This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
File:                     Ijc1cckCSb8qqUjni-0T4IUouH4.mft (raw, json)
Hash identifier:          We05v2wFledcc+Is6K8jhG0KajBLFBIbEvErPS/2MYA=
Subject key identifier:   0F:2D:9F:CC:7B:19:4E:29:DB:E3:1C:67:6D:E8:F5:A0:8D:70:27:65
Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E
Certificate issuer:       /CN=22373571c90249bf2aa948e78bed13e08528b87e
Certificate serial:       019BF5E31786EA9A6A77D98FA0DBF17FF08A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
Manifest number:          043F
Signing time:             Sun 25 Jan 2026 16:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:59 +0000
Files and hashes:         1: 2CGi6XTrNyrLGjLcqbSCk82ofmk.roa (hash: TPy8CfDGeWDikX6XXy6yt3O6u19ZeeVkWM0Lc1nsEuo=)
                          2: 2_ow5uTIhMXeasJ051QE0CG1bRw.roa (hash: 5xmJH89OT1ojvZpHiwh1Q4P3on9t/Y5Lv3uU1mtM+IY=)
                          3: 3KF6iFFWsH8yuAB640wj-Fz9nTg.roa (hash: 0tD4HiVj/J4aKg97epQ4VMKVnjZg9lAvP8TG0+FIcXM=)
                          4: 4QMeey6hVccNCXBg7ZGr8IBHbJo.roa (hash: mGigxFZrLLKUmCZiCO6qYKujBS/kQGDHxNWi1v7IdFA=)
                          5: 6k1WlHejVdDanh6pIyF9Dp5_0gE.roa (hash: 1reQL8orFV7vMdlW0ccZwV64RCwgbpqSaRcoKtUmeeo=)
                          6: 8Yvrnf3Td2A-XqcljsmN2iMX0Wg.roa (hash: Ly7ycaIppx0oSve3OzyYS+imL97VzcfMEc3XW9GMN6g=)
                          7: 8f5770STBPDk-MUANbbcMKKq0y4.roa (hash: e0QEmgK80cM58G7rUnkCBJwbbG/TaI+tRjhBp9Dcu+8=)
                          8: B90wLC90Rj0MQGZL0STOoi505J0.roa (hash: Lezj4c9FnHyrfbbbklEmIeFidZD8OuQTzFH9GxN7llU=)
                          9: BEmi8-dwbtB5HGWdjc0U83jFgME.roa (hash: GLMD76YPAXWMYHH5DIUOe5OW2s35wlq7EC5P9uSzGlk=)
                          10: BFjkCv7-Lu5WX-NmAziouu5F39E.roa (hash: uePuqcxnHmy9G0rbt0ob5EY7ycdmXX0W1NCcpc1ccOk=)
                          11: EX0J0xvnJG9c66QV7uljwQw0Ktc.roa (hash: iA1sbCr56iM0C6g6aMRw8NM/1oXaheju9R0Q9IHCg6U=)
                          12: GTGqXVhz06Y47h4tsfVzQ5-izUM.roa (hash: OFMU1gHAzvgxMOuofABHjmhX/fgNwdGN42jTuyPduAw=)
                          13: Ijc1cckCSb8qqUjni-0T4IUouH4.crl (hash: vU8E+s2Mj1la50SQO3Jo+IAl8ycirkkvNMg8/AlZDew=)
                          14: JaT12oYilJhgYVKyiHNIVy6Ca7w.roa (hash: 18/fdq6P1/4MpP8xKvcSNU9qOj7e6dDXb9SeqVsiS5o=)
                          15: K_1XBl6DwHcnvXcxbtZ8QWLE_0U.roa (hash: CEC+lYaN4eilnQY1rGWtOAE0ICHvjSNw5oaJdHwpRPo=)
                          16: KcN6TR6d6Dd86CaRLAt-QoV1uVg.roa (hash: C7A4wurt3gZuDrghwGsgMO0xvx36nWSo9h1xi9c/P0A=)
                          17: KqDc1QFRcs67DMDv5nh6ooZeAwU.roa (hash: MbfGv9Hke9FTdUnqhb4GS+mpjcwMdNWma1brC24LcoY=)
                          18: L-n62_-n406OrplxAWexZKyVSbU.roa (hash: FIwNKM3flqXc3dcM4D9CcFjAjHYBFHarSBNxZs+0EXc=)
                          19: NGrRBAn4-dwMBJd6J7YCFhEh5RI.roa (hash: 06sz3x2HEpiyfIhwg3Q+IJr5/tG5MAS6f+CKjCP23sQ=)
