This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
File:                     dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json)
Hash identifier:          BwMNH1JlgEVcHiEC+lGApFA2jfVnGlHdwOYjAVKYtoI=
Subject key identifier:   F9:11:34:66:62:49:D8:90:8B:8A:87:EF:4F:07:90:20:5D:09:B1:D2
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Certificate issuer:       /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial:       019BF42BA3A0A2661FAC095A66A8DCBC9E8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
Manifest number:          155F
Signing time:             Sun 25 Jan 2026 08:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 08:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 08:00:59 +0000
Files and hashes:         1: 1-GuB2dsXmhfM3FVaD28Jix7MeSQ.roa (hash: Q33tcZF/wyJSnNSwGnNmjRCSYTNjYtXeUBk3UB7+jJ4=)
                          2: 5lLrPkobYapeH_YEkj_cgVZiTl4.roa (hash: LA0ccb3eiNozv6xRtPbB9Y5+Y/meBI91YyWfOeIXed4=)
                          3: 8Zfz2__LOu7ePxal8cv-bKS2h6U.roa (hash: +2tAS/WTUahrAWaXWLGbsm0bJFPNFA2k1sshJOthojY=)
                          4: EGT7w7ccRY_aHsT2waQrmkTQOg0.roa (hash: G3orlxt1QVzhu0rMV7kl3OzYV++O6Mm3e1uJ14Jtm3Q=)
                          5: KfUaJnaGoAjldQlQx_gNfPDlBDo.roa (hash: Qm3Jl/tsptEy/pQrxdDz7rVbFdsrkSZMAosUglKD208=)
                          6: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=)
                          7: bA6W2S-w285Kjh7l9XsFw8TxaCE.roa (hash: j1Q+e1SFuu2Y0C7AC9AlCsZPK6iSWjI3vGpbo9K6Uz0=)
                          8: cDJOpXY5IOe_jLTdJ-OS8qr6SvE.roa (hash: 6iAur4FsqXDOBKEZajqm+YOOYdc6UHHVGhnROwWKxXk=)
                          9: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: riiQTCQLtiU3ogbaWEEVIqHrs7/4XfRg+fIr7sAiBVk=)
                          10: d_UGzNdnm51QADs8DNYUUySL-9M.roa (hash: JDA3qW1t0qSXif4u81vdBdu6MklOAan5plROG8p9IT8=)
                          11: dmYgWyLCXGOeE4eyvnO2ivb74hA.roa (hash: kt4YePEluoOacOx4bJ7guo47DhSRQjZ74NNWUhbB5i8=)
                          12: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:a3:a0:a2:66:1f:ac:09:5a:66:a8:dc:bc:9e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
        Validity
            Not Before: Jan 25 08:00:59 2026 GMT
            Not After : Jan 26 08:00:59 2026 GMT
        Subject: CN=f91134666249d8908b8a87ef4f0790205d09b1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:58:a4:fd:dc:c5:59:47:e0:5c:7c:27:2f:73:
                    a7:90:e7:84:42:8e:82:de:2f:a8:74:f6:40:5b:15:
                    85:3f:54:3a:19:b5:a8:c7:b1:68:ea:f7:b3:61:3f:
                    20:85:5e:a1:35:48:e6:48:86:bd:3e:5d:9f:22:4b:
                    1c:78:2b:2e:3f:e8:0d:c2:0d:8d:0d:c6:32:58:17:
                    87:a6:cd:dd:60:a4:e3:7f:c1:cb:23:45:c2:64:6b:
                    0e:7a:bb:25:82:85:95:97:cc:cd:c7:6d:a8:75:af:
                    26:57:f9:e9:21:a1:7c:4c:8e:e9:4f:fe:fb:76:b1:
                    25:5c:97:1c:b1:07:7a:7c:00:c8:0f:fc:c9:e6:f1:
