This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
File:                     1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json)
Hash identifier:          PTyOX9sRVc77BohaOQ0Fs8JMZOhVX1ujcp1n+RicRaw=
Subject key identifier:   F5:B8:18:A9:3B:74:55:A5:59:07:99:8B:D0:69:0F:0B:B2:83:7D:37
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Certificate issuer:       /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial:       019BF4627539FC16FBCF3CDCC0C165AF9E1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
Manifest number:          1476
Signing time:             Sun 25 Jan 2026 09:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:51 +0000
Files and hashes:         1: 0d15hs6sBv8GAk_2g2RAoPYnZOM.roa (hash: cp2Vja5rdBd1gVNgqx+IsAve8keQHohaILdxUqT1jek=)
                          2: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=)
                          3: 12-QpuXSG6_8hdl7cf1qgoYRbQ0.roa (hash: mN467/7GywnhA1L7FMjs4ZJkbmIwDxnvQEUBR43WDpM=)
                          4: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: ljJxVPWj6nNLNvktX/bEHZyiUo/vW2oo5a0mEIhzjnw=)
                          5: 31L-LvSHaspOtk8u9hAsfR8dgGM.roa (hash: aJ3rT7AREc3SlEOe4wTEu/JmolCehQfGhFsoaKSPn1Q=)
                          6: 4wB5Vx3J3kyGcFmVM0hOKa-agUU.roa (hash: QUMFn2JOAzkbZ6gtP+0O9ijRO/p8JgNTBxbAEdtK4V0=)
                          7: 69XHjm7-yIbeLCUNviEuBo92-TM.roa (hash: APoWjNu0LQYujI/yA31MFn1n87SnZbSJrgLE5wdw/7c=)
                          8: 8XkVNhQzJTRinlrUY9NMe-jgS4A.roa (hash: G+utkMfL+L6vdlEWdaNJIG/k/Ibg5tyzOCFT4hFaX5c=)
                          9: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=)
                          10: DPcoyqmJ-ibKgBXQhldGarXkL9k.roa (hash: yqjMHYnxu0/ljepDij0QNQ+cIeV7Y0MQ0KsJKwUmcN4=)
                          11: GvCaLEMtreWe0TE7iBl-Fn1BAQU.roa (hash: Orxttow5nHsbqOjaRE9vUN+mw4qCsQAWnb1ehA7+MP0=)
                          12: KRv87T4ZM2FUirwnB1dhL3l-Kd0.roa (hash: Vl+l0xUb4tTixNYLTovd1bUz+nc7mehkSAFw6cLldSs=)
                          13: KjU7AhX4TXwLfXgV9g1-DLGZ-ow.roa (hash: 8fFeEgCYH2bhEXhV+TAiSzfZgOwytdn0mLWLmsulag8=)
                          14: LM2AbLevwiE39LnUn6Ua-ua_m1g.roa (hash: aIq23Y6GvCxjX7yzAOcX2fozTD46rJch3BTbtCtTolQ=)
                          15: LW-Nr4DdzqfE18c6cx5vJVdZBNQ.roa (hash: XeELswB81bZv/aY/RKoGhPbhNZf9ucQXRTWcsIAYyWM=)
                          16: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=)
                          17: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=)
                          18: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=)
                          19: Scp2nM5P7b3JtI-qLRoRM-zY2DQ.roa (hash: ReY7U0Hu+rWmNt1KbWijPc8uks4szEsfEvUJpvT89z4=)
                          20: SgqvO9qBL1fWo3aBJRZpGp4K-S0.roa (hash: BHxiE3ULzbcJ44lDjqkW1hve5g/jINED6rwFK00YXx0=)
                          21: UDKnq7i5-1LxNA79DLap5_xnYXc.roa (hash: bwIftxc9q93hJ4E3ViMd2jP3yU+krx5QdkO9T9zGDn4=)
                          22: UHmvQQUwZ_7wZ81XNf5pNZZZxWY.roa (hash: HYwI8Es6qaDvbLWGoybNvvtN04TE4QCWnT3UgDe1WLM=)
                          23: UNh9HBTbmAczkdMFcByOEAYWU0Y.roa (hash: W4lijVHAWghHFrkC7iuPEmv32YE3H28oL8DpFRFvg/c=)
                          24: VpkvFneYkZtrOlTcXNEDLOTuiBo.roa (hash: U1TXZP+P+R9Rot4yDqY1QfFe+byKf+8Ah3pd3njTY4Q=)
