This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File:                     d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier:          PyQkLibaAtBSQNr6DWYVLGgJkGd1HIjkwcfrnI+gWIw=
Subject key identifier:   09:86:DE:D1:B4:FA:DE:0F:DA:66:D4:6B:CE:40:DE:F7:5D:B5:3C:D1
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer:       /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial:       019BF79A5C6AA689A8463EB95A076730195A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number:          17E9
Signing time:             Mon 26 Jan 2026 00:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:47 +0000
Files and hashes:         1: P_jLMjRudiodEgP9kGrX8xlbrMY.roa (hash: pHZFqcdySsOo+3kqKRPv2p7vAXOUuXEA4zp+BKSFMns=)
                          2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: Y/mg3aYqqLCemaI2gTVvNKKjTw34aprSeVrK8Cb2Wi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:5c:6a:a6:89:a8:46:3e:b9:5a:07:67:30:19:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
        Validity
            Not Before: Jan 26 00:00:47 2026 GMT
            Not After : Jan 27 00:00:47 2026 GMT
        Subject: CN=0986ded1b4fade0fda66d46bce40def75db53cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ea:fe:85:5a:54:e0:4a:29:97:53:ba:71:c8:
                    a7:73:46:0e:bc:47:b7:b7:19:6a:91:7b:6b:2d:de:
                    54:ba:4a:42:03:9f:94:33:9f:93:e9:26:7e:42:73:
                    cf:19:a8:f2:57:34:7f:f5:4b:13:49:8d:44:ea:32:
                    2b:92:6e:ad:30:4a:e4:86:39:3f:a2:c8:db:af:ea:
                    6b:27:b8:fb:f1:b3:b1:55:10:0a:2f:14:07:72:fd:
                    fe:e8:70:b4:fe:92:8b:c2:e9:cd:f8:09:09:b6:6b:
                    f0:5d:1e:d5:5f:97:29:f9:b6:1d:8d:b1:72:95:99:
                    39:7d:b2:d9:df:f1:2a:48:9d:41:49:89:31:10:da:
                    8d:ef:2d:bc:ef:06:a5:02:73:f3:fa:34:ae:01:77:
                    6d:6a:5c:83:ce:42:0b:72:f8:7a:d7:64:45:59:36:
                    45:f0:0b:66:94:77:2a:40:e3:35:20:67:89:d2:0c:
                    87:39:0c:e5:33:10:60:f6:b5:ea:d2:58:d3:71:f6:
                    5b:ac:34:5a:0b:e8:dc:a7:81:b5:56:d8:54:5d:a0:
                    30:f9:59:16:30:27:29:e2:33:c1:37:eb:0b:71:4c:
                    36:11:08:25:d6:64:6f:bb:62:50:a1:20:e6:00:79:
                    31:a7:c6:82:6a:68:ab:22:03:38:4a:db:3d:e7:97:
                    e4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:86:DE:D1:B4:FA:DE:0F:DA:66:D4:6B:CE:40:DE:F7:5D:B5:3C:D1
            X509v3 Authority Key Identifier:
                keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:0a:cf:7a:f8:7b:66:ed:b1:3f:ec:94:53:82:ad:25:d5:e0:
         02:05:41:f1:cf:d0:35:3e:1f:8d:7f:39:9b:59:5e:3f:ba:15:
         d4:17:3b:d6:19:73:2b:8b:39:bf:0b:30:99:78:06:b6:b6:6a:
         10:61:80:fd:65:0c:b6:40:f8:c8:22:b8:df:42:f0:65:64:98:
         cc:38:a7:44:70:1e:5d:3c:6e:28:4b:28:7a:f6:e9:2b:e3:84:
         71:3b:69:45:2d:9a:0b:69:ee:c7:a4:d5:10:ea:a4:c4:c9:d7:
         85:b4:46:c7:c0:12:c3:9a:a1:bf:de:b8:b0:dc:ce:5c:ad:b7:
         c5:2c:fc:15:f5:bf:b1:9b:07:b6:21:34:f7:4c:3f:26:29:e2:
         ed:04:02:83:32:4e:2e:82:74:e5:6f:41:72:fc:03:01:cf:b2:
         c2:2b:4f:fb:59:f0:70:d4:12:4f:f0:ae:2a:79:2b:4f:7a:48:
         75:7e:67:df:65:be:82:ea:df:45:66:62:c1:2c:bd:5c:1d:24:
         c8:76:19:1c:c3:eb:4d:16:31:d7:01:82:6a:08:d5:21:60:5d:
         e1:5a:b2:15:5c:aa:1c:14:46:7e:5a:f2:4d:e9:2d:6c:20:38:
         8d:8a:e8:69:fa:6b:25:c0:bb:68:4e:4f:c9:f4:95:b6:b8:a9:
         bd:54:ea:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mlxqpomoRj65WgdnMBlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGRhMmFkMDk4YzZhNzgxNGZiMjU4YjQ2OWIwZDg0Y2Uy
NGM0YTcwHhcNMjYwMTI2MDAwMDQ3WhcNMjYwMTI3MDAwMDQ3WjAzMTEwLwYDVQQD
EygwOTg2ZGVkMWI0ZmFkZTBmZGE2NmQ0NmJjZTQwZGVmNzVkYjUzY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAver+hVpU4Eopl1O6ccinc0YOvEe3
txlqkXtrLd5UukpCA5+UM5+T6SZ+QnPPGajyVzR/9UsTSY1E6jIrkm6tMErkhjk/
osjbr+prJ7j78bOxVRAKLxQHcv3+6HC0/pKLwunN+AkJtmvwXR7VX5cp+bYdjbFy
lZk5fbLZ3/EqSJ1BSYkxENqN7y287walAnPz+jSuAXdtalyDzkILcvh612RFWTZF
8AtmlHcqQOM1IGeJ0gyHOQzlMxBg9rXq0ljTcfZbrDRaC+jcp4G1VthUXaAw+VkW
MCcp4jPBN+sLcUw2EQgl1mRvu2JQoSDmAHkxp8aCamirIgM4Sts955fkiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAmG3tG0+t4P2mbUa85A3vddtTzRMB8GA1UdIwQY
MBaAFHfdoq0JjGp4FPsli0abDYTOJMSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2Mt
ODE0NzZkYmFiMTQ0LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2MtODE0NzZkYmFiMTQ0
LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwrPevh7
Zu2xP+yUU4KtJdXgAgVB8c/QNT4fjX85m1leP7oV1Bc71hlzK4s5vwswmXgGtrZq
EGGA/WUMtkD4yCK430LwZWSYzDinRHAeXTxuKEsoevbpK+OEcTtpRS2aC2nux6TV
EOqkxMnXhbRGx8ASw5qhv964sNzOXK23xSz8FfW/sZsHtiE090w/Jini7QQCgzJO
LoJ05W9BcvwDAc+ywitP+1nwcNQST/CuKnkrT3pIdX5n32W+gurfRWZiwSy9XB0k
yHYZHMPrTRYx1wGCagjVIWBd4VqyFVyqHBRGflryTektbCA4jYroafprJcC7aE5P
yfSVtripvVTqQg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:19 2026 by rpki-client