This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
File:                     izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft (raw, json)
Hash identifier:          iFeLgESDiIvb/Am5EuS5bfcF9fQ17UopAuEYF6TcpqY=
Subject key identifier:   9A:54:22:2B:62:CB:2E:3B:3D:BB:00:03:4D:0C:4B:02:8D:00:77:29
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Certificate issuer:       /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial:       019BF462D18A023617958D2D8457F4DC26AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
Manifest number:          048B
Signing time:             Sun 25 Jan 2026 09:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:15 +0000
Files and hashes:         1: 1-BlSXqYyBKUdfU94NGff_PAPul4.roa (hash: 5sWUhwz5Gcq5/MhNhTcOvD2uhQ0tuUa+W9GIH9V8OaQ=)
                          2: 1fRolkRjd-APCzNnG-5bwuoOqNg.roa (hash: uECN6gUKiv+lFioLhpnkI4G1xAlKUZVG1VCjkCRQOjI=)
                          3: 2F897qCWvfh11SUzKWZ5JUV2vMs.roa (hash: BDm7sSnQsdMShImHFreyfB5QnyPZWja62eMfrLC52Z0=)
                          4: 2ecqjdvwwVeADzgAXi31Tj-9uMY.roa (hash: PYkuLmF1i/LptCyvK8hoFYIwFZUAA+w8WWm3Jdteb0o=)
                          5: 3DigKmaWxP-qw4TMo5nSEFFHNlw.roa (hash: SFQibSW8pDXFPKPG5MbvdKYY13AwQ4A4xl349zx1iCA=)
                          6: 91LDPauwCWQ9godr-xheoc62kZY.roa (hash: pLiJYVDF484K9mWtl+JKcTe0VgA4TfPZgkN8+ZrNjMs=)
                          7: 9XRLK1OdgukwixTDk2AKzFzTzbs.roa (hash: GCjLjdeI8luwyn1PGNY8s6Ygk/m/2VfxU7ui9AQ53ww=)
                          8: 9ohNILRN251EJCEOaFSvlOoDNJg.roa (hash: 2WRd0d2oEyTbSuOnacVQb9zr84nnPee4Alvgcj+3gVU=)
                          9: GrLjV0K1rg-_e4Na2PiEv2R8YXk.roa (hash: 9wH2XPtuxgQ1BMZZEBYsg16k1bgpNYguMty8atBuYf4=)
                          10: H9OemdXyC7tAgnmNPQ8cKr4kXek.roa (hash: Y6oksDUVORVjfAcT/DowbWJFqVZVzW3cfm1/KNkAcoU=)
                          11: Jt1l3PmmzdbcYP2rfmhzsDtcPhI.roa (hash: zt/605nd1EgOMLhSVE8EHytRNsfa1q/ziCZNE0ebjzg=)
                          12: PTZMdAT0hDazMuAsVI3CEFaCfvE.roa (hash: Z9gyi8MZGuuvG1z3xCSCxfacu9FwpO6Pum1TmCZXgaA=)
                          13: RH_HIlkMBo61W-LSnPnGJ5s3Jos.roa (hash: 7jSM+R7ontglcAC1koxA8s1vIKZN1w9IqBWxZkjEi38=)
                          14: Y8GAhpOcUIyfO0CyQe49bNXAI8k.roa (hash: 49fIprccRJUVDzFPqcsAmiCiqNfTbqtbpr/g64iaVzQ=)
                          15: avrcnfB12N6L1uAItV4pxr4ZeBk.roa (hash: UCrkK/t7tVltSG/GoHf/iVcJnaXfqtG/1ac64yo7m4E=)
                          16: dB24arzswMhE5aMklbuiHLZ-TiI.roa (hash: eC+51qakYDD1QrieIIxwdnOs/PF7+iVr9j/YubM+elg=)
                          17: hMoYvytTC8MSE72GcaOmUQp55TM.roa (hash: QNj9222JszfBwsXWHLHqGbqHpk9emhsVOXPVoX1Flpc=)
                          18: izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl (hash: 7T2GiFrxP3Y87Zs6jJIvNNabcrPi6AWnd3KkTStpRTE=)
                          19: jC80DyZfd08kqUPQfGLYtFSpqeA.roa (hash: QkkRAI+hrNUAThXm4mIodhuWyIPzbk15zdb1sYevpvs=)
                          20: jkayAAEe2n7QQ7ED_PcDmC66lHQ.roa (hash: 1sEicRYcyxjFiwRmeR+6ylnDIBh+nfhJ+c9MvFSryIs=)
                          21: n8ve06NetjX3cW6GgX_HV5n6oks.roa (hash: pimoPjnCHYZaHLokF/bqF6SVdAYfg1FaqRTM5gnZ2sY=)
                          22: pU_XrlPF8BXSflHv1k6RicQ4hQQ.roa (hash: Zwjahs4SIZZ7mXWd1Naf3bCGTp7nVeEdZf7T1NQzjwE=)
