This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
File:                     nFQvXfPBrLhX_VDusBbu0HOF_4w.mft (raw, json)
Hash identifier:          40yV9Rukch/AYuNJE1x4rUoOMCHhyBaU/11fWoxz99g=
Subject key identifier:   01:8B:50:E5:F6:7F:6C:BC:65:B7:05:A5:A2:CA:57:28:80:B0:69:CF
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Certificate issuer:       /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial:       019BF575623A6ED2B5422190D16C222EEF3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
Manifest number:          0C04
Signing time:             Sun 25 Jan 2026 14:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:09 +0000
Files and hashes:         1: 1-SOCJvMJXIRmSmOPl6NPphF6_WM.roa (hash: vXugVxE98o8Z5wA/8D/Y9pi3M5AMGKyN8v2Sry/3Otg=)
                          2: 2j-9yNtktHt5v3A9Kl3uT69XxUQ.roa (hash: kN6K0JrXyJLwNWerB4QQmyVz1nrq+uVY4rleX2HuK30=)
                          3: 3thexKCs9mTJ-g3YYgHPDfOYcIc.roa (hash: Tadv/Gad986b9FjzLOZ4GUKa4pADLYS5J1VXhc5Jv3A=)
                          4: CxN6ZiBsNYNvAwSV2r1-B7b9BZA.roa (hash: omyqw+bz7nV39lBVXP33JrADRI4H4vosedUdoUfqv5Y=)
                          5: KcpEeJ8nphqsMHAWxtLdQf-SPD8.roa (hash: 6dGG4UMu3+4l5GE0LXyb/M9jtsTpoowfhHp1qayn3yo=)
                          6: NiGyen5sRKPPy9T8u3ygDrmXuQo.roa (hash: 8KqO2nLQjwwDARGlN3phFNsy1np9TqX6quA7+00LgFU=)
                          7: PnMPikrtO33Vh6NkdCxq2k4w26M.roa (hash: YMF2rN1VGNaxWyBvf9HrWuFu9uMYn/avu3bG9vwb7sc=)
                          8: SUphdQJw-Hg0tkCTHAxdssxM7WU.roa (hash: K6sCasus5CCnYwQblrVqAaOdSMRGrcdNZpoyM5tiQkY=)
                          9: VXPnJamYnp-2hfTErEBbK3WjJ8w.roa (hash: qfiGUULcvtQTBu8EUEep+iCfwW6E13oKl3US/kmkUJY=)
                          10: Wx-AiUKi8vXh2kBe3_SdHFDF1mg.roa (hash: LeeoUYduefs5gVVp9SgvEfhcjETEvrL0skum1dKRrfw=)
                          11: Y2s2825ga2ucY3EOWuDfFuc9iPI.roa (hash: cqZwOJdbELkT6j9xmowfaAmEQNAvGVbEZxGevSkkmDk=)
                          12: _7KTUyvraj0jLcJwWnYx49GI_Ws.roa (hash: uTbeQlp1sTHWF8RgjB3gPB+04hQuOuoqkYdDsifDeDQ=)
                          13: aXDclZHDVbTyfTZN939aF-svW60.roa (hash: /lQRpMwNPjkJnTsNV0aDEnWjG52zU26fI7Sp7mQlgUw=)
                          14: eta-cr0KHPJdXK1igAnSrrgYgKo.roa (hash: 46b7pv6tWdNF77DVmTz4RmmApLLdlfpeLeUB6iPbMJ8=)
                          15: jgrnqFUINh9yQSbIH4pj0x-gEk0.roa (hash: OpDUk5IpNIdyhSv3cFKH41Wn9xn35YaFqaFD71SLY3I=)
                          16: nFQvXfPBrLhX_VDusBbu0HOF_4w.crl (hash: 1WK0m3qYGP/onS5V80Lu3+phjDy8J3nNzLX4+mE2GEA=)
                          17: nl6qPWMAnZASlpsl7namy3rQd64.roa (hash: loXDXRO+mPOB9lEz0UNovXlA+ursO+WZZ8rEXRBAgN4=)
                          18: pxkX6Yph9uy4iGqYcnxkhKdhohQ.roa (hash: bifJOe/IS/0GcT2Z9iDNC5IwmSgJXexqKx52FOV+q98=)
