This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
File:                     DJDDVuKGT0OJSFdENVXYtcA1KBk.mft (raw, json)
Hash identifier:          dV3aJtrYoRsBi7OrN9k6u61gfC9xCDWZtOHX7jd27C4=
Subject key identifier:   79:86:CC:FE:FB:B1:F8:48:3B:04:DE:BF:E2:D9:48:8A:D1:34:E2:F0
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Certificate issuer:       /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial:       019BF5E3351F68AC5EE1838035CEED25F64E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
Manifest number:          1809
Signing time:             Sun 25 Jan 2026 16:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:06 +0000
Files and hashes:         1: 2LQVEXhUW2l6Hj6ZnrcCA8G1_-A.roa (hash: cUhwVa6MeKM4rk0jjyyzzf1X3+lJwxQxXloSI0kqQJI=)
                          2: 6gGzUBWZ-hvpmLNqRser9XZMZlQ.roa (hash: ICqX4miPSw4hNqiwS359s8cPNVPBnabE937wRzB8wpk=)
                          3: 8T04I8RwtfZPn_RJlUmF-f_2Lhg.roa (hash: MKoSKmbzjgnjnmUvLVkK39DRQCucObPkWJahT1nu3A4=)
                          4: DJDDVuKGT0OJSFdENVXYtcA1KBk.crl (hash: JhrJZQpx+9yVXKOqdQ8amwd45Bup6qjqNsgVTKHTuUw=)
                          5: Lo2XT5MvXp3jJXeKo9851h0hMiQ.roa (hash: BbHuhDUXyn6LgVC6At2JbRLy1BJVGPqkS16DCy63GYo=)
                          6: NtCQkS0nRMyYmPXVVv3j4fbZU0o.roa (hash: HVZ4FPE3bmYJqr8Im2V21nkeAhROy8j6hqO0e4TzZJo=)
                          7: ZbEVlOlPibB1JH7syaSKIrTo-j4.roa (hash: 4uDEaVZMxo1TXHVXgG3ztPEE1OCkRAmIJn2VyL/FjAA=)
                          8: _r4p5grlhpI0wCfUHUUUMbJ1F6U.roa (hash: Rby1wtbERagThIboC5DLUlM1p6QcsVIJU9+szkG7fW4=)
                          9: aXQxzuaw5fOn2DOJkKPhPnT7WdE.roa (hash: sMCacWvcaSAOlXkq8w8cutQmDcf7CB0LY+fxLKRnzwE=)
                          10: b3EhJU_Xk0OxhBbisianHJzBkig.roa (hash: 1AGC7Pa0MRd3a7eWTAiC8FixJDwwTaNnLp4pbWbvZ2M=)
                          11: bqjOHwdOuvBhLR08aRs57g88Fq0.roa (hash: KPSenLexaz087VIWmL7MjCZnarpls1iDWSQaeNa/om4=)
                          12: ceHX5930Yw-uMYDr-pQpJhg5-v8.roa (hash: Ca28wHc4zXYTAAEZqjDqcQtD0iK+HxJ4xEb2WB6NA28=)
                          13: d6Z7UBc5EhSMkGXH0Gaz5Rw9J_U.roa (hash: 8dd86qayh9ybI6dGd2vsRhGkpkkw2S/+r51kYhKGJsM=)
                          14: kcNm9MftwygIL_w6w52JPJKUaI0.roa (hash: D4k4eoAWUtr1xeFULxBVV9pmUCuC2g1g0ZI86lEhCkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:35:1f:68:ac:5e:e1:83:80:35:ce:ed:25:f6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
        Validity
            Not Before: Jan 25 16:01:06 2026 GMT
            Not After : Jan 26 16:01:06 2026 GMT
        Subject: CN=7986ccfefbb1f8483b04debfe2d9488ad134e2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8e:71:c6:15:4a:59:c3:d2:fa:33:64:09:05:
                    1b:b7:ed:3f:fe:8a:95:72:db:23:ca:04:aa:2f:f2:
                    5f:bf:b6:d2:cf:7c:80:76:27:d2:83:32:87:e3:f6:
                    c9:55:fd:ab:54:73:d8:b3:cc:d0:03:04:a4:55:05:
                    7c:fe:3b:4d:17:5e:18:c0:68:22:f3:ef:8e:6e:d4:
                    46:2b:f9:54:7c:d2:2d:57:93:ba:44:1f:3f:5a:38:
                    d8:e3:7e:df:2e:0f:3e:06:cf:cf:ae:fc:64:64:7f:
                    bc:56:07:bf:50:78:3b:94:ba:2e:cb:33:fc:ce:35:
                    aa:5d:06:94:fa:14:5a:4c:83:4c:34:8c:6a:a6:8d:
                    85:75:72:b8:82:04:13:ab:7e:51:11:55:4c:be:ff:
                    79:d6:60:32:a6:88:c5:1d:30:c8:b1:c5:82:a5:06:
                    ab:8a:66:95:34:76:dc:aa:13:fe:81:a7:32:9c:23:
                    f5:65:a8:38:ef:44:87:d9:2f:35:53:2f:54:73:73:
                    7d:7a:50:cd:cd:12:9f:41:16:7f:94:84:65:1c:d3:
                    9e:5e:38:f5:d4:9d:3f:02:23:60:b2:a7:9b:39:a5:
                    18:d5:50:27:23:48:54:10:ed:db:5e:26:15:3d:8c:
                    bc:d5:12:4f:4a:75:44:8c:0e:4b:7a:3a:f0:48:7e:
                    6e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:CC:FE:FB:B1:F8:48:3B:04:DE:BF:E2:D9:48:8A:D1:34:E2:F0
            X509v3 Authority Key Identifier:
                keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:2d:d9:f4:d4:74:b7:87:d4:44:71:0f:33:fc:7f:2e:4f:01:
         fc:31:2f:60:25:0d:3d:8f:bc:0e:8f:f4:05:00:9c:ca:15:cf:
         10:4c:37:8f:d8:13:4d:56:4f:90:ed:90:28:bb:c1:fb:a7:37:
         3f:25:ba:c8:ea:e2:c4:bf:87:d3:7f:77:f6:82:38:d5:f7:80:
         38:5f:ae:05:5c:b7:90:99:64:c8:c5:8a:0a:53:8f:79:0b:81:
         5f:4a:50:ff:76:5b:79:05:66:cb:78:56:c2:96:61:d0:d2:a6:
         93:26:d6:1a:37:96:62:82:46:93:8b:cd:a9:79:13:5b:ec:59:
         f3:7a:5c:be:a0:a7:ef:a2:6f:98:35:91:77:00:70:d6:eb:bc:
         23:d4:ca:dc:c6:d5:f0:cb:f2:cc:86:07:8d:73:5d:8e:6c:4c:
         fd:1d:dc:7d:4c:01:b3:a2:11:a7:15:32:29:d9:0f:73:37:1f:
         73:5e:8d:cf:76:99:c9:a2:7b:50:eb:67:6b:f1:10:e6:5c:1e:
         52:20:cb:4b:8a:62:43:a0:6a:3c:da:20:f9:19:49:42:ae:5f:
         11:68:9a:08:12:1e:86:b5:3e:b5:67:41:a3:21:38:90:82:c9:
         3b:39:6b:61:f4:41:f3:b4:8e:7c:c2:b7:5c:d9:bf:79:1a:59:
         ad:0b:6a:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv14zUfaKxe4YOANc7tJfZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjYwMTI1MTYwMTA2WhcNMjYwMTI2MTYwMTA2WjAzMTEwLwYDVQQD
Eyg3OTg2Y2NmZWZiYjFmODQ4M2IwNGRlYmZlMmQ5NDg4YWQxMzRlMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq45xxhVKWcPS+jNkCQUbt+0//oqV
ctsjygSqL/Jfv7bSz3yAdifSgzKH4/bJVf2rVHPYs8zQAwSkVQV8/jtNF14YwGgi
8++ObtRGK/lUfNItV5O6RB8/WjjY437fLg8+Bs/PrvxkZH+8Vge/UHg7lLouyzP8
zjWqXQaU+hRaTINMNIxqpo2FdXK4ggQTq35REVVMvv951mAypojFHTDIscWCpQar
imaVNHbcqhP+gacynCP1Zag470SH2S81Uy9Uc3N9elDNzRKfQRZ/lIRlHNOeXjj1
1J0/AiNgsqebOaUY1VAnI0hUEO3bXiYVPYy81RJPSnVEjA5LejrwSH5u4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmGzP77sfhIOwTev+LZSIrRNOLwMB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApy3Z9NR0
t4fURHEPM/x/Lk8B/DEvYCUNPY+8Do/0BQCcyhXPEEw3j9gTTVZPkO2QKLvB+6c3
PyW6yOrixL+H03939oI41feAOF+uBVy3kJlkyMWKClOPeQuBX0pQ/3ZbeQVmy3hW
wpZh0NKmkybWGjeWYoJGk4vNqXkTW+xZ83pcvqCn76JvmDWRdwBw1uu8I9TK3MbV
8MvyzIYHjXNdjmxM/R3cfUwBs6IRpxUyKdkPczcfc16Nz3aZyaJ7UOtna/EQ5lwe
UiDLS4piQ6BqPNog+RlJQq5fEWiaCBIehrU+tWdBoyE4kILJOzlrYfRB87SOfMK3
XNm/eRpZrQtqGw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:55 2026 by rpki-client