This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
File:                     k2d9fLknHONhJW6YM8x7FP0CPr4.mft (raw, json)
Hash identifier:          JJlLsLlmWkZsf1n+XDjRK1jV7fOfbNIo4LIH8i3s9bs=
Subject key identifier:   3F:76:E9:33:A9:92:4B:D2:9B:73:FF:5D:17:20:8B:30:60:CC:12:89
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       019BF31933F15A14A5D01AFEC92904C721C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
Manifest number:          18A7
Signing time:             Sun 25 Jan 2026 03:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 03:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 03:01:13 +0000
Files and hashes:         1: 09U_5477hiaEijiQMLjVjpqJmg8.roa (hash: yMPG61P25HSZAK63L04QqxwUcW3YlOvOIox2xnqiee4=)
                          2: 1-ZdPMcjvQDwjz87axUV9KCm36k0.roa (hash: TeKd+yra8tZ6iaKrm5ZW/lYfbS4XH/DTQXyvhbbMSjU=)
                          3: 12J5auJGnMEfTUqZqs0Y3krx_EA.roa (hash: gz3Tmv3Kd/VmlXrt56re7837jRA+HGbjJtx1pqOJ4L8=)
                          4: 2uou-TZfMBCmDn3qqHICuBlL_c0.roa (hash: avZKLrCguu9xglaDNrlf7M6BslHtDyUXW1oXAQxH7jo=)
                          5: 4GX1Ni9yLaCvTEGIQlZsxLHRTos.roa (hash: T211nr5nONytfyxD2+OF8RONzopw0czC1ekAAyc52II=)
                          6: 6uQm1PxtRre-5hEFunO3SU8mGPk.roa (hash: qYwF0oVamTk0OOkHEg3ZJVJEnDwUfGUOc9/pBPeCu8A=)
                          7: B8SXQQ3hL0fnf_TfbamzqN0CfnU.roa (hash: C1cUJRztP+dL7d8PQDR5YZauNQ52r1/a8GSZXIDmFyQ=)
                          8: BM1RQxvvyIKBL8g4zBcWqJcB1Mo.roa (hash: CQKQvWkgdhGn8ReQSUuQBWNAnJvAr9pLNfF5vfp4cXU=)
                          9: BVNGTt8uEfptl8LHqCuP3kOpdcg.roa (hash: WOkCvrVCojpbDJ9AWqXg096xx3M+xHQMny/jk9IrI1w=)
                          10: Bc1DSexhRBiZBQOgVQAlTdkhX3Q.roa (hash: 7kPReetcAngcOP4ru2IMcnS7I8gBGxc6kgxVJ3yYfMM=)
                          11: EfsJnQ3fWNGuLHN2Qj7lFcxFPDY.roa (hash: fRjDXyYWBIV0igVEoIZnUlJBKpIyjajsg/tbcl1aWrc=)
                          12: HknmMTuhAYntuaPmJU-hL30K1OU.roa (hash: xo2ci6AUqJlHuEbTAtg/Zs/u5qObc3gQe3SW3qvrxvg=)
                          13: KTSZoqFeca-_Q6n1KMEhLLL8dWA.roa (hash: o1/RiBn3II/bJglE4RL5UD9dzxw8QVEjbH+MNAs/ja0=)
                          14: MBWbo0gJNUF21y9_s0U9-L-gg-w.roa (hash: KJBcJ0bJ4ljItOEBSZKOlZMC7qCSi0K3VjmcYAZx/Kw=)
                          15: NmJmwlutv_IvFi3e_LxUKjazcWo.roa (hash: AOpRXCzEN8lkNPZMkSOpIJal5kxV1r16xrm4BY0TiAY=)
                          16: PR0BE2bcAqdH-QpKc10VO9s_9Ys.roa (hash: 3ymRfYxNTHdzgs2oZ2sd1ciZ1rijeOdKeNaxvj0p7lc=)
                          17: Q2QENuhPgsVbgwNPIY4HpL4Yl6s.roa (hash: 2GKn2PAieyHRa/TsYWX239kz98GUSYpRBaKi2ST0IME=)
