This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
File:                     088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json)
Hash identifier:          xQwUzjRssvFUa5DVVOEVginommDaA9EhZsAq47AmwIk=
Subject key identifier:   F1:13:39:B8:29:40:EE:3F:F0:76:EC:D1:24:7D:F3:92:4A:17:9A:6D
Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29
Certificate issuer:       /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
Certificate serial:       019BF3503F67C45CA2DBCB3B36CD5D9B971C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
Manifest number:          14FA
Signing time:             Sun 25 Jan 2026 04:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:21 +0000
Files and hashes:         1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: ADFszyYc6rvGj+yHBLPgFOVHcm7x1PNfMucRuqTtPX8=)
                          2: 0P-3rcHOACQuATcCi6YZ2CE4KUs.roa (hash: QhfIbf/0f7+LXQU09PxZuXp7pk5C+r/mb2fH3ZziPpo=)
                          3: 1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa (hash: lfO/LT2x9VGedw1VsT/xMSQrjFJ4WPeZ0phXQ/kch1M=)
                          4: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=)
                          5: 49qDEMT95KkYi3Py1v-kUhYCuKQ.roa (hash: UZ2WW9Ii94D2uUWKYSruiKM5NflNFSuwb646DQFKoY0=)
                          6: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=)
                          7: 8mWxZpiqXYwc3d_MoBh2vXCPi7w.roa (hash: NA3FUqEHCIv+2pO01YQheP5r4xdrvQYz2f0gz7kHjsU=)
                          8: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=)
                          9: Att5HKYI3aC7_aNTZVFUqgSxCe8.roa (hash: rUmjLWfVdd7KMWGUiNf2cjqT7vTRErvaoU9x2sNbGew=)
                          10: E32d64hbw6AsJZtWf4GpyNFVTSQ.roa (hash: OjO54KQL2g7MMGR4mysj0+j5+wTYUNDx6LROTzawCkk=)
                          11: EU_6MN_MJZf3XRvVIUEOVYwgNZo.roa (hash: +IXgSVtEGOzuUxPa9aH2GgJttKlcpQRRHhr1qNoMAVo=)
                          12: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=)
                          13: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=)
                          14: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=)
                          15: QVmpq5uUW83OxLRQZoUN6qkCYCo.roa (hash: eXrEGUzTOlASTsMQ1zhG4ExRHlUgvD/LNtw5nMvzHlg=)
                          16: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=)
                          17: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=)
                          18: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=)
                          19: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=)
                          20: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=)
                          21: Xd00ng7nac-i-TetL-P_HvOhmMM.roa (hash: k5l8E0MsOMYmPHet67fQ/9LeL4IxYxuboXrgLM1fIRk=)
                          22: YpnM6PbWSIHO9aECWc9SJfnp9yw.roa (hash: EG1jvjfKohnwhgtv5pMIeo8VzKbqw8g3sXsKpUT/PTI=)
                          23: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=)
                          24: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=)
                          25: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=)
                          26: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=)
                          27: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=)
                          28: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=)
                          29: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=)
                          30: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=)
                          31: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=)
                          32: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=)
                          33: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=)
                          34: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=)
                          35: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=)
                          36: u4owkfbGQjlZ17TauPKELfGr4-A.roa (hash: Z+tEIRfGIZ+WLPFWkpQEZw9hlIWNtzCNJGfQfR5ByHc=)
                          37: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=)
                          38: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=)
                          39: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=)
                          40: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=)
                          41: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=)
                          42: zPgdBYPAz3QBjg71o8G3YIE805Y.roa (hash: JgrCSwBTN9wdbX0XnRrlPGBIGb9WM1Yt8KIhYiVQTmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:3f:67:c4:5c:a2:db:cb:3b:36:cd:5d:9b:97:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929
        Validity
            Not Before: Jan 25 04:01:21 2026 GMT
            Not After : Jan 26 04:01:21 2026 GMT
        Subject: CN=f11339b82940ee3ff076ecd1247df3924a179a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:87:cf:8c:dd:0c:e0:04:15:37:c6:e7:50:2a:
                    89:dc:03:2a:83:33:2c:83:68:b3:33:cb:0e:2a:a3:
                    cc:63:ca:88:7a:09:04:e1:a2:2d:22:b7:36:37:cf:
                    7d:29:80:40:17:46:25:3b:95:6c:89:9a:f8:c1:0a:
                    75:7c:e7:db:45:16:ca:94:1a:f5:72:2b:fe:71:12:
                    96:49:37:cd:2e:32:68:e6:79:79:a2:b9:1f:39:59:
                    a0:58:60:e4:bd:84:4c:31:f4:c3:88:ab:7f:ba:df:
                    c5:c5:68:92:29:72:cf:c7:dd:b5:4f:8a:f5:c5:b0:
                    b2:b2:de:81:79:c2:32:e5:39:74:0e:9b:e1:3a:5e:
                    af:75:f8:f7:ed:a9:87:57:60:21:dc:1b:ea:dc:ec:
                    c1:25:3e:e8:4d:13:1d:31:86:d0:2f:33:af:c3:27:
                    52:82:b1:6e:f8:61:85:43:4f:45:01:88:de:a7:6f:
                    64:1a:02:5a:1d:7d:4f:5a:76:35:ec:68:1f:7c:7e:
                    c9:4f:c9:43:e9:18:34:28:e7:f0:dc:2a:84:ce:20:
                    f0:ab:d0:f1:ee:9e:8a:3d:86:9d:0d:0d:ec:6f:da:
                    4a:2a:b6:61:67:ac:2f:72:6c:30:dc:08:82:05:86:
                    84:38:af:41:2e:72:a4:9e:8d:d4:86:5a:aa:7c:c1:
                    64:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:13:39:B8:29:40:EE:3F:F0:76:EC:D1:24:7D:F3:92:4A:17:9A:6D
            X509v3 Authority Key Identifier:
                keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:8c:77:67:c8:23:1c:cc:be:e2:ce:6b:47:2c:23:0d:d8:
         f3:f7:5e:80:3e:dc:e0:c6:f3:8b:6e:e9:ae:bc:fa:83:99:ba:
         f0:7a:d8:74:ea:50:2a:cd:da:94:5b:e2:b4:65:59:b9:41:ea:
         fb:e9:fd:36:eb:26:d4:4f:b6:f1:15:a2:26:75:f6:d7:9a:30:
         6b:6a:29:d7:d7:5c:18:e6:14:63:b6:05:1d:f2:6a:2b:3a:ca:
         79:e3:3b:d9:c2:34:4e:c4:a7:96:18:d9:9d:80:41:65:86:56:
         e3:c2:63:db:8f:76:1b:7f:fb:f3:0c:09:23:d7:69:03:5c:b9:
         d0:23:b1:d5:48:e9:63:33:d8:9e:f7:5b:f4:a5:74:81:d7:7a:
         d5:7c:cf:41:d7:92:a3:22:f4:19:6b:5a:aa:87:e7:be:d4:3b:
         0e:86:f4:88:00:23:d7:9a:57:cd:a4:c1:e3:38:e5:7a:f2:93:
         83:3e:9a:07:4b:f2:eb:6a:d5:ba:a9:df:b9:5f:d9:79:8a:a5:
         cd:7f:cb:28:92:06:d0:2e:fa:25:30:d0:a1:34:44:9f:1e:f3:
         63:ad:db:6b:01:16:88:6f:04:19:98:f8:c8:68:e3:a1:d0:d8:
         99:eb:f3:a9:6a:72:4a:03:76:9d:fa:f3:4c:52:a6:cc:6b:ad:
         fc:9c:3f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:59:18 2026 by rpki-client