This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File:                     nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier:          EcVWaiRTX1weWkw8+GqmW57teMFSfPlITRR8udINj3A=
Subject key identifier:   B0:76:BF:3E:ED:C5:74:B6:58:32:29:26:B3:56:F8:89:7B:09:0F:C8
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer:       /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial:       019BF574E749E0D41BE50986DE077C0C1C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 14:00:37 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:37 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:37 +0000
Files and hashes:         1: 1-eiJaBH2kYrPZhQkGjIEcyrY7IM.roa (hash: gzeqOddWkamgLifKoDiz8pUqA/+BC13d2Fw5TMWD4jQ=)
                          2: Zq98Iidw2cw0Zo72hXFz8p4vmU0.roa (hash: QzQp2VEgOsKH9qFSE3tdbQaitBr0SbkYp6vIsvTA6fc=)
                          3: m2iSJFXrSMffknc75dt6nX4q_Ew.roa (hash: PpUMfeh4JgwhVE55OoPUjweIHDdfcBKVjcHcumEVNd8=)
                          4: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: B5jj9TVwuaZqbcqDGtj931/p1zletZ6HuJXs4+5Bf+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:e7:49:e0:d4:1b:e5:09:86:de:07:7c:0c:1c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
        Validity
            Not Before: Jan 25 14:00:37 2026 GMT
            Not After : Jan 26 14:00:37 2026 GMT
        Subject: CN=b076bf3eedc574b658322926b356f8897b090fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c1:82:82:fa:62:aa:46:e2:1a:ce:ec:d2:38:
                    10:c2:f1:1c:15:b8:83:1c:c6:6f:c6:99:81:16:0b:
                    bd:ee:bf:93:fc:64:fd:92:ad:d2:db:62:8e:ad:f9:
                    b4:c7:65:9b:1f:41:02:93:ba:68:1a:37:b4:47:d4:
                    18:a8:58:12:2f:07:a8:a0:5e:af:39:6c:81:d3:dd:
                    04:11:f7:93:5d:9b:70:2c:97:f7:ef:bb:8f:11:95:
                    8f:8b:4a:93:95:33:8d:df:10:48:05:2e:0b:ed:2b:
                    32:3a:19:83:bc:f8:6a:db:90:ee:65:e9:95:d3:e5:
                    3d:7b:c6:9d:59:b0:fd:04:6d:2c:24:91:80:96:df:
                    af:a8:1e:3c:4d:7f:82:10:f5:42:5f:a5:05:82:ef:
                    e9:4f:48:5b:b1:f4:e4:c8:1b:25:7e:f0:73:b2:09:
                    1f:d4:90:f5:07:a3:29:b4:36:40:46:07:a9:c5:49:
                    9c:a1:38:cd:f3:1a:2a:5c:96:32:06:58:26:8c:d8:
                    e3:f1:5e:be:69:1d:37:9d:cf:c9:35:25:d9:d6:b7:
                    4b:78:40:7c:3c:53:17:fc:61:76:4e:04:ba:6b:6e:
                    c3:6a:32:6e:e8:56:d8:75:c5:31:06:0e:48:56:84:
                    b5:b4:7f:c3:b1:57:bb:3e:76:fc:e5:75:a8:8c:41:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:76:BF:3E:ED:C5:74:B6:58:32:29:26:B3:56:F8:89:7B:09:0F:C8
            X509v3 Authority Key Identifier:
                keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:29:02:9d:ea:08:5e:ac:75:46:4f:3e:05:9a:20:20:e9:
         0c:f8:f5:1e:40:cb:18:ab:75:cb:19:6f:72:91:52:fa:ed:da:
         4e:d9:97:dc:2d:97:17:2d:cd:cb:14:b8:a3:13:e6:b2:ae:eb:
         b0:6b:7e:99:d3:d2:d4:04:a7:c3:16:d6:82:31:80:d0:13:eb:
         08:52:1a:f4:20:51:b6:85:38:03:b2:9e:4f:5a:d5:74:7c:bf:
         de:8e:b4:0c:e9:e3:bf:06:d0:a8:7a:d8:ca:62:9b:7b:1b:c4:
         e3:33:b5:8b:7e:d5:23:e0:da:72:34:32:a8:11:f8:f9:48:59:
         0b:2f:eb:3b:5e:c6:2c:e6:cb:f7:50:84:c9:cf:50:2a:75:54:
         5a:95:f2:15:c3:c4:67:11:a1:7d:76:e6:8d:ae:a0:7c:5a:4f:
         5f:3a:d0:f7:bd:79:0c:82:c2:bd:bf:56:fc:99:0a:0a:54:92:
         84:7c:e6:2f:11:3d:9c:ea:d0:38:a1:d5:40:5b:2e:22:ab:13:
         bb:19:4d:9e:c8:23:c4:06:65:9b:80:a0:14:fc:35:01:cf:08:
         60:58:8d:5a:30:87:d4:17:c2:b6:be:ea:86:f7:2b:4d:57:90:
         89:f1:4a:8f:7a:02:86:9e:b3:18:04:f8:eb:4b:2b:8a:f6:40:
         7d:5d:16:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dOdJ4NQb5QmG3gd8DBwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZGVkZjQ3ODIyYWVlMjdkYTI4ZDM0ZGFiMWZlN2EzYzYw
YTZhYWEwHhcNMjYwMTI1MTQwMDM3WhcNMjYwMTI2MTQwMDM3WjAzMTEwLwYDVQQD
EyhiMDc2YmYzZWVkYzU3NGI2NTgzMjI5MjZiMzU2Zjg4OTdiMDkwZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8GCgvpiqkbiGs7s0jgQwvEcFbiD
HMZvxpmBFgu97r+T/GT9kq3S22KOrfm0x2WbH0ECk7poGje0R9QYqFgSLweooF6v
OWyB090EEfeTXZtwLJf377uPEZWPi0qTlTON3xBIBS4L7SsyOhmDvPhq25DuZemV
0+U9e8adWbD9BG0sJJGAlt+vqB48TX+CEPVCX6UFgu/pT0hbsfTkyBslfvBzsgkf
1JD1B6MptDZARgepxUmcoTjN8xoqXJYyBlgmjNjj8V6+aR03nc/JNSXZ1rdLeEB8
PFMX/GF2TgS6a27DajJu6FbYdcUxBg5IVoS1tH/DsVe7Pnb85XWojEGr+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB2vz7txXS2WDIpJrNW+Il7CQ/IMB8GA1UdIwQY
MBaAFJ7e30eCKu4n2ijTTasf56PGCmqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUt
ZDczOTkyOTIwMTlhLzEvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUtZDczOTkyOTIwMTlh
LzEvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfJopAp3q
CF6sdUZPPgWaICDpDPj1HkDLGKt1yxlvcpFS+u3aTtmX3C2XFy3NyxS4oxPmsq7r
sGt+mdPS1ASnwxbWgjGA0BPrCFIa9CBRtoU4A7KeT1rVdHy/3o60DOnjvwbQqHrY
ymKbexvE4zO1i37VI+DacjQyqBH4+UhZCy/rO17GLObL91CEyc9QKnVUWpXyFcPE
ZxGhfXbmja6gfFpPXzrQ9715DILCvb9W/JkKClSShHzmLxE9nOrQOKHVQFsuIqsT
uxlNnsgjxAZlm4CgFPw1Ac8IYFiNWjCH1BfCtr7qhvcrTVeQifFKj3oChp6zGAT4
60srivZAfV0WTA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:45:24 2026 by rpki-client