl0=)
                          33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=)
                          34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=)
                          35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=)
                          36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:07:10:d8:81:5b:49:da:5b:c8:94:9b:95:18:0a:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
        Validity
            Not Before: Jan 24 22:01:47 2026 GMT
            Not After : Jan 25 22:01:47 2026 GMT
        Subject: CN=d0fe6e67cc914bd62a31bf0654c5253d499281e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0f:27:08:a7:c2:d4:59:13:2d:b0:02:ea:d9:
                    15:a6:6b:9a:34:20:53:69:34:22:f4:11:72:cb:83:
                    01:e4:be:d6:e4:f2:8f:4a:a9:48:cc:09:6c:1a:d2:
                    3f:d0:58:dd:5a:53:76:91:5e:4b:be:a8:3a:c4:2b:
                    8c:94:5f:76:7f:93:9a:7a:6b:d8:15:53:f4:ca:57:
                    cf:c8:71:ae:b3:ac:2c:64:0b:53:33:a9:96:3f:1a:
                    8a:b6:1d:0e:06:db:72:12:8f:b1:34:9d:bf:e2:47:
                    58:81:46:5b:a5:8c:47:7a:c8:f6:77:48:9d:65:de:
                    ec:ba:e6:40:6f:7e:c0:cb:25:83:ba:23:89:eb:c7:
                    d5:b2:41:ad:5d:5e:65:a8:40:23:86:85:bf:81:74:
                    23:fb:8e:1d:f2:b5:d5:91:25:76:99:9b:46:b0:89:
                    4e:f5:59:f7:fa:ba:17:09:fa:ca:27:a9:ed:6d:6c:
                    4a:04:f1:95:bc:5c:67:77:74:82:e5:71:28:52:8d:
                    f0:90:03:c8:11:5b:f7:e3:ca:e7:ab:df:c0:54:cd:
                    db:d4:bc:3e:1b:b3:28:2f:af:e1:9a:af:3a:ab:d9:
                    d9:46:76:fb:e1:4a:a2:33:39:b1:35:7c:31:15:0b:
                    1f:7c:a5:aa:6a:b3:d6:3e:68:72:8b:a8:de:9b:bc:
                    a5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:FE:6E:67:CC:91:4B:D6:2A:31:BF:06:54:C5:25:3D:49:92:81:E9
            X509v3 Authority Key Identifier:
                keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d4:6f:9c:02:98:7f:dd:44:91:78:48:ca:d2:76:ad:0b:5f:
         59:cf:a1:f0:b7:56:76:0e:66:ad:d7:04:46:72:f5:de:15:3f:
         66:eb:6e:c3:9f:cf:00:6d:24:59:c9:45:62:3d:6d:d5:41:39:
         25:a1:c5:0c:41:2c:fb:61:17:f6:ea:0d:94:92:5f:41:f4:be:
         d8:ed:b5:5c:10:db:ea:91:e6:4a:8f:cb:cd:07:e7:1f:39:78:
         27:5b:ef:dd:f8:19:d0:5b:84:3d:2d:41:c1:df:30:67:65:d6:
         2c:6d:ed:50:6b:6b:3f:0a:c3:c7:8d:36:8e:2f:eb:20:00:77:
         42:49:18:5e:c4:69:9d:bd:e8:bb:ee:f8:c0:f6:82:73:91:f9:
         21:87:87:c7:9a:17:93:ab:ba:56:93:e6:30:b3:6c:44:d0:2f:
         61:61:1c:13:76:c8:6c:24:42:44:09:b2:ab:b8:c7:fe:a4:0f:
         37:59:5d:2d:ae:66:74:72:be:f2:20:28:b4:ce:91:a6:92:ea:
         74:ba:0a:99:78:e9:dc:df:8c:cb:fa:ce:34:b6:c5:7d:b8:97:
         71:0c:6b:76:e4:e0:78:14:8b:6d:e3:e3:31:44:df:e1:15:79:
         ec:19:d2:12:60:05:c4:7f:57:73:2b:fd:f8:76:ba:6a:6d:01:
         ff:32:0e:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyBxDYgVtJ2lvIlJuVGAqjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj
OGJmMmMwHhcNMjYwMTI0MjIwMTQ3WhcNMjYwMTI1MjIwMTQ3WjAzMTEwLwYDVQQD
EyhkMGZlNmU2N2NjOTE0YmQ2MmEzMWJmMDY1NGM1MjUzZDQ5OTI4MWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8g8nCKfC1FkTLbAC6tkVpmuaNCBT
aTQi9BFyy4MB5L7W5PKPSqlIzAlsGtI/0FjdWlN2kV5Lvqg6xCuMlF92f5OaemvY
FVP0ylfPyHGus6wsZAtTM6mWPxqKth0OBttyEo+xNJ2/4kdYgUZbpYxHesj2d0id
Zd7suuZAb37AyyWDuiOJ68fVskGtXV5lqEAjhoW/gXQj+44d8rXVkSV2mZtGsIlO
9Vn3+roXCfrKJ6ntbWxKBPGVvFxnd3SC5XEoUo3wkAPIEVv348rnq9/AVM3b1Lw+
G7MoL6/hmq86q9nZRnb74UqiMzmxNXwxFQsffKWqarPWPmhyi6jem7yl7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND+bmfMkUvWKjG/BlTFJT1JkoHpMB8GA1UdIwQY
MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt
NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi
LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdRvnAKY
f91EkXhIytJ2rQtfWc+h8LdWdg5mrdcERnL13hU/Zutuw5/PAG0kWclFYj1t1UE5
JaHFDEEs+2EX9uoNlJJfQfS+2O21XBDb6pHmSo/LzQfnHzl4J1vv3fgZ0FuEPS1B
wd8wZ2XWLG3tUGtrPwrDx402ji/rIAB3QkkYXsRpnb3ou+74wPaCc5H5IYeHx5oX
k6u6VpPmMLNsRNAvYWEcE3bIbCRCRAmyq7jH/qQPN1ldLa5mdHK+8iAotM6RppLq
dLoKmXjp3N+My/rONLbFfbiXcQxrduTgeBSLbePjMUTf4RV57BnSEmAFxH9Xcyv9
+Ha6am0B/zIOHA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:18:03 2026 by rpki-client