This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
File:                     zbg8_lSJg18pTQr03U2249wl8fM.mft (raw, json)
Hash identifier:          HLHuBKc5BhM5sJlpA6zKZUqz7mole2Xwmb7nujaJ4QE=
Subject key identifier:   C1:B0:F0:87:AE:13:DF:79:F5:5D:AD:00:3F:0F:B9:9C:3D:8F:0A:90
Authority key identifier: CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3
Certificate issuer:       /CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
Certificate serial:       019BF49913D30F332F54067AAB9BB32C13E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
Manifest number:          1805
Signing time:             Sun 25 Jan 2026 10:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:31 +0000
Files and hashes:         1: 1--RggRk_qlH26F-8QTH2ie7muc0.roa (hash: Hqhf4xa2ID1VNwxmhITZqAJ15hDU/4FyBARifnG6Ixc=)
                          2: 1a7SZTEXLvsY6ZnhEFxz-R8N7uM.roa (hash: VvGo7k75GH/z5NFVgpcLPEpxVLsQm0TzpboPdwFu0Yc=)
                          3: 3xxSrQX7ikVH9joHH7QsgCEkz0M.roa (hash: wOzTlwIIx8vGJW4532eTCHLypEd105cx24+b6jsBnOE=)
                          4: 4NONcDvqiCRqgZcQTfcqHeSzpuE.roa (hash: R27IngHDs3jcZqqkBeixBQgUg7p/CUgoVimY+Zoh0rs=)
                          5: 627RCQbVfaSLEpbqf1uOyStuItI.roa (hash: 2YbdBYQ9z8cknHKKXmc5SgbkxXPdynVrnlyUa/TP6wk=)
                          6: 9ok7vlhzmI90nPgnO1IgrHdTxZs.roa (hash: KMWs95W+KNbFg3H5cAfW7c/c378ZOgBFSVfOB7Q6xdc=)
                          7: FS6qKdeSnKpkyP4KDGh8dJRbaHo.roa (hash: /bleCUlTHodFMRUrIClkQu+L3DOefkymAjlInaomTNQ=)
                          8: PTblVwI2pEuayFVs15O8VzhVtcE.roa (hash: BZMI5kioCtcsLQnN5vspUQmXLq1H6ZDsa+ACcaZ9hIE=)
                          9: S1l-2dzwb-2zQHtI9oeC_VpCPtE.roa (hash: kgjDYJvzpvvXhGpA6SOSZpPon+c9XSP1iW9dljXHh6I=)
                          10: St6cINBiYFYzDsvoHQ0HIuhRHRE.roa (hash: TerSeMXT2wx/qxnCAM2X+sHCfRQgQnB7xYChR1RCmTU=)
                          11: _au0wimjEPCkLk0Si7B4RsrMdt8.roa (hash: /4fqj2Kq6klXf2682gRF7q2tz9MvyCSK5DmjIGN2uPc=)
                          12: _sJaMgsC9vZYHJ1-sJ2DQDObNds.roa (hash: tdKFcf6lEHJohX/dDC1SKuCr0lFpoQm/9xayJVcBCOc=)
                          13: fP0g3WG03fRKQvk9nCrI5dbtVbw.roa (hash: iqvY0ZnRaOtLATbSx1mHSetMiM19OQ+QCDRCVXbVWCo=)
                          14: g5zvUc47daXiwW8MR7Ooy7ZGGhM.roa (hash: VTog9oqmf4YsW9f1RIMMmAHBzttgFZnh44Uy6cLAglk=)
                          15: iBWI_be6KZTQs8EfQhXMJzUgSHM.roa (hash: ocUnmNt9pPZOeFDjwHl6jCfHOmkeOSrq2u2q/CCROrc=)
                          16: jWqvEO-jmA-gQShTX85xvehC5Hc.roa (hash: pL69sm9cpEpCR8BKzOZz9JU0vtplAVmf/Mq5uV1wJiY=)
                          17: mvCrPFk_f-cYnxy32upovMXOSbI.roa (hash: Hvm/Hs4xIKHjkYUXqkI7d2NYIoktj/SKLqPN0YW1qpM=)
                          18: tYauO89UbkmwK_N9XQExSS1v_Nc.roa (hash: d/1zWN1EmLOyscLiJiM90yzoqktyhFzjpIvKSzKk96Q=)
                          19: zbg8_lSJg18pTQr03U2249wl8fM.crl (hash: OQ1XtMm6C2p6gE4OcSZNfnQmhK3ivEhvU3cOmEGecWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:13:d3:0f:33:2f:54:06:7a:ab:9b:b3:2c:13:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb83cfe5489835f294d0af4dd4db6e3dc25f1f3
        Validity
            Not Before: Jan 25 10:00:31 2026 GMT
            Not After : Jan 26 10:00:31 2026 GMT
        Subject: CN=c1b0f087ae13df79f55dad003f0fb99c3d8f0a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:59:4d:b9:02:be:74:d4:1c:de:9f:ea:49:8f:
                    2e:8d:6c:f7:77:28:b2:70:13:12:f4:de:07:7d:b4:
                    ee:1f:b4:bc:c1:dd:60:3d:36:c8:f3:88:3c:10:ed:
                    15:75:f2:07:5e:9f:a1:f2:34:c4:d7:35:82:4a:a4:
                    c5:2d:1e:2d:81:d5:15:ed:4d:9e:22:86:47:8a:a4:
                    90:d2:dd:04:62:c7:24:3b:02:1d:a9:07:d5:40:c7:
