This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
File:                     c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft (raw, json)
Hash identifier:          MLwE8lOUU9vay7jzKGk9WnkJSEFpLuSTMrax7Z45WL8=
Subject key identifier:   28:E8:55:2D:2F:50:AF:10:99:7A:5E:E2:AC:6C:61:FC:16:6C:2A:9D
Authority key identifier: 73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D
Certificate issuer:       /CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
Certificate serial:       019BF8AD5FEA4227FFC07B58C81AF9ED7862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
Manifest number:          96
Signing time:             Mon 26 Jan 2026 05:01:10 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:10 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:10 +0000
Files and hashes:         1: EINzrIURAAo22BLwl6OL1a5UpOQ.roa (hash: 1AY0ijx+5mYwFZJR82o+YM6Bv37eLoS0OW/kHJNuh9g=)
                          2: Vfdkg8JrR_-oYTXKpv3ZFvZLNaQ.roa (hash: 82rQspqFd2g83fOxBmYcG9w9D8+bzZnPWvE6hsAaX0o=)
                          3: c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl (hash: dYWjZadQYztK3eFzryudCijFtbmt05ngc0LCVpEb/LQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:5f:ea:42:27:ff:c0:7b:58:c8:1a:f9:ed:78:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73d91cdcc0c1b363b49bfc3c2ac58e93002df07d
        Validity
            Not Before: Jan 26 05:01:10 2026 GMT
            Not After : Jan 27 05:01:10 2026 GMT
        Subject: CN=28e8552d2f50af10997a5ee2ac6c61fc166c2a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:6f:62:80:af:f6:d1:bb:4d:08:b5:0d:f0:
                    1f:22:8a:3b:8f:7d:00:60:57:f8:99:7d:05:e0:f4:
                    f3:2a:04:02:d4:77:78:78:7b:d4:24:0b:0b:46:e4:
                    ea:20:50:19:21:e4:26:0e:22:ad:d6:8a:c1:0a:1c:
                    9c:fe:cf:42:c7:02:20:52:b2:66:9a:bf:a1:ee:27:
                    c1:d7:53:3a:45:14:da:a4:8f:17:ca:19:3e:b8:dd:
                    1e:e3:cc:19:f9:cf:47:f4:3c:d4:54:a4:25:65:89:
                    02:5f:ed:97:07:97:01:4f:52:bf:6d:35:e3:f4:81:
                    80:d0:0e:03:91:15:b3:31:49:29:eb:e2:01:c9:17:
                    7d:58:ce:ab:91:d2:36:0e:f2:23:14:b1:7d:1b:2a:
                    e5:ee:7b:72:60:6d:70:8f:dd:71:86:83:7f:30:28:
                    56:35:c5:09:42:c1:02:92:48:47:ef:a7:25:1c:e6:
                    20:63:a9:0e:cb:00:ec:a9:fb:50:82:1d:57:6f:96:
                    2e:ab:84:c3:bc:3c:15:17:40:10:49:a1:76:90:08:
                    0d:80:eb:cb:8a:a0:34:dd:d4:d1:c2:c7:c6:b3:cd:
                    e5:5d:00:10:f0:2e:b5:1c:58:5a:a6:2b:0d:07:03:
                    79:fe:dc:db:f6:66:5e:7b:aa:7e:09:2b:ef:23:b6:
                    c3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:55:2D:2F:50:AF:10:99:7A:5E:E2:AC:6C:61:FC:16:6C:2A:9D