                          18: X_n9XBQyhZKg4ysD4nMjpVtqV2Q.roa (hash: z/TVlA8GyoRrGQ84MJq+72M0qbMe4LpP5mYjr8rQUpI=)
                          19: XdUMhvG9oQPrrKzfUCLk3WwhmTk.roa (hash: Fdb4wKKqvaQQ76cnrCYhan8GU6QyggYtFJ+x0hn2N1g=)
                          20: d-T7NIGaWpT2DLlBqllIl5AUmls.roa (hash: yfHg6m67OQDNEJ1EP+mfmTlQNfHXyZHnJwh2okmA5Gw=)
                          21: doXoLHTiktReTfBMpV7aaxzN6w4.roa (hash: u65ppJ58k3Ix5VH9in1iUfkowYq8lbUh/JWax+/tYoM=)
                          22: ffYq-L6IF5A1eEt-6kmXeqiLTEg.roa (hash: V/c7nnmIxq7wGT+zNqjDEgAFjLwZAHkQ5tJpi+FOxXA=)
                          23: g2vfqgEzdRfPfaQ54TL9IaZRWX8.roa (hash: Jfx5wikYLOlvElqE/kSmJvHZBwL/6aUVzQP/HGEVTDg=)
                          24: iVQy5SoSM4zkBUfQGE_Ln3tM0tE.roa (hash: u0/p39IWrD8QpSLa+CIZwp7Qq2RGh/gjiOP2gVYoORQ=)
                          25: jikjhRC9On9DS_EGfDRYMPVRdr8.roa (hash: JYeTWOZHFu5Qv/WHfiXn05hdjtiQq1bvSJkinnP55Ck=)
                          26: k2d9fLknHONhJW6YM8x7FP0CPr4.crl (hash: NwZg1QI0+EUvV4s6xq+n8UNuVb+VjjdsmjHpCAFtekk=)
                          27: kO28vN71hMLo6EWqWOHMnUbNINw.roa (hash: yrx+6WC9+Fc0jDkatpgg+fkV9j7jDjcj9lkqM+sgnA0=)
                          28: l7Roa3smZDJ-vTeHH3psSnXeo-A.roa (hash: kcERe/PNUx80u10ZpY891WUn5xBSVUP+AKxB0Aofgu8=)
                          29: mjbnqLotBlCBkSiQuDYF8zPGRF0.roa (hash: EmvUyDRTMJpdJSvKaF1pisS1peYvcacBGirsGuT1bNg=)
                          30: nDwfIo5saGj88LUS8elZ2qwUrSQ.roa (hash: ooowu32q8bCUvHLcrXAQSaLMBllvF3r6TgZWOqyoYoE=)
                          31: oPF4cC5Drz5sLj5BBwawrzW5jXo.roa (hash: EzqkrfsSG6h+o/B7Wz4RFsWwVq4nne4BmDJzoUBxrww=)
                          32: q1bz7lipoEEvzR36Y8eq26tIMF0.roa (hash: FPqu+aTHRlxWMSNZDCq3DHl+OclP1ZhNEHEfxgak6Pg=)
                          33: qeMEQq5mjVyLDKGOkTIG-4qgJh4.roa (hash: JB0yLutFPlTAHm0qtRBdGmzvyjdgQXRn5jXVkQE0VpI=)
                          34: qeRNwequx6fkaRtShfpIv0DEVAk.roa (hash: VvERCgKj1UI+wOXtm3kmNbAMChtzDtVHxUi7B9sUK74=)
                          35: sKmeiayA9VEeFneHBogrVXd9Dz8.roa (hash: gixYXs8OW9/FjuOE8LqMnrageVpFQza4LwILa+VJgTM=)
                          36: t-vB5k9vNf95Sy02gmlc7kzthBM.roa (hash: OrKjBBR94ybF7MkPb+Et2zFHVo5BlytZWpThhYDz7qI=)
                          37: uNtHRxaxwBw6gSyUZCs4yT-j2xk.roa (hash: A7D9AWZnklXMj/BsUu0p3Vm6yBi0gldhQ+2LodCAbRg=)
                          38: uWLj6KIkJnGYRGP8Fno-15j4tn8.roa (hash: iGfMEOesyUW+HTUiwzS3P+I+yEqpwW76TFwMDJIhgIU=)
                          39: vHv3grLhsL3LXc-xD1rnHznkiNc.roa (hash: 1B8P3zbfNsnRQ4BM3TGB8f+ii6bodRHadKkmAMlajpE=)
