This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          h+0ROuTG3OqpzTfSsljbAmciqzJplGHw5M6XO1gIFW0=
Subject key identifier:   D1:8D:50:D6:5F:19:A5:A6:88:36:C1:DA:89:E6:F5:78:70:0F:C8:07
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019BF507ACC3A01446B03D19A19A098885D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          06E5
Signing time:             Sun 25 Jan 2026 12:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:19 +0000
Files and hashes:         1: 0fOlVdIS1WEADHFx-rX9EuojXD0.roa (hash: HVN1Ks0lRzr25kk3tVqnsRKtbl6GiFv09oBIP/8lLHs=)
                          2: 1-fHKEGdQzHKJnoO-QxMVY_4pRE8.roa (hash: zDRe41xbopOMDmDagY2NOiL9+JF7qRmR3ODp2uFdORY=)
                          3: 2XEo4CV2Llsw1LO8UxL8ICFI_Ts.roa (hash: Gkxl6cgCKu5SSnDSK3cxhOt4JBhAs9jevpskTltEVbU=)
                          4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          5: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          6: BS5IPpy602b0P9LZT_8NLf8j87k.roa (hash: rFpHzyrk3W9kwB0GwSUlANwsnD6QKAwk516vFwL56UI=)
                          7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          8: EwPzuIXXAY5u8_S6Cn0AasfKr5Y.roa (hash: ZLQXJBiU/cJ5PgC0zxsFgBpflI2UY+bKrzKvcAF0V1M=)
                          9: GLCGPLD2hC5F_Pc0a6BQBHqcuQ4.roa (hash: mZ//Pt6zUTFrir/wUF/TZOQPoUNgkHjZamNtXvnZye8=)
                          10: GOanlWDUzk69YG0eCePJEpU9BnM.roa (hash: nrCNFfv+/Z1ic8g3j7yWk+DMZXSXMkw06k0jEv6zp3M=)
                          11: K-khbksQ-2sabX4zr3q8PxzSit0.roa (hash: xDFWiYoyDY13IMLCQNkMrZzkvNnytsrYJpcMXHkSwMs=)
                          12: LlSK3C7Q06RK5adZcbTNWRuRqec.roa (hash: mwIJLfrSUr6qfsCPRb0PpEgMHB1/Vcz/5zkB7eGSlJs=)
                          13: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          14: QRmycAO-pHfT7FsE99BsqZ0Jl18.roa (hash: pDVrAH7IIAQbYj9HezybCfvc4KXVjiS/nu2UCu/rDRY=)
                          15: Qp331O64UTuQoLfYcCQVpN0-uPw.roa (hash: zf9jfmVYWD/qCLz4eCqVX+nXHn0L4z23vkercl+na80=)
                          16: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          17: WuFVi91PLw1PUGyRssd2Q6yHyks.roa (hash: w4KZzG/sU1/9RMrXZYTWNuUrYY4VCLIF4AOLDV1SBW0=)
                          18: ZjezsyQwp__S_-4bnAPJityXs-A.roa (hash: KtcE3154yrRhHpULPsbebKDxYlMS75i4aRoAd7gorN8=)
                          19: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          20: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: G1c7K/2ZBaVO5ACy5BurojAtK7fDMVlhVZNKKKIVdDk=)
                          21: h6QQ528Z7s7s1GSJ1qhrFb9Yg18.roa (hash: W51bGgmV1Q00x0gxca0kLqnlV5L62pIb8f8ybi2p/SU=)
                          22: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          23: kLlSZbzpmsYIvWwfO8jg_8rW4tQ.roa (hash: 12QL3G7J65T63O8QiRkOFH0drKrRxRKrU7LN/3R4Z+U=)
                          24: rjXWPmSkIQn4DiTNE6XPf1HGXYM.roa (hash: I0XKmy6kJPF5JUMuVfOLMBlmWwkJuYBjUKJtDfOHETE=)
                          25: shgwIpHUjkTES4WuZvl4q6J14j4.roa (hash: K9w+6O3bog4NXLdj4nneOheN9As20p3zZapy86hUWMs=)
                          26: vCf8QcZHfsXK87Z3FFXzP6M2bSE.roa (hash: gLEU1mY5weubhB+dEwlXM5Vr2qQ+6BRaKHNr1K9hWak=)
                          27: xcfdLGMwx73rBrDSPhMoi1zff7E.roa (hash: TfS9qHi0yMcUxCZA9A/YoEU+5Wx9ewWvK31z5A1/myQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:ac:c3:a0:14:46:b0:3d:19:a1:9a:09:88:85:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Jan 25 12:01:19 2026 GMT
            Not After : Jan 26 12:01:19 2026 GMT
