This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
File:                     zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft (raw, json)
Hash identifier:          OmETDOrDnPnlxwdNXJCUzLS0ClI0kOYWZzMRgGN2muI=
Subject key identifier:   81:F2:61:54:3C:F1:63:FA:44:64:54:0C:88:A5:69:9A:C2:74:A2:52
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Certificate issuer:       /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial:       019BF3BD5F9BEC6AD0D2B14AAAC392CBBD9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
Manifest number:          1531
Signing time:             Sun 25 Jan 2026 06:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:32 +0000
Files and hashes:         1: 1-xKIBkpa7T0veSSTKBuORX_yg6I.roa (hash: fYNjN1Yuj4o1fOt/7nwc1/53oKDoa+n/LUtvQGqIcIw=)
                          2: 17C_vnF79Z0SjoScCQYs0Qbx30M.roa (hash: 8O33ZZG4CQkBtT5Vng3e75/g1VOrRLzBwAenPZwIQiA=)
                          3: 2WDRTRevv9-ox1rCwwOijTgm38Y.roa (hash: sBwwjQ4mnAUEOPtAO/AFlM1FAiCnDmaJW98VIqoVkfU=)
                          4: 33HmxX5laer88g91bQT40p7G6N8.roa (hash: WQtp+MeWQU34zoXSdinNrezoDYcPmqBxgQ9qGR9RXWI=)
                          5: 3ytiWjmFt3rYZft34LBPp9IPn8M.roa (hash: t6Z85iFlhPkY9Mi/GJk5DDB2tSPS3ygni+I6/1lEoxk=)
                          6: 4t1cnFILPpWxTiQAbKvrjsS1tIs.roa (hash: vBA/+4wMSJ7JCYOGjzL87CU5fnSPn9SJA681Ty4G7fE=)
                          7: 6Dm3L1A6fwNf5cdJCg_KzTtfF4U.roa (hash: JWGAhkB/RVPvN6u4alw1RrRc1axraV68/7+Pht7ruCE=)
                          8: 6qoBSrrhi2VKQ2-x91iDJmcoOhQ.roa (hash: urnXFLFxbktUpf/FnGonIt+QH0Pj4s4eEnHDC6hX/xw=)
                          9: 8Xitw9UVRcrb76gpVaumne_jEwU.roa (hash: 0hgIFdKgGSQcfkWMig/zds4qJYEy+FkP6hC1G39jOFE=)
                          10: 9T5_OTvwktW8zRDsIc_oghwfJK4.roa (hash: DN/iAPUdkXHSXPrEJqQVCF4jzwo8vDZFSIr5wO/Xikc=)
                          11: B60g_m0QJwYIuA9KKm-uF1NhLIM.roa (hash: 9NtMYll9Etxivck/4newooAS+FDFrk33e9AIEWgcc8E=)
                          12: BjY0UIUDYHmtHwBNhaObIWAI358.roa (hash: OvPE9LHEEN/9/jOSuoQZt3aJ0JqPRafOAp/r5JidHtY=)
                          13: DkJySsuMNN6nq461mGfbyUWm0-k.roa (hash: iY8LvJa5Jmr9jGV3kx+0nM5jdDiiKJJw60Z6kxgQP3U=)
                          14: EHgktTf6m7_fov1qGoLd_G4GBHE.roa (hash: qTES87h7tbtM80VYUBu7n7wmyWPsetKC04PB5cOHzdk=)
                          15: KdL2r09wZul28eEPN4dewnB7ukk.roa (hash: 9pOERGjcNeBDTiqWkoEOFlhoH/O5h5mU1iEJxp7N/4Q=)
                          16: Lf5FvUmpikFoYhH2ytdpP8ItWlM.roa (hash: lxo8eRRdaXgJpksSvue5GrOKiD1mj5NmMU6shXOSuVQ=)
                          17: LoYqb50w0fBtfcHsb6vmg_Jp5HM.roa (hash: 5JEsLkJAmr1UNeD7WuJILvN07Z2E4VXvHyU2P3noRJQ=)
                          18: LtPnBk6NSxo0XNLt66J042Sgc0I.roa (hash: Ss/KW/qryEzrYA7hPSNoI8jm1o8wvpp7Ys+hj0l/oCk=)
                          19: OfxjuwiEKWgdwrg-K1K-c5_VgLQ.roa (hash: UWtmb6ZbxoAUabXWP2QO5S1E8N0sWVkGkKY+3/ZZOw8=)
