This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
File:                     t55dT4NeqI12tgJW4AN1R82Wgnk.mft (raw, json)
Hash identifier:          VLukq7t5wqcdHg4h2BGVl9Q7s6fuPoimMJkzy2gugn4=
Subject key identifier:   9B:EA:C4:72:11:11:06:A5:10:B3:89:68:FC:9A:DF:BF:CD:87:05:B3
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Certificate issuer:       /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial:       019BF350980D14DEEE60C1F9CE3946D07E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
Manifest number:          0731
Signing time:             Sun 25 Jan 2026 04:01:43 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:43 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:43 +0000
Files and hashes:         1: 2zOKVHZfMm9AxAnIgk6BSVssqPo.roa (hash: UxUPcLpqbBTjs1BO/RAIL95/BplOFFKqBnWYZsn/g5c=)
                          2: t55dT4NeqI12tgJW4AN1R82Wgnk.crl (hash: YO6db0hrNx0bh+RUnSlKIvGg4tJR0YzRucQbLuN6nXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:98:0d:14:de:ee:60:c1:f9:ce:39:46:d0:7e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
        Validity
            Not Before: Jan 25 04:01:43 2026 GMT
            Not After : Jan 26 04:01:43 2026 GMT
        Subject: CN=9beac472111106a510b38968fc9adfbfcd8705b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:f3:84:b5:7e:dd:58:61:6b:23:d6:b7:a5:
                    6a:72:82:97:e8:24:0a:3f:45:b6:36:9d:03:b0:82:
                    6a:32:eb:8e:61:0b:80:f0:02:21:11:86:1f:6e:fd:
                    7e:0f:c4:91:f0:98:e0:9a:f2:de:ca:65:c0:14:8c:
                    24:ca:85:3c:ae:41:62:1d:da:81:8d:f6:4a:7b:0e:
                    84:19:67:09:89:16:3a:0d:2a:42:91:ee:de:b1:9e:
                    3a:46:f7:48:8d:cf:10:de:f2:70:5b:a8:0f:2b:13:
                    85:cd:99:8f:80:7f:21:56:75:cc:ba:5e:e1:6b:e3:
                    fa:35:99:d6:97:93:20:fc:da:e2:4c:18:c9:b2:ea:
                    dd:38:60:a7:f2:ae:36:e7:2c:d3:cd:e1:91:05:60:
                    ab:9d:51:56:d3:bb:d8:52:a2:31:8a:b4:0b:39:99:
                    b9:8b:2f:52:58:bb:8e:1f:35:96:06:78:52:76:f1:
                    32:ec:06:56:ac:f2:8b:9c:46:7a:10:01:0b:8b:e6:
                    fe:3d:96:c8:62:5f:a0:d9:89:c9:ea:40:c2:d3:71:
                    6f:99:70:6c:30:b7:10:fd:36:be:b1:6a:7b:61:29:
                    4d:8d:da:2a:68:ce:12:c0:63:d1:df:3a:ee:80:c4:
                    d5:1f:38:ca:85:ae:7b:5b:e3:eb:2a:79:35:14:82:
                    64:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EA:C4:72:11:11:06:A5:10:B3:89:68:FC:9A:DF:BF:CD:87:05:B3
            X509v3 Authority Key Identifier:
                keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:e2:0a:68:b0:cd:3f:4a:ad:c5:0e:fb:a7:15:cc:1f:18:cc:
         8d:14:50:4f:96:8b:74:cf:5f:d4:b1:10:e5:bd:e7:00:28:09:
         92:76:fd:0d:6c:c6:c9:99:84:4a:ae:9d:8c:d9:92:f0:ea:94:
         3d:8a:8b:02:46:0c:1d:6a:de:9c:4b:6c:d9:e4:2d:4a:f7:8b:
         35:2a:1c:cd:7e:48:97:06:8c:63:82:90:ff:a9:02:62:a5:7a:
         e9:db:48:a4:28:81:3b:b6:82:de:00:d0:64:88:a2:13:5f:28:
         30:fd:e3:f5:d8:e9:58:9c:8c:77:31:01:4c:69:01:4b:a2:92:
         84:c9:d2:c7:3e:5a:4d:da:58:46:fe:88:74:ec:d7:66:e2:d2:
         fd:47:d1:3c:6e:8b:7f:cf:54:b6:be:9d:e7:ab:ee:68:93:9e:
         f8:55:62:7b:ee:69:e3:11:5f:5a:ef:c0:96:63:c1:77:df:22:
         ba:a8:0c:4a:33:8f:2c:16:28:34:e9:6e:0b:9b:62:05:e9:c6:
         d2:23:5b:91:fb:27:7b:71:1e:07:c4:d4:12:1d:f8:1b:d4:37:
         90:23:d8:30:b8:b2:d2:35:89:27:17:25:c6:a5:83:a4:39:b9:
         16:92:6a:e5:ea:80:d2:a1:1e:a0:67:58:52:19:68:0d:c8:f3:
         8b:7f:1e:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUJgNFN7uYMH5zjlG0H5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3OWU1ZDRmODM1ZWE4OGQ3NmI2MDI1NmUwMDM3NTQ3Y2Q5
NjgyNzkwHhcNMjYwMTI1MDQwMTQzWhcNMjYwMTI2MDQwMTQzWjAzMTEwLwYDVQQD
Eyg5YmVhYzQ3MjExMTEwNmE1MTBiMzg5NjhmYzlhZGZiZmNkODcwNWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+nzhLV+3VhhayPWt6VqcoKX6CQK
P0W2Np0DsIJqMuuOYQuA8AIhEYYfbv1+D8SR8JjgmvLeymXAFIwkyoU8rkFiHdqB
jfZKew6EGWcJiRY6DSpCke7esZ46RvdIjc8Q3vJwW6gPKxOFzZmPgH8hVnXMul7h
a+P6NZnWl5Mg/NriTBjJsurdOGCn8q425yzTzeGRBWCrnVFW07vYUqIxirQLOZm5
iy9SWLuOHzWWBnhSdvEy7AZWrPKLnEZ6EAELi+b+PZbIYl+g2YnJ6kDC03FvmXBs
MLcQ/Ta+sWp7YSlNjdoqaM4SwGPR3zrugMTVHzjKha57W+PrKnk1FIJkVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvqxHIREQalELOJaPya37/NhwWzMB8GA1UdIwQY
MBaAFLeeXU+DXqiNdrYCVuADdUfNloJ5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMt
OWI3ZDQ5YWRlZGIzLzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lMzY5NGItNzdmOS00MmIwLWI1YTMtOWI3ZDQ5YWRlZGIz
LzEvdDU1ZFQ0TmVxSTEydGdKVzRBTjFSODJXZ25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOIKaLDN
P0qtxQ77pxXMHxjMjRRQT5aLdM9f1LEQ5b3nACgJknb9DWzGyZmESq6djNmS8OqU
PYqLAkYMHWrenEts2eQtSveLNSoczX5IlwaMY4KQ/6kCYqV66dtIpCiBO7aC3gDQ
ZIiiE18oMP3j9djpWJyMdzEBTGkBS6KShMnSxz5aTdpYRv6IdOzXZuLS/UfRPG6L
f89Utr6d56vuaJOe+FVie+5p4xFfWu/AlmPBd98iuqgMSjOPLBYoNOluC5tiBenG
0iNbkfsne3EeB8TUEh34G9Q3kCPYMLiy0jWJJxclxqWDpDm5FpJq5eqA0qEeoGdY
UhloDcjzi38enQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:07 2026 by rpki-client