This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
File:                     8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft (raw, json)
Hash identifier:          nCAHaQaUqj6XxrUBrFp0UJqRDkY9BulqTWAenBqEnpk=
Subject key identifier:   EF:FD:E9:33:ED:39:C1:02:4F:64:18:A7:25:BE:2D:A3:84:C9:72:E6
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Certificate issuer:       /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial:       019BF2E2AB7504A4632DDC6384796527D1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
Manifest number:          18E0
Signing time:             Sun 25 Jan 2026 02:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 02:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 02:01:39 +0000
Files and hashes:         1: 3i7eecIYXJFMtWbTomoMld1jbsU.roa (hash: IKHXGLydTQAG9uvsO3wqN1AT0T0tKUnVEdCSkS/dVQk=)
                          2: 3zPWSVi1xKNHgi-DcSpqaMulPAM.roa (hash: XmSVH6OWOK+57jQiUpzRVApK787x/2+FteNaQECymcY=)
                          3: 5SMwrN_wq7GbihxhXj3Wp0-r9Iw.roa (hash: rztDOlgxHtA1Pu/RNy1ezx+YrSzDhk4zBlnVU+gOf/g=)
                          4: 6wxp6D90PbkCxonPP-7ItR_YqfY.roa (hash: /lg76dYtxvJCPKRCwUkyQeGdGXsapuk2HDK2CHSLQQA=)
                          5: 867DHR_gPpsXfR_6NxjJjeTNrfw.roa (hash: TRrByCoKZXdTUeNEKq7vGJkpkob7vYLVejRCbzVB1kQ=)
                          6: 8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl (hash: ZwQhwiKpf42TjP7oaM+/rkKXCgmHwy68bISN9drtIcI=)
                          7: 9xFZf7INYLbCIzyIf9b3P8fIOc0.roa (hash: /1LZV84DzzmiMTI58aVYXXt0WNKI/eQJpLTcNCvbGck=)
                          8: Awu7K6uBqTyYqPynAIVRK-5kPm4.roa (hash: 7TiIWybHXRnbv5hE65euWBGO02DixC/YO8jfz7Nss8I=)
                          9: CaWkjFlDf_GHD_D0djsNXKtYuE8.roa (hash: o86xqFgz878m1TntBnMgIpo2h0QiuhFjerPYUxCcs3A=)
                          10: DUTgV1bA9_o5dKe8lemDWjvMEEE.roa (hash: gYJWfDKrmLidy0VIroB1npsg2xaP97yBGOTB4byJG3o=)
                          11: FFYvXG3A9UDJhsj0-YrKuleDeM0.roa (hash: v3ZUhVy1LRa8cnJ36ehyxwdGBypz+FvkxBuOalRK5yA=)
                          12: G0j4IoE-ugCMEr84DNMqH4xjHZw.roa (hash: NdFWvMVet+G455uF6ZrnwIrwjrfOSjTkt3TcUmOzIEY=)
                          13: IkbW3p7UPv8rk58pgNjSuxqf1sA.roa (hash: 6macv08vdsEcfjTUw6WLKYaZ1q5waPGq5JAJEmg9ESw=)
                          14: JlzUlUHXjW5zqvwixAy9oMWnTdc.roa (hash: AmbuKHZkWKwTlajCf56DPydst/tN35Tsh9yESRfKx6A=)
                          15: On2KNHxJggzhj5AgXK5NbPHrL2Q.roa (hash: fsSPQUeJYyWLXiz1hpLry6K4C/Imk5T/lJNXRxqJKA0=)
                          16: ZveU_Vqfn9-Be4p3ztmtZTlHkhM.roa (hash: /KDFOVm97hN+qDZV4DOVh7izdesZzp1DJOCDSbno4BA=)
                          17: _EPwTpyXTdklr6rbc2bFD4AKcjY.roa (hash: mv8Zo3ebEee5w8qs7cTujP3otIfg+5OcbkXbPPRyelY=)
                          18: b4gApv3V9WNuH1tUYB6hLsjX2Mk.roa (hash: Gl55nIcp7Geh+WGb27hWRSt+zD+uJeV75P0qyXtzqOc=)
                          19: bnpFISkHVWYEcEO5XwuCPj0u3m0.roa (hash: nd+DkS58Y5hISuLgopesw5jR4eTyK7cGl1zOb/iq1rE=)
                          20: eHw1Dv0-iPz6cBJwpcSTNw1s2DE.roa (hash: dU4EZvdrDYCqFvrEmWTYqkLKWomor5VqWMAq1E8iu7A=)
                          21: f1AUl8meEE7Q5b1U9EoHUolqnzs.roa (hash: SUsTh6XWvXwYOoWCGvLODf9MslCbjPaVdo66/JGxWuU=)
                          22: jukzqBN3MLbeKVI2HbGH1M6Rq9E.roa (hash: 3VyrLTv5msCiOqxXAT5r6HeXGSHnowkLXALYkydr0XI=)
                          23: k2Ju4abbP5m9FcP_TcONvNialGo.roa (hash: +xKSaZxzFTvFYXFzopdW+GeQg55zpXmLh6yFWO2T458=)
                          24: kv8EY5Ye7Eutwf1Db0UJNIUPGSA.roa (hash: RWKNuZDHGzomFz/Fugk4epNi/zZaBPNtfDabOwz8lZM=)
