This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
File:                     dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft (raw, json)
Hash identifier:          MeG4D74E6IbvOXe25SAfsiQ9u8dSA+Wj2Uw40awwLvA=
Subject key identifier:   0A:18:BA:F5:C9:9C:FA:FA:4D:4A:29:37:5E:2D:A0:F4:8B:89:28:AC
Authority key identifier: 75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02
Certificate issuer:       /CN=75790c7ecf24d28be2e13fe069118cee27d58002
Certificate serial:       019BF61A11513983FF6CC9058432A9C23670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
Manifest number:          1803
Signing time:             Sun 25 Jan 2026 17:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:02 +0000
Files and hashes:         1: IENG8_E9HCJFskPGDqoJ03-CUpc.roa (hash: V5DDY41B+l7qa25OaZxvf+p/xy1NPbH+gA7jQzTp5fY=)
                          2: ZLYr5qfFq0qAWqoeLoZCAKr_wSc.roa (hash: mwj70VSnOcrDOMBDB/t2oHG+GFVtQ9P3sUch+spBbHA=)
                          3: dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl (hash: GwmrnYinfHdIT1mtuqmjYb6JcEzOTUznJNwwnZK3Pw8=)
                          4: w9o_zsQL-b4SQfaTAhWoIRM44P4.roa (hash: x9jvStMnhTIrENW+AjTcUigXkiIVK0Dog4rDWfYtId4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:11:51:39:83:ff:6c:c9:05:84:32:a9:c2:36:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75790c7ecf24d28be2e13fe069118cee27d58002
        Validity
            Not Before: Jan 25 17:01:02 2026 GMT
            Not After : Jan 26 17:01:02 2026 GMT
        Subject: CN=0a18baf5c99cfafa4d4a29375e2da0f48b8928ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a2:3a:c4:d4:7a:80:90:bb:f0:da:68:60:02:
                    b0:5d:06:1f:c9:11:b0:aa:55:30:9d:36:7e:97:af:
                    cf:69:94:55:dc:16:e0:e4:c3:54:be:86:e2:ab:f9:
                    07:10:24:85:cd:b7:28:ab:30:75:31:dc:35:dc:0a:
                    c4:31:10:87:4e:4c:b0:68:64:d2:72:57:5f:f9:25:
                    b9:4e:f6:db:ab:af:df:40:cf:7c:db:a9:be:dc:5f:
                    ba:9e:2b:ec:b8:d2:2e:4b:27:37:8a:bb:ba:61:cd:
                    82:75:93:ae:cb:b7:13:da:35:fc:1a:a4:0e:fd:7f:
                    3d:ce:fe:2f:bc:2e:bb:a1:55:ac:a6:19:69:44:9a:
                    c5:7c:d7:bc:bd:3e:56:b0:2a:b1:2f:5d:da:ba:4b:
                    f6:6f:3c:df:87:f8:ba:ea:dc:20:46:51:a3:2c:2f:
                    63:b0:45:b4:c4:c6:f0:f8:54:86:51:b9:d4:6e:91:
                    e7:9c:96:e9:db:8e:90:30:b9:66:26:e2:d4:60:03:
                    06:a1:92:2e:36:12:54:6a:ac:e9:8f:95:12:9a:df:
                    cd:b8:84:60:9e:42:db:e0:81:06:4f:ac:7e:eb:9e:
                    1b:f4:cd:d5:0c:f6:6f:b0:0b:4e:88:47:71:78:b5:
                    7c:fc:62:bd:66:47:ae:d7:3b:33:37:aa:76:ee:76:
                    83:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:18:BA:F5:C9:9C:FA:FA:4D:4A:29:37:5E:2D:A0:F4:8B:89:28:AC