                          40: yZpAfpKE-GitpdSlHfBT_ZU3XFY.roa (hash: lGR73TawMx4j8TSEDhTCJjGn0TUFsHE7aBJ2N1mIm20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:19:33:f1:5a:14:a5:d0:1a:fe:c9:29:04:c7:21:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Jan 25 03:01:13 2026 GMT
            Not After : Jan 26 03:01:13 2026 GMT
        Subject: CN=3f76e933a9924bd29b73ff5d17208b3060cc1289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:2e:51:5c:b9:a8:52:c0:76:fa:8b:23:18:
                    7e:4d:76:db:d1:9d:06:25:19:4b:85:b6:33:61:2d:
                    30:64:0f:d0:5f:6c:b8:0d:ba:5e:e2:b8:a9:c2:8f:
                    26:02:52:85:66:f2:72:46:86:bd:dd:66:b9:6c:eb:
                    84:97:79:e1:69:53:a3:bb:81:d6:a6:d3:b0:a9:3a:
                    a7:18:ba:36:3e:e3:c6:0d:86:e5:be:c5:eb:13:47:
                    5a:5d:ca:60:72:92:55:0d:57:f7:7c:3b:a4:a2:80:
                    54:68:f7:da:70:d1:05:29:53:47:40:ef:c9:5c:6b:
                    ae:a8:9d:99:93:18:99:09:45:0e:03:b5:dd:76:95:
                    5b:ff:68:34:89:e9:c4:50:e1:75:2e:60:07:ed:9c:
                    f9:8d:3e:7a:84:a4:fe:10:71:67:b3:23:f9:a3:63:
                    00:9e:03:7b:75:4f:31:d8:b6:86:ff:ec:8e:59:05:
                    f1:8c:f7:4e:41:8b:5e:07:b5:61:b1:52:4c:1f:61:
                    b3:7f:1e:63:e3:16:13:4b:4e:22:c5:1a:0e:96:f3:
                    63:92:1c:cd:aa:4f:42:45:51:cc:f0:8f:02:5b:2f:
                    36:01:56:c0:6e:11:bf:42:9e:e4:12:ef:7e:88:1a:
                    ea:e6:a5:d2:71:3f:c7:81:42:d8:e1:77:0b:5f:be:
                    ae:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:76:E9:33:A9:92:4B:D2:9B:73:FF:5D:17:20:8B:30:60:CC:12:89
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:2e:db:1a:52:95:64:5d:a6:31:28:6d:aa:7d:5c:90:3d:00:
         22:2c:0f:13:6d:e2:f6:85:28:35:e0:1f:8c:03:c9:5d:c0:6d:
         ce:2d:52:b4:ef:cd:8b:70:88:61:41:93:d3:78:a4:2c:f3:72:
         71:b2:d8:a7:bf:2a:e3:d7:30:5a:17:ee:31:78:84:ca:1e:5f:
         8f:dc:80:3d:5a:6f:55:2c:04:3a:4e:bd:96:4f:a3:b6:88:1f:
         58:b1:1e:6e:4d:c6:86:e7:66:b4:30:44:f8:45:c9:78:4d:3f:
         6d:36:28:7d:6b:cb:28:6e:9e:98:ca:e7:21:bc:44:88:f6:9c:
         af:41:b8:22:94:b8:05:08:65:32:68:8b:56:d1:4d:ff:91:37:
         7c:cc:c9:f3:4f:b9:2a:15:f7:74:b1:c6:19:9b:e0:1f:fa:ef:
         9a:54:c1:5b:52:76:71:51:f3:62:3f:c7:65:51:ae:5c:5a:ed:
         ac:6f:67:38:44:ef:3f:13:f5:d7:61:b5:41:3b:1d:a5:86:85:
         da:91:bf:4d:60:29:ec:d8:b4:95:71:0b:d8:c7:f8:5c:23:bd:
         19:da:fb:70:ab:7f:75:3a:4e:19:6a:f5:31:67:c6:07:31:5f:
         81:08:5f:ee:7b:e3:8e:bd:72:54:ea:0c:41:1b:b5:98:e6:8c:
         b7:12:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----