                          20: OwThGODJImZhpEQ6VocAEXk08Wk.roa (hash: 9GWZM8UI6vesEnw5NwOVO4E8dLD1yeWhQTR6JXudaTE=)
                          21: QEVT0nsNdMK5970-VuCNIO7bYg4.roa (hash: H3kWdOUjD4rqnPFsu+zJAwLiJasUXrKvsMvw+jYrgQg=)
                          22: QZpOJMLxlJiY5GQ1rQgs1SNsimg.roa (hash: /qvtVd1S67G22sI9goTW79cQnSWlwGWhyntkNwAyihc=)
                          23: UE_hgXeXCUPJYDw6I06aW1aAkJ0.roa (hash: B5wHSL8kle+kiYR4U2yvdOPBll+rksc+6BTwGU5+ZZw=)
                          24: UNKE0U9fY4vtLgLGDaMWV30529Q.roa (hash: hBRRFxInMVI2iUc7x3mm7CzMk2hrGE/9PAlOKvXi7I4=)
                          25: WmaJm0jDrpyJX9Q-LqqqCt-uwIA.roa (hash: eCuLoI4rD6y1bR6VEKccwXQk5/tx5hypqNKOEMMl80A=)
                          26: X0LNnZh_zA1JruTsm1BTGzpgxgI.roa (hash: bbY9kDefslrSJOAVec3/5z33iFHF4a4duJ420QtZ6Qs=)
                          27: ZI085fx17wglNov032bXlk10RTg.roa (hash: j5Ko4ezz0l/Zfw3a/ZhaxENbSPKBPqajPZNL6E/+Gv0=)
                          28: ZQlaFWMQCgAcPabK6mTBTjQ2IJw.roa (hash: ucM3NjRsgstMASAi+QcIMApg7HelzidJ5g1y41234cs=)
                          29: _FggjIBA5t8sjfRqZsrKE_Ymbdo.roa (hash: 9HysWDZxGXfzPsUoHmbEgdNxnq26KBNjoD5DlM7apJc=)
                          30: bEtFnc7rnzCNJYBVd6ns7_KpUB4.roa (hash: PfuSivsRFYIl84wqTHOi1o/Y41ISwKTYQsUGOVnvA8c=)
                          31: bWrf5HBRWkC5tRtfjrT7kJyrpno.roa (hash: /I5eLM8VzNgvUAvbvfb6xY95ux9WGp/lCmpzrs9JDzo=)
                          32: cMPrRmSojB9SkGby8eR98Ete7yU.roa (hash: oFwh+VPxKC/FGJBIY58aOrYkh1H3RAArQ9XcD617oH8=)
                          33: cXMAXXw3hT5pEyxfkk8yBzh6-q0.roa (hash: kafroNNbYDnc2h6nBm4gxZIlVlKGznDzvdAVuH5RGlI=)
                          34: evRG__ex8JGxNVzyfa2c0uYKq_0.roa (hash: 93Yx357YevAnWmJ/tXlOKW8HTJL/2XO97iLj27xdMN4=)
                          35: fCRl6H2tV2dYneBgV0uiC_W_S-w.roa (hash: QOoL0BKgGIl6PJSa1c+JHlWw89Yfva3b2J8N7HowCT4=)
                          36: ffSjroyzqFmTGGvAwWqAlu0UGW8.roa (hash: B45lJtGrx/EaXLRfo0U3/fbwEmEU4k3M8ZS2wUMBPgE=)
                          37: fv_FIWsQ6j6A0tVez5uEd3louso.roa (hash: 2YyDYTFacwqXQWkGL6XcsPB1oMsulqFc48OJziLkM3k=)
                          38: hAJCIirAsZk8GUXF7WubyM8TjKI.roa (hash: j6pH65MDKZ3nETHCyHm0OLZKv7Eb9miovENp+54ETCc=)
                          39: iarmlWK_D1F2Y519OMWB6VCc31g.roa (hash: WFVbmq4d03vzZGnbmXlce/4IUJO9Lw5GHMqxL1YbJaE=)
                          40: j9orTwG1Vgweag4E9VIs_WouzoE.roa (hash: dRvoLFD35EV9+pViQgulgami++djop0zIxFnFUcf+is=)
                          41: kG-gzSXw7Xcgy38pq49Fm5F8epM.roa (hash: Z0TU07wUa+vgV6kUb5uXIDhabfu1OKz9XCZUoBsYQ8k=)
                          42: kKVFvVwz4lKUeI_BYUYkcF4zOgY.roa (hash: M3kl/dW1izCba43Gvn97MkBlbANqv5CR/FlI8KEINZc=)
                          43: l1pzlCUbLYSwaiCGAir9wNYcTTE.roa (hash: t1UtwzLw1x5tIwxUqO3rM2BmFbhBkbvupvjPzA3M+14=)
                          44: n0NR6OiiSRVLpNipRarNfvBQVBQ.roa (hash: x7+Hnm6izCIj5uo7DZZ8rAC8clBtC3HKKYVdoqJqJww=)
                          45: n8MjKXvqZ_ykVxoj_PICiGkMVN4.roa (hash: KE5qMKf48PX3z96z/KseHOWj4bf+7DR79w93dsatrG0=)