            X509v3 Authority Key Identifier:
                keyid:75:79:0C:7E:CF:24:D2:8B:E2:E1:3F:E0:69:11:8C:EE:27:D5:80:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dXkMfs8k0ovi4T_gaRGM7ifVgAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/496d56-86ff-48be-bde3-271fde2dc655/1/dXkMfs8k0ovi4T_gaRGM7ifVgAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:61:21:eb:11:40:a4:82:42:6a:27:3e:30:75:ac:b5:d7:e8:
         2d:f1:22:70:e9:18:12:19:92:0f:8c:0f:da:aa:6e:27:32:c3:
         10:15:52:a7:85:cb:17:df:b2:b1:5e:aa:4b:86:5c:d5:38:60:
         cd:86:4a:39:14:38:ee:c3:dc:76:24:09:a6:dd:04:da:ce:d8:
         7c:64:07:c7:ee:b0:58:97:37:71:3d:fa:39:cf:c8:1f:a8:36:
         e5:a1:40:09:22:c6:c0:22:16:dc:dd:9e:49:d0:1d:aa:c9:ba:
         d3:70:86:6c:50:d7:4d:d6:1a:dc:9e:fa:7e:79:cf:85:a8:d1:
         d8:29:e6:40:b4:73:47:94:82:c7:19:d0:8b:36:ed:b2:ef:39:
         eb:3c:74:75:56:7d:08:9b:45:57:5f:f0:23:6c:03:82:e6:bc:
         e9:eb:53:f0:83:a5:19:97:1e:ab:7e:b4:0e:9d:b0:6b:9e:e6:
         b8:42:fd:ad:ba:08:85:13:24:28:1c:a2:49:80:0a:95:61:98:
         4b:da:d4:b6:d3:9e:f4:6f:54:a5:76:78:1b:cb:5f:16:08:ae:
         dd:6f:d4:5c:4e:0d:8f:a1:6d:2c:8a:c5:28:e7:ee:32:7b:77:
         f0:f6:fc:58:d2:c6:e3:45:5c:92:38:8c:ca:f4:72:cd:57:ce:
         ca:81:75:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2GhFROYP/bMkFhDKpwjZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NzkwYzdlY2YyNGQyOGJlMmUxM2ZlMDY5MTE4Y2VlMjdk
NTgwMDIwHhcNMjYwMTI1MTcwMTAyWhcNMjYwMTI2MTcwMTAyWjAzMTEwLwYDVQQD
EygwYTE4YmFmNWM5OWNmYWZhNGQ0YTI5Mzc1ZTJkYTBmNDhiODkyOGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqI6xNR6gJC78NpoYAKwXQYfyRGw
qlUwnTZ+l6/PaZRV3Bbg5MNUvobiq/kHECSFzbcoqzB1Mdw13ArEMRCHTkywaGTS
cldf+SW5Tvbbq6/fQM9826m+3F+6nivsuNIuSyc3iru6Yc2CdZOuy7cT2jX8GqQO
/X89zv4vvC67oVWsphlpRJrFfNe8vT5WsCqxL13aukv2bzzfh/i66twgRlGjLC9j
sEW0xMbw+FSGUbnUbpHnnJbp246QMLlmJuLUYAMGoZIuNhJUaqzpj5USmt/NuIRg
nkLb4IEGT6x+654b9M3VDPZvsAtOiEdxeLV8/GK9Zkeu1zszN6p27naDZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoYuvXJnPr6TUopN14toPSLiSisMB8GA1UdIwQY
MBaAFHV5DH7PJNKL4uE/4GkRjO4n1YACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMt
MjcxZmRlMmRjNjU1LzEvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi80OTZkNTYtODZmZi00OGJlLWJkZTMtMjcxZmRlMmRjNjU1
LzEvZFhrTWZzOGswb3ZpNFRfZ2FSR003aWZWZ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2Eh6xFA
pIJCaic+MHWstdfoLfEicOkYEhmSD4wP2qpuJzLDEBVSp4XLF9+ysV6qS4Zc1Thg
zYZKORQ47sPcdiQJpt0E2s7YfGQHx+6wWJc3cT36Oc/IH6g25aFACSLGwCIW3N2e
SdAdqsm603CGbFDXTdYa3J76fnnPhajR2CnmQLRzR5SCxxnQizbtsu856zx0dVZ9
CJtFV1/wI2wDgua86etT8IOlGZceq360Dp2wa57muEL9rboIhRMkKByiSYAKlWGY
S9rUttOe9G9UpXZ4G8tfFgiu3W/UXE4Nj6FtLIrFKOfuMnt38Pb8WNLG40VckjiM
yvRyzVfOyoF1IQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:19:31 2026 by rpki-client