This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
File:                     4tDEmg6X4NXzztO3trn3LKDLU9Y.mft (raw, json)
Hash identifier:          cuCVLdoK6gMoLlOF+1IzAFxhIqtU/SQ7xAti42P+21Y=
Subject key identifier:   F2:22:E2:99:FE:34:55:B9:06:73:91:79:65:07:6F:A4:32:EC:CC:3E
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Certificate issuer:       /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial:       019BF2AAFF53F4FE3C869C2C01E6CDDB3105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
Manifest number:          14DF
Signing time:             Sun 25 Jan 2026 01:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:51 +0000
Files and hashes:         1: 1xaM-kBrpQmsaj54f7-Ug7NnU1A.roa (hash: gM+VVrzJJkZPLxtxBrugDNo4SY3tdTb+p9ppniZw38Y=)
                          2: 4tDEmg6X4NXzztO3trn3LKDLU9Y.crl (hash: xM8hGDJ1xn7axOyZqAORoSwQqeSPDvKjGFq7VqS+PGs=)
                          3: 7pQQkDgyHd9o7yqZVlBZ4xtQ0fY.roa (hash: xZK00iWUDxNKvXeXgverCH60vwnzNexd4AxkHPVf2aU=)
                          4: AF6sh9exhyT3RadXGsADlkTaLJ8.roa (hash: mmAfrhqPRq547ylhgckT/XcKMg7fuumyD9PAsX1F+Ec=)
                          5: CXQY42c6E3QD-iUCAsMMyQA81Sw.roa (hash: IvCoWfXQekSBFGQrYHEfyY2CBi3AFtAfK77j9C2IB7g=)
                          6: EZD3o1Jh1Z1Yh1oogNIIIocP_Yw.roa (hash: 1QZ4sSS9wl+mQnHE/1HG2lGmR2bE2ruhxj7gVXkY5pI=)
                          7: Jhg9v4x6ASL7Zx13tucb_3UA1zg.roa (hash: qHfj6vX6aETbbBBnIgmIdxzmUabWxq/+dA1V3hsk2P8=)
                          8: KccCeieYRXBlQnbgMf-sVyCs8Jk.roa (hash: Ub5qzrmTy+ygKbOHKWced2Dy1lPthDUXMiJfth/M1S0=)
                          9: OoZYb6R6YmlGpZrYjE7zMCIOzCs.roa (hash: j+79l8r3SxM1RICNZ8BxQsW9LOcBALGzMeybUT2J8So=)
                          10: PE77Z5wen-eVZ16iGf2_1c1Jaws.roa (hash: h7zUrN0KBvEcmYXd1dCIRMPxZTqT4501CRk4u67n9zo=)
                          11: R6P3VxWTR45so9OzElWmMVoEenA.roa (hash: dHdY9Wh5IEzhdbwZuqPDtlJZ/HiEyma1TA2ohNRzWA0=)
                          12: WItnjatj115FxsGQfNXwcQu0A2s.roa (hash: pKyPmG59aOj371xLBuHLzVg10FOOb5NypXYsyw1iOJs=)
                          13: ZewHKWrHNOMwIxJHxqic_aTJY04.roa (hash: 7rKRF0dR37tXD1HqIpBCpn2htHk2ZlUa/g7FUtMM0TU=)
                          14: am4aroWQQPsM2aTYWzDPanEMaMw.roa (hash: Bx3vgeqt18D02uJ2KjNt/HtUT1xtEwij8k7l8BwkltA=)
                          15: hqZmw73uLioCmDyOY7tbnP2m_Yg.roa (hash: JIytKKa9F9kOXMW/utPAMCBrTB+LGTDyPIuSYjkjEpY=)
                          16: p4FI7wi8CuQhn9bFF5YvVcHmFwE.roa (hash: UpZmxFp5YMf0QXiQM8jbzjTtdlXCc64fZCHbfOGqWrs=)
                          17: pgygUFC-nE2hiQAoXj0uq76XfkU.roa (hash: ur1I9HHuYExii++esfvzvC/rkYSW5cpylJ6zQaD5tF8=)
                          18: qLE7D4CG3mYVkl8oS9Fzc5SexMc.roa (hash: JyfpyyKWFy47CPyUQtytdwQPJBc0llD8HdRl1HrFy6k=)
                          19: rcbz6oq16h8rU8FL6_sQoavtuRA.roa (hash: lda7twOzBuTKna3CpaC5VmI9fo/FqBJBVTTv0W85myI=)