                          23: xJkF66cCvGxEcbXW72kYSvCe9pc.roa (hash: 8ukNpwANOCXSCFQousC6/SlMGWqDu4dvIjSPXAjmXlo=)
                          24: xQPVpv6oDfVejRnWElQGbmYJcaY.roa (hash: y3RHPAzs8tten2VXnVg+llQRjecqqHar32AXcJuIcWg=)
                          25: xg0VuiXqoXiww-GJ9D2_ljEA2vs.roa (hash: uA7hO9E7hUzauisNryngMo6HASraVHp6A2BgzZx4YIE=)
                          26: y78xNtcYu21c47h3KufgEPgZVnE.roa (hash: MwiDwZITS/z04aTqMBZZx2J7qe1RkzKld+egFNWQZro=)
                          27: ycFTntx4cs4onGaGpj0o47JW98Y.roa (hash: Ttb49ZN4wbdVcFXW70bm/uwe/p5I14QSBI+L4GbrQys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:d1:8a:02:36:17:95:8d:2d:84:57:f4:dc:26:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
        Validity
            Not Before: Jan 25 09:01:15 2026 GMT
            Not After : Jan 26 09:01:15 2026 GMT
        Subject: CN=9a54222b62cb2e3b3dbb00034d0c4b028d007729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:89:76:83:c0:34:7c:42:78:cd:4c:d7:c1:73:
                    6f:59:c6:98:52:86:ff:f8:31:5a:32:64:4a:a0:3e:
                    f1:32:d7:01:45:c1:8d:64:04:d9:9d:2b:05:0d:26:
                    c8:ae:65:28:bd:1b:c8:54:de:6f:ca:f2:15:8b:4d:
                    c3:32:89:af:dd:87:84:6c:0a:2c:db:7d:49:28:82:
                    3f:35:b9:e6:73:af:d2:3a:00:0b:1f:67:46:5d:66:
                    ea:7e:89:7f:9b:88:45:1d:f0:52:e9:49:6b:22:41:
                    37:60:78:ac:de:e5:6f:2f:2b:da:3c:35:11:bd:e2:
                    23:a9:56:93:cd:3b:27:46:ee:47:cf:fb:48:4e:1e:
                    2b:7e:d2:dc:37:43:02:f8:b0:50:a8:72:89:c5:02:
                    57:ac:a1:ae:b0:60:d7:62:84:83:18:d6:53:e9:a8:
                    dd:4e:66:49:d7:3f:e8:40:b8:24:d2:e5:00:e0:f5:
                    fe:06:fa:06:1a:56:05:46:51:55:fa:c7:99:3f:c7:
                    d1:96:58:40:86:7b:7b:e6:2a:9a:48:0f:fb:4f:33:
                    08:56:39:d1:6c:c5:2c:bb:85:7d:aa:4a:71:38:27:
                    01:20:5b:7e:3b:f8:be:ea:ef:bb:87:c8:f3:2c:99:
                    f8:29:c7:c9:2f:43:ea:71:51:b7:cb:bf:c5:a1:ef:
                    fa:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:54:22:2B:62:CB:2E:3B:3D:BB:00:03:4D:0C:4B:02:8D:00:77:29
            X509v3 Authority Key Identifier:
                keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:81:a5:33:a6:da:6d:ae:c8:a5:f1:5a:4c:2d:0d:9c:bc:42:
         7d:33:90:95:57:3a:7a:2e:82:53:e3:05:e0:09:e2:d3:ea:61:
         44:35:92:12:32:50:07:dc:25:77:c0:0c:ea:f9:b0:2a:a4:ff:
         9f:aa:10:12:cb:c5:28:7d:58:18:18:2a:9f:60:36:57:bf:c5:
         df:89:7d:7f:45:0f:35:df:24:a8:37:63:0c:93:33:64:9e:17:
         75:d5:64:b9:3a:9a:fc:3f:cc:ca:87:8e:28:1c:e4:bc:24:bb:
         b1:23:aa:50:11:a8:ae:de:60:11:b2:be:95:01:c0:cb:16:21:
         60:f8:54:4b:5c:3e:4b:08:a9:d0:46:f6:f6:65:a6:87:fe:8b:
         48:49:5b:8d:35:c6:b8:ea:62:f8:93:ee:44:28:b2:66:6d:ae:
         e4:f7:91:ef:1b:33:f6:bd:38:56:5f:58:38:ee:14:4e:8f:e6:
         eb:8f:6c:f4:86:9b:b9:48:4b:91:47:a6:ed:c2:52:ff:21:3c:
         30:ca:5e:38:54:86:85:2f:1f:f9:19:45:aa:6a:a1:ff:0b:1a:
         c6:c4:af:57:24:a8:c3:46:3f:b8:92:43:4c:26:1b:7a:a6:3e:
         af:13:eb:7b:25:e3:d6:17:18:7b:c9:39:d0:43:71:f9:96:72:
         83:2c:9e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:26:42 2026 by rpki-client