This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
File:                     LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft (raw, json)
Hash identifier:          94Gwz9uLGVQcZKzxnzzYm4Fe10MaI7CF+Ykjpf2MIqo=
Subject key identifier:   44:FE:00:23:AA:07:EE:80:4E:3C:4E:20:DC:45:14:47:FA:CB:CD:F2
Authority key identifier: 2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44
Certificate issuer:       /CN=2c83dfb24629c16779350b4a777b5b280fc59d44
Certificate serial:       019BF6F55AF84D055B2004411724983964B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 21:00:33 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:33 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:33 +0000
Files and hashes:         1: LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl (hash: Qjf2U0vzBNlnkHlnurAlwpjpyyunddvQfc+kv20dGX8=)
                          2: SizhTkIG2sATNsv1VQNzH4wHchc.roa (hash: 2PYBEpDEAGt3SnEGmQvvCFiLA489Fe6L2n4/O/hryFQ=)
                          3: cMMwTPV9hTcR-LW3CCNoNNI7ghU.roa (hash: D27oXJgFuXlMx0AdNp5xIFlLxsheQv6fczl4XU0D9Lc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:5a:f8:4d:05:5b:20:04:41:17:24:98:39:64:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c83dfb24629c16779350b4a777b5b280fc59d44
        Validity
            Not Before: Jan 25 21:00:33 2026 GMT
            Not After : Jan 26 21:00:33 2026 GMT
        Subject: CN=44fe0023aa07ee804e3c4e20dc451447facbcdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1a:ad:af:32:45:a1:37:d7:8a:c2:8a:1f:a3:
                    7f:3e:b9:6a:19:37:2e:ee:fb:e2:31:38:0d:06:a4:
                    50:0a:17:3c:ca:46:21:f8:df:63:7b:b9:9e:1e:96:
                    f0:0f:97:65:f0:80:d3:3b:1f:37:89:25:ba:f6:57:
                    63:d1:51:89:05:7d:b4:fc:59:36:87:38:db:2b:f0:
                    56:76:db:5f:89:7c:10:4e:cb:34:c5:34:77:93:61:
                    3b:c7:af:ca:93:79:c1:6a:f5:03:f5:05:fd:43:dc:
                    01:26:87:cc:94:d7:bd:02:77:26:11:37:0b:ab:bb:
                    93:35:40:cd:24:1c:8c:f3:5a:e3:bc:77:53:63:8f:
                    e3:3b:55:13:59:63:41:01:d7:26:a0:61:e9:c8:07:
                    b8:36:f5:c5:66:c8:9b:95:8b:94:60:32:d7:fd:3c:
                    ed:c3:30:d3:df:bc:10:33:70:48:da:d3:91:55:08:
                    d0:a4:b6:b5:9c:9c:af:8e:ca:26:71:d4:71:3f:96:
                    47:c2:da:3d:9e:e9:63:d3:c9:9d:b8:67:de:81:5e:
                    10:d1:0f:7d:24:3c:a6:7e:cd:da:5e:32:c5:eb:97:
                    e3:4e:4e:1d:b6:47:44:e2:0a:4b:4d:3c:fc:4d:39:
                    de:4b:05:94:13:b7:df:65:79:65:d4:08:81:ae:7f:
                    45:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FE:00:23:AA:07:EE:80:4E:3C:4E:20:DC:45:14:47:FA:CB:CD:F2
            X509v3 Authority Key Identifier:
