This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
File:                     livXalysKD7OCg-OqyyXAhQB-4k.mft (raw, json)
Hash identifier:          EZZTQZ1NLfGV/sFgT9/i4rzPSnfyhKOsDmKi11o9tdk=
Subject key identifier:   E7:96:28:FE:90:23:74:06:70:C2:CF:35:46:1D:09:43:40:8B:9E:7A
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Certificate issuer:       /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial:       019BF2E1D5A6ED944E5B83BD070E5207269D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
Manifest number:          01A5
Signing time:             Sun 25 Jan 2026 02:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:45 +0000
Files and hashes:         1: 1-8B1HJiBNZt2mLa484DWmBMQSFU.roa (hash: oP/xM98/RPfu/5TqpnGJmxNimUeay7qqliPVccblTpQ=)
                          2: 1-Qeq6hhgmsnV9dwc9CM4x2DEp_o.roa (hash: hqKeYIw+K+XvdJwrb3vT/mCOwu7/uLLr532kYdiZTtk=)
                          3: 1-Xz0ckI9CBVF034QnylUqVKCJ2k.roa (hash: ZY5qyuJzGWTMv1saHpay6f1Y6Lu8rpI6Q1Iz7J18iUs=)
                          4: 1-aH8x_etPHb7N5lZxH2EJ06tejk.roa (hash: 4D8bZL+jOKZy7BZQ0lGHl4mnZyTD+EOB54zTxO+almE=)
                          5: 2417X7FoOqz6CeouHbdWxlmT2oc.roa (hash: 2RqyI1mU42Ad8DLLnv9aYk4kIOqsmsu61g8bfpa34DU=)
                          6: 4qUkTKGm6pGhy2LKyNsE9JLEu9s.roa (hash: n8RFY9wAkRTw92IGWmg3oXl6nw20aGymGHPFNpvZX/Q=)
                          7: AdX3FL0lBcSwcDsTKYRkDOAN2jY.roa (hash: WVhStTpEHGlxTyT6L6Bbx6l+uTredyHUJ2HGMr44YLw=)
                          8: C9KkvhzLL551ZPbXxx1FoBbqXf4.roa (hash: UeCszyUVIZvVTu9aAl83hlN/RDOqN4hXz1ho/Fs2ISc=)
                          9: De5ufO6Y06gtV_o3Xr37ttzDs30.roa (hash: 5E7IuaicadsOosL60n3e2M2esKe7z1EV4Dvc8Y0q56A=)
                          10: DiqaDwrLCUvrlPkP-0eihteOneY.roa (hash: TuifAr8s69JWfjPp9b5i4tGf2xSWW7Ct4OGJ2sDmRwg=)
                          11: FL-mLisikCniX8ptzn2CQkY1EP4.roa (hash: p99XPLiTd+DQjXuhkl7h+/enU6blE89NaEQgomxDU3g=)
                          12: ILu_AnT71_jqTT1HhE40TqJOdBo.roa (hash: v+T9evuaFhdkdWDw60Q6K5Wai2JKqCPu6+wdTxjVZWA=)
                          13: INMig3Zy-dQgwfBhoGL01YH4fc8.roa (hash: leDHQRzQxheOPvwkn7FM2wxNIq/5wYwXFgbHaxmfmCI=)
                          14: JC85WxCaKuEyR6NXwu3_DF8LXLA.roa (hash: rER8RkdciS0Rr7SHnwB7GhEy6V2AmgP4zYhE0MPpy5E=)
                          15: KeqImmzvqvUw699BI75ZaQ7ioDw.roa (hash: VHvGEdrea3UPh7EJODxEgR688m3Nrv3k0gMHJv5zc0k=)
                          16: MUNO72hvtYB3fmRkFtv1rgwIrrI.roa (hash: 0+JybXCQqdEUu6rd5Vuvg6qO6FA4ju/4j8EDsdhl/m4=)
                          17: MYydd3R4Y9vwrgnnxpOHm9Sf_mU.roa (hash: 4CrwudFLN29ynwGmSG8gQhxSRQhVd7AqzZeF9S6O/UU=)
                          18: U0Zw7nxZcY6li2EowQpo7GWvwRw.roa (hash: W83oCNCWNdwCZPqO8EuYCWEQ9TVK20LIVtEgGqY7xpE=)