                          20: vcwfumVuHHPSt_mnSEc7IYxPCys.roa (hash: l5umdJCPoBUBhGZt4MiS9tcDViyolBbZUkC38qD2cJM=)
                          21: xpDFBpHGQaFnP9MpnuaCHNbLzJs.roa (hash: SsxKYAQGX3e7wzVGbaFU/iHO6tpmd+csayT0lIwGpTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:aa:ff:53:f4:fe:3c:86:9c:2c:01:e6:cd:db:31:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
        Validity
            Not Before: Jan 25 01:00:51 2026 GMT
            Not After : Jan 26 01:00:51 2026 GMT
        Subject: CN=f222e299fe3455b90673917965076fa432eccc3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:8f:b3:26:73:8e:ab:8f:d6:e1:f4:55:11:
                    0f:4b:f9:8f:66:b0:3e:b9:00:ca:e3:66:72:6c:61:
                    b2:d6:37:40:07:82:58:17:68:19:11:20:24:d4:07:
                    c4:9e:ac:48:1a:6a:94:0e:8c:4b:68:ce:08:60:a2:
                    76:ac:f3:76:2f:68:60:8a:76:19:bf:d9:cf:1a:2c:
                    74:45:db:16:5d:68:dc:4a:78:5e:01:6a:01:4d:74:
                    6c:3a:8f:00:a4:30:b6:36:7d:44:f9:06:74:a7:5c:
                    44:4a:2e:db:66:c3:38:c2:71:1e:fe:97:1d:2d:e9:
                    0a:86:11:8f:ca:8e:92:9d:e7:a6:96:c9:0b:35:8e:
                    b4:e0:cf:7e:bd:8d:38:03:07:1a:6f:68:31:14:a4:
                    ce:32:56:c9:35:7a:39:5e:09:52:b1:a2:df:91:b7:
                    d0:6d:37:eb:ba:a5:c3:51:fd:a4:13:42:f3:40:c2:
                    79:19:4a:1f:e5:d4:3e:aa:f0:a2:55:f5:35:05:96:
                    ad:7a:50:f8:02:56:28:b1:98:18:82:8a:fe:ea:3c:
                    c8:cd:02:72:43:ad:dd:b3:1b:5b:d0:04:af:70:db:
                    43:b8:3a:16:9d:a9:73:1b:b9:15:52:ef:b3:2c:6f:
                    2e:e7:d2:56:9d:f6:f1:32:24:37:c2:1f:99:15:43:
                    be:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:22:E2:99:FE:34:55:B9:06:73:91:79:65:07:6F:A4:32:EC:CC:3E
            X509v3 Authority Key Identifier:
                keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:8f:e7:3a:27:e7:42:3a:cb:56:c6:11:40:d1:1c:9b:c8:61:
         f9:9b:20:7e:ff:87:68:a2:5e:82:7a:ac:62:7b:fe:9c:f4:e9:
         05:b3:47:2d:b8:06:9c:87:37:44:21:ed:42:02:e7:21:50:56:
         61:c0:62:6b:31:88:70:11:50:bd:58:f2:8e:5f:12:68:3e:68:
         d4:f6:f4:fe:f5:28:db:e6:8d:e7:61:00:bf:43:da:16:08:7a:
         3e:62:74:17:b1:e1:45:7d:e4:ed:49:b4:d4:4d:24:24:07:5b:
         75:c1:d3:d6:90:ec:52:69:4e:15:0c:ad:d0:06:95:bb:1e:e2:
         f9:3b:1a:df:b4:f2:ef:ea:f8:30:14:0b:54:29:42:6b:75:84:
         7c:27:67:38:ee:df:9c:f6:48:cf:f6:c1:6d:a6:a3:b2:c8:f4:
         df:3c:09:7b:59:f5:13:8d:3b:30:1e:55:59:0f:ee:cd:1b:32:
         b1:bc:e4:d7:e6:a5:98:40:97:29:4a:47:ef:fa:b7:a8:3e:f5:
         c3:83:08:9c:11:15:f0:b8:5b:3f:6a:6f:60:e8:a0:ca:cd:60:
         53:d7:de:5d:81:58:7b:2c:ca:5f:16:cd:19:5c:a5:e8:87:ff:
         28:60:9c:ff:4c:42:3e:85:b5:e3:59:9b:48:04:d9:9d:ff:15:
         68:7c:54:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:42 2026 by rpki-client