            X509v3 Authority Key Identifier:
                keyid:73:D9:1C:DC:C0:C1:B3:63:B4:9B:FC:3C:2A:C5:8E:93:00:2D:F0:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9kc3MDBs2O0m_w8KsWOkwAt8H0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6c827e-b031-4675-b348-b1552409b6d1/1/c9kc3MDBs2O0m_w8KsWOkwAt8H0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0d:73:c3:d0:85:8b:47:38:9f:3a:75:d7:5b:34:9e:6c:7d:
         5a:2b:a9:bd:9c:cf:a6:fe:80:7c:7f:a7:c2:48:30:8c:39:dd:
         29:7a:5f:10:bd:f8:66:c7:a0:4a:83:b1:35:bc:8a:db:68:93:
         35:f9:61:dc:f1:d7:99:a8:b1:ed:a2:2e:ef:65:e1:76:ea:02:
         d6:a2:ba:71:f8:8f:3b:15:e0:cc:25:d5:4b:ff:4e:d8:bb:13:
         05:ce:2b:5c:f2:a7:15:ef:54:a6:dc:67:16:6a:7c:65:ee:29:
         7f:60:96:a2:44:d3:03:3e:98:d1:33:5b:30:d9:e7:e7:af:4a:
         38:93:b5:b0:a4:62:12:c4:46:ee:d7:e9:1c:0e:23:89:da:b6:
         f6:7a:1e:6c:29:3b:9a:fa:12:d9:1e:37:b0:a0:10:a5:c2:eb:
         c4:f6:d7:b8:fd:38:a6:16:16:90:58:b4:01:9d:84:42:9f:ef:
         24:d2:9c:5e:96:40:66:f9:8d:5e:e9:3f:2f:a0:a0:cc:86:be:
         ad:d4:4c:a1:97:f0:2d:15:c6:c1:50:16:2f:99:aa:d7:8a:b1:
         b1:fc:ea:94:3f:fc:a2:a6:a0:58:17:27:5d:95:65:04:55:52:
         af:ff:2c:34:20:7c:0c:da:17:c2:89:61:df:3e:94:42:bc:59:
         0f:72:ae:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4rV/qQif/wHtYyBr57XhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZDkxY2RjYzBjMWIzNjNiNDliZmMzYzJhYzU4ZTkzMDAy
ZGYwN2QwHhcNMjYwMTI2MDUwMTEwWhcNMjYwMTI3MDUwMTEwWjAzMTEwLwYDVQQD
EygyOGU4NTUyZDJmNTBhZjEwOTk3YTVlZTJhYzZjNjFmYzE2NmMyYTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+pvYoCv9tG7TQi1DfAfIoo7j30A
YFf4mX0F4PTzKgQC1Hd4eHvUJAsLRuTqIFAZIeQmDiKt1orBChyc/s9CxwIgUrJm
mr+h7ifB11M6RRTapI8Xyhk+uN0e48wZ+c9H9DzUVKQlZYkCX+2XB5cBT1K/bTXj
9IGA0A4DkRWzMUkp6+IByRd9WM6rkdI2DvIjFLF9Gyrl7ntyYG1wj91xhoN/MChW
NcUJQsECkkhH76clHOYgY6kOywDsqftQgh1Xb5Yuq4TDvDwVF0AQSaF2kAgNgOvL
iqA03dTRwsfGs83lXQAQ8C61HFhapisNBwN5/tzb9mZee6p+CSvvI7bDtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCjoVS0vUK8QmXpe4qxsYfwWbCqdMB8GA1UdIwQY
MBaAFHPZHNzAwbNjtJv8PCrFjpMALfB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgt
YjE1NTI0MDliNmQxLzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi82YzgyN2UtYjAzMS00Njc1LWIzNDgtYjE1NTI0MDliNmQx
LzEvYzlrYzNNREJzMk8wbV93OEtzV09rd0F0OEgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtA1zw9CF
i0c4nzp111s0nmx9WiupvZzPpv6AfH+nwkgwjDndKXpfEL34ZsegSoOxNbyK22iT
Nflh3PHXmaix7aIu72XhduoC1qK6cfiPOxXgzCXVS/9O2LsTBc4rXPKnFe9Uptxn
Fmp8Ze4pf2CWokTTAz6Y0TNbMNnn569KOJO1sKRiEsRG7tfpHA4jidq29noebCk7
mvoS2R43sKAQpcLrxPbXuP04phYWkFi0AZ2EQp/vJNKcXpZAZvmNXuk/L6CgzIa+
rdRMoZfwLRXGwVAWL5mq14qxsfzqlD/8oqagWBcnXZVlBFVSr/8sNCB8DNoXwolh
3z6UQrxZD3Ku8g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:14 2026 by rpki-client