                          19: VSwkJ0GTbsZyHHuEwJjk5eyLLVo.roa (hash: q7NhUna+Yr8hoQULMRHTcRxkkh3p5fNlwvhMsBuSNTo=)
                          20: YZbCezesixGK-5MW0VqY6oAGzr8.roa (hash: LnOZHLS4IEDjVPpbQKeCImMc1ehQ/d37mLM38R6989s=)
                          21: aP6TZ2IqLVgF0VWuJ9T3yCaCqpk.roa (hash: j6iM/mIBztj8GmnOe76w3rlLqYEbhzCf5n/E02uuQng=)
                          22: elTx126yBsA7dCzExkxDADRceX0.roa (hash: jjGMv6aGadJUsAbEJBuS7OfBzf4SwmuImpVeMEodGKw=)
                          23: h4iABUgwazCz-pCOSSyUf9YLiAg.roa (hash: tCHk4qE9Q5zfvBErJsMHjuZZF+ssjuMVkrpkwNxm+AE=)
                          24: hHSi4PfsUyyK5t-rXYcHJcCojHE.roa (hash: Knyezx/2va6jD7IAu94rMYimek7OiBeNMohqO9LmNvE=)
                          25: lUYFhgrgYwzzCnla_INuymemYAw.roa (hash: T2RgN54GjvPAK2/1QFgutmjyYI2lIMsPl9ROZAL8Td0=)
                          26: livXalysKD7OCg-OqyyXAhQB-4k.crl (hash: aefKlhlFoTMbOEQgcHtx/So8JzI3PbN8lCrjU/c7N0s=)
                          27: qMqM7n6f-KPTo3oe2dq3OGpBM4A.roa (hash: not8eC9n1FQaCMdRnuKBK1UZKvUW8ljbh5d4usrwdB4=)
                          28: raYhTrbA7AoozsXURA3QDIX0YBc.roa (hash: B+Xtv54fCZUAtknXOZ9mXLkVpBJk+ZPCTEYDeFWV1/Y=)
                          29: winPsxerfHGMkrLr9l0fOmV2KSs.roa (hash: arn2Fc0z0hyb7bzwb+vfTUpY+WA5EJjzLxDCgG/O35E=)
                          30: yE8_O8Q4IwHJTINRIt0LbeP-GOY.roa (hash: 6l3rgcL1TxtnHd0pNzPe7Ddtbuc1oQAiArSsH/nUS34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:d5:a6:ed:94:4e:5b:83:bd:07:0e:52:07:26:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
        Validity
            Not Before: Jan 25 02:00:45 2026 GMT
            Not After : Jan 26 02:00:45 2026 GMT
        Subject: CN=e79628fe9023740670c2cf35461d0943408b9e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7d:2c:39:b2:d7:48:07:39:93:db:21:c5:8a:
                    14:df:ca:5f:cf:42:65:57:b0:98:f4:b5:4b:35:e4:
                    e7:4b:d7:34:e3:bb:3e:e9:8d:bf:c3:5c:83:11:4e:
                    e6:20:c2:b5:76:3f:8f:bc:ae:9b:08:1e:c0:70:bf:
                    ae:06:7b:5a:3a:0e:c5:ae:b9:27:0c:7a:aa:69:11:
                    6a:cf:c4:22:e1:3c:9f:16:0b:36:85:59:a0:61:7b:
                    46:3b:e8:0f:a0:e6:b7:8e:8e:35:9f:5d:4a:cc:c3:
                    ab:59:8b:d3:04:e8:ad:35:be:fa:24:5f:75:79:1c:
                    92:44:24:cc:da:33:2d:3a:f5:7c:6e:6d:84:aa:2c:
                    1a:b2:0a:95:24:7a:fe:9c:a7:60:a1:e5:0a:ef:a2:
                    8a:62:dc:2d:a1:2e:aa:00:be:69:ae:bf:2b:fc:d0:
                    b6:0b:54:68:ec:d0:23:b1:2c:81:35:1c:31:99:de:
                    89:49:d4:ff:73:c5:22:b1:f7:3f:af:8e:dd:5e:28:
                    b1:05:ac:ca:ae:a9:b9:91:51:9b:31:de:36:b9:3f:
                    c0:c8:ff:c3:f6:bc:fb:da:63:61:38:e1:aa:ed:be:
                    aa:a9:b5:dc:01:77:f8:bd:21:08:e0:15:1d:4c:1c:
                    07:af:cd:67:49:34:58:cb:1d:27:fe:a6:28:ba:f1:
                    ae:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:96:28:FE:90:23:74:06:70:C2:CF:35:46:1D:09:43:40:8B:9E:7A
            X509v3 Authority Key Identifier:
                keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:98:e0:c4:26:b4:6c:5d:6e:2a:4b:18:7a:f6:97:24:5b:fd:
         5e:66:b8:27:c1:13:94:8f:a4:1b:08:5e:ee:06:dd:bf:8f:78:
         10:4d:99:95:1d:b3:a3:fa:c4:b0:65:d2:62:49:60:db:6c:ec:
         90:b4:e0:2e:5d:df:70:22:70:f5:c8:f6:b8:29:29:12:bb:b9:
         e3:83:96:f4:94:08:7a:ef:49:19:d2:d0:c3:69:9d:8f:f9:9e:
         6c:6e:7c:f3:7e:a6:cc:5c:5b:45:f4:f6:e5:2b:90:72:e5:69:
         48:4a:73:c0:56:21:ff:5d:6d:0d:d8:d8:da:ac:2b:78:a9:81:
         17:81:00:6c:df:0d:db:84:a8:b3:5d:fa:7b:a5:8f:90:13:2c:
         29:ab:53:57:45:0e:95:eb:95:d6:b4:2a:ab:85:5b:46:90:99:
         5f:1b:92:bc:a4:14:c3:4a:3f:6d:29:fb:4d:5a:07:39:81:8b:
         a6:a3:78:d2:19:9e:17:49:3d:99:06:4d:f9:4e:40:42:9b:cd:
         a5:93:76:12:b3:d5:97:5f:47:b0:b1:0a:aa:4d:2b:c5:de:6a:
         5c:f9:61:be:c0:7a:c0:2b:1e:cf:6f:97:e4:a5:3d:85:05:35:
         ec:28:bb:f3:a7:35:63:2e:76:90:37:c5:47:61:d4:b9:98:0c:
         a0:e4:1d:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4dWm7ZROW4O9Bw5SByadMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MmJkNzZhNWNhYzI4M2VjZTBhMGY4ZWFiMmM5NzAyMTQw
MWZiODkwHhcNMjYwMTI1MDIwMDQ1WhcNMjYwMTI2MDIwMDQ1WjAzMTEwLwYDVQQD
EyhlNzk2MjhmZTkwMjM3NDA2NzBjMmNmMzU0NjFkMDk0MzQwOGI5ZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX0sObLXSAc5k9shxYoU38pfz0Jl
V7CY9LVLNeTnS9c047s+6Y2/w1yDEU7mIMK1dj+PvK6bCB7AcL+uBntaOg7Frrkn
DHqqaRFqz8Qi4TyfFgs2hVmgYXtGO+gPoOa3jo41n11KzMOrWYvTBOitNb76JF91
eRySRCTM2jMtOvV8bm2EqiwasgqVJHr+nKdgoeUK76KKYtwtoS6qAL5prr8r/NC2
C1Ro7NAjsSyBNRwxmd6JSdT/c8Uisfc/r47dXiixBazKrqm5kVGbMd42uT/AyP/D
9rz72mNhOOGq7b6qqbXcAXf4vSEI4BUdTBwHr81nSTRYyx0n/qYouvGukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeWKP6QI3QGcMLPNUYdCUNAi556MB8GA1UdIwQY
MBaAFJYr12pcrCg+zgoPjqsslwIUAfuJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMt
NmFiMTExNTVmNmZiLzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wNDY0NjAtMTAyYy00OTMwLTg0MmMtNmFiMTExNTVmNmZi
LzEvbGl2WGFseXNLRDdPQ2ctT3F5eVhBaFFCLTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZjgxCa0
bF1uKksYevaXJFv9Xma4J8ETlI+kGwhe7gbdv494EE2ZlR2zo/rEsGXSYklg22zs
kLTgLl3fcCJw9cj2uCkpEru544OW9JQIeu9JGdLQw2mdj/mebG58836mzFxbRfT2
5SuQcuVpSEpzwFYh/11tDdjY2qwreKmBF4EAbN8N24Sos136e6WPkBMsKatTV0UO
leuV1rQqq4VbRpCZXxuSvKQUw0o/bSn7TVoHOYGLpqN40hmeF0k9mQZN+U5AQpvN
pZN2ErPVl19HsLEKqk0rxd5qXPlhvsB6wCsez2+X5KU9hQU17Ci786c1Yy52kDfF
R2HUuZgMoOQdAg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:00:12 2026 by rpki-client