This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
File:                     mzQGmcjtlwqMntjBYgiPIGfDMlA.mft (raw, json)
Hash identifier:          NZwuSW97QbKYWvVsB8ltHkqYs6Mh0yucP4sbtP+nrAA=
Subject key identifier:   AE:EC:83:88:9B:CA:1A:3D:5A:AE:13:D4:8F:81:F0:FF:06:32:4B:1A
Authority key identifier: 9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50
Certificate issuer:       /CN=9b340699c8ed970a8c9ed8c162088f2067c33250
Certificate serial:       019BF6BF4DCE7520098F903205645EC0D113
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 20:01:30 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:30 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:30 +0000
Files and hashes:         1: 01uypEz92w-PEtDCDrkmRt7joB0.roa (hash: 6Ybp9mfbJVOd/HK8t41CSRVz5fBDwLWJNUbKMQQxn7A=)
                          2: Y5c5tHMCRfTtPuxnVvAxwpXSl28.roa (hash: NZdjkPEkUO+Uw6GFkmHziM3D1Wwqjp5gqekMma3ncw0=)
                          3: mzQGmcjtlwqMntjBYgiPIGfDMlA.crl (hash: 9hz3QaW6WTiVbLH+okV5/vsNOZAXlFMCcAjyUNpyCyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:4d:ce:75:20:09:8f:90:32:05:64:5e:c0:d1:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b340699c8ed970a8c9ed8c162088f2067c33250
        Validity
            Not Before: Jan 25 20:01:30 2026 GMT
            Not After : Jan 26 20:01:30 2026 GMT
        Subject: CN=aeec83889bca1a3d5aae13d48f81f0ff06324b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cc:15:c2:ce:87:7b:d6:81:ad:4a:10:a2:80:
                    5b:4d:f1:15:5b:62:f4:28:7e:c7:29:11:f9:49:4d:
                    1f:2d:6e:b0:a7:24:e7:39:a3:22:c8:e0:83:85:17:
                    78:bb:d2:ab:c1:e0:c3:21:d8:bb:c2:f5:32:72:50:
                    7a:5b:15:93:d5:39:f5:e5:af:35:99:57:ba:3e:56:
                    61:22:5c:8b:b5:1c:27:dd:bd:5e:96:ad:8c:0b:c1:
                    61:6d:b6:98:84:65:90:35:a2:92:8e:2a:86:e7:4a:
                    9a:15:6c:cf:17:d1:e3:e7:cb:d5:8e:e6:55:59:ea:
                    2f:7c:40:58:07:df:3a:4d:24:d9:10:75:c5:b4:c6:
                    6f:a9:3d:7b:48:e7:f7:a6:70:43:2a:71:0c:64:2b:
                    d2:ec:e4:f0:ed:07:43:b7:e4:12:78:28:8f:6a:c1:
                    08:8c:60:74:cd:9d:dd:32:fd:e9:97:a8:8f:11:53:
                    62:b4:ae:4c:0b:f3:17:6f:5f:dd:19:85:0b:3c:ac:
                    61:5a:fc:f5:c3:cd:e5:44:5e:8f:61:b9:2c:60:fe:
                    f3:2b:42:18:d5:0f:8f:c4:e8:2b:a9:28:07:4a:86:
                    64:25:b2:77:04:bc:70:d5:50:7b:52:d5:e8:32:44:
                    91:b3:f9:6c:a8:97:7e:73:59:b5:41:d6:eb:d7:7b:
                    a8:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:EC:83:88:9B:CA:1A:3D:5A:AE:13:D4:8F:81:F0:FF:06:32:4B:1A
            X509v3 Authority Key Identifier:
                keyid:9B:34:06:99:C8:ED:97:0A:8C:9E:D8:C1:62:08:8F:20:67:C3:32:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzQGmcjtlwqMntjBYgiPIGfDMlA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6f4940-5abc-49b4-9747-e08be0edaf76/1/mzQGmcjtlwqMntjBYgiPIGfDMlA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:80:69:b8:ee:18:5c:c8:af:1b:26:d2:a9:8a:f5:a5:6f:
         33:fa:b9:42:24:92:9d:c2:a2:00:c4:96:bd:97:2a:2c:cc:06:
         7a:23:62:40:fb:84:32:47:1a:3d:96:f7:bf:d0:eb:52:b3:1f:
         41:c9:ee:e3:66:34:0d:3f:60:34:cd:d8:44:94:1f:94:21:d8:
         7f:a5:a5:a2:1f:01:a7:34:c5:62:fd:b9:b6:d8:59:3c:03:5e:
         46:d7:5e:15:3a:b8:24:34:ab:2b:a7:ec:c8:42:02:d1:42:ed:
         9c:28:15:23:02:1e:ed:61:f6:fc:be:5d:99:68:65:f1:5d:99:
         b2:e6:67:f7:cc:68:20:45:e1:51:5d:31:f4:2b:33:84:67:b1:
         ac:06:97:82:13:82:31:16:5a:2f:46:2a:24:c7:cf:df:e8:31:
         60:8c:02:59:66:3b:4b:48:fa:e4:a5:be:94:2e:ea:57:cc:98:
         75:ee:e3:db:a9:b7:40:12:68:d6:85:71:56:e8:72:21:90:0a:
         96:11:2d:f6:64:d8:94:a6:56:b0:74:4a:fb:2a:92:ea:83:12:
         b6:96:f1:d4:e7:11:2c:e2:58:98:75:9c:2f:cc:9d:97:ef:1e:
         a1:94:8f:1d:30:36:d0:4d:19:60:bf:71:40:a5:eb:7b:c5:80:
         e7:68:16:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2v03OdSAJj5AyBWRewNETMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMzQwNjk5YzhlZDk3MGE4YzllZDhjMTYyMDg4ZjIwNjdj
MzMyNTAwHhcNMjYwMTI1MjAwMTMwWhcNMjYwMTI2MjAwMTMwWjAzMTEwLwYDVQQD
EyhhZWVjODM4ODliY2ExYTNkNWFhZTEzZDQ4ZjgxZjBmZjA2MzI0YjFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMwVws6He9aBrUoQooBbTfEVW2L0
KH7HKRH5SU0fLW6wpyTnOaMiyOCDhRd4u9KrweDDIdi7wvUyclB6WxWT1Tn15a81
mVe6PlZhIlyLtRwn3b1elq2MC8FhbbaYhGWQNaKSjiqG50qaFWzPF9Hj58vVjuZV
WeovfEBYB986TSTZEHXFtMZvqT17SOf3pnBDKnEMZCvS7OTw7QdDt+QSeCiPasEI
jGB0zZ3dMv3pl6iPEVNitK5MC/MXb1/dGYULPKxhWvz1w83lRF6PYbksYP7zK0IY
1Q+PxOgrqSgHSoZkJbJ3BLxw1VB7UtXoMkSRs/lsqJd+c1m1Qdbr13uo9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7sg4ibyho9Wq4T1I+B8P8GMksaMB8GA1UdIwQY
MBaAFJs0BpnI7ZcKjJ7YwWIIjyBnwzJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDct
ZTA4YmUwZWRhZjc2LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZjQ5NDAtNWFiYy00OWI0LTk3NDctZTA4YmUwZWRhZjc2
LzEvbXpRR21janRsd3FNbnRqQllnaVBJR2ZETWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk2Aabju
GFzIrxsm0qmK9aVvM/q5QiSSncKiAMSWvZcqLMwGeiNiQPuEMkcaPZb3v9DrUrMf
Qcnu42Y0DT9gNM3YRJQflCHYf6Wloh8BpzTFYv25tthZPANeRtdeFTq4JDSrK6fs
yEIC0ULtnCgVIwIe7WH2/L5dmWhl8V2ZsuZn98xoIEXhUV0x9CszhGexrAaXghOC
MRZaL0YqJMfP3+gxYIwCWWY7S0j65KW+lC7qV8yYde7j26m3QBJo1oVxVuhyIZAK
lhEt9mTYlKZWsHRK+yqS6oMStpbx1OcRLOJYmHWcL8ydl+8eoZSPHTA20E0ZYL9x
QKXre8WA52gWAQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:40 2026 by rpki-client