This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
File:                     Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft (raw, json)
Hash identifier:          OhDZ7sQZ2Sr+h93Js9R56VYBnBBvKuaTtgbazQSVHVY=
Subject key identifier:   6D:7A:11:EC:CD:03:55:58:E5:BB:5C:8B:19:0A:BB:08:85:FB:56:40
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Certificate issuer:       /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial:       019BF91B390481C0ED836713C065A677B735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
Manifest number:          14D8
Signing time:             Mon 26 Jan 2026 07:01:09 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:09 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:09 +0000
Files and hashes:         1: Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl (hash: 0nDPuYxRjVvMXt/4ekDZ0pSuX+34a2hXe6wb8iebcFA=)
                          2: ZJDmPvzDE__eYUkVLrAmHcTbK2E.roa (hash: mZslKl2yoouF0x/HaqlGPF55VMLSQDizBAGrzjr6tuY=)
                          3: bipK7OOAYGpHrw7S5fmJoRnxSxQ.roa (hash: rrZJyfnTOVyxttfXNIKKI76uVK5IaaBMN4ZDEVeQY94=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:39:04:81:c0:ed:83:67:13:c0:65:a6:77:b7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
        Validity
            Not Before: Jan 26 07:01:09 2026 GMT
            Not After : Jan 27 07:01:09 2026 GMT
        Subject: CN=6d7a11eccd035558e5bb5c8b190abb0885fb5640
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:1f:75:4c:6f:89:72:c4:5f:d1:e1:16:a6:
                    46:72:a1:8c:cf:e3:c4:dd:a9:c0:7a:d7:5f:3c:f4:
                    a9:2f:78:8e:74:e1:2d:18:f2:ad:7e:f7:70:c6:a6:
                    4e:c9:28:e7:76:59:22:64:2f:0c:8f:13:24:ff:2c:
                    4f:14:47:c4:ac:96:3b:75:8c:35:a8:ab:e5:b7:e2:
                    bb:54:06:57:c7:5f:44:1c:07:1c:45:33:ca:e9:e1:
                    d3:46:fa:d3:a6:5f:de:83:05:dc:b3:25:a0:76:fd:
                    66:89:0d:7e:4c:b8:d2:78:20:47:da:b4:c2:66:57:
                    5c:bf:8c:50:3d:ac:13:f6:d0:b5:2c:b3:02:7a:a5:
                    b1:a1:00:ce:0c:15:de:57:d4:8d:e8:62:94:7b:4b:
                    7f:d2:10:97:d7:d9:66:eb:44:49:fd:f7:94:83:c1:
                    ea:f8:9b:1c:9a:35:9b:bf:dc:24:82:3f:10:7f:b4:
                    dc:0e:ad:d1:fc:fc:bb:8f:71:9c:0d:3e:4d:6f:a2:
                    25:0a:2b:7c:f2:f2:b8:85:5c:de:f2:55:63:11:04:
                    41:ec:8b:b9:d7:1d:e6:8c:ba:b2:a2:e2:02:a3:42:
                    3a:4f:8b:de:e2:f5:0c:00:69:3e:a0:55:f4:2e:aa:
                    8e:72:de:82:18:aa:f3:12:d1:b6:56:fe:66:d4:14:
                    18:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:7A:11:EC:CD:03:55:58:E5:BB:5C:8B:19:0A:BB:08:85:FB:56:40
            X509v3 Authority Key Identifier:
                keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:7e:59:17:ee:b1:23:49:9b:8a:79:1d:07:94:c6:2c:1c:f2:
         fd:41:27:8a:60:ab:21:af:bf:a7:0b:a1:7b:35:ef:56:cc:43:
         eb:b5:00:61:b8:40:6d:d2:f6:b7:e3:01:61:50:25:1c:98:57:
         79:88:71:9f:70:db:b2:3d:29:a7:84:fd:52:cd:d4:75:fa:6b:
         cc:7e:ab:66:ca:1a:80:3a:08:55:83:25:26:82:e6:f6:cc:87:
         30:77:84:89:ae:07:dc:4b:9b:a9:16:36:6e:a5:eb:b8:c7:89:
         c8:2d:d4:94:84:cb:09:b6:c1:4d:c0:a1:1c:dd:12:50:f9:4f:
         fd:f8:21:c9:db:dc:c9:3f:5e:62:85:94:31:88:6a:b9:41:54:
         99:9d:60:c3:87:be:e8:0f:0c:95:d7:18:25:b2:4e:b8:68:8f:
         e9:d7:ca:0a:45:ae:a8:c3:17:1f:f4:2c:43:96:6d:c6:4d:48:
         4b:46:1c:41:18:ea:43:e2:86:6a:97:11:c9:1d:8f:eb:5e:a2:
         d7:7c:da:0b:18:97:3f:b1:ee:ab:7f:09:c3:82:ba:12:47:b3:
         fb:51:19:05:24:97:55:32:8c:14:9e:1b:51:68:38:08:5d:af:
         b6:db:bd:ad:63:24:0e:2b:2c:fe:42:0d:4a:f5:2a:35:08:4f:
         12:62:2c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5GzkEgcDtg2cTwGWmd7c1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZGNmNjJjNmI1NDExMTM5YTVkMTMwOWRkOWVkOTI2ZjQz
MTQzMjAwHhcNMjYwMTI2MDcwMTA5WhcNMjYwMTI3MDcwMTA5WjAzMTEwLwYDVQQD
Eyg2ZDdhMTFlY2NkMDM1NTU4ZTViYjVjOGIxOTBhYmIwODg1ZmI1NjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopEfdUxviXLEX9HhFqZGcqGMz+PE
3anAetdfPPSpL3iOdOEtGPKtfvdwxqZOySjndlkiZC8MjxMk/yxPFEfErJY7dYw1
qKvlt+K7VAZXx19EHAccRTPK6eHTRvrTpl/egwXcsyWgdv1miQ1+TLjSeCBH2rTC
Zldcv4xQPawT9tC1LLMCeqWxoQDODBXeV9SN6GKUe0t/0hCX19lm60RJ/feUg8Hq
+JscmjWbv9wkgj8Qf7TcDq3R/Py7j3GcDT5Nb6IlCit88vK4hVze8lVjEQRB7Iu5
1x3mjLqyouICo0I6T4ve4vUMAGk+oFX0LqqOct6CGKrzEtG2Vv5m1BQYlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG16EezNA1VY5btcixkKuwiF+1ZAMB8GA1UdIwQY
MBaAFArc9ixrVBETml0TCd2e2Sb0MUMgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2It
ZjhkNmJkMzBjYzE5LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jYzg0M2UtNjBjNy00N2FjLTgyM2ItZjhkNmJkMzBjYzE5
LzEvQ3R6MkxHdFVFUk9hWFJNSjNaN1pKdlF4UXlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo35ZF+6x
I0mbinkdB5TGLBzy/UEnimCrIa+/pwuhezXvVsxD67UAYbhAbdL2t+MBYVAlHJhX
eYhxn3Dbsj0pp4T9Us3UdfprzH6rZsoagDoIVYMlJoLm9syHMHeEia4H3EubqRY2
bqXruMeJyC3UlITLCbbBTcChHN0SUPlP/fghydvcyT9eYoWUMYhquUFUmZ1gw4e+
6A8MldcYJbJOuGiP6dfKCkWuqMMXH/QsQ5Ztxk1IS0YcQRjqQ+KGapcRyR2P616i
13zaCxiXP7Huq38Jw4K6Ekez+1EZBSSXVTKMFJ4bUWg4CF2vttu9rWMkDiss/kIN
SvUqNQhPEmIsIg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 11:12:03 2026 by rpki-client