                    87:41:20:4e:88:6a:f9:48:4d:fe:dd:e4:34:15:14:
                    59:bc:57:8e:f9:fe:ce:04:b8:5d:33:76:77:f7:2f:
                    e9:7a:8a:99:be:46:3e:1b:d3:ba:88:40:a9:36:4d:
                    c3:da:6e:99:92:39:8d:f1:42:8d:c0:be:a2:ae:97:
                    bb:34:13:81:09:1a:24:65:be:67:07:27:d8:c6:c1:
                    20:e9:c7:11:dc:14:20:4c:6e:b8:61:9e:62:82:79:
                    cc:e6:58:24:82:3b:19:46:8a:5c:ae:f2:af:61:7f:
                    74:d5:dd:7b:94:2d:b4:ae:6e:00:ed:c3:20:c1:3c:
                    3a:ad:60:78:2a:a9:51:66:19:fa:9d:87:5e:d2:03:
                    9a:cb:73:58:0b:b4:11:7c:36:ab:bb:de:12:0a:98:
                    83:f0:00:db:c0:e6:19:0b:94:d3:8b:49:ef:48:f3:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:B0:F0:87:AE:13:DF:79:F5:5D:AD:00:3F:0F:B9:9C:3D:8F:0A:90
            X509v3 Authority Key Identifier:
                keyid:CD:B8:3C:FE:54:89:83:5F:29:4D:0A:F4:DD:4D:B6:E3:DC:25:F1:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbg8_lSJg18pTQr03U2249wl8fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/739716-9af2-47f5-a6f1-a3b74f9641ac/1/zbg8_lSJg18pTQr03U2249wl8fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:5a:3f:cc:1c:a1:a4:20:f7:63:86:16:2d:12:e0:5a:9b:03:
         05:b5:a2:b8:6a:06:ba:ef:b6:0d:48:94:d9:ab:8e:6f:23:02:
         2c:79:cc:3b:63:5b:ae:f0:1b:c3:35:71:a3:08:ed:23:34:64:
         ba:f7:62:7e:fd:1f:d6:ea:4e:81:2b:0b:d6:d5:46:ec:3d:92:
         88:d1:47:fb:b3:1a:0b:bc:4a:22:c4:8a:53:98:02:d2:b8:6a:
         be:fc:a4:af:f7:5c:5e:d4:6a:de:0f:ba:a5:03:88:b1:1c:b7:
         9f:28:7b:14:5c:71:40:fc:13:84:37:74:55:8b:cb:ab:1b:c6:
         71:de:5b:67:d0:aa:7d:c6:b4:62:e2:96:ba:d4:90:fc:07:1c:
         70:f3:20:95:78:e3:17:d2:fe:ff:9f:96:d7:0f:47:58:8a:71:
         cc:e4:2a:4e:e5:86:ff:af:73:b2:07:6b:c0:a0:6c:4d:98:b9:
         72:ca:0d:5a:eb:a8:e3:6a:14:0d:72:8b:df:48:06:fa:5a:71:
         ed:db:aa:35:c4:86:de:7f:e1:1c:8d:23:73:32:41:83:be:33:
         1a:70:62:fa:02:4a:00:45:51:ba:78:06:ea:56:5a:ec:59:13:
         b6:b2:4b:65:c3:17:22:f2:9c:ac:d0:7c:11:69:6b:71:c9:39:
         1e:12:96:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0mRPTDzMvVAZ6q5uzLBPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYjgzY2ZlNTQ4OTgzNWYyOTRkMGFmNGRkNGRiNmUzZGMy
NWYxZjMwHhcNMjYwMTI1MTAwMDMxWhcNMjYwMTI2MTAwMDMxWjAzMTEwLwYDVQQD
EyhjMWIwZjA4N2FlMTNkZjc5ZjU1ZGFkMDAzZjBmYjk5YzNkOGYwYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FlNuQK+dNQc3p/qSY8ujWz3dyiy
cBMS9N4HfbTuH7S8wd1gPTbI84g8EO0VdfIHXp+h8jTE1zWCSqTFLR4tgdUV7U2e
IoZHiqSQ0t0EYsckOwIdqQfVQMeHQSBOiGr5SE3+3eQ0FRRZvFeO+f7OBLhdM3Z3
9y/peoqZvkY+G9O6iECpNk3D2m6ZkjmN8UKNwL6irpe7NBOBCRokZb5nByfYxsEg
6ccR3BQgTG64YZ5ignnM5lgkgjsZRopcrvKvYX901d17lC20rm4A7cMgwTw6rWB4
KqlRZhn6nYde0gOay3NYC7QRfDaru94SCpiD8ADbwOYZC5TTi0nvSPMUqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGw8IeuE9959V2tAD8PuZw9jwqQMB8GA1UdIwQY
MBaAFM24PP5UiYNfKU0K9N1NtuPcJfHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEt
YTNiNzRmOTY0MWFjLzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS83Mzk3MTYtOWFmMi00N2Y1LWE2ZjEtYTNiNzRmOTY0MWFj
LzEvemJnOF9sU0pnMThwVFFyMDNVMjI0OXdsOGZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMlo/zByh
pCD3Y4YWLRLgWpsDBbWiuGoGuu+2DUiU2auObyMCLHnMO2NbrvAbwzVxowjtIzRk
uvdifv0f1upOgSsL1tVG7D2SiNFH+7MaC7xKIsSKU5gC0rhqvvykr/dcXtRq3g+6
pQOIsRy3nyh7FFxxQPwThDd0VYvLqxvGcd5bZ9Cqfca0YuKWutSQ/AcccPMglXjj
F9L+/5+W1w9HWIpxzOQqTuWG/69zsgdrwKBsTZi5csoNWuuo42oUDXKL30gG+lpx
7duqNcSG3n/hHI0jczJBg74zGnBi+gJKAEVRungG6lZa7FkTtrJLZcMXIvKcrNB8
EWlrcck5HhKWiw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:15:16 2026 by rpki-client