                    10:09:49:2f:6e:ab:04:09:5b:d2:f4:38:54:e9:24:
                    22:55:e1:4d:6c:20:65:52:0b:91:c5:09:ba:48:6a:
                    04:6b:8a:7f:44:a1:b0:3b:0a:72:6a:7c:e9:8e:b6:
                    a7:53:0c:3b:13:7a:26:51:ee:2c:98:48:d7:52:89:
                    91:c1:72:a8:2a:a0:ba:03:17:3d:d2:f0:d5:c9:fb:
                    c9:75:00:7e:62:6d:a2:c1:f7:77:02:1c:8b:88:eb:
                    81:10:0a:e4:bd:f0:05:9f:59:aa:45:c2:af:35:7f:
                    a0:1e:5d:bb:b2:c4:f2:56:09:c8:9f:02:95:f9:27:
                    dd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:11:34:66:62:49:D8:90:8B:8A:87:EF:4F:07:90:20:5D:09:B1:D2
            X509v3 Authority Key Identifier:
                keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d3:c6:2e:df:5f:85:94:c0:c2:b3:b1:2b:3e:51:7c:0f:76:
         2b:52:03:1d:71:73:0a:f5:aa:fb:42:07:e6:34:92:fa:6d:8e:
         c4:2e:85:28:31:76:99:24:b3:fe:c7:fd:6e:ca:e6:da:86:a3:
         0a:6d:16:b3:86:58:ef:67:38:6a:04:f6:25:24:08:15:be:fe:
         94:2c:81:a6:96:9a:e5:63:fd:20:4f:f0:8d:97:de:23:8a:eb:
         a8:6b:3d:e7:46:88:f0:a1:ae:61:30:e5:cb:33:3e:41:12:d1:
         18:88:ef:35:60:e7:ed:96:12:57:44:7e:16:2d:21:94:f2:1e:
         bc:03:d2:5b:dd:95:1d:06:3c:24:d4:14:fd:36:64:be:0d:9e:
         ee:74:c4:45:e2:c3:4e:e4:e8:7d:84:a6:3e:12:3e:50:b2:ac:
         5f:68:4b:43:39:be:f5:b7:eb:72:ce:68:05:6d:3f:1e:b7:27:
         77:df:70:b0:f3:26:b9:15:ca:4a:4a:4a:a8:dc:a5:fb:31:f5:
         90:2f:d0:2c:dd:8a:31:6a:ae:3f:01:20:e8:d4:bc:6c:cd:26:
         23:6d:45:f3:cb:6b:37:73:24:66:8f:12:85:9a:a3:60:3c:db:
         1e:15:d8:f5:8c:f6:7b:65:e6:bb:56:2b:2c:28:fb:27:6c:d8:
         9f:31:34:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0K6OgomYfrAlaZqjcvJ6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1
ZmIwYjUwHhcNMjYwMTI1MDgwMDU5WhcNMjYwMTI2MDgwMDU5WjAzMTEwLwYDVQQD
EyhmOTExMzQ2NjYyNDlkODkwOGI4YTg3ZWY0ZjA3OTAyMDVkMDliMWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVik/dzFWUfgXHwnL3OnkOeEQo6C
3i+odPZAWxWFP1Q6GbWox7Fo6vezYT8ghV6hNUjmSIa9Pl2fIksceCsuP+gNwg2N
DcYyWBeHps3dYKTjf8HLI0XCZGsOerslgoWVl8zNx22oda8mV/npIaF8TI7pT/77
drElXJccsQd6fADID/zJ5vEQCUkvbqsECVvS9DhU6SQiVeFNbCBlUguRxQm6SGoE
a4p/RKGwOwpyanzpjranUww7E3omUe4smEjXUomRwXKoKqC6Axc90vDVyfvJdQB+
Ym2iwfd3AhyLiOuBEArkvfAFn1mqRcKvNX+gHl27ssTyVgnInwKV+Sfd1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPkRNGZiSdiQi4qH708HkCBdCbHSMB8GA1UdIwQY
MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct
NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi
LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdPGLt9f
hZTAwrOxKz5RfA92K1IDHXFzCvWq+0IH5jSS+m2OxC6FKDF2mSSz/sf9bsrm2oaj
Cm0Ws4ZY72c4agT2JSQIFb7+lCyBppaa5WP9IE/wjZfeI4rrqGs950aI8KGuYTDl
yzM+QRLRGIjvNWDn7ZYSV0R+Fi0hlPIevAPSW92VHQY8JNQU/TZkvg2e7nTEReLD
TuTofYSmPhI+ULKsX2hLQzm+9bfrcs5oBW0/Hrcnd99wsPMmuRXKSkpKqNyl+zH1
kC/QLN2KMWquPwEg6NS8bM0mI21F88trN3MkZo8ShZqjYDzbHhXY9Yz2e2Xmu1Yr
LCj7J2zYnzE07Q==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:49 2026 by rpki-client