                          25: WSvHFGzj7Vgob_0_S9OtU-eYECo.roa (hash: wV4wq5Kwh3/1RV581fA5ENpc2zmKMDZQlEmeVs08398=)
                          26: YXqFBM3Wgxl248Uckf87jL9-Y10.roa (hash: R/aH1v+NPoF+QYmVFlQRN2Ii0gntVyI3TwXZnW5icOc=)
                          27: YaOfJgRLouGx6tole4Xd3URpTRI.roa (hash: iNqNR/rlJQ3emWR1ZSYN26bQpkUgaYYux6SlwS0SDiA=)
                          28: ZUzp4nG8b_8duILz9z67tKXG2-Y.roa (hash: 5pvftRh2C60fmYF1NRG6tbQYcfk3SxCSFl7LYSO0W7g=)
                          29: ZnDZ3THvpz_YPmkdCKWJkIytQc8.roa (hash: l2f5rqMmluOxA2njyi5sVPThn4rwssZmSYySxc1db4k=)
                          30: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=)
                          31: c7thoplx3OQK7vl8T15zxackpgg.roa (hash: k14m5OGCxEc7HJWVEEBuSsRBwvea6AhQA7ALcS9VWv0=)
                          32: dca88p-eNfR0RjuTT48u3qYdsU4.roa (hash: LkTWX4mzrSibQMirmPorFtvVIp4ZsztyLfP+2xn0pJE=)
                          33: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=)
                          34: fKoGmparJHlozAcZTA3yAU4ZJcg.roa (hash: 60cR3HY+vUpddXNenTUdu1Z2bcSowrKZj1dsz2XqYPY=)
                          35: fzXSzzRGH69X9HG_DPX1UIdlnMc.roa (hash: 5e/q/Of0/VbRaI+58tUil5lHG2B8yQNHwFd7IDN7AnA=)
                          36: kNJMaiQra48kkAcS5nD8aUCkAUE.roa (hash: 1S7dp0PoTIGw4gY4Z0LJ+wyYCHhInf5Fee8utleWUao=)
                          37: nOZiS9ipdCo86_2swgfQMd065RY.roa (hash: 284FGn82DHerRbpzHLbn3Hc5ZwaGcd6vcd6k3JnrdOM=)
                          38: nkZpmEXSrCrxAHAiDLwZtC54dBQ.roa (hash: 0qFI3aej4VghLslWDYSHoQqlJwbEz29HxX1cVRGubNw=)
                          39: pdZA2Upbo20SiB6twFM6g6dgdjs.roa (hash: 4X8F+Ie2CbjgYhGjsVZ9426UZ/EHnHL6NX3krPUDwCs=)
                          40: rfIN427V9zPCMZ-z5PwfYOKvWvE.roa (hash: /rLACCeghRFqZopyBKHtIJ9ZVC/Uf5aLpLTNEVJcleE=)
                          41: rx5FrArsEh1Pd7b0NgJ2Xd6ltaE.roa (hash: e1BXfn+1OHZJUEKq2u7HgsMulbmjg22+GP7JrrmxT/4=)
                          42: sbLArHFCdDYFp-yc45bbnWWHLZk.roa (hash: 50x3swjFzea0ZMQjb8qdEs7d3Kpvn0F3/nLybrYDPSY=)
                          43: tsW17cExldWKQOsmoSu7CzC3TsU.roa (hash: kaSKKVjmW0k6rthJ1U6bxZ/OsgU+B2Z01KcEBlJgG/k=)
                          44: v0WTRVyIOMbnSSTHqyRygXScgPU.roa (hash: AwqC2DBh8s09B6HD8Dw/C/8pvsrZMaYsxFJg6FacTeA=)
                          45: xqMMWefGU2vgougCenjCqg2IdD4.roa (hash: APHG/lLqSBGaeSFETUTuI3S0WLItY759pWaUuQxJdnA=)
                          46: z88SnKsP5pvSo6qR47qZ1pWeSD0.roa (hash: oetmktJllcCOEDyCyKgeosdoCyMncQj+BUuqs+6CrFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:75:39:fc:16:fb:cf:3c:dc:c0:c1:65:af:9e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
        Validity
            Not Before: Jan 25 09:00:51 2026 GMT
            Not After : Jan 26 09:00:51 2026 GMT
        Subject: CN=f5b818a93b7455a55907998bd0690f0bb2837d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:84:46:7e:7a:b0:4e:2c:89:1b:45:51:35:
                    a0:2f:1c:43:6e:1f:67:7d:2a:94:a9:25:0a:f9:cf:
                    8e:a3:3b:26:4b:3f:80:f1:e1:51:fc:5a:17:99:af:
                    e6:d0:03:a0:c3:f6:99:46:81:3a:f6:49:d6:b6:4e:
                    d4:ab:17:21:69:0d:ed:6c:b4:f3:6d:c0:69:82:6d:
                    f6:73:80:9a:43:d5:72:eb:7c:ff:f2:f5:33:3d:36:
