This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
File:                     2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json)
Hash identifier:          bWekT+o77V1UWrlSgmyPzg4WCD+Jq+T56U8MTuGl3/c=
Subject key identifier:   36:2B:50:0B:B7:18:8A:57:F3:53:DB:27:01:CA:2A:17:EF:A4:78:C2
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Certificate issuer:       /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial:       019BF42BC6A5DA4344A13AEF923024ED1901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
Manifest number:          11F4
Signing time:             Sun 25 Jan 2026 08:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:08 +0000
Files and hashes:         1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: /AOY9DrLUN9/CztMXcZVbC2wz9ht/1YNINmH/J4N6Yc=)
                          2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=)
                          3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=)
                          4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=)
                          5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=)
                          6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=)
                          7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=)
                          8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=)
                          9: ZVEWuO8vTkhYlgAxEUaEcfperi4.roa (hash: EcaVfVBsUxnWjymJwx/UBAMgjBU918j/k2sTiFawV9k=)
                          10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=)
                          11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=)
                          12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=)
                          13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=)
                          14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=)
                          15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:c6:a5:da:43:44:a1:3a:ef:92:30:24:ed:19:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
        Validity
            Not Before: Jan 25 08:01:08 2026 GMT
            Not After : Jan 26 08:01:08 2026 GMT
        Subject: CN=362b500bb7188a57f353db2701ca2a17efa478c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:37:13:53:82:b1:18:c3:50:28:a0:9b:61:
                    d1:88:e8:da:71:5f:84:02:37:79:45:55:f9:6f:f7:
                    fe:e3:60:b0:00:a4:a6:26:fd:4f:f4:89:1f:53:9f:
                    1d:a9:76:19:22:2d:d5:e6:c7:37:35:03:ed:30:eb:
                    28:87:52:21:73:fc:5b:be:a0:e9:08:40:0b:46:3b:
                    f6:e9:13:37:7a:1b:76:f6:34:10:11:e9:c0:03:33:
                    6e:b8:aa:1b:d9:55:47:ff:d5:ca:c1:63:3d:ba:fc:
                    df:bb:ae:c3:3d:1e:5a:ec:fd:7d:74:8d:fa:a3:6a:
                    a7:e4:9f:4c:44:3d:11:9a:8a:ec:08:73:21:8b:c9:
                    c8:d1:9f:57:14:00:4b:48:32:b8:4c:be:54:b7:49:
                    df:cd:d9:8c:4a:61:72:14:05:06:f2:c7:8f:b8:89:
                    8e:e2:3d:4b:50:63:30:ad:27:40:96:ae:0c:39:0f:
                    dc:1b:5b:bd:aa:76:b0:43:d8:79:e6:a9:31:03:04:
                    d6:73:b1:2c:27:d2:f2:9b:1b:5b:c9:e5:a7:98:dd:
                    9f:01:e9:87:4f:e9:51:e7:1a:70:9d:e6:6b:45:4e:
                    08:e9:02:4e:29:81:11:74:59:aa:7f:a6:4a:d7:a5:
                    66:9b:3b:4b:11:60:0b:27:e6:8c:d3:d9:10:62:71:
                    15:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:2B:50:0B:B7:18:8A:57:F3:53:DB:27:01:CA:2A:17:EF:A4:78:C2
            X509v3 Authority Key Identifier:
                keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:54:65:be:27:c4:9a:c0:b2:f4:20:d4:2c:75:bb:97:2c:57:
         b9:e1:31:6e:c7:a1:5b:ff:a0:86:cd:10:62:3e:b7:25:fb:f1:
         43:25:6c:62:fb:7a:9f:da:c0:7a:03:c7:7c:63:37:fb:76:ee:
         1d:ef:1c:0e:0f:2b:c1:1c:8c:ce:e8:bf:4c:9e:1f:ba:bf:f5:
         09:8a:b5:37:90:d4:9d:d4:68:0f:cb:61:67:95:91:47:97:55:
         ea:8a:8a:8d:28:28:56:f2:ee:21:99:69:dc:33:3d:d6:4b:a3:
         8e:e5:d1:ab:c6:f0:5e:1d:c0:59:8d:7b:23:37:ed:f6:5e:fa:
         03:95:5c:5f:91:07:b1:4d:bb:62:df:4c:6b:86:14:9d:c2:aa:
         43:be:c3:82:21:74:83:8a:5b:81:e7:b0:74:06:53:04:45:74:
         78:e4:d3:03:ba:1d:15:e2:80:3c:11:a9:69:df:a4:db:e4:1e:
         a9:c4:dd:e5:b8:8f:65:b3:49:56:74:37:92:6e:62:c5:68:43:
         3e:94:49:90:bc:03:e8:69:56:ef:fc:e8:74:f1:c0:48:92:e2:
         a2:19:fb:48:14:30:b5:ab:20:4a:78:5b:aa:5c:14:71:b8:d1:
         20:a5:86:bb:89:cf:da:49:cb:c3:8c:36:10:4d:c0:9a:d2:4b:
         26:35:ce:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0K8al2kNEoTrvkjAk7RkBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjYwMTI1MDgwMTA4WhcNMjYwMTI2MDgwMTA4WjAzMTEwLwYDVQQD
EygzNjJiNTAwYmI3MTg4YTU3ZjM1M2RiMjcwMWNhMmExN2VmYTQ3OGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLc3E1OCsRjDUCigm2HRiOjacV+E
Ajd5RVX5b/f+42CwAKSmJv1P9IkfU58dqXYZIi3V5sc3NQPtMOsoh1Ihc/xbvqDp
CEALRjv26RM3eht29jQQEenAAzNuuKob2VVH/9XKwWM9uvzfu67DPR5a7P19dI36
o2qn5J9MRD0RmorsCHMhi8nI0Z9XFABLSDK4TL5Ut0nfzdmMSmFyFAUG8sePuImO
4j1LUGMwrSdAlq4MOQ/cG1u9qnawQ9h55qkxAwTWc7EsJ9LymxtbyeWnmN2fAemH
T+lR5xpwneZrRU4I6QJOKYERdFmqf6ZK16VmmztLEWALJ+aM09kQYnEV2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDYrUAu3GIpX81PbJwHKKhfvpHjCMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1RlvifE
msCy9CDULHW7lyxXueExbsehW/+ghs0QYj63JfvxQyVsYvt6n9rAegPHfGM3+3bu
He8cDg8rwRyMzui/TJ4fur/1CYq1N5DUndRoD8thZ5WRR5dV6oqKjSgoVvLuIZlp
3DM91kujjuXRq8bwXh3AWY17Izft9l76A5VcX5EHsU27Yt9Ma4YUncKqQ77DgiF0
g4pbgeewdAZTBEV0eOTTA7odFeKAPBGpad+k2+QeqcTd5biPZbNJVnQ3km5ixWhD
PpRJkLwD6GlW7/zodPHASJLiohn7SBQwtasgSnhbqlwUcbjRIKWGu4nP2knLw4w2
EE3AmtJLJjXOnA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:30:21 2026 by rpki-client