                          46: o0zFW0tgu0SNCajq1-Pj04reASE.roa (hash: XI8Y+MP7U7GXabQcnglenR9AR3VDKkEoKmwdTMvnwSA=)
                          47: pP92nXUgnFxyzmxr642WITYfjR8.roa (hash: TqxUp210JvwrsHlKUxm5AHk6pYYpaSVTd52yZrfvpuk=)
                          48: s9bHtYw6qGInBE6Pd4y6dDNszho.roa (hash: DuL4nvwJ3GhqWQoioLF44KGKjnyU3aqouWmY/jU6w4Q=)
                          49: sRcjHv48Ix5ZWmIVPESRSNKGSF4.roa (hash: QHp0CnLMOdnZJRFq6vXydvTt0emx9ssFqlC3Y0SRvwE=)
                          50: t7fjwmK42FWZE7y1k_7IUkx6rYI.roa (hash: An31yl38X+FtV1bD85RaGjnhQAZUGGTmiLxRfjuQc/E=)
                          51: ub3_xXCqSDb4kN9wMdlzsI7oPxQ.roa (hash: GJO6QjXLjOfr5Iv9d1ph8RhzI9Z4NmCWHQkusa8M8lI=)
                          52: vxHiN8XYZlqNx9pegdEwtdXJzX4.roa (hash: DRRytWcqFbSlVtkcmI8YNqgxFW5pXUdMhy1Q5V9THDo=)
                          53: x5f1AKVAj0hQj6d9XuWzRz-8e0A.roa (hash: T+4iofAbDpf5avC4l/+tJIoT9rhbeVtFuRCldw4lWGM=)
                          54: xDz0O2A-gElcx4WUvd4FQFxf7ec.roa (hash: IWTlwoJDvqtW6cYxdSIvliokYo9KclfeEgazhnMIeYs=)
                          55: xREJbZysiuR_7AfAbkb-_mvdCJU.roa (hash: ge+uzdtNTlkRHujnITIjJNysWOPLtwdYoaqf4cikYBQ=)
                          56: xzXxMN8DgJKUSed4Zzj_Mb67H-U.roa (hash: TDnyAyMix8iNzerKPVy27tm7TC9mUARhadLzqmvLY58=)
                          57: ytt2iIs36bszj8mftd5slrzDQco.roa (hash: YI/YKXK40yzzg8HNrk8zo8zko1P2F7J9FfpMEZCi7rY=)
                          58: zGv39sxT-IgxK9wQigpzw1dL81k.roa (hash: +TgYlQl9Z+mDQd/s9Yb0REr9Dx/C5mDs1i0ouWI4Pcw=)
                          59: zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl (hash: iGs1+5/cw7bYZMKaxtGr9tcSZrigLMfZpEfj3HGk324=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:5f:9b:ec:6a:d0:d2:b1:4a:aa:c3:92:cb:bd:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
        Validity
            Not Before: Jan 25 06:00:32 2026 GMT
            Not After : Jan 26 06:00:32 2026 GMT
        Subject: CN=81f261543cf163fa4464540c88a5699ac274a252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:02:75:df:8d:97:8e:68:b7:77:18:1e:c0:47:
                    4c:75:20:12:c0:1f:66:e6:37:54:b6:95:c5:73:3c:
                    e6:3b:d2:f9:7b:8c:28:21:92:46:26:48:02:5f:c4:
                    70:ea:60:c6:be:55:60:b9:c4:03:d3:c9:9e:74:cd:
                    ad:6f:fe:95:50:6c:15:d9:44:be:85:73:05:bd:4a:
                    a4:79:8a:77:0c:2c:c2:89:42:3a:97:10:81:b7:a1:
                    9d:83:f0:00:e7:4e:86:26:1e:bd:c3:20:6b:00:2c:
                    54:77:fb:7a:53:c8:92:84:fb:ca:5a:88:0c:09:12:
                    37:4a:10:7d:a8:6d:af:80:09:31:2b:e1:c2:1d:3c:
                    6f:e7:8d:b0:41:5c:2e:67:e7:11:d6:97:c0:3f:df:
                    91:44:9d:94:ce:ce:d3:8a:8d:41:01:07:ef:dd:a3:
                    75:ae:e7:b5:07:b8:49:98:98:0b:2a:09:cb:95:f2:
                    dc:02:3a:4a:47:a0:69:5e:fd:55:5b:48:93:6d:3d:
                    72:3f:17:d1:df:e0:6a:61:3a:6c:3a:78:df:4f:3e:
                    8f:90:69:ac:f2:58:41:86:10:df:aa:9e:76:04:89:
                    4a:6a:c4:42:fc:15:4a:87:d7:9d:7c:f4:27:90:94:
                    42:f7:52:42:c5:52:7e:0f:85:28:ea:27:f7:35:65:
                    ef:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F2:61:54:3C:F1:63:FA:44:64:54:0C:88:A5:69:9A:C2:74:A2:52
            X509v3 Authority Key Identifier:
                keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:18:10:22:1d:60:6a:57:35:3b:de:92:f5:7e:08:b9:cd:43:
         57:08:be:57:1d:f7:b7:cf:e2:0a:0c:99:92:f7:81:ce:11:0e:
         85:66:26:17:ca:e6:d8:30:95:50:91:92:63:9b:a1:d6:b8:d3:
         17:0a:3e:e3:1c:5c:96:ba:65:53:34:26:bf:cc:c7:3c:98:44:
         30:8d:dc:ba:10:52:d1:2d:5a:2a:70:30:3f:60:5d:c7:06:9a:
         7f:03:02:d0:db:35:20:84:4c:8f:93:3c:49:2f:8d:74:e1:f8:
         74:9d:ad:64:89:09:4e:f5:aa:3e:bb:59:e3:5b:cf:65:9c:11:
         26:4b:1d:b5:86:0a:2a:ba:39:38:07:34:1c:b2:d6:f0:d7:32:
         03:38:d4:85:ef:0f:17:99:5f:94:7a:2d:bf:7c:92:0d:cb:b7:
         51:6b:80:cc:a0:00:6a:f0:84:51:5d:d5:aa:98:c6:b2:5b:ff:
         9c:4f:db:96:41:56:20:27:17:86:47:73:b4:20:61:1a:98:c7:
         89:15:6d:17:66:88:3a:a7:c3:a2:b4:1b:1b:df:26:71:75:60:
         c7:c6:68:cc:40:b2:57:54:ca:57:9a:2f:c5:39:d2:b4:5a:cb:
         5a:4e:9d:16:91:df:60:fa:9d:29:37:55:00:a0:6b:eb:5c:6e:
         06:45:d3:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzvV+b7GrQ0rFKqsOSy72eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYWFhMGUwODIzNjAzNjBhY2RhMzQ3NjY0ZWI4MzE0ZWIx
MWRhMTAwHhcNMjYwMTI1MDYwMDMyWhcNMjYwMTI2MDYwMDMyWjAzMTEwLwYDVQQD
Eyg4MWYyNjE1NDNjZjE2M2ZhNDQ2NDU0MGM4OGE1Njk5YWMyNzRhMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAJ1342Xjmi3dxgewEdMdSASwB9m
5jdUtpXFczzmO9L5e4woIZJGJkgCX8Rw6mDGvlVgucQD08medM2tb/6VUGwV2US+
hXMFvUqkeYp3DCzCiUI6lxCBt6Gdg/AA506GJh69wyBrACxUd/t6U8iShPvKWogM
CRI3ShB9qG2vgAkxK+HCHTxv542wQVwuZ+cR1pfAP9+RRJ2Uzs7Tio1BAQfv3aN1
rue1B7hJmJgLKgnLlfLcAjpKR6BpXv1VW0iTbT1yPxfR3+BqYTpsOnjfTz6PkGms
8lhBhhDfqp52BIlKasRC/BVKh9edfPQnkJRC91JCxVJ+D4Uo6if3NWXv7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIHyYVQ88WP6RGRUDIilaZrCdKJSMB8GA1UdIwQY
MBaAFM2qoOCCNgNgrNo0dmTrgxTrEdoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2Mt
N2U0ZDZmNmY2ZTY2LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81ODkxMjctMTA5Ni00YzkxLTk2Y2MtN2U0ZDZmNmY2ZTY2
LzEvemFxZzRJSTJBMkNzMmpSMlpPdURGT3NSMmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsxgQIh1g
alc1O96S9X4Iuc1DVwi+Vx33t8/iCgyZkveBzhEOhWYmF8rm2DCVUJGSY5uh1rjT
Fwo+4xxclrplUzQmv8zHPJhEMI3cuhBS0S1aKnAwP2BdxwaafwMC0Ns1IIRMj5M8
SS+NdOH4dJ2tZIkJTvWqPrtZ41vPZZwRJksdtYYKKro5OAc0HLLW8NcyAzjUhe8P
F5lflHotv3ySDcu3UWuAzKAAavCEUV3VqpjGslv/nE/blkFWICcXhkdztCBhGpjH
iRVtF2aIOqfDorQbG98mcXVgx8ZozECyV1TKV5ovxTnStFrLWk6dFpHfYPqdKTdV
AKBr61xuBkXTyw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:45:52 2026 by rpki-client