This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          0eu4ELHbFmiGV0BKWFUg0AWdPGuhLKqelTQugM8f/Rg=
Subject key identifier:   6C:BA:65:8B:42:90:AC:8F:AC:D5:5E:88:DA:B2:97:B7:59:0C:66:D1
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       019BF34FAB0DDCD7943A92B0E42A13F4F3AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          181D
Signing time:             Sun 25 Jan 2026 04:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:43 +0000
Files and hashes:         1: 0dbyZwebQgTGMD5-wPhJH6_Pd5I.roa (hash: rG5nZgpv1Ah9jz+mC9094dW59+5lFAhfWaH5ssnQtAk=)
                          2: 1-SQFDfpp9D_i817zUQFbntY0dRQ.roa (hash: biSe4GCFtSwazcB9PCCa1NKBDVP5/i0SLuwOHponshU=)
                          3: 2frKTWb3ttQDpCXNMXbTSXrlIqI.roa (hash: obnt34G7IEsjg6vdddM8muzJwshLaBlLPb65paOFsfE=)
                          4: 3lYygY9QSAAHtzgINKWVRrbCp_4.roa (hash: xTlxdsrlszD3wQ8XFzdmUFKsu5SMwqAldL5Rb7oJqzA=)
                          5: 4WijXRQsTuAJtSd_hSZYlUqj8lA.roa (hash: cDODijNSh6xud6bY86CXr7OdBhes8GnABNkzt2sQT9E=)
                          6: 7zTwSbIrIN1tbHKaAerBGKh4H_4.roa (hash: Uj+d0N/fp4CQPw2Wdyt0B7bkrgBCMNOKaEUgThPZLo4=)
                          7: Gv1ql7t0nNON87AJIldQVqDpbaw.roa (hash: Afsi36EyWB2mwsT0UzfNkOmYYiw9CwLh31zU2SIsaxk=)
                          8: I2KpdLXbpYuKcc5P2UrERlbUmQI.roa (hash: QwjjNYoou+Yqw7bbIshNHDY3CQQBCro8tQly5UuqIPQ=)
                          9: K6IIfeYnJcau7XFah26WtRrWoX4.roa (hash: kAmjx0E3nDeIJhDMXwZG/0loikW8ryL2ZHfuoiau2sI=)
                          10: KfKdKGXKrJVAyc679p1xVdKcOuU.roa (hash: MZjQw9I7nKK82B9sKr7/qbtBGaD/PhRCNNoKDtPpSRQ=)
                          11: KhnFPatizLYzbuYdUdtwNlimK_A.roa (hash: p+Mj3EP56tIkokr0WqjKkNv7zw4zz51aSvtLv2wkCDw=)
                          12: Nn2M0QjFRAa_T2cmYDVUHTJ5GXs.roa (hash: ROtPVP9nVJ4sSu+guXDuQ34VOIJfTdPXZnYgNbsVTRc=)
                          13: PT0OVKn7DoYDkXnLiYT9h8XOQSo.roa (hash: P3oRTt1oGGLmL6K2JdXvl8dIu0LI9RbrIcGwZo70+dU=)
                          14: T-Tc8u-y-A23bEMCsm71F_7_jTg.roa (hash: uvA7IEtWcoBgqQxL/f1PptXnW15RVEqbUY2vsk5myZQ=)
                          15: TUHp0yldZUy2noEeejLALiKlsOA.roa (hash: hJdNCDGT+WfObUpSa1plMcdJasirz1T8A6b/aK4MsFo=)
                          16: TgBpdGwKgCYXVi-ZeVCMbfdynwQ.roa (hash: WSlOfiJJGk4JzRn+dJ1iw8VYAl7aA0mI15CFDBrgID0=)
                          17: Urxc-_3dN2rsdSn-CFXZaM1OMmE.roa (hash: KTdVek6dN9t33L+6LCMmAcoph/JKLQZZF3RFY22Laag=)
                          18: aFybrbDshxtrknuOyM8RFxRBKs0.roa (hash: RQU0CLTgvLglUS45QfR69+raL0+alWumuh4CDPItdCA=)
                          19: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: 3yVLjAYn9Vw1GTESQa+pbqONshaqSQoFQ9k7mrDo3F8=)
                          20: rZIzlxjNqrmdhiYj8eZcD_DAyYQ.roa (hash: HtYYyQJMTgOPk/TpOD1+JZFhzQ3pNzbNJ5gyclYza/w=)
                          21: thqMO7NSQ4YZbOJpf7E5T4h4Qx4.roa (hash: CSkwEjedoekw5JE8fDs8zoEDa+VA8TtlPZQTJSLtR3Q=)
                          22: xqLMI4n3mv1T0FOyglej7wVFdYE.roa (hash: BA8dbC4wqu6gr5aHMdPy/PzpkFFbaeIFkYk6ddxpagE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:ab:0d:dc:d7:94:3a:92:b0:e4:2a:13:f4:f3:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Jan 25 04:00:43 2026 GMT
            Not After : Jan 26 04:00:43 2026 GMT
        Subject: CN=6cba658b4290ac8facd55e88dab297b7590c66d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:19:87:d9:ce:cd:2e:1f:7f:b1:25:7f:03:99:
                    bd:29:3a:43:70:48:c5:d7:1f:3d:dc:f7:37:5d:30:
                    41:0a:79:e1:30:30:72:62:27:7a:28:a0:5c:2a:a3:
                    c8:92:e1:ae:2e:e3:2a:d8:54:bc:2d:2d:5e:ed:60:
                    27:73:21:95:43:3a:06:a9:8e:64:3b:03:2e:0c:75:
                    f3:30:04:5b:39:fb:fe:7d:65:c3:56:c3:dd:20:98:
                    7a:d1:c2:47:ae:9e:9f:50:dd:37:65:59:75:c4:1e:
                    41:40:3c:8f:51:53:c1:8a:67:38:30:aa:92:72:23:
                    9d:2b:a2:88:74:58:63:59:0a:bc:a6:ad:31:59:e4:
                    a1:81:4f:9d:46:fa:b8:b2:c1:84:5a:58:08:be:dc:
                    c9:b4:ae:d1:85:94:90:ef:bc:6e:6c:4e:72:ea:e5:
                    c0:0d:60:23:ac:25:67:8b:88:c5:36:54:51:21:7b:
                    99:88:12:03:36:e4:01:2e:52:5e:26:3b:8b:b6:78:
                    13:6c:64:82:38:4f:f5:04:fb:97:bc:d5:f6:43:01:
                    f0:bc:0a:d5:2c:64:03:5f:37:29:3e:79:38:f1:54:
                    ab:f9:30:4e:59:cb:84:95:2e:04:08:76:5f:c4:4a:
                    c0:f5:a2:11:a0:47:80:e7:3c:95:7e:29:72:11:92:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:BA:65:8B:42:90:AC:8F:AC:D5:5E:88:DA:B2:97:B7:59:0C:66:D1
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ab:6a:3b:f5:10:8b:c0:14:ed:f0:1d:a3:1f:8b:88:e5:21:
         3a:16:58:d3:af:eb:ec:99:7f:27:1b:17:e0:de:0e:8a:49:05:
         d0:ca:2b:50:82:75:9f:13:7e:10:d2:99:f3:ca:aa:ee:24:a5:
         a3:24:70:fc:f6:51:ff:d0:37:97:a4:60:63:ec:6f:33:f9:72:
         aa:0f:17:54:79:2b:78:a8:60:6e:34:b1:d6:16:4e:23:98:62:
         7c:db:a5:c0:2b:84:f3:11:d6:aa:c1:e0:64:94:44:5c:08:bc:
         7e:1c:5c:83:70:e1:37:43:92:f7:3a:fa:d9:1f:8e:99:3a:06:
         22:25:1f:fb:8b:21:90:d4:67:38:53:a1:ad:5b:2e:c9:a8:18:
         9a:9a:54:70:04:34:b7:db:33:41:22:3a:a3:82:6e:87:7f:66:
         18:67:ba:89:85:62:21:c5:d4:88:c2:53:d8:9f:96:b9:f2:33:
         cd:27:c8:ef:70:ed:93:c4:70:14:c2:13:73:07:64:28:e6:2b:
         a0:2f:a4:6f:89:f6:ab:c3:58:2a:28:94:31:ca:a9:6c:3a:f2:
         58:ee:8d:d1:cf:d2:76:8e:5f:30:a9:91:0e:bf:bc:d5:ed:ce:
         9d:54:ec:42:9f:4f:80:d1:86:d7:a3:ec:32:f3:29:81:8a:a5:
         37:ac:4d:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzT6sN3NeUOpKw5CoT9POvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjYwMTI1MDQwMDQzWhcNMjYwMTI2MDQwMDQzWjAzMTEwLwYDVQQD
Eyg2Y2JhNjU4YjQyOTBhYzhmYWNkNTVlODhkYWIyOTdiNzU5MGM2NmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBmH2c7NLh9/sSV/A5m9KTpDcEjF
1x893Pc3XTBBCnnhMDByYid6KKBcKqPIkuGuLuMq2FS8LS1e7WAncyGVQzoGqY5k
OwMuDHXzMARbOfv+fWXDVsPdIJh60cJHrp6fUN03ZVl1xB5BQDyPUVPBimc4MKqS
ciOdK6KIdFhjWQq8pq0xWeShgU+dRvq4ssGEWlgIvtzJtK7RhZSQ77xubE5y6uXA
DWAjrCVni4jFNlRRIXuZiBIDNuQBLlJeJjuLtngTbGSCOE/1BPuXvNX2QwHwvArV
LGQDXzcpPnk48VSr+TBOWcuElS4ECHZfxErA9aIRoEeA5zyVfilyEZLydwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGy6ZYtCkKyPrNVeiNqyl7dZDGbRMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYqtqO/UQ
i8AU7fAdox+LiOUhOhZY06/r7Jl/JxsX4N4OikkF0MorUIJ1nxN+ENKZ88qq7iSl
oyRw/PZR/9A3l6RgY+xvM/lyqg8XVHkreKhgbjSx1hZOI5hifNulwCuE8xHWqsHg
ZJREXAi8fhxcg3DhN0OS9zr62R+OmToGIiUf+4shkNRnOFOhrVsuyagYmppUcAQ0
t9szQSI6o4Juh39mGGe6iYViIcXUiMJT2J+WufIzzSfI73Dtk8RwFMITcwdkKOYr
oC+kb4n2q8NYKiiUMcqpbDryWO6N0c/Sdo5fMKmRDr+81e3OnVTsQp9PgNGG16Ps
MvMpgYqlN6xN5g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:08:46 2026 by rpki-client