This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
File:                     Skcc1s5gq-3XR2KxAapeb0IH784.mft (raw, json)
Hash identifier:          IVANiFjZOASjqLHSDDRoDIcBPuLzbItI2RSWyQjdM9k=
Subject key identifier:   8E:C9:86:61:35:A0:8A:17:E3:19:62:23:C0:17:7F:9A:E6:54:75:3D
Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE
Certificate issuer:       /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
Certificate serial:       019BF274A9F730929741FC614CBC2FC92513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
Manifest number:          0E4B
Signing time:             Sun 25 Jan 2026 00:01:30 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:30 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:30 +0000
Files and hashes:         1: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (hash: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc=)
                          2: 1PJVy80sUt-YChpQFNLUpK8IvQ0.roa (hash: nqFKbKbJhPRbJeEpGIojepPcvvFOxg7enXqUgRjFJQM=)
                          3: Fow_DRD0J9Sk-bBDpqDfNKsW1qg.roa (hash: OKmdm7ysJvOteC9H/zvOdemCTeoLV8EABr4yQLYsMuA=)
                          4: Skcc1s5gq-3XR2KxAapeb0IH784.crl (hash: jss1CmklL3X2UntSjKNhyM9LB32b7Upk5yjSZ+O2o2M=)
                          5: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (hash: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog=)
                          6: YwC9pKPBjvGZtmMsz8q7-L2iwUg.roa (hash: doEjRnjZRLGiYVoGRzQjHdhg1pJzAYP6ZgcVU+Bf/bE=)
                          7: Z3qTKJ7CIGasieELz7lpIp2Yh6k.roa (hash: 7cCBpyUsGDrcq8EeS5YX2uI808hKjfebRICORugyh0E=)
                          8: bGUUyfn8LV4LZNEEOyMzCvPydbk.roa (hash: W6x3dQobD8oVvOQzgir4mxsCCqdcG39VNjd49cT8IRw=)
                          9: dR0zpIqq8tLg1OamhsPNo_J5QBg.roa (hash: oBSo9M/Eu7aDbt6HN3S3ca9KyP+2wEB/H+NG+mj4DOQ=)
                          10: fNAR_JPkkC491YU-kT_ByTYIEm4.roa (hash: sYR/Ti3r2dDvrcuUCgrf8MhHNZLnx4vKqJjpp3V/CwA=)
                          11: hgQs7MYBd_0sfn5XYxmwzSv5ps4.roa (hash: ZtQrVgGudfrVRG4YhbUKKHLoFLvlQ7OJR646o1ECYOw=)
                          12: kvNYuyJjxpLiL78r_HWCaKIVSeM.roa (hash: an7+no5fubSIGYKy4WMOxhF8ErceM1kP8W7CMY2bk44=)
                          13: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (hash: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ=)
                          14: pcWMRWhYeiOy3kqkQxP424kAjSw.roa (hash: 91t3lOCpz165XTACShSUX5kfMv7uJUtfiuBmjOM8WJQ=)
                          15: rugEHoaHVajoVfoc97cSAKNDn0w.roa (hash: 7ghfXJusobnUoN3Z3OZ6ek2nYh+X9Gs5M1yKtLkxaGo=)
                          16: tvXaldS4p0ah80NarXqlQ6sqUOk.roa (hash: RHYBsJsECTFyREIL26ua2T7FL+MNtNii014MePMLm6I=)
                          17: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (hash: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk=)
                          18: vtDS3h0cv8sKwu60fmQfZvHkuHI.roa (hash: 1jLMCQj/DnUGyTFUb2JE9h+GQ/o44K4S5NUsN/49N6o=)
                          19: yS-0BxtvAt6IeR55AkgaLECC9TA.roa (hash: R3FujKz/FTazeX7vxtoHKe8ijVfIAf1K0lV4khxwtAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:a9:f7:30:92:97:41:fc:61:4c:bc:2f:c9:25:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce
        Validity
            Not Before: Jan 25 00:01:30 2026 GMT
            Not After : Jan 26 00:01:30 2026 GMT
        Subject: CN=8ec9866135a08a17e3196223c0177f9ae654753d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6d:f6:af:e1:d8:f9:14:a2:f0:15:c3:4e:5d:
                    a3:55:2c:df:2f:d8:0b:c4:0b:ba:4f:c5:aa:fe:49:
