This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
File:                     Ps1TxmQkw_Npyojuevdq2yXhhFE.mft (raw, json)
Hash identifier:          DEDCMVfSgVgxPG2/lKZ4GBMuJoKeALfQrJ45Goxw0V0=
Subject key identifier:   77:11:29:CE:EE:65:79:98:38:FF:20:DC:2C:AA:75:12:6D:6D:95:EF
Authority key identifier: 3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51
Certificate issuer:       /CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
Certificate serial:       019BF5073ABE37604EC930F3114FEEED82F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
Manifest number:          11B0
Signing time:             Sun 25 Jan 2026 12:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:50 +0000
Files and hashes:         1: LDms8nxe60K6COjjp_csNfhmghs.roa (hash: Q5tvWtDVNBkz/BRp4dl8220S6HSORZZf3f/jyOpji8U=)
                          2: Ps1TxmQkw_Npyojuevdq2yXhhFE.crl (hash: lpaIt0Hg/j9wOaLIC9iyYG9U2nnMS65z2cvaYFhRfgA=)
                          3: T6VYQnhnQYETwVj8BZYLRwwLS3U.roa (hash: C4QUjsV9O/nqAXRjoFy9pa8X3S9h9F1PXPJew5ITvec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:3a:be:37:60:4e:c9:30:f3:11:4f:ee:ed:82:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ecd53c66424c3f369ca88ee7af76adb25e18451
        Validity
            Not Before: Jan 25 12:00:50 2026 GMT
            Not After : Jan 26 12:00:50 2026 GMT
        Subject: CN=771129ceee65799838ff20dc2caa75126d6d95ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cf:a8:58:e0:e2:8f:8a:d4:2a:fa:b2:cc:ae:
                    32:ec:28:08:58:f2:3d:79:c8:88:8d:2e:37:e7:b1:
                    75:cf:f6:9c:5e:8e:de:86:96:3a:44:aa:19:31:c3:
                    48:a9:0a:b6:4a:1f:4d:b5:b8:a0:b8:d4:63:51:4d:
                    78:cf:9a:10:1f:7b:4d:d1:3c:a7:4c:be:de:c5:6f:
                    52:54:47:07:2c:e2:3a:88:63:40:c0:d5:e3:89:8f:
                    4b:10:6d:25:68:41:7b:62:2e:7c:f1:c0:93:1e:c0:
                    7d:bc:06:a7:73:80:f1:e0:a2:28:ae:85:84:ad:78:
                    2b:a5:5b:a6:18:5e:c1:6f:96:44:be:b2:fb:27:8b:
                    73:60:a0:eb:ea:da:7c:23:0e:27:4f:a2:06:c2:a1:
                    bd:61:b1:f4:2a:7a:a1:ab:14:32:10:01:12:49:05:
                    8e:23:5b:ab:7c:d5:c9:56:28:08:59:84:b7:eb:28:
                    9c:4e:7c:52:f7:db:26:1f:22:e6:1f:e3:a8:a8:0a:
                    6a:21:fe:0b:41:3d:d6:f6:88:a5:46:c2:09:16:10:
                    3d:02:7a:bd:03:15:c2:48:f6:db:ae:75:e0:d7:ff:
                    e4:7e:b2:b9:60:d8:69:1c:13:4d:11:91:36:ad:75:
                    32:20:5b:1e:af:ff:6a:29:6e:5e:02:60:88:e2:d2:
                    f5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:11:29:CE:EE:65:79:98:38:FF:20:DC:2C:AA:75:12:6D:6D:95:EF
            X509v3 Authority Key Identifier:
                keyid:3E:CD:53:C6:64:24:C3:F3:69:CA:88:EE:7A:F7:6A:DB:25:E1:84:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ps1TxmQkw_Npyojuevdq2yXhhFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e65ada-4d4a-404d-8700-c2256804e922/1/Ps1TxmQkw_Npyojuevdq2yXhhFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:87:cd:f9:7c:c1:55:04:6a:b2:f7:3c:d3:d4:77:b2:51:77:
         80:6d:45:33:a8:d6:3d:50:4e:e3:ee:bc:b2:71:d4:22:fe:25:
         cb:00:ab:7e:a2:27:39:7f:7b:4a:65:63:c4:93:73:fa:58:d3:
         5e:46:54:87:15:43:0f:15:0d:75:2d:f0:f2:6f:3e:6b:a8:47:
         e9:c6:1f:76:94:b9:db:78:39:8a:13:a7:c5:21:01:28:ee:61:
         61:45:fe:7d:ce:21:f1:d1:db:f4:5f:56:ab:a4:b6:12:88:a2:
         6b:31:c9:29:cb:b7:1c:c9:f2:bb:f9:2c:5f:24:49:7c:f4:8f:
         c0:3f:1f:29:36:b9:36:0a:fc:63:3f:0a:c4:ff:ec:84:66:ad:
         4c:f9:af:e6:9d:e9:48:10:0f:c1:66:a7:f2:4c:ca:5d:5b:5d:
         f1:99:cf:af:0d:b6:3d:20:6d:2d:b6:94:90:d8:59:9a:b7:c5:
         d7:5c:ea:74:12:fb:ee:49:12:96:71:d9:87:c4:9c:5a:aa:85:
         50:3a:53:6b:1c:1c:cc:61:aa:be:64:ce:e0:7d:2d:62:bd:8e:
         53:00:96:67:de:aa:96:4b:2b:86:ba:ae:90:b8:0e:1a:4d:8e:
         71:03:b7:3c:cb:22:a7:8b:c9:90:b9:0f:73:f8:61:21:34:06:
         1e:0a:62:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1Bzq+N2BOyTDzEU/u7YL3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlY2Q1M2M2NjQyNGMzZjM2OWNhODhlZTdhZjc2YWRiMjVl
MTg0NTEwHhcNMjYwMTI1MTIwMDUwWhcNMjYwMTI2MTIwMDUwWjAzMTEwLwYDVQQD
Eyg3NzExMjljZWVlNjU3OTk4MzhmZjIwZGMyY2FhNzUxMjZkNmQ5NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc+oWODij4rUKvqyzK4y7CgIWPI9
eciIjS4357F1z/acXo7ehpY6RKoZMcNIqQq2Sh9NtbiguNRjUU14z5oQH3tN0Tyn
TL7exW9SVEcHLOI6iGNAwNXjiY9LEG0laEF7Yi588cCTHsB9vAanc4Dx4KIoroWE
rXgrpVumGF7Bb5ZEvrL7J4tzYKDr6tp8Iw4nT6IGwqG9YbH0KnqhqxQyEAESSQWO
I1urfNXJVigIWYS36yicTnxS99smHyLmH+OoqApqIf4LQT3W9oilRsIJFhA9Anq9
AxXCSPbbrnXg1//kfrK5YNhpHBNNEZE2rXUyIFser/9qKW5eAmCI4tL11wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcRKc7uZXmYOP8g3CyqdRJtbZXvMB8GA1UdIwQY
MBaAFD7NU8ZkJMPzacqI7nr3atsl4YRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAt
YzIyNTY4MDRlOTIyLzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNjVhZGEtNGQ0YS00MDRkLTg3MDAtYzIyNTY4MDRlOTIy
LzEvUHMxVHhtUWt3X05weW9qdWV2ZHEyeVhoaEZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUYfN+XzB
VQRqsvc809R3slF3gG1FM6jWPVBO4+68snHUIv4lywCrfqInOX97SmVjxJNz+ljT
XkZUhxVDDxUNdS3w8m8+a6hH6cYfdpS523g5ihOnxSEBKO5hYUX+fc4h8dHb9F9W
q6S2EoiiazHJKcu3HMnyu/ksXyRJfPSPwD8fKTa5Ngr8Yz8KxP/shGatTPmv5p3p
SBAPwWan8kzKXVtd8ZnPrw22PSBtLbaUkNhZmrfF11zqdBL77kkSlnHZh8ScWqqF
UDpTaxwczGGqvmTO4H0tYr2OUwCWZ96qlksrhrqukLgOGk2OcQO3PMsip4vJkLkP
c/hhITQGHgpimg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:57:51 2026 by rpki-client