This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File:                     mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier:          Z8e+ZDQDYo7IXNqUJYc2l3a4Sn1NEf+PpPrVIO1GxbQ=
Subject key identifier:   CA:EB:6B:74:16:E3:7D:3C:92:F5:08:B6:6F:EC:38:8D:AE:34:72:4E
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       019BACEEAF26C6CED33B84849A2D43E28BC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number:          17F1
Signing time:             Sun 11 Jan 2026 12:01:22 +0000
Manifest this update:     Sun 11 Jan 2026 12:01:22 +0000
Manifest next update:     Mon 12 Jan 2026 12:01:22 +0000
Files and hashes:         1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=)
                          2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=)
                          3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=)
                          4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=)
                          5: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=)
                          6: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=)
                          7: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=)
                          8: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=)
                          9: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=)
                          10: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=)
                          11: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=)
                          12: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=)
                          13: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=)
                          14: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=)
                          15: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=)
                          16: RY84_ZI7xoALeQIscSY6f9kpXlA.roa (hash: z6waEn1aCDURcxsyuA7fD4JPp6J8E7kzdN0orgB/LDk=)
                          17: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=)
                          18: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=)
                          19: Wu5XKk4A36HO6OHJ1FPfD_SFW8Q.roa (hash: BzMn4OoTVBTxxNmlLvxwZaB3pPDI9UpM0YGpy6OvehA=)
                          20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=)
                          21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=)
                          22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=)
                          23: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=)
                          24: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=)
                          25: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=)
                          26: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=)
                          27: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=)
                          28: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=)
                          29: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: 7W9ne9Hkr55DHsVGGmO4x2XywQjBIZ4wzdoJ+jRltdE=)
                          30: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=)
                          31: nDe-qNhnM7uiI6FvKA4tpUFbkwY.roa (hash: sTzHHKSFfupRttU47uock1mVJaqqApZAZwwhHCKIkSw=)
                          32: nWWjV-FqWRviIQq1sbPjpszS4J8.roa (hash: s/947r8f3drp/IQDPbvU6DHKccsz6mcfNtNyGVLNQ+I=)
                          33: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=)
                          34: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=)