                    95:7b:9e:e0:05:14:0f:58:94:11:f6:c3:93:df:06:
                    f0:91:24:6c:da:70:bd:fc:1a:d0:f5:15:2e:74:cb:
                    21:ac:04:b9:c5:21:53:52:c2:1e:c4:d5:20:2a:a3:
                    e6:42:70:60:87:85:53:ff:2c:f7:10:1b:e0:ce:63:
                    d3:ff:c7:c0:06:9b:6d:42:2c:b3:27:3f:98:a5:b1:
                    10:b4:c1:f5:d4:3f:8d:2f:26:1b:b5:20:29:ae:e2:
                    be:d3:74:e0:dd:f4:09:87:ad:3e:dd:83:f5:d7:8d:
                    97:17:79:f1:56:e3:35:d1:85:8a:a9:eb:9d:58:59:
                    03:f5:5e:d7:01:29:bd:1c:be:ab:37:cf:65:55:5c:
                    38:2d:d9:f3:e2:10:02:08:24:09:e4:dd:36:af:e8:
                    6d:99:a0:56:66:2c:d1:53:c8:03:b0:6c:95:04:a1:
                    4e:10:64:f5:a8:ec:75:6c:52:98:16:80:8b:e1:21:
                    31:34:eb:45:81:ce:67:9f:c1:78:07:73:80:3c:24:
                    eb:9d:b9:6f:ed:cd:e5:7a:93:2d:fe:8b:d7:7d:1f:
                    b0:ff:f6:e0:fd:7a:e3:1c:21:7b:dd:27:64:42:5c:
                    25:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C9:86:61:35:A0:8A:17:E3:19:62:23:C0:17:7F:9A:E6:54:75:3D
            X509v3 Authority Key Identifier:
                keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:d7:5a:33:ed:08:df:bf:26:9e:88:2b:b0:d5:99:9f:5a:a5:
         bf:a4:8b:e4:d4:b0:27:de:7d:11:b2:50:97:5e:57:92:32:7c:
         fb:4d:81:7e:9e:6b:2d:a4:d0:41:fa:70:2e:99:30:8a:47:df:
         a0:e0:ef:0f:e8:e0:fa:84:c6:d8:f1:2c:54:43:a4:eb:d3:f4:
         77:d4:77:72:1d:54:17:6f:2d:2e:cd:f9:0b:1b:0c:30:13:35:
         32:44:33:1d:06:59:fd:db:9f:72:76:55:06:63:75:54:6c:59:
         b9:3b:1a:c1:58:aa:7b:a7:7a:e7:01:1b:6b:16:99:41:c4:0d:
         f1:97:52:f0:cb:ae:80:0e:30:2f:85:d0:38:52:86:8f:08:cf:
         c5:94:a6:0e:04:f3:5d:62:f8:ed:9b:82:7f:02:38:d0:19:a3:
         34:aa:67:d6:61:e7:71:d8:a4:4c:15:0d:a1:36:7b:e3:f3:67:
         f0:df:0a:cd:04:12:f5:2a:97:94:18:23:5b:59:f1:a7:42:a9:
         a9:8f:75:54:36:87:3a:9c:17:5b:58:f7:f5:81:4b:5c:51:60:
         5e:de:44:f7:32:15:a0:a3:c0:64:8e:15:1d:7e:56:52:45:77:
         72:51:b8:99:3e:8b:2c:7b:b1:30:37:28:6d:e9:e3:7c:89:e9:
         88:6a:85:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvydKn3MJKXQfxhTLwvySUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw
N2VmY2UwHhcNMjYwMTI1MDAwMTMwWhcNMjYwMTI2MDAwMTMwWjAzMTEwLwYDVQQD
Eyg4ZWM5ODY2MTM1YTA4YTE3ZTMxOTYyMjNjMDE3N2Y5YWU2NTQ3NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m32r+HY+RSi8BXDTl2jVSzfL9gL
xAu6T8Wq/kmVe57gBRQPWJQR9sOT3wbwkSRs2nC9/BrQ9RUudMshrAS5xSFTUsIe
xNUgKqPmQnBgh4VT/yz3EBvgzmPT/8fABpttQiyzJz+YpbEQtMH11D+NLyYbtSAp
ruK+03Tg3fQJh60+3YP1142XF3nxVuM10YWKqeudWFkD9V7XASm9HL6rN89lVVw4
Ldnz4hACCCQJ5N02r+htmaBWZizRU8gDsGyVBKFOEGT1qOx1bFKYFoCL4SExNOtF
gc5nn8F4B3OAPCTrnblv7c3lepMt/ovXfR+w//bg/XrjHCF73SdkQlwlsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7JhmE1oIoX4xliI8AXf5rmVHU9MB8GA1UdIwQY
MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt
YTZiOTkxZjRmYWY4LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4
LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX9daM+0I
378mnogrsNWZn1qlv6SL5NSwJ959EbJQl15XkjJ8+02Bfp5rLaTQQfpwLpkwikff
oODvD+jg+oTG2PEsVEOk69P0d9R3ch1UF28tLs35CxsMMBM1MkQzHQZZ/dufcnZV
BmN1VGxZuTsawViqe6d65wEbaxaZQcQN8ZdS8MuugA4wL4XQOFKGjwjPxZSmDgTz
XWL47ZuCfwI40BmjNKpn1mHncdikTBUNoTZ74/Nn8N8KzQQS9SqXlBgjW1nxp0Kp
qY91VDaHOpwXW1j39YFLXFFgXt5E9zIVoKPAZI4VHX5WUkV3clG4mT6LLHuxMDco
benjfInpiGqFGg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 05:41:38 2026 by rpki-client