This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
File:                     bDLcnlJJ-0HEffSRQSGpsaau8f8.mft (raw, json)
Hash identifier:          FEYMEotUEPPYc/gFfjTa8S5F+T+ksDPySxGx3frVf4k=
Subject key identifier:   DA:B0:E2:A7:C9:EA:D8:40:63:D2:FC:E6:FF:ED:F9:63:C6:F9:6B:56
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Certificate issuer:       /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial:       019BF57554B5404756465D2DC69E661EC068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
Manifest number:          15A6
Signing time:             Sun 25 Jan 2026 14:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:05 +0000
Files and hashes:         1: 1-YrYrU78JVrBQu4b-JvMNXte1Y8.roa (hash: T19rFV+NYifOvJLKtfb/jn8yzfjpP/9o/emwcX4dW0M=)
                          2: 2X2qjtlvWrh-i63OX0duW0X7RUQ.roa (hash: fEDF/KXuTjDM56u/FoBt/YnMpIHjrDBH/KrLWrRIe+4=)
                          3: CgnPVoz_nSq_2jl8rVPXhU6NRRQ.roa (hash: ReEo9rp4x3coc8Tyv/m0USlR6KR0jZ84qGX2CKHn4jw=)
                          4: WwPaGaQpisjEnRGrMLRHcOFL-Fs.roa (hash: 5IoEhSgKYc9VUWIcxC0NxkfJGhGKKPJuUdqSQvnAiQA=)
                          5: bDLcnlJJ-0HEffSRQSGpsaau8f8.crl (hash: 9F0ON/kPe67KkCDacxMV7OkC0GjDPKtkXaHwZAiAx74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:54:b5:40:47:56:46:5d:2d:c6:9e:66:1e:c0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
        Validity
            Not Before: Jan 25 14:01:05 2026 GMT
            Not After : Jan 26 14:01:05 2026 GMT
        Subject: CN=dab0e2a7c9ead84063d2fce6ffedf963c6f96b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:51:57:47:5d:35:96:90:3f:c3:bc:70:08:74:
                    45:9c:8d:97:7e:09:e7:d9:5e:0f:9e:77:f3:5d:23:
                    73:a7:41:1f:02:e4:35:2d:53:1d:16:54:bc:64:14:
                    85:2e:6b:1a:40:bc:45:d2:15:f9:ce:20:78:e2:92:
                    75:51:be:4c:ea:78:c5:46:32:d4:b7:49:95:0c:37:
                    bf:02:28:00:3b:76:9b:03:13:90:06:86:37:bd:fd:
                    cf:ab:ce:98:7e:e9:2e:af:3d:35:33:7a:30:b8:1e:
                    f6:4c:ce:96:1e:0e:76:d1:8f:e7:d9:fc:d6:28:1c:
                    35:a6:80:8f:27:fd:5a:66:dc:1e:b1:97:96:53:86:
                    d1:6e:38:cd:15:ed:97:d4:c2:da:ca:a4:4c:4b:2a:
                    45:ef:b0:a3:d0:8f:94:d0:3c:57:b6:ac:dd:77:ce:
                    1b:ba:16:cc:ff:92:2b:39:e8:7c:a1:57:8f:4d:44:
                    c7:a8:ba:e4:87:71:72:f8:1d:9b:04:33:f4:ec:2b:
                    fc:34:33:4f:c7:32:dc:92:fd:47:93:5a:f5:74:4a:
                    43:9a:5f:ea:4c:e0:c1:48:67:e4:64:62:15:f6:8d:
                    ba:4d:bf:c6:eb:23:4d:36:81:41:72:49:c3:23:8e:
                    08:55:e6:f7:b8:31:fe:29:92:2d:d6:94:f6:de:4c:
                    ec:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B0:E2:A7:C9:EA:D8:40:63:D2:FC:E6:FF:ED:F9:63:C6:F9:6B:56
            X509v3 Authority Key Identifier:
                keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:a1:4e:59:b9:5c:f0:62:8e:25:0c:57:46:c1:1c:2e:e8:15:
         04:9b:6f:30:77:ed:2f:3c:35:16:fb:aa:0d:a9:61:1a:77:98:
         8b:61:8e:37:b8:64:f4:4a:f6:4e:e3:29:7d:9a:9b:18:9a:8d:
         c4:72:d6:9b:fc:6e:28:20:2f:8e:56:2e:46:c3:3b:d9:ad:bf:
         00:ae:34:76:44:2d:11:ea:36:4b:a8:b8:71:85:33:49:49:d2:
         14:27:0b:58:e2:a1:54:93:05:15:c8:66:24:7d:cb:a7:07:73:
         6e:2d:61:27:b4:25:72:14:64:73:8b:c3:f1:67:d0:1b:35:ce:
         f8:ee:63:c8:de:ed:1b:cc:40:cf:ac:76:42:18:5a:28:47:c7:
         44:7b:ea:98:90:2c:aa:84:5f:8a:b5:d5:9a:96:ab:c2:d5:14:
         cd:99:03:fa:80:f3:b6:84:91:c6:2d:4a:e0:66:73:8b:c9:78:
         1c:e6:73:b1:bf:19:a0:43:48:70:79:56:d2:20:a6:7e:1f:e6:
         de:8d:ed:94:12:c2:b0:6e:54:23:9f:b7:1e:90:03:39:cf:95:
         82:e2:53:20:bf:b5:2f:dd:78:a0:0d:3e:6d:49:7b:ef:23:33:
         82:80:46:f6:cd:80:c9:2f:82:b2:88:89:bd:ed:31:09:fd:a6:
         78:9a:fe:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dVS1QEdWRl0txp5mHsBoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh
ZWYxZmYwHhcNMjYwMTI1MTQwMTA1WhcNMjYwMTI2MTQwMTA1WjAzMTEwLwYDVQQD
EyhkYWIwZTJhN2M5ZWFkODQwNjNkMmZjZTZmZmVkZjk2M2M2Zjk2YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1FXR101lpA/w7xwCHRFnI2Xfgnn
2V4PnnfzXSNzp0EfAuQ1LVMdFlS8ZBSFLmsaQLxF0hX5ziB44pJ1Ub5M6njFRjLU
t0mVDDe/AigAO3abAxOQBoY3vf3Pq86Yfukurz01M3owuB72TM6WHg520Y/n2fzW
KBw1poCPJ/1aZtwesZeWU4bRbjjNFe2X1MLayqRMSypF77Cj0I+U0DxXtqzdd84b
uhbM/5IrOeh8oVePTUTHqLrkh3Fy+B2bBDP07Cv8NDNPxzLckv1Hk1r1dEpDml/q
TODBSGfkZGIV9o26Tb/G6yNNNoFBcknDI44IVeb3uDH+KZIt1pT23kzs4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqw4qfJ6thAY9L85v/t+WPG+WtWMB8GA1UdIwQY
MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt
M2ZiYzk3NTllYjZhLzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh
LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnaFOWblc
8GKOJQxXRsEcLugVBJtvMHftLzw1FvuqDalhGneYi2GON7hk9Er2TuMpfZqbGJqN
xHLWm/xuKCAvjlYuRsM72a2/AK40dkQtEeo2S6i4cYUzSUnSFCcLWOKhVJMFFchm
JH3Lpwdzbi1hJ7QlchRkc4vD8WfQGzXO+O5jyN7tG8xAz6x2QhhaKEfHRHvqmJAs
qoRfirXVmparwtUUzZkD+oDztoSRxi1K4GZzi8l4HOZzsb8ZoENIcHlW0iCmfh/m
3o3tlBLCsG5UI5+3HpADOc+VguJTIL+1L914oA0+bUl77yMzgoBG9s2AyS+CsoiJ
ve0xCf2meJr+aQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:11 2026 by rpki-client