This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          csBCjAPar/mCL2ymqHi2ENfHvkJWa/NSPtQAyb9NzgY=
Subject key identifier:   22:5D:8D:1B:CB:79:93:5D:77:E0:FB:A6:A7:CB:34:B2:07:AC:33:96
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       019BF4D0D7F6FE67840D28D38BB53561E7E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 11:01:26 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:26 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:26 +0000
Files and hashes:         1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
                          2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
                          3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
                          4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
                          5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: vHGwoWx+qbzoCmJuyMYC/sc0y8Ti4UDpMK5crpFvuTI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:d7:f6:fe:67:84:0d:28:d3:8b:b5:35:61:e7:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Jan 25 11:01:26 2026 GMT
            Not After : Jan 26 11:01:26 2026 GMT
        Subject: CN=225d8d1bcb79935d77e0fba6a7cb34b207ac3396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cd:8c:e2:2a:3f:96:86:d2:93:1f:c9:9d:6a:
                    6a:f3:69:81:f6:d6:e5:e6:6c:fc:71:a4:d5:ef:35:
                    18:31:03:44:5e:b3:d0:f6:a7:b6:7b:d7:43:a9:d5:
                    ee:ee:d2:c1:a0:b8:c4:79:48:d5:a3:08:eb:ce:c5:
                    a1:f6:4a:84:f1:2b:93:0b:e4:0f:4e:3f:bb:f0:34:
                    0f:07:e5:7d:8c:44:0b:fa:73:e2:10:57:51:a2:76:
                    b0:44:ee:96:0e:c7:dd:2c:7c:14:3a:7e:f5:76:93:
                    e7:6c:f1:1c:01:7b:35:98:17:e0:6c:b1:99:0a:ab:
                    60:ca:c3:aa:cb:af:55:4b:d2:ae:20:3f:44:4d:ea:
                    45:17:ad:98:ff:60:79:c2:06:c4:6e:b0:a1:d8:e4:
                    5d:64:cc:5a:f4:d2:2b:aa:28:84:c5:7a:e5:ae:0c:
                    54:b1:ec:42:f9:ae:37:59:db:ec:37:f8:84:77:54:
                    20:9e:15:fa:ad:a5:8e:a8:d6:f9:d2:21:e3:31:a8:
                    00:9b:1e:0d:0e:f9:ba:f9:2f:72:11:d2:ec:79:a7:
                    76:f4:b6:53:81:00:ea:ab:7a:3f:bc:f3:c8:89:58:
                    93:2b:eb:c8:bb:36:15:de:55:49:69:00:19:b5:de:
                    d2:6b:a8:cb:2a:d3:36:f6:fb:be:60:9a:9f:9e:1a:
                    d7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5D:8D:1B:CB:79:93:5D:77:E0:FB:A6:A7:CB:34:B2:07:AC:33:96
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:5d:58:af:c2:62:df:74:bc:d5:c7:f2:d9:82:d3:b6:6a:67:
         70:0e:94:4e:ad:ae:44:5e:87:89:6d:b4:72:2a:33:29:33:ec:
         91:b8:e7:e4:97:40:59:d6:17:b5:97:d6:1e:91:09:37:85:d2:
         5d:d0:e8:5e:19:76:f9:75:d3:67:37:1c:d6:10:78:0a:bd:20:
         bf:c0:b7:b8:bd:02:a8:c5:26:bc:5a:f1:5e:b1:89:c7:9f:18:
         5b:69:07:46:10:5e:5f:17:18:3e:bb:2c:6f:cb:b1:dc:b2:a6:
         d2:21:5d:de:be:43:d7:95:c9:83:3a:c1:4f:79:99:8b:69:be:
         3a:69:2f:83:d5:16:48:8b:33:f1:ea:9e:c3:2e:94:e1:fe:f1:
         74:21:d2:e6:62:a4:62:97:86:14:d0:b3:e3:ca:05:14:22:5d:
         61:2f:08:e7:63:76:20:40:a2:a1:8b:4c:e4:ac:5d:50:fb:74:
         02:7a:ec:be:2a:24:db:f5:2e:04:10:52:ea:5d:56:a7:4a:ae:
         14:ec:88:fd:c0:ae:f0:2a:5f:4f:26:93:0a:a1:08:eb:93:c8:
         db:57:e2:fb:2a:b8:9d:65:14:58:a6:d5:b7:d5:ac:d3:40:1f:
         69:6d:97:e0:0c:2e:7c:9b:f3:72:82:eb:7b:80:e5:93:0b:66:
         eb:4f:8a:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00Nf2/meEDSjTi7U1YefpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzZDY2Mjk3YzVjZGJkMzZkODY4NDlkZGVhZTc5ODU5Nzlm
NDUwY2EwHhcNMjYwMTI1MTEwMTI2WhcNMjYwMTI2MTEwMTI2WjAzMTEwLwYDVQQD
EygyMjVkOGQxYmNiNzk5MzVkNzdlMGZiYTZhN2NiMzRiMjA3YWMzMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc2M4io/lobSkx/JnWpq82mB9tbl
5mz8caTV7zUYMQNEXrPQ9qe2e9dDqdXu7tLBoLjEeUjVowjrzsWh9kqE8SuTC+QP
Tj+78DQPB+V9jEQL+nPiEFdRonawRO6WDsfdLHwUOn71dpPnbPEcAXs1mBfgbLGZ
CqtgysOqy69VS9KuID9ETepFF62Y/2B5wgbEbrCh2ORdZMxa9NIrqiiExXrlrgxU
sexC+a43WdvsN/iEd1QgnhX6raWOqNb50iHjMagAmx4NDvm6+S9yEdLsead29LZT
gQDqq3o/vPPIiViTK+vIuzYV3lVJaQAZtd7Sa6jLKtM29vu+YJqfnhrXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJdjRvLeZNdd+D7pqfLNLIHrDOWMB8GA1UdIwQY
MBaAFLPWYpfFzb022GhJ3ernmFl59FDKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2Yt
ZWIxZjg3MTVlZWMwLzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS85MmMxY2YtNWEyMi00NTNjLTkwN2YtZWIxZjg3MTVlZWMw
LzEvczlaaWw4WE52VGJZYUVuZDZ1ZVlXWG4wVU1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApl1Yr8Ji
33S81cfy2YLTtmpncA6UTq2uRF6HiW20ciozKTPskbjn5JdAWdYXtZfWHpEJN4XS
XdDoXhl2+XXTZzcc1hB4Cr0gv8C3uL0CqMUmvFrxXrGJx58YW2kHRhBeXxcYPrss
b8ux3LKm0iFd3r5D15XJgzrBT3mZi2m+Omkvg9UWSIsz8eqewy6U4f7xdCHS5mKk
YpeGFNCz48oFFCJdYS8I52N2IECioYtM5KxdUPt0Anrsviok2/UuBBBS6l1Wp0qu
FOyI/cCu8CpfTyaTCqEI65PI21fi+yq4nWUUWKbVt9Ws00AfaW2X4AwufJvzcoLr
e4Dlkwtm60+KBw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:01 2026 by rpki-client