                          25: mu8sewjnHs63ljc5EPin04mGuqc.roa (hash: Nlly8/HRUi2DmuSutAUb+7rXqXjB8gC4wwHwf9Fq78k=)
                          26: sstchpp41wfR36zmN_VppKaWZCM.roa (hash: BT2ePRQ519c4Xbc7A10/SCSBxkC+28CQt52Y0dXyeNU=)
                          27: ta7RNijMrlT7XLwISB-DzbnGBEA.roa (hash: htdQ/B3zavFvNHE8jCWCCL+qsSOUQlVeq0UkLWAcUbs=)
                          28: u7nEbY5NwbL5HXW0l-V-8pl_64s.roa (hash: LrWkvx/a3seM8ivTnZCNGMGBOaWSwFKUegrXwjkMzAQ=)
                          29: uCRrF5H6MO65ZSaMccf4F3ImvvI.roa (hash: wGlRyFIjCEhLLNtkuVs0yaGsRVeHljW+UCOqu6XTaik=)
                          30: xwNwvn3pmRym-lKjL7cDbgOMKSM.roa (hash: osARPS1YdUG0wnyr4pTEyWzxtHT+Yc9Ug45OCObpzmo=)
                          31: zI5C9mfneRZXzcAl6HQ4bK2hAS4.roa (hash: jkBE+1m4R7+LvNcEB/81M9OQvsMUrKW4l6ShLFWd8Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:ab:75:04:a4:63:2d:dc:63:84:79:65:27:d1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
        Validity
            Not Before: Jan 25 02:01:39 2026 GMT
            Not After : Jan 26 02:01:39 2026 GMT
        Subject: CN=effde933ed39c1024f6418a725be2da384c972e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7a:9b:23:cb:c0:18:6f:22:bb:c8:50:0a:7b:
                    06:74:94:e1:58:f4:12:56:8c:ae:ce:05:e7:2b:57:
                    67:84:5d:25:29:35:8a:2b:fa:1a:b9:4c:fd:85:d4:
                    44:f5:73:11:fe:62:e3:b5:37:4b:82:06:67:a0:1e:
                    7c:36:d3:9d:b8:b5:50:bb:37:79:a8:4a:07:1b:b0:
                    32:33:a7:48:56:18:d3:af:eb:ae:c5:32:ec:cd:8f:
                    a3:cb:fd:54:1f:d4:6a:01:43:f0:f5:94:17:0a:2b:
                    d1:87:9d:59:e4:25:7b:fd:17:50:12:42:59:b9:42:
                    9a:7f:f1:51:c7:7c:bd:94:47:d4:4e:4c:44:d2:ff:
                    69:7f:36:8b:45:28:32:a8:39:72:83:fd:d3:23:18:
                    21:47:61:57:b7:ad:a9:8c:43:95:89:03:21:87:c0:
                    59:59:19:07:1b:81:79:a1:9b:1b:da:67:c2:5b:e9:
                    50:1e:93:53:2b:5a:a1:9e:f4:16:0c:d7:c2:81:80:
                    b3:54:c6:43:be:ce:b6:dd:39:4f:96:54:de:dd:0d:
                    2a:94:82:fa:d0:46:dd:fd:27:52:8d:ad:c7:52:5d:
                    1b:94:69:72:c3:ca:ba:b4:58:15:20:7f:b5:96:c7:
                    68:a0:ea:91:99:63:ed:d5:7a:e5:63:aa:5f:56:36:
                    ea:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FD:E9:33:ED:39:C1:02:4F:64:18:A7:25:BE:2D:A3:84:C9:72:E6
            X509v3 Authority Key Identifier:
                keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6b:64:b3:76:f8:27:8c:c8:4c:cd:17:98:06:52:46:8d:49:
         93:d2:86:7b:0e:39:0b:68:9c:96:c0:38:45:5c:27:c1:79:34:
         b3:c0:96:c8:49:df:22:0a:cb:2b:13:1a:30:36:b6:64:4d:1f:
         71:2f:c3:0f:b8:36:85:bf:53:94:cc:2c:59:2c:ba:4d:32:6a:
         5c:f2:26:ab:48:61:2a:86:d0:6a:62:dd:2d:5e:43:ff:35:36:
         c7:fa:ad:57:e4:22:92:48:4e:1f:b3:d8:0d:70:af:31:08:8d:
         92:3d:01:ee:4c:f1:13:1b:6c:40:f9:3c:c4:62:2a:f9:43:e3:
         4c:5d:32:a5:0c:d7:75:fc:0c:59:e8:5d:36:87:dd:49:8c:e0:
         39:4b:52:a4:ff:40:26:cd:62:c1:5c:5a:72:ca:f7:ad:45:68:
         76:32:39:f7:d1:f9:ab:4a:83:9a:9b:77:ce:10:e2:d8:f3:32:
         a5:eb:82:2f:f1:62:76:c6:d0:c8:33:43:c8:37:6b:b7:4e:61:
         72:2d:2c:bb:0b:88:3e:0f:5d:ee:c4:51:2b:2a:c1:6d:da:09:
         01:cf:e7:d2:c5:09:f6:32:b0:0f:bf:c6:52:d9:3e:a2:51:3a:
         7b:3c:a4:b3:6b:cc:dd:aa:27:39:c0:ee:f2:c0:35:8e:e6:80:
         21:8b:a8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:15 2026 by rpki-client