This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File:                     are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier:          uPMVaF5xKOw2JYSkJdKSJxpNeE+c9iYgORE2Cr4kcL4=
Subject key identifier:   F0:E3:AE:06:1B:18:BA:F6:C5:02:C8:57:3B:A2:F5:68:DA:85:7D:51
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer:       /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial:       019BF91B2A3352F36683B37530066F390AFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number:          17F0
Signing time:             Mon 26 Jan 2026 07:01:05 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:05 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:05 +0000
Files and hashes:         1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
                          2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: Z2xScpIAF0XmNEPm5xSpfqvaho1umIbZndd6epBfYOQ=)
                          3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:2a:33:52:f3:66:83:b3:75:30:06:6f:39:0a:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
        Validity
            Not Before: Jan 26 07:01:05 2026 GMT
            Not After : Jan 27 07:01:05 2026 GMT
        Subject: CN=f0e3ae061b18baf6c502c8573ba2f568da857d51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:e3:bf:09:2b:70:91:76:d7:b5:c9:7b:ef:
                    f2:16:57:9f:db:73:47:df:79:84:30:55:09:74:f3:
                    87:40:90:06:24:00:4c:cc:61:51:4f:be:04:89:fd:
                    9a:02:1e:fb:4c:40:dc:b9:ec:ad:b4:db:7e:8b:3f:
                    30:0a:63:9f:42:a2:be:b1:9d:26:c6:54:30:ed:2c:
                    b4:0a:68:d9:33:e5:a3:4e:a5:5b:ba:4a:1c:82:b9:
                    76:e5:43:04:aa:ad:42:ba:d8:56:42:77:ad:2d:24:
                    9f:70:3c:87:9e:e1:a2:78:8a:33:46:04:ca:e3:d8:
                    ab:b4:05:c2:6a:dc:ca:8d:45:d2:ce:e0:e8:c4:2a:
                    c0:78:8a:01:39:a0:f6:1d:5a:0d:d2:19:ae:5c:00:
                    aa:84:0c:1c:72:49:7d:d2:8d:c2:24:57:90:c3:5c:
                    86:f8:7b:a4:76:9a:16:cf:55:40:8c:96:12:44:57:
                    cb:19:fb:59:5c:8e:25:a8:61:9d:72:7c:53:74:c4:
                    6d:5d:e6:0d:d9:84:33:da:37:f5:28:a9:73:68:2c:
                    d1:d8:95:10:17:ed:4c:67:e9:48:9b:1d:b9:9e:b3:
                    e5:a1:86:1b:87:ba:8e:f3:b0:1a:aa:29:72:c8:48:
                    dc:e9:1e:e4:4e:f8:ca:64:24:e3:4b:b6:e7:6d:09:
                    2d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E3:AE:06:1B:18:BA:F6:C5:02:C8:57:3B:A2:F5:68:DA:85:7D:51
            X509v3 Authority Key Identifier:
                keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:d8:da:f9:8d:86:a9:d7:48:a4:67:f6:d1:eb:6f:69:44:58:
         24:30:6c:fc:73:23:ad:f1:db:bc:60:97:3a:31:02:2b:60:91:
         b9:6b:50:03:10:96:80:da:7d:64:1b:66:98:db:b4:f1:d8:c7:
         6d:67:27:48:22:8a:40:15:61:47:0b:cd:78:51:0d:df:5a:1d:
         b6:39:ec:a1:b8:63:a3:86:db:9b:75:3d:9e:a6:1a:da:14:d2:
         f5:5e:46:75:77:5c:b7:e4:f0:3a:b8:96:51:a0:8d:a5:7f:dc:
         93:cc:91:59:6f:7c:c2:16:06:6b:22:58:45:c9:a7:25:9a:1b:
         82:d5:50:bc:fb:ce:a2:46:da:b3:d8:12:1a:1f:d9:20:7f:9e:
         b4:f5:4b:f8:e3:06:c7:99:ae:1d:d4:1e:07:3a:e9:c5:71:56:
         1c:57:2e:83:a4:78:18:6c:d7:65:a5:aa:77:56:9b:18:5b:cd:
         95:70:a3:6a:74:b9:d1:b3:da:c6:fb:a2:6c:dd:22:08:8a:dc:
         65:14:e8:36:a7:e7:9d:b8:a9:b7:38:9b:69:87:72:07:7c:82:
         31:0e:ef:98:e0:fc:3b:19:d6:80:e5:ac:eb:b2:ea:18:b7:2d:
         3a:01:da:8d:2b:fd:f9:1b:b0:be:93:13:6d:cc:dc:80:51:a5:
         78:99:94:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5GyozUvNmg7N1MAZvOQr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYjdiOWNlZTAwNDMwMGVhZmUwOWJmMTJmY2I2ZGExZGQz
MGE0ZDcwHhcNMjYwMTI2MDcwMTA1WhcNMjYwMTI3MDcwMTA1WjAzMTEwLwYDVQQD
EyhmMGUzYWUwNjFiMThiYWY2YzUwMmM4NTczYmEyZjU2OGRhODU3ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmizjvwkrcJF217XJe+/yFlef23NH
33mEMFUJdPOHQJAGJABMzGFRT74Eif2aAh77TEDcueyttNt+iz8wCmOfQqK+sZ0m
xlQw7Sy0CmjZM+WjTqVbukocgrl25UMEqq1CuthWQnetLSSfcDyHnuGieIozRgTK
49irtAXCatzKjUXSzuDoxCrAeIoBOaD2HVoN0hmuXACqhAwcckl90o3CJFeQw1yG
+HukdpoWz1VAjJYSRFfLGftZXI4lqGGdcnxTdMRtXeYN2YQz2jf1KKlzaCzR2JUQ
F+1MZ+lImx25nrPloYYbh7qO87AaqilyyEjc6R7kTvjKZCTjS7bnbQktCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDjrgYbGLr2xQLIVzui9WjahX1RMB8GA1UdIwQY
MBaAFGq3uc7gBDAOr+Cb8S/LbaHdMKTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYt
ODhhYTZmZDBhYThlLzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83ZDExZTItNTI3NC00NDdlLTlmZTYtODhhYTZmZDBhYThl
LzEvYXJlNXp1QUVNQTZ2NEp2eEw4dHRvZDB3cE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtja+Y2G
qddIpGf20etvaURYJDBs/HMjrfHbvGCXOjECK2CRuWtQAxCWgNp9ZBtmmNu08djH
bWcnSCKKQBVhRwvNeFEN31odtjnsobhjo4bbm3U9nqYa2hTS9V5GdXdct+TwOriW
UaCNpX/ck8yRWW98whYGayJYRcmnJZobgtVQvPvOokbas9gSGh/ZIH+etPVL+OMG
x5muHdQeBzrpxXFWHFcug6R4GGzXZaWqd1abGFvNlXCjanS50bPaxvuibN0iCIrc
ZRToNqfnnbiptzibaYdyB3yCMQ7vmOD8OxnWgOWs67LqGLctOgHajSv9+RuwvpMT
bczcgFGleJmU5w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:12 2026 by rpki-client