This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
File:                     oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft (raw, json)
Hash identifier:          iE5xcrQX0HNXwlQ4wvhSuEAhTOpRkbmPMYdroqn9dTs=
Subject key identifier:   D7:E1:F0:DA:5A:99:76:50:77:A6:6A:70:5F:9E:F5:9A:5E:7B:B9:C8
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Certificate issuer:       /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial:       019BF651A453F7C1827253DDE7BC9062E4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
Manifest number:          18B8
Signing time:             Sun 25 Jan 2026 18:01:44 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:44 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:44 +0000
Files and hashes:         1: 0yiZzYOkKi3Duwj9W4iddYlKoCc.roa (hash: bbgD3yrnyoBxoMgUPsel4d1NSmBYCiD2RxPXlsE5yU8=)
                          2: 4rH8_KArysg1wV6ciMc3tWxygTg.roa (hash: cq85Psa3QmMqDUVP4F4xb9vfchcL6V84oYNIOe6pTDM=)
                          3: 5vwpHz3SsOG_BBmCIjDNA6eKdfo.roa (hash: fEgj28VMxOBq530JqkQ4L0AkUDxqsTY2W/2Q3rsmUrA=)
                          4: COhxtBFve16URB_MEOFhKay9rTs.roa (hash: jOV3WCjtAk4tHvHdqA8saI4UUBzsbtvE9u3e+QDh71M=)
                          5: Dy12ueox4iemeyny5vY-mZAduiI.roa (hash: TlSFsuGfZ5d+gxSWEzsL9O69Jb3O/hSnK0ssg9X6n9c=)
                          6: HRFCRunnn9wNoyI6JOFSdOd10yI.roa (hash: yo5Bt9GIUkYOumvikP4co3jOtmyICwQImhbhqVKdEUY=)
                          7: Ho68QlwWf7XmMGL8gfZuoyvkSbo.roa (hash: AcJGVstbrZSqQf+OL9tIENTQwlR+SF+hfnijkNVA4O4=)
                          8: K87a3SozjRNM0L2VSDzBQDss-TM.roa (hash: 7X4hOZNngfP2AOympHac08iUZmiyE7LGoxs4Na6L/lk=)
                          9: LoSatXKTLwEw3FJXDxXLGi_t6Ec.roa (hash: QlUz4c9V3BMW/OobjmQHCJX1uHFpwrKtKrnhYg55zA8=)
                          10: NT9woNeJwBeU42rNyb848SmBYlo.roa (hash: DTJNFykP/BFz6g6XPdl3htlBBfn53C8lDXv1eaLG5ok=)
                          11: NbOdHCLfD_9SA0rN9xVT2s8QdlA.roa (hash: frkQB7jrq/YhMcxvQw0JdD7plHmO9jmXrctMInTruNM=)
                          12: OLCDzI5xxlDKzka6lWJFVjNvDPw.roa (hash: Qs0OIV8lR1PaADu190zcJgT0XahHOWsjHenFFst/arg=)
                          13: PGD9MZeytPQjHh3vXGAvYMctnV4.roa (hash: dBNP/wJKl2F50HovgyUiUTR33u+q/5vGeSSba/CKPXU=)
                          14: PLGWIZgwYkMO77MmlmTCSwUg4MA.roa (hash: BOEZWRA0pYEkUwtQYq1CCUzMVWLzHT9J9Pqd9wJtlvY=)
                          15: QRe1t4xoC5DfawSBrQHzo3FmhLM.roa (hash: E+vj4zV/6ZJ/k1LOoS20wbJJIbfhjuZ939KrL0GVfx4=)
                          16: UGVa8Xyqk4ksPGgnfd31vBitCIY.roa (hash: bZ6endjeA2RujV7R8PyJfRemO9ZBIhAjsInbMMWdh90=)
                          17: VOyxth9qspwPWVU5GtsemH5xu5Y.roa (hash: /TitFEmWF3mLbju9cYq96a2uGnq7dFetaj8cDGfX6bo=)
                          18: VptxbwzXKJqQyLjAtX2teZehsqE.roa (hash: DcslDuby0bAKKKb6DpeteuHsFd0PL1RiuU2wjGszdfk=)
                          19: X-EkV-WP2idrAD8cBtl8naElPoA.roa (hash: dkqiN3zxKk6ENg5SKstGMFmP/TT2YPL3QLMR66r2DQ8=)
