This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          cYXByJkuIR8YK4O87TiCORfyKbiLbUMjEmAjpYSnKk8=
Subject key identifier:   99:09:EF:71:9D:04:FF:7C:63:64:68:2B:46:A2:7A:D1:32:F1:E8:61
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019BF2E20E7429C22EA706FFD98489D619DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          15DB
Signing time:             Sun 25 Jan 2026 02:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:59 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: bSclO9EWmzQOuFu3paAqTdG20EL75bUAAyhQ0Oj8yUY=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e2:0e:74:29:c2:2e:a7:06:ff:d9:84:89:d6:19:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan 25 02:00:59 2026 GMT
            Not After : Jan 26 02:00:59 2026 GMT
        Subject: CN=9909ef719d04ff7c6364682b46a27ad132f1e861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:43:ec:8c:c5:30:e5:26:93:84:b8:f7:9c:78:
                    6c:86:13:52:9f:5c:b3:3f:6e:21:7a:b7:0a:bc:2f:
                    d2:09:b9:02:47:f6:f3:ff:5a:b3:3b:db:15:60:58:
                    e8:42:9f:af:52:63:ad:62:be:e6:b4:f9:8a:cb:b0:
                    d4:89:94:59:bc:10:a9:b1:72:00:44:d0:cc:9c:e2:
                    1a:ae:a3:d7:b8:3a:01:0d:e6:29:d5:1e:4f:cc:ff:
                    9c:db:da:32:67:1e:ba:f6:ec:71:7a:a5:d9:83:fa:
                    ec:36:30:88:fa:75:dc:c6:e4:44:e4:04:da:25:87:
                    b5:5b:fe:15:e0:39:6d:e3:5f:51:e2:d1:79:1f:1b:
                    87:8d:3d:7f:20:2a:c5:b9:d7:b6:44:da:21:47:36:
                    e0:a8:ec:28:e6:4f:8d:68:8a:40:53:4e:38:ee:b2:
                    95:e3:fe:07:62:be:d8:3f:c5:b8:fa:2e:0e:b5:b6:
                    f6:5f:dc:b0:e7:8a:59:48:68:26:13:27:ce:a0:a3:
                    0b:41:10:0a:54:59:61:b2:a8:32:1b:a1:76:ad:70:
                    f3:34:63:77:40:3c:7b:5b:88:a9:6d:0f:61:b1:a7:
                    72:cb:ac:d5:64:c0:57:e4:f4:af:7f:49:83:2f:cf:
                    d1:96:e9:91:fe:17:2f:87:79:20:70:fc:54:fc:85:
                    dc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:09:EF:71:9D:04:FF:7C:63:64:68:2B:46:A2:7A:D1:32:F1:E8:61
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b1:54:20:fa:a8:97:74:19:b0:89:f9:da:c3:ce:9c:e8:93:
         3b:63:6a:bd:e7:67:39:30:da:43:f8:ea:3b:65:84:c8:87:91:
         fe:ab:83:a7:35:44:a4:01:14:d7:63:76:3d:6e:a3:b4:e1:7b:
         54:38:dc:e2:b5:3d:92:5f:de:6c:4b:08:1f:59:80:ca:3b:e5:
         03:67:7f:a4:d0:8f:d1:be:eb:52:d9:26:73:20:42:cf:2a:a1:
         c8:c2:5c:bf:cf:67:8e:08:ee:91:86:4c:33:6b:de:a4:ea:56:
         d2:21:05:2d:44:ea:77:de:db:2c:f0:57:18:06:c9:53:94:93:
         4d:a3:72:c5:57:d3:0e:2b:94:45:b6:4f:b5:f5:89:94:ac:3a:
         b4:d0:c8:17:15:fd:57:51:99:4f:fc:14:6e:2d:9e:d7:e1:03:
         bb:16:41:05:da:0c:a2:f7:4a:ae:7c:6b:8c:42:43:7a:ec:e0:
         4f:68:ba:e0:1a:c3:78:93:ca:81:24:ec:89:f7:f7:96:0c:a3:
         4f:b7:7a:92:fc:54:15:50:2f:86:13:33:ce:c9:d1:b6:4a:ea:
         a3:57:55:a9:5d:56:55:64:91:4d:68:1d:a2:cd:6b:25:54:98:
         79:30:4f:76:7c:4e:94:32:5f:e3:78:f3:7d:fa:20:da:17:c2:
         8d:ad:7c:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvy4g50KcIupwb/2YSJ1hncMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjYwMTI1MDIwMDU5WhcNMjYwMTI2MDIwMDU5WjAzMTEwLwYDVQQD
Eyg5OTA5ZWY3MTlkMDRmZjdjNjM2NDY4MmI0NmEyN2FkMTMyZjFlODYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkPsjMUw5SaThLj3nHhshhNSn1yz
P24hercKvC/SCbkCR/bz/1qzO9sVYFjoQp+vUmOtYr7mtPmKy7DUiZRZvBCpsXIA
RNDMnOIarqPXuDoBDeYp1R5PzP+c29oyZx669uxxeqXZg/rsNjCI+nXcxuRE5ATa
JYe1W/4V4Dlt419R4tF5HxuHjT1/ICrFude2RNohRzbgqOwo5k+NaIpAU0447rKV
4/4HYr7YP8W4+i4Otbb2X9yw54pZSGgmEyfOoKMLQRAKVFlhsqgyG6F2rXDzNGN3
QDx7W4ipbQ9hsadyy6zVZMBX5PSvf0mDL8/RlumR/hcvh3kgcPxU/IXcPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJkJ73GdBP98Y2RoK0aietEy8ehhMB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7FUIPqo
l3QZsIn52sPOnOiTO2NqvednOTDaQ/jqO2WEyIeR/quDpzVEpAEU12N2PW6jtOF7
VDjc4rU9kl/ebEsIH1mAyjvlA2d/pNCP0b7rUtkmcyBCzyqhyMJcv89njgjukYZM
M2vepOpW0iEFLUTqd97bLPBXGAbJU5STTaNyxVfTDiuURbZPtfWJlKw6tNDIFxX9
V1GZT/wUbi2e1+EDuxZBBdoMovdKrnxrjEJDeuzgT2i64BrDeJPKgSTsiff3lgyj
T7d6kvxUFVAvhhMzzsnRtkrqo1dVqV1WVWSRTWgdos1rJVSYeTBPdnxOlDJf43jz
ffog2hfCja18Bg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:38:50 2026 by rpki-client