                keyid:2C:83:DF:B2:46:29:C1:67:79:35:0B:4A:77:7B:5B:28:0F:C5:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIPfskYpwWd5NQtKd3tbKA_FnUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/420c14-cb2c-4e3e-87b9-3fc39487807c/1/LIPfskYpwWd5NQtKd3tbKA_FnUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:46:79:e8:7e:78:ef:5e:8c:4b:57:26:f4:0f:90:28:04:74:
         c4:b7:58:d6:e7:93:4e:ca:ca:3f:77:01:55:30:80:86:47:1b:
         9a:31:31:f0:e5:15:97:8b:00:f1:4f:92:29:27:64:dc:fa:8d:
         33:ba:08:0d:2a:0b:f8:84:c1:33:da:d8:f7:45:da:42:16:d5:
         77:a0:6d:00:56:62:29:e9:95:50:f9:57:e6:10:7a:d4:e6:14:
         84:13:1a:b6:d3:af:a1:1a:ad:8c:fc:12:dd:a1:8d:c5:6d:f7:
         dc:d5:3c:28:32:76:bf:a7:79:69:a8:4f:d0:86:76:23:4c:f5:
         72:08:de:55:85:c1:c1:ff:ae:86:18:42:19:89:68:e1:6c:84:
         75:ba:d0:9e:33:bc:e2:a0:6e:f8:fd:67:1d:80:ba:13:25:a7:
         b5:02:57:0d:b8:13:74:ce:ae:9d:62:4c:55:b1:fa:74:7f:b8:
         c3:33:b9:88:81:4a:3f:cc:57:95:04:9b:c4:08:e7:ee:91:6a:
         1f:6e:b4:cb:70:7a:0c:8d:a8:19:ab:64:8d:4a:35:a5:c6:90:
         2b:d9:51:22:2e:c9:0c:ed:9e:2b:64:66:5b:78:e3:dc:da:44:
         cd:2d:a6:ac:52:9e:15:42:f9:f7:84:79:cf:60:4c:6f:99:4e:
         5b:d4:7b:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29Vr4TQVbIARBFySYOWSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODNkZmIyNDYyOWMxNjc3OTM1MGI0YTc3N2I1YjI4MGZj
NTlkNDQwHhcNMjYwMTI1MjEwMDMzWhcNMjYwMTI2MjEwMDMzWjAzMTEwLwYDVQQD
Eyg0NGZlMDAyM2FhMDdlZTgwNGUzYzRlMjBkYzQ1MTQ0N2ZhY2JjZGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhqtrzJFoTfXisKKH6N/PrlqGTcu
7vviMTgNBqRQChc8ykYh+N9je7meHpbwD5dl8IDTOx83iSW69ldj0VGJBX20/Fk2
hzjbK/BWdttfiXwQTss0xTR3k2E7x6/Kk3nBavUD9QX9Q9wBJofMlNe9AncmETcL
q7uTNUDNJByM81rjvHdTY4/jO1UTWWNBAdcmoGHpyAe4NvXFZsiblYuUYDLX/Tzt
wzDT37wQM3BI2tORVQjQpLa1nJyvjsomcdRxP5ZHwto9nulj08mduGfegV4Q0Q99
JDymfs3aXjLF65fjTk4dtkdE4gpLTTz8TTneSwWUE7ffZXll1AiBrn9F1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET+ACOqB+6ATjxOINxFFEf6y83yMB8GA1UdIwQY
MBaAFCyD37JGKcFneTULSnd7WygPxZ1EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3Yjkt
M2ZjMzk0ODc4MDdjLzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80MjBjMTQtY2IyYy00ZTNlLTg3YjktM2ZjMzk0ODc4MDdj
LzEvTElQZnNrWXB3V2Q1TlF0S2QzdGJLQV9GblVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMUZ56H54
716MS1cm9A+QKAR0xLdY1ueTTsrKP3cBVTCAhkcbmjEx8OUVl4sA8U+SKSdk3PqN
M7oIDSoL+ITBM9rY90XaQhbVd6BtAFZiKemVUPlX5hB61OYUhBMattOvoRqtjPwS
3aGNxW333NU8KDJ2v6d5aahP0IZ2I0z1cgjeVYXBwf+uhhhCGYlo4WyEdbrQnjO8
4qBu+P1nHYC6EyWntQJXDbgTdM6unWJMVbH6dH+4wzO5iIFKP8xXlQSbxAjn7pFq
H260y3B6DI2oGatkjUo1pcaQK9lRIi7JDO2eK2RmW3jj3NpEzS2mrFKeFUL594R5
z2BMb5lOW9R7Hw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:15 2026 by rpki-client