                          20: NIj8ATzibOIfDrx8ZuBJ1XZxRcM.roa (hash: yigjXCzthTHtqVxf9QNfcw30Aom0QT/1CLhAs1JpMFE=)
                          21: Pdd92H_sni_faRZHdK0jKk2j9tU.roa (hash: rMuuGnY/1eXwNG9eBPx30NQ9Hcoc29Ut6p+ZS2QG5mE=)
                          22: Qg55LxiwkZct0dzC3uk6zEhQ2tA.roa (hash: 2wZvpJoRPd1PR2vm6ydbigwXx/IfVUpp9SpAjC/KM7c=)
                          23: U4gWF4uLSwpNuXjAJ-aWPuBgr8I.roa (hash: TicMUpzCFBlCzhbrLctVbir7A+U8V3MGR5vuAYB87gs=)
                          24: Uc6eLdJswXyPLq0Y-C34PorCDV0.roa (hash: 6NlYwrgPwPKxcErN1rGvKwKVY+TjNIdrPOUn7cTCsqY=)
                          25: XB9k7NwS81QEdrBbO3ZLQE8TefA.roa (hash: d00LKOSDlwY9rBWTu2qCBuvNFcOqXisToigqhRgSmx8=)
                          26: YCjuxWxWXFaEB0Ax37_aM8Noi0o.roa (hash: W21iL4xwyDO0woZJPtUIK92/p6K6v0gVgx9towqPpwc=)
                          27: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (hash: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0=)
                          28: aBftrkBz6JjSHVZmS1km5TowGS0.roa (hash: fsZ/beLIABQFUsU4rmxMsW18VOkXaoXIy4CreqAoFlE=)
                          29: cGGVKDLDGMZDfNI81Jk5VFaqwtQ.roa (hash: tEZa9C6o1kI3sr+oOxxeQ2RILcQ+l9HGUOyzVl1dE2s=)
                          30: cOVZU_NSIF-VG6jwXbfn7L7WD0U.roa (hash: gZ0Lh2Ki9788/aWzuU48H8Dq9ry+IjYT8J9pfgrHjCI=)
                          31: dnQ3S_JMt6FTyxYRCvz52wxc6r4.roa (hash: WFR7NvOYvnrGt0VvmZ3sKuRAZ3fX5hXr4cy+Kv7Rv8I=)
                          32: flcRh-4VxN340graxmO8KmmKqyg.roa (hash: BwILGufZjRQurCTdyUr+KPH+3YEe8QgKDiG0m2qyZ9E=)
                          33: gNLOIvbjNjZQxuxvki_lYJJt8Mo.roa (hash: Ad1G4KqZUjpch2lYtIzvzOnF7bYFB2kEOungCIY8APE=)
                          34: is0QjH9ofNQ3wM-JwbNhBRrAaFM.roa (hash: 9iP3EMND8SDJUE7gJsVW26TMFKWa33cfsL1lxGR0fno=)
                          35: jH2YcyMfRCJPEM4wh_-M0jIYlsY.roa (hash: xLWqMtRWZ3Re7rPrJoN5MiGMyOpeqQZKBclM52e1XSU=)
                          36: jPU42eSfoA2tlNgN2hIojOiHe30.roa (hash: /L4zqco4TkMw5ksHGNn7iEBvLxKh4kpSoFBetJiOpEM=)
                          37: kL4y3pQMqSij8ayM6CXPtuSYIvA.roa (hash: 84H603zDH0MyON3E0y8p6yH+6YkuXUAniURtdGliVVo=)
                          38: kMb-Oyn-sGikc7AdD0FB1YwizZ0.roa (hash: B0k6YXSTq1unhKTbD7kzMF9IUc+74LsQ4uA+pEsnDRA=)
                          39: psZCOvqSpcWDmIacsRfs1gzaOsg.roa (hash: dBILPQHnKwPogr2qELM79YPUQo3WafFsFfBe9j3SP0U=)
                          40: skLOzodSwCgZuAyHpwj4O2GHzes.roa (hash: Xi5bSRmGcbqYrsWnWW0Psdcx8Zq48NZIayw/KvVmtYo=)
                          41: tE16M_oj0HN7khP9LpWG-VsS-lk.roa (hash: YD3Q/wnc9KLj2uuqp8CKyxE+UkvLbkC3vNCiGzZPqEw=)
                          42: ufhtLD1gy6NviXSRnFHBdIQ9zyQ.roa (hash: 8Lar/SqCjCGaEvTLOLiK7uVO3D2pbh/ygh68QJ7dDaM=)
                          43: ykwHJtyNAU_rMNhqXkDHy2m77jQ.roa (hash: YTMzmRFmaJn2juscWRVv6AowMKg8agrf/EWZm8V6PUg=)