                    41:83:1d:55:40:2c:f0:d5:d9:4b:3f:fb:ca:e0:0e:
                    10:17:84:e9:78:9d:33:50:38:92:52:66:62:35:29:
                    78:82:d9:4e:a6:d9:5d:c4:dc:01:ad:ff:47:82:29:
                    88:5b:72:dc:14:33:1b:2f:0a:10:65:cb:5f:9b:a6:
                    c1:15:dd:6f:e8:6f:9c:9d:f5:eb:a5:0e:93:93:16:
                    4b:13:d7:42:58:b4:25:6f:9a:af:6f:75:98:46:08:
                    26:c3:a5:77:62:10:d3:05:a8:d8:76:4a:b0:10:a6:
                    1d:66:8c:29:e0:c6:13:30:fb:59:32:68:9f:29:26:
                    c3:7e:7c:6b:d9:94:5c:4d:1c:81:05:a4:4b:40:e9:
                    e6:7a:2c:11:c6:82:7d:ab:13:7b:95:37:f2:19:23:
                    45:f8:57:b7:11:d7:e3:78:42:aa:94:ed:64:bc:bc:
                    98:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B8:18:A9:3B:74:55:A5:59:07:99:8B:D0:69:0F:0B:B2:83:7D:37
            X509v3 Authority Key Identifier:
                keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f3:8d:c7:02:d7:92:ce:78:d0:25:14:1c:ec:49:f6:95:00:
         f5:e2:0a:8c:b2:f9:ce:aa:f4:a0:65:da:87:29:38:fa:d1:ab:
         22:10:b2:a3:55:77:15:7d:66:2d:9c:74:c5:00:6c:73:4c:d2:
         a0:fa:81:a1:28:a3:a4:db:47:45:47:fd:f8:eb:f6:9d:49:a5:
         7c:85:b4:13:c0:c1:62:e4:e0:f1:6d:20:ee:e4:85:16:03:e4:
         ee:ce:f3:81:e6:1d:f1:d5:5a:0b:a9:77:d7:ae:88:91:56:c4:
         06:2d:d8:03:97:9e:1d:20:c4:b5:b1:c4:4e:3b:0d:98:8c:b3:
         a9:9c:9b:1f:af:84:76:f5:42:45:50:a8:23:e8:e1:86:7f:46:
         41:37:4f:16:ed:1f:9a:07:a1:e8:47:6f:5b:04:99:d7:26:c8:
         52:db:94:17:cd:49:66:55:5c:22:20:3f:34:7b:d2:08:cc:49:
         17:22:1f:48:07:d7:1d:d1:91:62:5b:99:08:f5:cb:74:34:40:
         fa:0b:c4:d0:44:a2:80:56:ce:a5:e2:ad:0a:c0:6c:61:d7:08:
         9b:ab:6e:ee:12:2a:41:db:92:d8:e1:09:60:c5:0f:d2:37:06:
         6a:8b:61:a1:ae:07:b7:74:09:0a:e4:80:8b:04:56:cf:93:14:
         9c:41:46:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0YnU5/Bb7zzzcwMFlr54bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4
YjZiNzUwHhcNMjYwMTI1MDkwMDUxWhcNMjYwMTI2MDkwMDUxWjAzMTEwLwYDVQQD
EyhmNWI4MThhOTNiNzQ1NWE1NTkwNzk5OGJkMDY5MGYwYmIyODM3ZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilSERn56sE4siRtFUTWgLxxDbh9n
fSqUqSUK+c+OozsmSz+A8eFR/FoXma/m0AOgw/aZRoE69knWtk7UqxchaQ3tbLTz
bcBpgm32c4CaQ9Vy63z/8vUzPTZBgx1VQCzw1dlLP/vK4A4QF4TpeJ0zUDiSUmZi
NSl4gtlOptldxNwBrf9HgimIW3LcFDMbLwoQZctfm6bBFd1v6G+cnfXrpQ6TkxZL
E9dCWLQlb5qvb3WYRggmw6V3YhDTBajYdkqwEKYdZowp4MYTMPtZMmifKSbDfnxr
2ZRcTRyBBaRLQOnmeiwRxoJ9qxN7lTfyGSNF+Fe3EdfjeEKqlO1kvLyYBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPW4GKk7dFWlWQeZi9BpDwuyg303MB8GA1UdIwQY
MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt
Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz
LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvONxwLX
ks540CUUHOxJ9pUA9eIKjLL5zqr0oGXahyk4+tGrIhCyo1V3FX1mLZx0xQBsc0zS
oPqBoSijpNtHRUf9+Ov2nUmlfIW0E8DBYuTg8W0g7uSFFgPk7s7zgeYd8dVaC6l3
166IkVbEBi3YA5eeHSDEtbHETjsNmIyzqZybH6+EdvVCRVCoI+jhhn9GQTdPFu0f
mgeh6EdvWwSZ1ybIUtuUF81JZlVcIiA/NHvSCMxJFyIfSAfXHdGRYluZCPXLdDRA
+gvE0ESigFbOpeKtCsBsYdcIm6tu7hIqQduS2OEJYMUP0jcGaothoa4Ht3QJCuSA
iwRWz5MUnEFGdQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:13 2026 by rpki-client