This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
File:                     V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json)
Hash identifier:          P/0xH7Lo7lOI9tjRNBT1WegL8KTXEGINKRyOGcG8bpg=
Subject key identifier:   8D:67:05:57:93:C0:42:8E:98:56:C0:75:A7:D7:7E:C2:53:5B:DA:D4
Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47
Certificate issuer:       /CN=5753c06290a371994d7577318685f5bc4a538d47
Certificate serial:       019BF688085BF1DFD139F9F986A259FBEE4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
Manifest number:          13DE
Signing time:             Sun 25 Jan 2026 19:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:08 +0000
Files and hashes:         1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=)
                          2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=)
                          3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=)
                          4: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=)
                          5: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=)
                          6: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: Jes8LxsRCsKEchls/3+JXsgzZNOxnckw5sFccygqfKY=)
                          7: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=)
                          8: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=)
                          9: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=)
                          10: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=)
                          11: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=)
                          12: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=)
                          13: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=)
                          14: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=)
                          15: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:08:5b:f1:df:d1:39:f9:f9:86:a2:59:fb:ee:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47
        Validity
            Not Before: Jan 25 19:01:08 2026 GMT
            Not After : Jan 26 19:01:08 2026 GMT
        Subject: CN=8d67055793c0428e9856c075a7d77ec2535bdad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:10:56:13:54:12:02:b7:0b:de:10:54:ad:
                    32:02:e4:32:be:f6:1a:54:34:dc:8c:ec:89:d3:03:
                    70:76:11:54:c0:4c:f9:54:e1:4c:47:af:c4:1e:3e:
                    6a:04:20:82:e6:79:3d:d2:39:39:46:49:e4:ec:10:
                    07:2e:b0:9a:c0:21:e6:0e:38:9f:80:29:1e:a8:88:
                    09:20:8b:a1:b0:fd:64:6b:e5:98:7a:b0:36:7d:d7:
                    af:c0:27:69:58:59:84:1d:aa:27:c2:98:d3:e5:4d:
                    3c:8d:13:68:a5:11:80:d3:12:1c:c4:40:48:3f:03:
                    3d:14:d4:fd:f5:3b:ff:ba:fd:98:e4:8e:32:22:c3:
                    54:e8:21:a7:02:97:e6:0a:6a:b2:8e:94:4f:e5:ca:
                    e3:d6:1d:36:16:11:1a:7b:fd:22:09:1c:aa:b1:e1:
                    fe:8b:7f:18:fe:88:3b:a0:a7:b6:d9:53:eb:d5:93:
                    f0:63:20:f7:0b:21:83:fe:ab:8d:01:68:37:47:27:
                    25:fd:c4:08:4b:81:5d:42:60:05:a2:8f:ea:bf:75:
                    79:53:88:6a:2e:51:16:d6:18:6f:98:83:19:da:fa:
                    1f:6f:3a:41:04:be:97:0a:66:fe:05:10:8d:22:a8:
                    40:7a:91:25:e1:a6:32:2c:3d:29:2d:ed:ee:9a:6d:
                    4d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:67:05:57:93:C0:42:8E:98:56:C0:75:A7:D7:7E:C2:53:5B:DA:D4
            X509v3 Authority Key Identifier:
                keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:65:6b:5f:23:48:fc:f7:28:2b:b8:e4:ea:20:3a:03:ab:f3:
         d4:75:8e:fb:b4:a7:d5:58:5c:0e:dd:9f:2a:16:2b:02:96:f5:
         b3:ff:4d:cc:95:89:2f:33:55:4a:a8:25:e9:c8:d4:68:ff:36:
         d2:31:ff:b3:d1:b5:5d:21:2d:50:18:d5:29:19:ad:81:36:e0:
         ea:cd:df:01:a8:47:69:bf:2f:b7:f8:c1:50:d3:87:0f:2b:c8:
         5e:45:b2:ff:ed:c0:55:4e:f9:f3:46:4a:e3:15:33:ba:c7:f6:
         b2:62:ca:63:5d:22:d5:28:93:2d:49:66:02:24:cd:2a:80:65:
         47:28:39:7d:a0:f9:ff:20:d8:17:f7:83:96:a3:5e:34:fc:e3:
         0f:55:88:99:17:1a:34:24:8e:b2:b6:68:2e:40:5f:b4:2b:7f:
         16:7d:d3:54:64:a3:de:f9:37:10:70:9b:71:88:0b:b7:e8:48:
         0c:17:b0:a7:b7:16:15:e9:72:8b:46:67:c0:12:57:2f:d5:44:
         54:34:70:5d:a1:43:58:d4:13:e5:42:b0:23:a7:90:ca:56:04:
         e8:30:03:82:ba:cf:31:2a:ef:1a:de:f1:d2:1d:5e:b6:da:8e:
         dd:28:f2:f2:52:75:5c:ef:47:85:21:36:1e:1d:3b:9a:38:d7:
         08:02:cb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----