                          19: tMgRfPFkf85axNNxn8QEdnO-WoY.roa (hash: HZTvV0+hdxoPX0EpNO2j0lRcXYZHcQUwXhCQeH87SF4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:62:3a:6e:d2:b5:42:21:90:d1:6c:22:2e:ef:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
        Validity
            Not Before: Jan 25 14:01:09 2026 GMT
            Not After : Jan 26 14:01:09 2026 GMT
        Subject: CN=018b50e5f67f6cbc65b705a5a2ca572880b069cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5f:ff:c8:cd:07:35:45:54:35:4e:e4:16:81:
                    99:d7:8d:e2:ee:a9:b5:d5:13:38:bc:18:4c:1b:0f:
                    c9:41:d7:85:c2:b8:83:c9:64:83:49:33:30:5c:c0:
                    07:16:11:2d:2f:8b:49:0d:d4:08:f7:bf:31:97:a1:
                    c4:3e:61:89:d8:44:31:af:83:16:82:c8:42:6d:67:
                    65:f6:fe:ac:fb:68:77:8f:8c:0b:57:b5:8c:4d:98:
                    37:af:cf:5d:72:5e:92:4c:81:fe:6f:0f:58:87:85:
                    51:e7:4c:2a:d4:66:dc:2a:57:61:fa:7b:fa:20:05:
                    83:25:30:3a:d3:7e:ba:e2:a7:a2:0f:96:d2:70:97:
                    24:5e:b9:ff:8a:0c:da:26:e3:3a:75:62:24:a6:86:
                    89:3e:cb:75:6c:88:73:12:fb:d2:bf:bb:1e:83:29:
                    f6:b0:cc:b2:11:a1:bb:7c:f0:79:85:f7:c2:7e:25:
                    4c:12:86:8f:fc:f5:eb:16:1a:ff:4c:00:9b:eb:a5:
                    bf:9b:af:49:35:a5:f9:01:fa:a0:a7:ac:29:7b:c1:
                    b0:4d:9d:a0:04:3b:c6:9b:3e:85:73:c3:26:44:ae:
                    85:3a:91:ed:90:d3:bf:0d:c3:30:38:74:dc:c3:72:
                    ae:35:8a:0f:a0:b2:3b:bc:b6:46:e1:ae:b4:cf:4f:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8B:50:E5:F6:7F:6C:BC:65:B7:05:A5:A2:CA:57:28:80:B0:69:CF
            X509v3 Authority Key Identifier:
                keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:70:6c:a3:c7:a9:93:b5:bf:f9:db:05:9e:0b:dd:88:2e:05:
         5d:cd:6b:e3:8a:42:b8:d6:26:91:c4:89:07:2b:a7:cd:66:8a:
         c9:c7:17:31:24:db:b2:ab:16:53:38:7a:cd:63:7a:37:a9:5d:
         e4:27:bc:97:00:76:d5:83:3b:38:12:1a:be:66:f6:30:cd:dd:
         22:0c:50:a7:72:94:04:fc:21:00:35:82:71:f1:cb:e9:a5:66:
         c6:5b:91:c7:fc:2e:b8:e4:8e:e3:a3:07:9b:c0:bf:bb:6f:c0:
         ab:89:12:f6:cf:1f:64:5c:f6:69:a3:1f:e2:3f:67:ff:b7:97:
         59:ff:f9:db:c8:a5:1e:d0:b6:f7:4f:7d:7c:3a:23:60:86:a9:
         bb:6d:6b:85:4b:8f:14:fe:0b:3f:03:34:54:08:94:f0:68:6e:
         31:88:39:c7:ff:3f:b1:c9:1e:54:12:c2:28:e9:8c:89:c7:d0:
         04:d8:7d:96:2c:6c:96:5f:d5:b4:10:6e:c1:cd:d6:dd:9d:96:
         ae:5c:19:fd:84:89:9e:67:fb:f7:83:07:dd:f5:cc:14:52:b5:
         35:5f:03:e3:36:38:93:13:fd:5e:df:f9:69:ff:b9:ff:83:36:
         42:86:fa:34:6d:e4:4a:7a:bd:dc:d8:a7:ce:5a:4f:13:59:be:
         c8:fe:5b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:36 2026 by rpki-client