This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
File:                     8yRYHkNogl1eE_TyoNb_jkhMleY.mft (raw, json)
Hash identifier:          Hu2wZQjMdjZEVRCd566f35zP9ZWmgdqKB85sZDj1UMA=
Subject key identifier:   89:63:B3:D9:69:3E:3E:9C:8D:DC:4A:CD:28:1A:86:A2:C8:DB:33:22
Authority key identifier: F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6
Certificate issuer:       /CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
Certificate serial:       019BF42BF6F64117AC3BD4993279508712B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
Manifest number:          0297
Signing time:             Sun 25 Jan 2026 08:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:20 +0000
Files and hashes:         1: 085Ouj6r61iFfHOta5gBK38YcLI.roa (hash: +dcjb4qLRxfEpIYg0fxx4jk7ltlYnwP0GJy1QwyeW6s=)
                          2: 0WDRBcA8T2_vPd-Ea1ZI0Vwq9sU.roa (hash: YIGHUkbXGWhQksuZIMwjVtJ16rFfhT94Ptqfh71jHlI=)
                          3: 1YwxvX8gyqCOEysmt0qqybMCHNk.roa (hash: 7FYwyB2+5ONzIUgMmr62DZ1GVH8LQaI+zbpkQWQzE00=)
                          4: 7OkR-ee7FhTD9TOvFg0TB3LjHL8.roa (hash: swhyxFYwn+CnBqFhVrbs4y23f0EZqZETzSH1AeaYUII=)
                          5: 8yRYHkNogl1eE_TyoNb_jkhMleY.crl (hash: F+XzjEbsslPTTQkIrQIDH/nzg0jmLcyF74TMcNN5fC4=)
                          6: AzQcC11ESzLHrBK-dTivzNW3KAk.roa (hash: Qv/b4Iwxqe4a3Bb0a4E5kPXh7hWyERaV6fHHMv4Rwjs=)
                          7: CRVYj4NZDsTYLr2ztmZUTQipvSM.roa (hash: 7cWK9n6qHCABKdb0qA8BH/bJaK98KOF3av748QQa8AM=)
                          8: Co9EBzH3FQeVmuqgSnvlZLtyBUs.roa (hash: Tz0AYGnnSruzndjtcc2996lF3mrEc9QKF4xL5BBOObY=)
                          9: D8iXuTiRXYqEkJFvJ6uAf8IIke4.roa (hash: SPNOBHWtTKROWkEPCTbPZeikMWIykdbg4/O6u08XSt4=)
                          10: EkRuyKFWRjbMdDOcs1dsKgqjrbM.roa (hash: 0FQSgLPvp5qGU4zNiDnUwC5JF+/wMdIauGkL3MoX+Ks=)
                          11: GJhh8vWiqWpiHiP3VYi3X3ItnvA.roa (hash: tNirVmxjlbrQuQ0TS8mgziEdfotI43SAU47hWmclcD4=)
                          12: GvboGrQIvM4Aa9xVL2-TfC6TrQ8.roa (hash: +/48cJgrArlo6mfgDzfzRcH8s7/Ae3+DsHBX0W2Y8io=)
                          13: H37Ete5wwerLRgrUxyw0AjT9IeI.roa (hash: 1+wJnEiTXXKkwxBFLngYDir5dg37NRndLSie1sCtdOM=)
                          14: He3WNkgL7nlF2HnV3BdHEQWrALs.roa (hash: z1HcC+X1IG3bBYzg10cK+dY1EeC1ADljcmtSP53WeY8=)
                          15: IV2STCCIKUBvceivIA9sMZYZz4E.roa (hash: NWK88nLTPVw+zgkCFtTK6JB4BF6rMCxtCHK+mBrJ6To=)
                          16: Lfs6BstrmZxglB6NzeIcAn5Ecgg.roa (hash: GCu25rg6JmUHgPzrD5apuulfXOFbXsjPKJgQYmFXjNA=)
