This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
File:                     DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json)
Hash identifier:          XHSI5WwkKIYnNQQ2BgK19KPIDpcru63gMjrKM0X5d1o=
Subject key identifier:   AC:B6:22:3E:85:15:2E:13:10:26:AD:F2:3C:5C:9E:BA:18:0C:C8:1A
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Certificate issuer:       /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial:       019BF3BE00BA3CB9E1B1C8C469FDE8AD7CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
Manifest number:          0B3A
Signing time:             Sun 25 Jan 2026 06:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:13 +0000
Files and hashes:         1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=)
                          2: 7j7JXBXMyr8Ic6XpBpphOUDRZcI.roa (hash: MHH4V/WoyGohF1n2EFtKGZHg+Qh7CQ9k4mUtJ9/Z04Q=)
                          3: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: hg+0QcuIjnLVakxxdN8X8k0YYXvyBpoCcN2Wnem+RQk=)
                          4: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=)
                          5: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=)
                          6: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=)
                          7: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=)
                          8: X0aB-vX6EDVAhk8JdQ1Jw4jClx4.roa (hash: rh/WCgNGpWe5SFzXuknTX7T5+ylOXQCOCuQbZtqKNPA=)
                          9: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=)
                          10: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=)
                          11: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=)
                          12: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=)
                          13: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=)
                          14: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=)
                          15: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=)
                          16: uPX022VTJ_bMjiHSPx4Do1vlriY.roa (hash: aq4O2cq08j8Fn88DS5wNdITiPLigSYRE0hYFpbgZqVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:be:00:ba:3c:b9:e1:b1:c8:c4:69:fd:e8:ad:7c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
        Validity
            Not Before: Jan 25 06:01:13 2026 GMT
            Not After : Jan 26 06:01:13 2026 GMT
        Subject: CN=acb6223e85152e131026adf23c5c9eba180cc81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:18:a1:65:4b:cc:12:fa:a0:74:8d:20:32:b6:
                    b5:5a:17:44:30:25:ee:c0:0b:4f:d1:fc:ee:6b:ea:
                    2a:3e:c2:eb:02:9b:2d:76:d9:e9:5c:34:2a:ee:1f:
                    dd:09:90:b0:c0:53:97:95:74:a7:a2:0c:c5:a2:32:
                    8e:60:b0:6a:c5:cf:f9:a2:80:c5:b5:91:54:bf:fd:
                    54:ce:af:43:40:3d:6e:54:3b:6a:6f:b5:cd:75:4d:
                    b2:58:0a:74:38:0e:4a:34:f6:f5:57:0a:44:6d:1b:
                    bb:e8:49:43:0c:91:f3:fc:1e:ae:40:82:b0:24:e1:
                    cb:27:df:7a:90:f1:9e:ab:71:91:63:5a:8c:ad:d5:
                    98:2e:91:1d:d6:eb:f7:af:b3:10:8b:a0:f1:19:af:
                    23:ef:78:fb:b9:90:81:f7:76:93:1d:92:58:4b:a0:
                    b1:ff:26:7d:6d:c8:a4:3a:f6:8a:5a:cb:3a:6d:20:
                    70:80:74:51:7b:5e:b8:90:ff:e8:e2:04:1b:5d:da:
                    e1:94:a0:8b:fe:86:36:8e:f3:e9:7e:3d:72:28:b8:
                    9c:a9:b7:51:90:2e:48:f5:17:8b:f1:c4:7b:71:f3:
                    b1:1e:56:7e:c3:1a:9b:40:0d:d9:ae:33:d8:a7:6d:
                    ee:eb:5b:89:93:ba:be:89:63:65:85:b3:2f:21:76:
                    3d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B6:22:3E:85:15:2E:13:10:26:AD:F2:3C:5C:9E:BA:18:0C:C8:1A
            X509v3 Authority Key Identifier:
                keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:54:e3:40:c4:c5:8c:aa:07:63:17:84:1b:eb:cd:26:67:
         37:02:3e:34:e0:b6:f2:7d:aa:a5:fd:9f:f0:4a:b0:83:97:b4:
         de:13:ea:d1:55:c6:29:02:54:fa:d3:cc:6b:c8:af:70:86:a3:
         db:5a:7f:f3:68:df:ef:40:56:b2:9b:3a:2c:42:ce:8f:a7:06:
         c1:75:7b:06:db:84:29:78:b6:67:a9:18:d8:88:64:eb:94:e1:
         d2:21:2a:96:ad:d0:74:a7:00:49:a8:67:47:af:7c:d4:12:29:
         4c:70:3d:1f:59:6e:85:ae:d2:6c:d9:46:1a:03:2f:80:f0:35:
         3a:aa:65:50:54:32:cd:d8:5e:8d:cb:31:67:3b:2f:a4:54:13:
         0a:20:1c:cf:eb:1d:bc:37:b2:b5:19:6f:0d:5c:4f:40:84:7d:
         a6:31:aa:57:66:a8:fe:1a:f4:50:58:8c:83:5f:44:67:8e:c8:
         e6:c0:2c:bb:2c:c1:da:2d:af:5c:21:be:ef:bc:d0:ea:e5:65:
         93:b4:e5:51:66:5b:63:88:d8:7a:0b:99:b2:97:c2:21:e5:bd:
         7b:52:63:1d:63:8b:8c:56:1a:80:a3:bd:20:58:ce:02:1b:ba:
         c9:00:1b:07:4e:6c:f6:d0:48:5a:3f:4b:4a:d0:30:11:de:bd:
         f3:9e:42:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:18 2026 by rpki-client