        Subject: CN=d18d50d65f19a5a68836c1da89e6f578700fc807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:a0:15:e4:62:21:25:87:1e:fc:54:16:50:bc:
                    dc:05:4b:64:bf:4e:5c:a8:85:10:8e:75:e6:c2:73:
                    22:ef:2d:44:2d:88:44:d3:70:1b:3d:56:1a:74:4a:
                    a9:0d:c9:e8:f9:89:ba:6f:9f:82:90:e9:57:d7:11:
                    57:1e:db:9f:9c:af:d9:6b:98:df:44:10:26:ab:43:
                    cc:ea:5e:77:50:d6:23:f2:c7:04:8c:4c:0d:c8:20:
                    f7:1b:8e:f9:4f:aa:6b:f1:55:dd:8d:b9:2b:65:e3:
                    38:4e:05:4d:cf:62:17:ca:2a:ba:bf:68:0a:c0:27:
                    d2:35:42:f1:e2:3d:f8:07:5d:5e:ab:06:af:bf:62:
                    31:fe:8d:56:46:41:2e:6c:39:42:3c:b7:ae:b3:8a:
                    01:be:d5:1a:2a:66:f3:ea:b1:f7:83:3f:b9:1f:76:
                    4c:3f:5f:89:5c:0d:ca:96:79:1d:fa:07:a1:19:da:
                    3f:86:34:81:9f:c4:17:fd:6e:0a:b6:38:79:96:05:
                    cc:9c:26:1a:e9:de:10:ac:72:73:dd:14:1f:88:ce:
                    f1:01:6f:39:90:7e:8a:bf:75:12:6d:b2:20:2e:9c:
                    08:c8:98:ab:b0:99:c2:63:cf:db:60:08:3c:ce:d4:
                    5e:13:07:30:63:8b:d4:f3:57:b0:ec:23:c2:1e:c3:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:8D:50:D6:5F:19:A5:A6:88:36:C1:DA:89:E6:F5:78:70:0F:C8:07
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:e4:ec:d4:27:48:a6:06:dd:08:5b:4b:1d:29:8a:af:dc:00:
         37:d1:ea:a2:43:6b:41:01:a2:c0:0b:42:2f:1a:80:bd:80:6f:
         e4:4c:7b:e5:2d:a9:fc:32:14:c7:10:f0:f9:bf:f5:69:1b:31:
         07:80:8f:25:f6:29:72:31:8a:3d:a7:f7:81:eb:e4:d3:05:f3:
         64:a9:5f:34:48:c0:91:20:04:ae:4f:78:ad:c7:2f:47:df:62:
         b4:01:3d:3f:85:9f:e3:1d:c2:2f:e6:26:ce:41:b0:7b:d1:74:
         2c:39:56:40:21:9e:ab:64:33:8d:54:12:a3:0d:c1:3c:fd:aa:
         bd:54:61:e7:76:e5:4f:a9:60:8a:a2:16:c6:b8:ac:dd:63:84:
         c3:e7:d8:b7:26:28:b5:31:34:b9:8d:89:ff:4b:01:11:cc:d7:
         a8:88:55:d1:9b:cc:95:58:0f:a0:73:ef:b4:ef:b5:36:bc:b6:
         7e:db:0c:00:e3:43:77:9f:f1:6d:42:5d:47:89:9f:58:66:70:
         9f:62:07:48:9f:9b:5d:27:92:44:c6:e9:5d:35:02:b6:77:60:
         12:4e:13:57:5e:ec:69:cd:34:3d:b5:f5:0e:94:ca:28:3e:eb:
         45:fb:46:da:26:f2:f9:71:65:90:b2:2f:74:5b:23:c2:81:d8:
         59:54:6a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1B6zDoBRGsD0ZoZoJiIXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjYwMTI1MTIwMTE5WhcNMjYwMTI2MTIwMTE5WjAzMTEwLwYDVQQD
EyhkMThkNTBkNjVmMTlhNWE2ODgzNmMxZGE4OWU2ZjU3ODcwMGZjODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86AV5GIhJYce/FQWULzcBUtkv05c
qIUQjnXmwnMi7y1ELYhE03AbPVYadEqpDcno+Ym6b5+CkOlX1xFXHtufnK/Za5jf
RBAmq0PM6l53UNYj8scEjEwNyCD3G475T6pr8VXdjbkrZeM4TgVNz2IXyiq6v2gK
wCfSNULx4j34B11eqwavv2Ix/o1WRkEubDlCPLeus4oBvtUaKmbz6rH3gz+5H3ZM
P1+JXA3Klnkd+gehGdo/hjSBn8QX/W4Ktjh5lgXMnCYa6d4QrHJz3RQfiM7xAW85
kH6Kv3USbbIgLpwIyJirsJnCY8/bYAg8ztReEwcwY4vU81ew7CPCHsMIYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNGNUNZfGaWmiDbB2onm9XhwD8gHMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOTs1CdI
pgbdCFtLHSmKr9wAN9HqokNrQQGiwAtCLxqAvYBv5Ex75S2p/DIUxxDw+b/1aRsx
B4CPJfYpcjGKPaf3gevk0wXzZKlfNEjAkSAErk94rccvR99itAE9P4Wf4x3CL+Ym
zkGwe9F0LDlWQCGeq2QzjVQSow3BPP2qvVRh53blT6lgiqIWxris3WOEw+fYtyYo
tTE0uY2J/0sBEczXqIhV0ZvMlVgPoHPvtO+1Nry2ftsMAONDd5/xbUJdR4mfWGZw
n2IHSJ+bXSeSRMbpXTUCtndgEk4TV17sac00PbX1DpTKKD7rRftG2iby+XFlkLIv
dFsjwoHYWVRqjw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:24:14 2026 by rpki-client