This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          Lr/xReDzJP9nKxgQUcZ8+BliXtkMXZSIjlUttP3Nwec=
Subject key identifier:   31:01:02:04:EE:59:17:EE:E0:B6:0D:34:C2:F5:DD:66:FF:B1:1A:B3
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       019BF91B038731FCF65A8C10B499C311D4FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          05B2
Signing time:             Mon 26 Jan 2026 07:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 07:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 07:00:55 +0000
Files and hashes:         1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
                          2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: 3vl0ayNqRLcSZa/GicxekXbr+4XL0Czu3TkO61yDPAc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:03:87:31:fc:f6:5a:8c:10:b4:99:c3:11:d4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: Jan 26 07:00:55 2026 GMT
            Not After : Jan 27 07:00:55 2026 GMT
        Subject: CN=31010204ee5917eee0b60d34c2f5dd66ffb11ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:70:c8:61:db:58:be:24:a7:1a:23:4e:dc:
                    32:50:a1:fc:d8:65:b9:f3:e4:55:9f:41:28:a4:4e:
                    e5:5b:cc:4a:05:b2:75:02:02:c9:ed:41:71:9f:a4:
                    23:a7:d1:9b:2d:ce:b7:03:ca:e0:d7:5a:01:24:05:
                    2e:63:b9:37:b3:ac:ed:46:40:54:32:6c:93:23:15:
                    96:92:d8:f7:98:0d:4f:ea:fd:f3:d1:a4:44:de:6d:
                    1a:bd:e1:33:91:87:0b:f5:a7:ac:42:f6:6c:ac:52:
                    7b:aa:5b:06:bb:13:01:2a:c6:3f:56:95:e8:93:d3:
                    25:92:bc:a5:5e:32:e3:27:59:24:5d:35:32:9e:07:
                    ea:b8:5b:20:97:1d:fe:4b:dd:a3:fe:ba:9f:5d:09:
                    39:78:f8:2d:a0:8e:41:5b:21:af:dd:a0:7e:82:2e:
                    7a:e4:f4:61:9e:74:35:ca:e9:cf:31:a6:dc:d5:9b:
                    9d:c1:ba:f1:90:75:de:a9:a5:7e:61:ef:c9:6e:44:
                    95:72:83:07:ce:e7:d5:9c:1b:1c:93:dd:c2:c6:14:
                    21:1f:ea:70:54:b0:3c:d1:fd:ef:f7:41:c2:1d:6d:
                    32:82:c7:6b:e8:c7:f7:6a:bd:57:c3:22:a4:37:3b:
                    0d:6a:f6:be:eb:3a:64:fd:1a:ef:aa:9a:33:3b:b3:
                    cb:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:01:02:04:EE:59:17:EE:E0:B6:0D:34:C2:F5:DD:66:FF:B1:1A:B3
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:97:37:32:0a:c8:60:23:bf:a9:ee:0e:26:a9:8c:af:3d:6e:
         9a:c3:8f:32:c2:23:66:af:59:bf:e4:b6:99:e3:89:9d:25:40:
         ba:86:eb:ff:29:60:e6:af:49:5f:95:41:6a:b9:46:db:3e:63:
         02:53:31:1e:f5:29:ff:c1:3b:42:8b:e7:6c:fe:00:29:fb:87:
         8f:59:fd:89:2f:b4:60:70:44:b7:14:a9:a6:98:cb:04:e6:ed:
         27:da:a1:e9:c4:02:49:a8:e2:53:20:f8:72:ba:24:7c:2d:7c:
         ab:4f:83:9c:19:c3:6f:dd:b5:76:d4:9d:2f:a3:92:c5:1e:aa:
         a0:7e:6d:75:9b:0f:c0:8a:bf:94:46:f7:23:41:16:d7:c5:9b:
         4c:bf:16:fd:24:86:d4:c5:66:62:1f:36:91:ec:9a:5e:e4:ca:
         30:5c:2c:2c:8f:76:21:35:04:f4:97:5b:36:1d:d2:a7:88:a5:
         92:4d:fa:46:42:e3:2a:99:cc:91:21:4d:d6:ad:2a:91:23:3c:
         38:e2:ec:22:bd:34:87:39:56:9e:98:ee:ab:5b:e0:90:c5:00:
         de:0e:c3:43:e1:67:b9:15:09:ad:1c:a7:04:1a:ec:e8:69:08:
         77:c3:a2:25:11:10:25:a9:22:d7:39:1d:c6:dc:d0:de:37:3b:
         94:96:09:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5GwOHMfz2WowQtJnDEdT+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjYwMTI2MDcwMDU1WhcNMjYwMTI3MDcwMDU1WjAzMTEwLwYDVQQD
EygzMTAxMDIwNGVlNTkxN2VlZTBiNjBkMzRjMmY1ZGQ2NmZmYjExYWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfZwyGHbWL4kpxojTtwyUKH82GW5
8+RVn0EopE7lW8xKBbJ1AgLJ7UFxn6Qjp9GbLc63A8rg11oBJAUuY7k3s6ztRkBU
MmyTIxWWktj3mA1P6v3z0aRE3m0aveEzkYcL9aesQvZsrFJ7qlsGuxMBKsY/VpXo
k9MlkrylXjLjJ1kkXTUyngfquFsglx3+S92j/rqfXQk5ePgtoI5BWyGv3aB+gi56
5PRhnnQ1yunPMabc1ZudwbrxkHXeqaV+Ye/JbkSVcoMHzufVnBsck93CxhQhH+pw
VLA80f3v90HCHW0ygsdr6Mf3ar1XwyKkNzsNava+6zpk/RrvqpozO7PLPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDEBAgTuWRfu4LYNNML13Wb/sRqzMB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpc3MgrI
YCO/qe4OJqmMrz1umsOPMsIjZq9Zv+S2meOJnSVAuobr/ylg5q9JX5VBarlG2z5j
AlMxHvUp/8E7QovnbP4AKfuHj1n9iS+0YHBEtxSpppjLBObtJ9qh6cQCSajiUyD4
crokfC18q0+DnBnDb921dtSdL6OSxR6qoH5tdZsPwIq/lEb3I0EW18WbTL8W/SSG
1MVmYh82keyaXuTKMFwsLI92ITUE9JdbNh3Sp4ilkk36RkLjKpnMkSFN1q0qkSM8
OOLsIr00hzlWnpjuq1vgkMUA3g7DQ+FnuRUJrRynBBrs6GkId8OiJREQJaki1zkd
xtzQ3jc7lJYJVQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:11:59 2026 by rpki-client