                          17: NqqIrZ8uo0wifrfzlyKUR8DlK38.roa (hash: TUMkRBkVNigjdsEZc2aJ6TrbXEDIDiIK85/cCLMD+Zg=)
                          18: OhqmFIGIvINLi29go-GBo9V89h0.roa (hash: 2mKCCY2dNPMKK3cxtc1UfN7vUi2jnLAoSCa9h6Ix5GE=)
                          19: QIQWz5LjRr3-eZJiI14h8jJ12GA.roa (hash: Qo9fA/hq8NKORTUtyMsNENCfVu9yLZUnC+mLgPsCyGk=)
                          20: RrcZBLWHensW4zI_-vOluMC8vUk.roa (hash: u//AksjLoFGyJfMpcGAy4pCUVqvkgMuwzOBgLgKdnVk=)
                          21: T9C9mSfUzTgvxqZJLjWuayrILKE.roa (hash: jbBkfXN2XtW57R+Xos+HqO04xHgS8FtWq55RRuKfCzM=)
                          22: a6AW8erSgL4cyC7RB0KFlvz16WI.roa (hash: rfXhxRN3Mr6NGEn48dAtVk+dzIWU793BYF95HmzV6sU=)
                          23: aAM7MPx5ExZMCsJFazi1Jrhvjgw.roa (hash: FsUGMRauBaoNijE/VGFvcLi0/H3k8dln+uP1XPba3kg=)
                          24: bBxPW_zCXUaubRtG39KVnEQLrDk.roa (hash: 6JqVWigaUqWLIrSVZPhejuc/cdeerKyT5VxfwlA17pg=)
                          25: be28BkxFxZLQVi19h_PxhvrDxv4.roa (hash: ErkhyWUL7IeWfO/G4gKn/lMtd8yFq776RnWqwjXgqzk=)
                          26: dIi4Sd6A0woxUOrDa0aIPMxZeKA.roa (hash: guube1BWqaZ3lHZMwDTgjnu3u/KgBDszavN68xccEaU=)
                          27: e_-cDL9S-PwlVQ_DKjwnfW0tt7c.roa (hash: 6PChnQpINtih6r77OhVxWKRB4JPj4g8KJ34c75c/92Y=)
                          28: fkwW7vQ7hztwijIVZvUQHj1qigg.roa (hash: uzOmNHDNSP9AIZ+LDCuR9nVTUUtFCpsVotW5tlN/vQA=)
                          29: gCfjL-3SvYyiT3WrM2LlYTWwgkY.roa (hash: EiG5DzSKz6tAYp29UWL2CcDw/nWlCYzW/1PC1TLd15o=)
                          30: gdkG9J28VtKge69Dtz6nYxoWS4E.roa (hash: 8XwMXuWP61QIVZw8vtY3HHl4aNq7qQ8km37pm++lPVA=)
                          31: i5FPBdnKsXw64xDyOCC1mnQz9Nc.roa (hash: jslAP5bC5fn7g9kGmwk3vh8WxrZdD72DU7Ti1zOMxRc=)
                          32: iXK6_smiFzBTEFuOum3bjBSjlak.roa (hash: y6nsF83Zy7iKgp3+BWL++U3NO7f81mX6D4p46sUrhhI=)
                          33: jBd826A8cxmy1TNeXWDNCyZqVY0.roa (hash: 8u0pP3dG+KCwBOrG2AKj3JYXrg0WwOnfMYUSBZbe9vM=)
                          34: kN3CKGYk23jQrOwQ6USFJSSUGSo.roa (hash: uwQr4Amla+dPIAoyBEwo7M2r1NunJ5/9MN/5rJVR5IM=)
                          35: l4rcFgc3CjyrI9KrcS2jjR14BH0.roa (hash: PJtnob7yOMI5k7D8JCs1IdsL1ZqcpSi3bvSxPr9KbEI=)
                          36: pRvUJqk2YIK32FXKqRhubG5xKQw.roa (hash: LfT6/KbbWOdFJ/9LHrdfUEsEVQTe89HYGACVUWRNkhk=)
                          37: qyQMkaFhK0_l9HWkLZKgdqyT294.roa (hash: KH+mm2gb9IuiTAVvGPUNOLjd4I2d6HpdpPsFgXNFJn0=)