                          20: ZAR3134MSG7c8pQeqt21BjTKzHk.roa (hash: H4qYUBv0F0ZniT9I1OT/UVS7jhOeC3g/GkknK01ImTE=)
                          21: _YMV-r6YGy_b5YOpBOqF7viPoc8.roa (hash: is3oJp1G8er/OBr6GK6OPtF33YU7blB2hOshyfedxsA=)
                          22: atxYNSY6Yx-7ElIL_eqsGGTZriY.roa (hash: sK5wSL3tcZLQ9cvUwLxP7MoUiyiicJ+mjfpcgXnlWkc=)
                          23: bBvGTyS2yQa6YR2RFe61hrCsDgk.roa (hash: +61f6+40PPC+07wtISqHIyXFeS6Le/BLpWRYgptfad4=)
                          24: cWy2EfUf6WdRB-2B1LrGbN_3HXQ.roa (hash: uDtCdq06p+axb43wcNWT1J9PQpUk92IGa/UYeQCcCNc=)
                          25: oE1O5uGMlt05gWy6EMnmTgraW8k.roa (hash: /DZ/BcePxC8RHCDv/4OF4LqAQV2sdDiRlC/rnovIjbA=)
                          26: oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl (hash: cNIw5M61cvGiepEotdu+2kVSZOCtCkzCMqOlZ3/oPgg=)
                          27: oOrJ1mX-eBcznfB-6h_-uiPoUU4.roa (hash: JC0s2WTzEg4/KUWP2gEhCQYV0XyL5LJW76D+euRX/Y8=)
                          28: r8r911ceJgErmagjccGWtP7JKZM.roa (hash: fqNaDWj1DnYH2erYDtEPh2cuFFkCIyLSyPbWVfnqgxA=)
                          29: rgE_RHcfNuUFoaKxthVMKKDCw0s.roa (hash: QD1Kf00J2FokHRU/aR51xu7Mw9Z1FH1udsXrO1N5O+s=)
                          30: tHRvty-RlUw0Falh2OpgwqWerCo.roa (hash: 30HyZEY0OdrKQq3zOLaCSH/elkuCREvNILd0PXgRBSs=)
                          31: uuRczKZwsSuhCu172Grh6B9knxk.roa (hash: P4PWs2fsYglkv3o2ELArEKxvKuDLCR2pbc5p9qH3He8=)
                          32: vTyaSOcTKNK7HOEpRoHOTWIFFhs.roa (hash: o99W7jY/Y+nX4RuXt0Qn61sP42zZM8y5fY23/UCcTmM=)
                          33: w5TIz9UXktiNlyDUD2lDoEdhEQE.roa (hash: ikqIWz4GbbCq/SA0jYO5bGzmtr0yVrKpoGSYDIJCyeY=)
                          34: xLrDeMIdOHc_uW7MQY4GNPFpZuo.roa (hash: s/x17aNCOaU2UsnCEqFwmKabzlSylan6beu6oAqMMFc=)
                          35: ykPAskiY2eo6bwenp7rou0Cd4Co.roa (hash: 7MaXibZAcGAVoxSztPs4C8RQcPHCjtKPNjMHd2bXMxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:a4:53:f7:c1:82:72:53:dd:e7:bc:90:62:e4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
        Validity
            Not Before: Jan 25 18:01:44 2026 GMT
            Not After : Jan 26 18:01:44 2026 GMT
        Subject: CN=d7e1f0da5a99765077a66a705f9ef59a5e7bb9c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f9:60:b6:91:49:2f:94:b3:b3:19:cb:2d:4d:
                    2c:21:8f:dd:68:cc:7b:79:ab:49:7c:01:59:1a:bd:
                    e8:32:09:a9:43:a2:09:7f:7a:20:6d:3a:75:eb:d9:
                    b0:9b:a9:b4:ab:5f:d3:20:0f:c7:54:52:87:6a:c8:
                    27:c1:31:2c:96:fe:09:8a:1a:ca:e4:e1:6d:93:b5:
                    a8:77:82:f8:1d:d5:bb:ed:f1:cd:d5:63:8d:cc:0d:
                    ed:a3:5c:e8:09:c0:ec:88:7e:14:f3:98:d8:64:c5:
                    3d:c0:f2:68:69:23:6b:fc:e2:e3:d5:ba:5b:aa:36:
                    1c:0c:bd:29:70:5b:88:ab:36:4f:c2:83:c6:c7:63:
                    4a:f3:92:8b:54:92:68:0c:a3:5f:45:f5:9e:1b:5f:
                    31:6d:79:ab:32:de:21:8c:64:6b:75:67:08:85:6c:
                    90:78:e1:2d:82:fd:9c:b9:b7:f6:c5:4d:f6:24:e9:
                    08:c6:f6:31:e1:8b:1f:3c:a1:40:77:54:fc:2e:ed:
                    6c:3c:dd:16:2b:53:29:4b:66:c1:93:35:cb:74:9a:
                    be:d3:7d:cf:89:b9:0b:7f:ae:58:bd:1d:32:4c:f3:
                    f9:a8:8f:0e:51:7a:82:67:95:9d:62:7c:40:a3:03:
                    0f:93:ce:0c:2e:47:1e:c4:b3:fc:05:17:9d:33:41:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E1:F0:DA:5A:99:76:50:77:A6:6A:70:5F:9E:F5:9A:5E:7B:B9:C8
            X509v3 Authority Key Identifier:
                keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:cd:71:7e:53:48:09:c9:e1:45:59:76:32:08:03:7d:bd:55:
         cc:70:96:65:d4:be:df:8e:cb:a7:11:63:a9:d4:4d:8d:de:f5:
         b0:37:56:90:a1:c5:9e:28:d2:02:7b:a5:68:57:44:13:ed:0e:
         21:dc:de:98:97:c3:d3:ad:b5:bf:02:d2:32:e7:31:a9:76:d1:
         72:40:8b:dd:8e:a3:68:af:ac:f8:c6:39:7d:33:da:9b:1b:a1:
         e8:d6:f2:2d:0c:be:c8:57:d6:65:c9:ad:8b:83:3a:f8:de:4b:
         c5:b4:56:2d:bd:31:48:e9:39:43:5f:77:8e:7f:9f:1c:0e:c6:
         df:81:5d:59:45:11:d9:4d:11:a7:9c:45:8f:88:11:94:8c:f1:
         e4:81:aa:0e:3b:16:a0:b0:47:92:2f:1b:70:5e:83:e8:44:69:
         07:d8:21:a8:b0:06:1a:36:6c:5e:3a:c3:10:49:94:05:37:b1:
         71:6b:42:b9:8e:80:b8:71:ab:2b:4b:11:6a:2b:90:f1:53:20:
         97:2a:5e:b3:71:bb:3f:4c:4d:94:3c:8d:30:4d:70:c3:44:7c:
         26:23:75:04:61:3e:02:aa:27:17:8e:5d:e9:0b:d0:eb:90:0f:
         f5:76:7c:c2:7f:0e:79:b7:33:0f:21:48:7b:94:94:74:ce:67:
         2a:e7:32:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2UaRT98GCclPd57yQYuTNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwZWY1ZmJiZmNhN2E5M2NmZWU5NjVlZWI2YmRlZTZmYjQz
YzQwM2UwHhcNMjYwMTI1MTgwMTQ0WhcNMjYwMTI2MTgwMTQ0WjAzMTEwLwYDVQQD
EyhkN2UxZjBkYTVhOTk3NjUwNzdhNjZhNzA1ZjllZjU5YTVlN2JiOWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/lgtpFJL5SzsxnLLU0sIY/daMx7
eatJfAFZGr3oMgmpQ6IJf3ogbTp169mwm6m0q1/TIA/HVFKHasgnwTEslv4JihrK
5OFtk7Wod4L4HdW77fHN1WONzA3to1zoCcDsiH4U85jYZMU9wPJoaSNr/OLj1bpb
qjYcDL0pcFuIqzZPwoPGx2NK85KLVJJoDKNfRfWeG18xbXmrMt4hjGRrdWcIhWyQ
eOEtgv2cubf2xU32JOkIxvYx4YsfPKFAd1T8Lu1sPN0WK1MpS2bBkzXLdJq+033P
ibkLf65YvR0yTPP5qI8OUXqCZ5WdYnxAowMPk84MLkcexLP8BRedM0EttwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfh8NpamXZQd6ZqcF+e9Zpee7nIMB8GA1UdIwQY
MBaAFKDvX7v8p6k8/ull7ra97m+0PEA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2Mt
MDI5MmIwMjAxNTBhLzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9mZTkxNWMtYmY3MC00NjAyLThhM2MtMDI5MmIwMjAxNTBh
LzEvb085ZnVfeW5xVHotNldYdXRyM3ViN1E4UUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVM1xflNI
CcnhRVl2MggDfb1VzHCWZdS+347LpxFjqdRNjd71sDdWkKHFnijSAnulaFdEE+0O
IdzemJfD0621vwLSMucxqXbRckCL3Y6jaK+s+MY5fTPamxuh6NbyLQy+yFfWZcmt
i4M6+N5LxbRWLb0xSOk5Q193jn+fHA7G34FdWUUR2U0Rp5xFj4gRlIzx5IGqDjsW
oLBHki8bcF6D6ERpB9ghqLAGGjZsXjrDEEmUBTexcWtCuY6AuHGrK0sRaiuQ8VMg
lypes3G7P0xNlDyNME1ww0R8JiN1BGE+AqonF45d6QvQ65AP9XZ8wn8OebczDyFI
e5SUdM5nKucyOA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:44 2026 by rpki-client