                          35: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ac:ee:af:26:c6:ce:d3:3b:84:84:9a:2d:43:e2:8b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Jan 11 12:01:22 2026 GMT
            Not After : Jan 12 12:01:22 2026 GMT
        Subject: CN=caeb6b7416e37d3c92f508b66fec388dae34724e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:01:79:cb:f5:ef:bf:d7:c8:15:08:fb:fa:37:
                    9f:44:3c:d0:5c:a0:b7:6e:0c:e3:61:fa:52:a2:d0:
                    23:ea:1b:6a:98:37:28:a5:07:85:7b:b4:fd:b4:83:
                    08:24:68:8a:74:46:52:4e:18:37:66:e9:e5:94:38:
                    a0:57:ff:cc:22:ed:9a:6f:13:72:a0:2e:c1:c6:c3:
                    38:62:52:9f:54:f4:ba:32:08:bf:a0:e3:79:0d:5d:
                    3f:13:77:ab:3d:1d:6d:76:d8:7f:38:f4:c3:27:9c:
                    73:5a:cb:e4:48:f5:07:a4:01:69:10:1e:fa:38:02:
                    09:00:93:5d:96:ea:e8:88:83:7f:57:4b:10:bd:18:
                    e0:f2:af:26:fc:ea:8b:94:26:d5:b1:07:4b:c1:46:
                    55:d3:4a:18:81:b9:7c:75:60:e0:cb:d4:eb:cc:03:
                    2f:2b:a7:ee:a6:66:78:56:81:fa:37:f6:04:9e:70:
                    19:99:31:fb:dd:d9:dc:c3:37:d0:a7:ff:24:3e:2a:
                    26:b9:0b:99:62:2f:d0:18:59:33:65:fa:db:05:e5:
                    24:df:c3:f2:73:cd:40:a0:79:ff:de:6b:12:d7:7e:
                    e5:f8:a7:38:eb:7e:c5:de:b8:2f:6c:2e:54:42:65:
                    5c:66:cc:e1:59:76:7a:3a:ad:a2:59:f4:a7:79:ad:
                    73:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EB:6B:74:16:E3:7D:3C:92:F5:08:B6:6F:EC:38:8D:AE:34:72:4E
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:4d:d0:a4:bd:b9:2b:ee:3e:78:cc:df:b9:82:13:03:c2:38:
         dd:09:97:2b:7c:8f:3b:ba:2a:d8:7d:b0:17:ab:a2:7d:30:e0:
         8d:8e:fe:22:4b:78:b5:83:51:79:d1:21:a1:21:06:ac:2d:23:
         b8:ef:52:8f:2d:79:8d:d1:65:1a:e5:bb:bb:ad:df:84:c4:c7:
         29:e4:11:62:2a:21:ec:c6:b2:ce:0d:60:f0:34:a4:75:c8:b1:
         c7:b9:7f:44:3a:ae:59:22:9a:3f:2e:63:8c:e8:13:b4:bc:31:
         f0:d3:61:9d:bf:7f:5a:d9:e1:d9:70:04:47:d7:98:c7:a8:8c:
         cb:3d:3a:ae:dc:22:63:a6:1a:63:ee:f3:92:86:c7:f6:d0:f4:
         10:7e:f0:e3:bf:e5:1b:4d:e1:ca:4a:01:07:5f:6e:5a:5b:72:
         4f:9a:8b:fd:d2:6d:9f:21:3d:cb:77:f2:47:b4:b0:a6:bb:05:
         fb:c5:09:78:8a:25:83:3f:da:6d:79:46:7e:a4:56:db:df:39:
         81:74:ca:b9:08:20:45:7e:a9:89:15:d9:5d:4f:1b:12:ae:66:
         34:42:38:5a:65:8c:75:b7:42:89:cd:09:01:ec:d3:73:f7:da:
         91:ec:20:ef:b2:10:17:2e:7f:e2:16:04:e5:c6:b3:df:c6:61:
         1a:5a:7c:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZus7q8mxs7TO4SEmi1D4ovFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjYwMTExMTIwMTIyWhcNMjYwMTEyMTIwMTIyWjAzMTEwLwYDVQQD
EyhjYWViNmI3NDE2ZTM3ZDNjOTJmNTA4YjY2ZmVjMzg4ZGFlMzQ3MjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwF5y/Xvv9fIFQj7+jefRDzQXKC3
bgzjYfpSotAj6htqmDcopQeFe7T9tIMIJGiKdEZSThg3ZunllDigV//MIu2abxNy
oC7BxsM4YlKfVPS6Mgi/oON5DV0/E3erPR1tdth/OPTDJ5xzWsvkSPUHpAFpEB76
OAIJAJNdluroiIN/V0sQvRjg8q8m/OqLlCbVsQdLwUZV00oYgbl8dWDgy9TrzAMv
K6fupmZ4VoH6N/YEnnAZmTH73dncwzfQp/8kPiomuQuZYi/QGFkzZfrbBeUk38Py
c81AoHn/3msS137l+Kc4637F3rgvbC5UQmVcZszhWXZ6Oq2iWfSnea1zSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrra3QW4308kvUItm/sOI2uNHJOMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB03QpL25
K+4+eMzfuYITA8I43QmXK3yPO7oq2H2wF6uifTDgjY7+Ikt4tYNRedEhoSEGrC0j
uO9Sjy15jdFlGuW7u63fhMTHKeQRYioh7Mayzg1g8DSkdcixx7l/RDquWSKaPy5j
jOgTtLwx8NNhnb9/Wtnh2XAER9eYx6iMyz06rtwiY6YaY+7zkobH9tD0EH7w47/l
G03hykoBB19uWltyT5qL/dJtnyE9y3fyR7SwprsF+8UJeIolgz/abXlGfqRW2985
gXTKuQggRX6piRXZXU8bEq5mNEI4WmWMdbdCic0JAezTc/fakewg77IQFy5/4hYE
5caz38ZhGlp8zw==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:47:01 2026 by rpki-client