                          38: s0DKTB-WwsVhzWKoi8hN1rh2N-c.roa (hash: 07d3h4sls+mebkuKMOSsHuF9QXCiDOJiXihhE6GwphY=)
                          39: tYJC_RLkea-R9DGyiP5WpibL6t8.roa (hash: 5v6gsOIATskbh1Ml478fq/pv1vDgXJirdgTuXOCN7Mc=)
                          40: uHbsD8VdMvyuW3wv40ww1CrTIh0.roa (hash: J5w3L50Klh2IAzoXITphGMCyA9UYv12K9YFcNuXFmE8=)
                          41: wpG9PWpUhr6GqC2eisrwoTZXDC0.roa (hash: UzCVZpdigBJ2p9V8fY9Ow84FKsH/rZ2hqhow5aQQ0pc=)
                          42: z1A9j3Rv4TvtLtaD1Nnq_X_sOwQ.roa (hash: G2CHvYhf4pvbtn9bn6ExRtKBsl13SB1ScEQ3QJbOvI0=)
                          43: zN4xIcyuKdReWz88lELFd10OniM.roa (hash: yTZG3oZJlBmSpnKDhcxunCfxKUZwKaHWTWtPKvOIooY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:f6:f6:41:17:ac:3b:d4:99:32:79:50:87:12:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f324581e4368825d5e13f4f2a0d6ff8e484c95e6
        Validity
            Not Before: Jan 25 08:01:20 2026 GMT
            Not After : Jan 26 08:01:20 2026 GMT
        Subject: CN=8963b3d9693e3e9c8ddc4acd281a86a2c8db3322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:43:1b:30:f9:71:25:e6:61:bc:87:17:83:64:
                    40:8d:61:72:5b:30:b4:a2:bf:d4:a7:18:de:a7:a2:
                    31:1f:ad:d0:76:7c:b4:6f:87:27:8b:3f:02:3e:b5:
                    8d:22:4d:a8:eb:4a:3b:f9:82:bb:56:31:d3:f1:b3:
                    15:c5:c4:60:ed:80:d4:5e:3e:75:f9:a3:02:be:b6:
                    5c:35:21:4c:a9:c2:2e:b7:06:64:3c:3d:55:a4:53:
                    b6:5a:f3:94:d8:6a:38:cb:80:cd:1e:f7:c2:c9:09:
                    5a:8d:31:63:8e:f1:b8:8e:f2:fa:0d:a1:8e:f3:79:
                    64:41:7e:55:9d:54:4b:85:49:ef:e0:3a:42:e7:67:
                    99:b7:15:00:c7:d2:eb:35:33:03:89:45:16:9d:22:
                    1e:95:39:c3:ac:b5:5f:f2:22:c0:f7:6f:a1:ac:10:
                    ff:13:6f:22:ff:c0:92:5c:03:5a:bc:9a:d9:04:e3:
                    8b:2c:50:cb:b5:75:08:b9:a3:0b:1d:cd:cc:41:43:
                    ae:72:93:74:79:79:35:54:f6:ec:f0:2a:07:1b:97:
                    88:11:54:99:32:86:78:cd:44:a7:2d:38:20:1e:46:
                    39:fd:2a:4d:0f:24:4f:2d:79:44:0a:6d:d2:66:fd:
                    9b:93:55:51:13:4e:58:9b:c4:e9:d7:8e:e5:54:47:
                    bf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:63:B3:D9:69:3E:3E:9C:8D:DC:4A:CD:28:1A:86:A2:C8:DB:33:22
            X509v3 Authority Key Identifier:
                keyid:F3:24:58:1E:43:68:82:5D:5E:13:F4:F2:A0:D6:FF:8E:48:4C:95:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yRYHkNogl1eE_TyoNb_jkhMleY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6b91ab-99db-4648-b153-6e2d97ca15ff/1/8yRYHkNogl1eE_TyoNb_jkhMleY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:14:e5:75:c9:83:63:42:ba:d0:78:11:c2:b2:9a:b0:04:da:
         72:46:42:c5:fa:42:a6:46:31:22:ed:45:e9:a8:07:25:06:c1:
         e4:de:82:c8:07:78:85:1e:48:6a:22:d3:c1:eb:d8:26:b8:4f:
         2c:4d:7b:d1:30:85:54:9e:7b:db:47:c8:97:a8:fe:7e:de:f3:
         92:b3:d5:c4:60:46:8a:7c:c2:59:d9:fb:4b:9a:e6:fe:f4:33:
         4f:dc:c3:81:a3:d8:a9:6a:ca:e4:ce:23:cc:35:3a:5e:45:89:
         6b:e6:72:db:50:e9:bc:22:74:63:af:cd:1d:5d:8b:e8:31:79:
         31:0d:a8:61:7c:34:5d:df:66:86:14:01:f7:21:7f:44:c9:e6:
         c0:c2:a6:5a:f3:a1:30:0d:18:9b:07:f2:4f:01:35:1c:ef:94:
         e5:92:0b:64:54:76:5a:62:3d:29:0d:1a:9d:79:77:69:79:b0:
         16:31:bf:43:08:34:b3:55:4a:86:59:e1:7e:e2:9d:15:83:35:
         62:b1:c1:ea:0b:30:9e:6d:35:67:4d:ad:0d:f8:fb:f2:24:ed:
         ad:ef:fd:c3:0a:69:c6:19:26:ef:07:ed:39:fa:1c:20:db:61:
         4c:80:1c:46:3f:00:8e:fd:55:57:45:33:ec:dc:80:c0:22:e4:
         57:78:6d:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0K/b2QResO9SZMnlQhxKwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMjQ1ODFlNDM2ODgyNWQ1ZTEzZjRmMmEwZDZmZjhlNDg0
Yzk1ZTYwHhcNMjYwMTI1MDgwMTIwWhcNMjYwMTI2MDgwMTIwWjAzMTEwLwYDVQQD
Eyg4OTYzYjNkOTY5M2UzZTljOGRkYzRhY2QyODFhODZhMmM4ZGIzMzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUMbMPlxJeZhvIcXg2RAjWFyWzC0
or/Upxjep6IxH63Qdny0b4cniz8CPrWNIk2o60o7+YK7VjHT8bMVxcRg7YDUXj51
+aMCvrZcNSFMqcIutwZkPD1VpFO2WvOU2Go4y4DNHvfCyQlajTFjjvG4jvL6DaGO
83lkQX5VnVRLhUnv4DpC52eZtxUAx9LrNTMDiUUWnSIelTnDrLVf8iLA92+hrBD/
E28i/8CSXANavJrZBOOLLFDLtXUIuaMLHc3MQUOucpN0eXk1VPbs8CoHG5eIEVSZ
MoZ4zUSnLTggHkY5/SpNDyRPLXlECm3SZv2bk1VRE05Ym8Tp147lVEe/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIljs9lpPj6cjdxKzSgahqLI2zMiMB8GA1UdIwQY
MBaAFPMkWB5DaIJdXhP08qDW/45ITJXmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMt
NmUyZDk3Y2ExNWZmLzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82YjkxYWItOTlkYi00NjQ4LWIxNTMtNmUyZDk3Y2ExNWZm
LzEvOHlSWUhrTm9nbDFlRV9UeW9OYl9qa2hNbGVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjRTldcmD
Y0K60HgRwrKasATackZCxfpCpkYxIu1F6agHJQbB5N6CyAd4hR5IaiLTwevYJrhP
LE170TCFVJ5720fIl6j+ft7zkrPVxGBGinzCWdn7S5rm/vQzT9zDgaPYqWrK5M4j
zDU6XkWJa+Zy21DpvCJ0Y6/NHV2L6DF5MQ2oYXw0Xd9mhhQB9yF/RMnmwMKmWvOh
MA0YmwfyTwE1HO+U5ZILZFR2WmI9KQ0anXl3aXmwFjG/Qwg0s1VKhlnhfuKdFYM1
YrHB6gswnm01Z02tDfj78iTtre/9wwppxhkm7wftOfocINthTIAcRj8Ajv1VV0Uz
7NyAwCLkV3htWg==
-----END CERTIFICATE-----