This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File:                     n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier:          C/SOaIRtv4IpGc+40PjRNQEfhoXinSoGlC9XZtV9NPk=
Subject key identifier:   BC:70:C8:89:79:96:54:81:28:12:95:4B:7F:FE:D3:EE:B8:3F:5E:65
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer:       /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial:       019BF946929213E205FCFF83BA1F36D83296
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 07:48:30 +0000
Manifest this update:     Mon 26 Jan 2026 07:48:30 +0000
Manifest next update:     Tue 27 Jan 2026 07:48:30 +0000
Files and hashes:         1: 1-DvdtgWb776R-vxeFJmte5oKNog.roa (hash: U79trVylTaw41dHsIv/e6/kjFAklh1ItFsx5acuYE6Y=)
                          2: LMLTnNGG_mpCcb8xX_bRIdktAnI.roa (hash: mg+RjP9njwHkTHKFXLCklOqta6CcqWTUZ1IVf8HvCmM=)
                          3: bsAUJqT82uygfIT_yoGEMk4m0EY.roa (hash: MzJzFvCooXSnxfioMsBjoFnTRbQIMTZe4aChVxje5Qo=)
                          4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: ZCstmpb9BL72/LUA8fQrLcRxJg8Y08dRrzoAzeQ09jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:48:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:46:92:92:13:e2:05:fc:ff:83:ba:1f:36:d8:32:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
        Validity
            Not Before: Jan 26 07:48:30 2026 GMT
            Not After : Jan 27 07:48:30 2026 GMT
        Subject: CN=bc70c889799654812812954b7ffed3eeb83f5e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:84:8f:2a:b2:a2:90:3a:f0:f8:80:1d:43:88:
                    ea:e7:8b:1a:9f:bf:cf:24:ad:35:42:fd:72:f6:4d:
                    00:d5:81:fc:37:89:b8:89:bf:05:0a:2c:bc:26:bb:
                    c3:2d:34:dd:1a:69:7d:5a:78:20:a8:b2:45:7f:b3:
                    f0:52:6c:34:ce:53:bb:d1:00:b1:73:17:9c:38:a4:
                    11:b6:40:f3:68:63:9f:f3:1a:08:9f:f0:95:2e:cb:
                    34:00:75:07:f7:df:81:db:c0:0a:70:6f:47:00:ac:
                    8f:fc:f7:a6:f5:7c:9c:db:a1:83:6f:32:ae:e7:02:
                    92:8b:e6:b0:60:73:61:c8:38:8c:66:44:52:66:c1:
                    e2:76:14:a2:61:4b:d5:ba:fd:a4:3e:96:79:29:ab:
                    3e:85:6b:2f:32:a0:6f:d4:bf:9d:28:54:f1:f0:e9:
                    32:6f:f1:ad:6b:c5:ea:53:b4:db:bb:8a:19:be:8b:
                    f6:38:13:cd:05:87:10:31:10:4d:d6:28:19:e2:da:
                    41:ca:8c:50:a0:77:e9:76:ee:d5:51:0e:50:5b:c9:
                    7b:e5:b0:e5:39:2b:8f:b1:eb:3d:e9:a1:71:aa:d9:
                    66:3b:25:5d:c6:29:80:12:b1:ec:a8:0f:44:78:23:
                    cf:d0:ce:75:aa:e3:a9:d5:39:45:a7:a9:d1:c5:67:
                    34:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:70:C8:89:79:96:54:81:28:12:95:4B:7F:FE:D3:EE:B8:3F:5E:65
            X509v3 Authority Key Identifier:
                keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:49:fc:eb:94:de:46:3a:8a:86:f3:75:fe:d4:a7:21:27:46:
         4b:86:05:4c:08:1a:0d:5c:54:bc:dd:1d:65:bf:f7:f6:d4:71:
         44:f8:87:ef:17:2d:cb:f3:62:1c:3d:b4:c4:ea:74:74:a0:02:
         98:8c:cc:a0:d1:51:dc:8c:dd:5d:a1:9c:86:6b:f2:2c:9d:0d:
         e3:02:00:0d:40:cc:41:34:30:c8:a7:34:61:04:c0:87:5e:50:
         62:3b:3c:9b:2a:19:09:3b:c5:1f:cb:95:fc:5d:bd:cb:b4:88:
         f3:aa:1d:46:7a:1a:53:db:15:00:85:66:27:61:9a:79:94:81:
         24:05:ba:ae:10:9b:78:7f:2b:21:8f:bc:1e:26:ec:07:a4:58:
         fb:12:60:8e:82:58:66:71:72:af:87:a1:df:a5:ad:6a:3f:67:
         92:b1:4d:5d:e0:2a:52:fe:cf:dd:88:22:fe:45:e9:ba:33:70:
         18:69:09:9c:70:e1:e3:a2:68:a7:d8:41:5e:70:58:68:c1:cd:
         51:a0:8d:7d:26:86:4e:e7:ae:1c:93:3c:94:77:68:98:21:c6:
         92:cc:64:d1:2c:86:59:7a:17:72:eb:c7:d7:41:b7:49:5d:2c:
         0d:14:e4:1e:a2:46:ca:c4:77:c3:60:4c:a0:6f:a1:95:03:27:
         0a:bd:59:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5RpKSE+IF/P+Duh822DKWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNTY0NmY3ZDhhZmMwYTkzM2ZiMzMzMzNmMzcwMTNkODNh
MDRkMDAwHhcNMjYwMTI2MDc0ODMwWhcNMjYwMTI3MDc0ODMwWjAzMTEwLwYDVQQD
EyhiYzcwYzg4OTc5OTY1NDgxMjgxMjk1NGI3ZmZlZDNlZWI4M2Y1ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooSPKrKikDrw+IAdQ4jq54san7/P
JK01Qv1y9k0A1YH8N4m4ib8FCiy8JrvDLTTdGml9WnggqLJFf7PwUmw0zlO70QCx
cxecOKQRtkDzaGOf8xoIn/CVLss0AHUH99+B28AKcG9HAKyP/Pem9Xyc26GDbzKu
5wKSi+awYHNhyDiMZkRSZsHidhSiYUvVuv2kPpZ5Kas+hWsvMqBv1L+dKFTx8Oky
b/Gta8XqU7Tbu4oZvov2OBPNBYcQMRBN1igZ4tpByoxQoHfpdu7VUQ5QW8l75bDl
OSuPses96aFxqtlmOyVdximAErHsqA9EeCPP0M51quOp1TlFp6nRxWc0pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxwyIl5llSBKBKVS3/+0+64P15lMB8GA1UdIwQY
MBaAFJ9WRvfYr8CpM/szMz83AT2DoE0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUt
N2QzMmNhMDY1YjY2LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUtN2QzMmNhMDY1YjY2
LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZkn865Te
RjqKhvN1/tSnISdGS4YFTAgaDVxUvN0dZb/39tRxRPiH7xcty/NiHD20xOp0dKAC
mIzMoNFR3IzdXaGchmvyLJ0N4wIADUDMQTQwyKc0YQTAh15QYjs8myoZCTvFH8uV
/F29y7SI86odRnoaU9sVAIVmJ2GaeZSBJAW6rhCbeH8rIY+8HibsB6RY+xJgjoJY
ZnFyr4eh36Wtaj9nkrFNXeAqUv7P3Ygi/kXpujNwGGkJnHDh46Jop9hBXnBYaMHN
UaCNfSaGTueuHJM8lHdomCHGksxk0SyGWXoXcuvH10G3SV0sDRTkHqJGysR3w2BM
oG+hlQMnCr1ZSQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 16:02:18 2026 by rpki-client