                          44: z2eaVvDAo6hliwuK7zyZVVTHM0k.roa (hash: pnqWvkB8+s6g6PDLILeOwrtmtlbh9fBjBLNowURO4vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:17:86:ea:9a:6a:77:d9:8f:a0:db:f1:7f:f0:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e
        Validity
            Not Before: Jan 25 16:00:59 2026 GMT
            Not After : Jan 26 16:00:59 2026 GMT
        Subject: CN=0f2d9fcc7b194e29dbe31c676de8f5a08d702765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:65:41:bc:a3:72:ac:1e:cd:b4:a4:4d:74:45:
                    d4:6a:81:ef:58:cc:34:0e:18:1d:1e:5d:5c:cf:63:
                    b1:f2:1a:38:4c:43:69:9d:b8:ad:1f:91:41:ae:11:
                    2d:ab:6e:92:f7:7c:fc:a3:b0:16:b6:51:d6:ea:ba:
                    46:1a:d5:4f:01:31:d3:31:ea:8b:b9:c4:8c:60:27:
                    87:73:0b:db:31:a3:9f:c0:e9:a7:7e:ac:25:11:94:
                    d9:c4:74:b3:90:47:4f:22:70:19:6a:a3:f1:ab:9a:
                    f0:9a:87:c4:74:8f:fe:cb:d8:b6:90:cb:9b:ec:7b:
                    35:14:ec:11:b8:3e:93:87:31:f9:05:26:b2:3a:91:
                    a4:19:d6:37:35:4b:99:db:d0:e0:86:30:cb:82:1c:
                    7a:90:18:be:21:b7:b2:a7:2c:74:8e:95:9a:61:48:
                    cf:ab:c7:d2:e9:e7:42:79:64:0a:36:2b:9a:a4:08:
                    fe:91:24:d3:75:0c:94:e2:5d:38:19:99:a9:fd:f3:
                    8a:87:ba:a9:32:ba:42:7e:19:5e:22:95:17:7f:73:
                    2f:b0:d5:86:d7:50:65:f3:d1:14:ce:17:6c:97:7c:
                    5a:b5:fd:12:3c:44:56:19:01:92:c8:4e:da:90:65:
                    d4:25:92:34:a7:95:29:a1:1e:c6:37:7a:dd:37:02:
                    3e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2D:9F:CC:7B:19:4E:29:DB:E3:1C:67:6D:E8:F5:A0:8D:70:27:65
            X509v3 Authority Key Identifier:
                keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:12:05:1f:59:4b:5f:2e:71:e1:cd:a9:e9:c5:c8:cf:c0:78:
         66:1d:7a:8d:a7:41:78:38:89:92:81:ee:ff:15:70:b3:b6:fb:
         d2:8f:af:90:78:8c:04:18:a5:39:fe:53:45:62:54:a3:04:07:
         c3:c8:9e:d5:66:76:d8:79:bf:a3:ee:fb:09:43:62:94:f1:6f:
         85:49:0d:f2:92:71:af:27:2e:1c:c8:de:e8:8b:6d:a1:ce:2f:
         7f:36:f9:79:06:77:c6:2e:4f:60:d4:16:f4:89:8d:ca:1b:89:
         92:18:17:4e:97:e4:23:e1:48:04:d7:5b:79:2a:d2:ef:a3:a7:
         de:2d:85:5d:cf:75:b7:38:2d:f4:0b:03:85:7f:be:93:5e:09:
         1e:fc:86:e2:29:f3:55:5e:8c:d1:12:6a:9a:81:8c:4f:80:85:
         ea:1f:e7:d7:8f:e8:99:17:85:3e:63:d6:fc:c2:38:30:41:db:
         b9:b8:e7:1a:2f:b2:0a:66:df:e7:c1:22:4d:c9:cb:24:2c:f4:
         48:7a:5b:44:8f:31:bc:c1:72:17:1c:67:57:f5:f2:cc:4e:79:
         52:65:3c:90:ca:3f:b2:27:e0:82:31:19:22:62:6a:25:5d:a7:
         cb:74:f5:56:fb:38:91:c5:36:1e:89:8d:84:9b:d8:e8:4f:0a:
         e0:68:17:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----