This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          BeBJQ+M9e6ONNGqYq4/rkU2brpjdTWUpE5ldb0hJFNs=
Subject key identifier:   C8:D2:F8:91:F5:14:95:E6:17:DD:64:2D:F7:93:1B:D0:D9:90:ED:B5
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       019BF2747E2C285BD0039F9EF3D7AD79B819
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1843
Signing time:             Sun 25 Jan 2026 00:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:19 +0000
Files and hashes:         1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=)
                          2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=)
                          3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=)
                          4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=)
                          5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=)
                          6: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=)
                          7: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=)
                          8: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=)
                          9: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=)
                          10: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=)
                          11: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=)
                          12: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=)
                          13: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=)
                          14: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=)
                          15: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=)
                          16: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=)
                          17: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=)
                          18: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=)
                          19: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=)
                          20: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=)
                          21: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: Ip6CXyzjPJ4OsDN2WiBVJc0VUFSn3HNV5IX5Zjbhnt8=)
                          22: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=)
                          23: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=)
                          24: hf-LXtiPSASNfLU-opAc0imYKDc.roa (hash: PJYOakcn0oxNr7y/9yoGBcKD4KrbPhwTqw8RW0ojmKE=)
                          25: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=)
                          26: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=)
                          27: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=)
                          28: pe68YeSBz3e5uy7r7bbOmGgL7EE.roa (hash: w8rsCAdGW4/9JqYBKY1otlqFhCY3uTORdfSVn2mblPE=)
                          29: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:7e:2c:28:5b:d0:03:9f:9e:f3:d7:ad:79:b8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jan 25 00:01:19 2026 GMT
            Not After : Jan 26 00:01:19 2026 GMT
        Subject: CN=c8d2f891f51495e617dd642df7931bd0d990edb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:9d:2b:cb:0a:a3:34:7c:1f:32:4b:9b:90:
                    59:0c:43:ba:b1:2b:e5:ce:94:63:bb:85:29:97:77:
                    c3:30:82:26:f1:d8:cb:79:4f:bc:fc:1e:a6:a8:43:
                    3d:a4:18:e9:fd:ee:62:e8:07:15:53:6c:f0:16:4c:
                    b1:04:c8:f7:5a:69:43:d7:2f:8a:9e:9a:2f:d7:29:
                    8e:2c:c3:bd:22:4a:f3:0d:10:a8:b9:fe:f6:20:76:
                    ac:00:79:02:c9:f8:92:05:e9:54:14:44:72:24:dc:
                    b3:b2:a7:f0:0b:02:7c:3b:7f:50:13:f3:bf:d1:ae:
                    fe:1d:5d:14:86:73:57:6e:8a:bb:23:0d:a5:f5:69:
                    04:67:35:aa:47:17:01:0f:8f:bf:e4:98:c6:0b:ee:
                    29:b3:86:7d:49:48:2b:7f:a8:17:14:5a:a3:21:36:
                    dc:b1:df:c7:5e:fe:f8:57:86:ce:3e:f5:68:79:6f:
                    eb:cf:98:1e:a0:8f:09:cd:01:fb:db:cf:a8:e3:39:
                    c9:57:50:84:5a:86:42:8e:89:af:da:90:1a:48:cf:
                    a8:3e:85:e0:bc:c9:66:85:61:ba:b8:40:63:73:6e:
                    fa:24:04:af:9f:a7:38:3f:31:9d:d9:3e:52:f3:fe:
                    e3:96:a5:4d:06:df:36:5d:65:7e:97:98:83:5a:eb:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D2:F8:91:F5:14:95:E6:17:DD:64:2D:F7:93:1B:D0:D9:90:ED:B5
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:95:2f:d8:59:22:98:13:9c:bf:ff:20:ca:de:85:b1:3e:
         e9:6d:bb:bf:92:ee:cb:be:ba:f2:ad:d9:ef:8f:79:af:82:ca:
         9c:07:c3:29:05:1a:6e:b9:86:1e:3e:24:f4:54:cd:1c:30:44:
         de:05:99:f6:90:fe:43:c2:03:3b:5a:5f:6c:eb:95:43:1c:10:
         b4:19:4c:9b:a9:99:17:a3:ad:ad:7e:cb:78:09:17:f9:a4:46:
         ac:25:1c:ce:a8:7c:aa:0a:1d:b0:80:3a:ad:91:2a:50:cf:81:
         21:e2:dc:71:ee:26:2b:ac:8a:e4:df:d8:50:6c:97:aa:05:88:
         74:1f:86:8c:b7:5c:6e:29:98:c9:4e:0a:74:2d:a8:84:f0:b5:
         0c:2c:b8:db:93:05:5c:a7:c5:cc:e7:7b:cc:ef:bc:48:1d:00:
         42:a4:83:70:c4:8e:19:9c:3a:4d:be:5f:2d:71:61:c6:90:a9:
         c4:b3:9e:87:80:00:ad:70:b9:ca:f5:7f:47:d8:17:0d:90:18:
         00:54:c1:9a:76:da:a0:bf:a2:2f:1e:10:84:f6:f5:f5:bf:92:
         2f:80:0b:4a:1b:93:21:07:88:f6:b0:ff:59:e1:0b:c1:29:11:
         af:8f:e2:4b:98:57:a1:a1:7f:73:3d:ac:87:c4:4c:aa:4e:1d:
         90:51:54:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:39:27 2026 by rpki-client