This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
File:                     pJ9iZvYaHszU3uCUzHHG24a7s3s.mft (raw, json)
Hash identifier:          EvIiFnTl9Y/L1DHSLOBvoU/YXzLdsZ7kxpqbPLsNU+g=
Subject key identifier:   6C:05:76:C0:6D:F4:3E:C1:3D:B8:74:CA:9D:EB:76:0B:E6:60:4F:41
Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B
Certificate issuer:       /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
Certificate serial:       019BF4D0A5513F3E0FB852B0C32666A1B8B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
Manifest number:          1016
Signing time:             Sun 25 Jan 2026 11:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:12 +0000
Files and hashes:         1: Rby5nLrJcvkrMMSKJDxv2N1Dkzg.roa (hash: UGiV11zMoAfT499xl7bL5pT0LFPEqPTZkQEi6I0tGg8=)
                          2: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (hash: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo=)
                          3: pJ9iZvYaHszU3uCUzHHG24a7s3s.crl (hash: q68Baus1AxlIWJVu/OY3k8TQJwo/lyDj2yiA1c8g/Ig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:a5:51:3f:3e:0f:b8:52:b0:c3:26:66:a1:b8:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b
        Validity
            Not Before: Jan 25 11:01:12 2026 GMT
            Not After : Jan 26 11:01:12 2026 GMT
        Subject: CN=6c0576c06df43ec13db874ca9deb760be6604f41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:70:7c:f6:e0:ec:7a:fb:1f:f6:0b:7a:0f:4c:
                    42:1d:4e:bf:00:91:f1:af:11:41:7c:1d:90:21:80:
                    6f:de:53:a6:a3:27:f1:d4:7d:cf:59:88:95:27:3f:
                    1e:f1:ce:54:24:18:1d:7d:c4:fd:eb:d5:75:39:48:
                    c1:a5:6c:9f:ce:82:2d:86:86:f2:7c:59:db:0a:7d:
                    dc:4e:9f:25:cd:05:c6:64:bd:c0:0d:21:3f:e0:4c:
                    e5:c3:dc:17:0d:ea:d6:ff:cf:02:bd:0f:6d:49:04:
                    1b:90:df:79:eb:5e:70:45:c5:60:8d:9c:9d:0c:bc:
                    ed:3a:b2:f3:5e:93:a2:f0:80:52:44:87:47:91:01:
                    b7:af:47:09:5f:05:7b:54:ba:7c:e8:a7:48:ca:e2:
                    bd:00:ec:ff:dd:2f:ef:5f:28:d8:4a:f0:e7:3f:86:
                    b3:d5:90:88:f5:c7:4e:77:80:88:82:18:5a:3b:06:
                    2c:29:08:cd:e8:c1:76:40:df:20:a7:27:f3:59:45:
                    7b:ab:38:50:18:9c:3b:5f:5e:3b:cb:83:52:d8:eb:
                    38:77:fd:7a:d9:0a:7a:4c:a5:b3:bf:68:41:23:34:
                    44:c0:a1:e2:af:64:73:bb:97:b7:b0:30:c6:1c:a6:
                    b1:19:c8:8b:57:75:35:85:30:0d:3e:64:b9:cc:95:
                    71:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:05:76:C0:6D:F4:3E:C1:3D:B8:74:CA:9D:EB:76:0B:E6:60:4F:41
            X509v3 Authority Key Identifier:
                keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:a0:6a:2e:15:2a:f4:92:5c:07:d3:2d:2a:8a:c4:0e:b5:
         70:05:d9:7e:c1:05:92:56:3d:8b:36:9e:e8:b1:62:5d:52:61:
         e1:5f:2a:db:05:e5:16:88:d6:d6:ea:5f:bc:66:e6:8f:ba:23:
         23:93:e4:fe:5a:60:5d:c5:97:31:35:f9:b9:df:4c:ff:76:31:
         91:41:13:32:05:34:7f:0c:33:37:14:c6:30:9a:48:ef:7d:02:
         4e:00:63:ff:4a:3c:f4:ed:14:92:7d:f3:ab:ef:1a:ed:52:46:
         ad:4c:76:cc:3b:a1:f3:b3:16:80:c2:6c:50:81:4f:32:92:1c:
         e5:d2:9b:7b:64:55:40:c9:09:5d:61:a6:31:f8:45:a1:e3:0d:
         97:20:0e:9e:77:50:fb:78:96:7d:a3:bb:f0:ac:06:ca:ee:f3:
         c9:66:b4:4d:bb:1f:c1:cc:49:d6:fd:8f:57:25:41:e2:3d:1d:
         7c:65:80:0f:fe:8e:b1:3a:05:74:b4:92:e1:fc:56:ed:d6:68:
         87:7d:38:7e:68:ec:05:76:f5:3f:4b:c6:3f:a7:ab:45:14:5e:
         90:a9:c9:bc:ea:d1:5b:53:17:11:2f:d0:5d:58:66:5d:ce:7a:
         47:76:97:ae:72:0a:ac:7f:76:fc:b3:ad:84:7f:fa:93:27:83:
         c9:f6:9d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00KVRPz4PuFKwwyZmobizMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi
YmIzN2IwHhcNMjYwMTI1MTEwMTEyWhcNMjYwMTI2MTEwMTEyWjAzMTEwLwYDVQQD
Eyg2YzA1NzZjMDZkZjQzZWMxM2RiODc0Y2E5ZGViNzYwYmU2NjA0ZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HB89uDsevsf9gt6D0xCHU6/AJHx
rxFBfB2QIYBv3lOmoyfx1H3PWYiVJz8e8c5UJBgdfcT969V1OUjBpWyfzoIthoby
fFnbCn3cTp8lzQXGZL3ADSE/4Ezlw9wXDerW/88CvQ9tSQQbkN95615wRcVgjZyd
DLztOrLzXpOi8IBSRIdHkQG3r0cJXwV7VLp86KdIyuK9AOz/3S/vXyjYSvDnP4az
1ZCI9cdOd4CIghhaOwYsKQjN6MF2QN8gpyfzWUV7qzhQGJw7X147y4NS2Os4d/16
2Qp6TKWzv2hBIzREwKHir2Rzu5e3sDDGHKaxGciLV3U1hTANPmS5zJVxoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGwFdsBt9D7BPbh0yp3rdgvmYE9BMB8GA1UdIwQY
MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt
OThiZTMzNWYzYzU0LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0
LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1igai4V
KvSSXAfTLSqKxA61cAXZfsEFklY9izae6LFiXVJh4V8q2wXlFojW1upfvGbmj7oj
I5Pk/lpgXcWXMTX5ud9M/3YxkUETMgU0fwwzNxTGMJpI730CTgBj/0o89O0Ukn3z
q+8a7VJGrUx2zDuh87MWgMJsUIFPMpIc5dKbe2RVQMkJXWGmMfhFoeMNlyAOnndQ
+3iWfaO78KwGyu7zyWa0TbsfwcxJ1v2PVyVB4j0dfGWAD/6OsToFdLSS4fxW7dZo
h304fmjsBXb1P0vGP6erRRRekKnJvOrRW1MXES/QXVhmXc56R3aXrnIKrH92/LOt
hH/6kyeDyfad0w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:52:44 2026 by rpki-client