This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          Rjw/x3IBMMxq2+vv46f/MLOFVAz0umtdiPcSmqvzNek=
Subject key identifier:   B0:9D:AC:BA:6D:FF:83:4D:39:92:B3:2D:B7:03:EE:FD:F9:EC:6E:C9
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       019BF5E3607E55774786E09114D1330D8544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          0C2C
Signing time:             Sun 25 Jan 2026 16:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:17 +0000
Files and hashes:         1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
                          2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: aG4n0r4iddRPKJaDXP7lleqiYbP4/i7H0jQUqz856OI=)
                          4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:60:7e:55:77:47:86:e0:91:14:d1:33:0d:85:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Jan 25 16:01:17 2026 GMT
            Not After : Jan 26 16:01:17 2026 GMT
        Subject: CN=b09dacba6dff834d3992b32db703eefdf9ec6ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7d:a8:72:ec:2f:36:4d:d7:c7:43:66:59:9f:
                    06:18:e3:1e:75:56:6a:55:ba:dd:46:d5:3d:de:f3:
                    1b:0d:83:3e:5e:30:4a:32:70:ba:f8:70:5c:4e:4e:
                    bf:bd:03:a7:66:ba:86:86:08:b6:a1:04:93:59:ff:
                    f6:ea:c1:78:d0:ce:f6:5e:e2:5b:5c:33:50:70:65:
                    c8:a5:73:85:4f:98:5e:14:67:5b:d8:02:3a:aa:76:
                    0a:1f:f5:a9:a9:78:42:99:e3:37:3a:9e:7e:88:1d:
                    b1:90:92:fc:65:cf:92:81:29:f3:cc:83:c8:79:80:
                    5f:7e:7f:b3:31:ae:22:02:8a:cf:f0:db:99:ba:ed:
                    c3:18:97:11:3e:7d:bf:11:ad:d6:b9:ea:dc:56:93:
                    50:83:9d:05:61:72:c8:1d:81:8b:fd:71:d9:bb:f4:
                    39:3b:13:5f:eb:76:c4:ae:c8:31:40:de:33:12:72:
                    07:9e:0e:f2:b7:86:48:f1:5c:82:3b:19:4d:ef:e8:
                    76:b6:65:67:dd:75:7f:83:36:46:64:a9:e2:6a:06:
                    fe:92:54:3d:01:08:42:93:f9:f0:cc:2d:c7:10:8d:
                    62:70:ac:6c:72:99:44:aa:02:1a:99:aa:7f:82:fc:
                    57:6e:e2:2f:be:a8:0b:15:b4:06:95:49:ee:86:32:
                    5b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:9D:AC:BA:6D:FF:83:4D:39:92:B3:2D:B7:03:EE:FD:F9:EC:6E:C9
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e3:43:dd:c1:65:9d:12:34:bd:02:c0:35:6a:16:77:42:a2:
         1b:c3:db:dd:62:18:fb:2f:78:f6:2c:41:61:27:66:7e:03:22:
         70:89:f5:fd:af:1f:07:9d:89:f7:68:13:f8:18:23:a6:98:09:
         7a:f0:fc:77:9a:16:85:3a:06:86:36:d4:66:6b:20:20:c4:f3:
         ee:31:e3:66:b1:b2:b0:9e:5c:2e:3b:84:b4:48:cb:3d:52:aa:
         fb:a8:de:4b:cb:1f:8d:ba:10:5b:31:65:f1:f7:54:a3:9b:28:
         e2:29:ee:df:00:7c:08:59:e9:0b:e6:8d:58:03:f9:88:62:9d:
         e0:16:d5:8b:fd:5f:53:30:e6:21:fa:6f:56:7c:91:94:22:10:
         8e:78:05:3a:5c:30:81:37:85:ee:bb:57:46:be:32:c9:19:19:
         b2:cd:20:80:78:9e:b2:76:ca:91:80:81:dc:0a:b5:d6:63:41:
         06:80:d8:c3:c5:a7:c4:ad:a4:93:ba:f9:1c:c6:ab:d9:a8:35:
         a4:2a:4c:6e:d2:db:32:ed:63:15:49:76:dc:bb:4a:ab:eb:64:
         c2:98:b4:1e:a1:12:2a:5e:14:44:e6:31:05:22:00:54:ad:dd:
         b2:94:1f:16:06:9b:80:c3:80:c8:fa:59:40:ce:72:dd:c4:cc:
         35:f6:07:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv142B+VXdHhuCRFNEzDYVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl
MTQ3ZjgwHhcNMjYwMTI1MTYwMTE3WhcNMjYwMTI2MTYwMTE3WjAzMTEwLwYDVQQD
EyhiMDlkYWNiYTZkZmY4MzRkMzk5MmIzMmRiNzAzZWVmZGY5ZWM2ZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw32ocuwvNk3Xx0NmWZ8GGOMedVZq
VbrdRtU93vMbDYM+XjBKMnC6+HBcTk6/vQOnZrqGhgi2oQSTWf/26sF40M72XuJb
XDNQcGXIpXOFT5heFGdb2AI6qnYKH/WpqXhCmeM3Op5+iB2xkJL8Zc+SgSnzzIPI
eYBffn+zMa4iAorP8NuZuu3DGJcRPn2/Ea3WuercVpNQg50FYXLIHYGL/XHZu/Q5
OxNf63bErsgxQN4zEnIHng7yt4ZI8VyCOxlN7+h2tmVn3XV/gzZGZKniagb+klQ9
AQhCk/nwzC3HEI1icKxscplEqgIamap/gvxXbuIvvqgLFbQGlUnuhjJbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCdrLpt/4NNOZKzLbcD7v357G7JMB8GA1UdIwQY
MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt
NThjODVkNDMzNmJjLzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj
LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOND3cFl
nRI0vQLANWoWd0KiG8Pb3WIY+y949ixBYSdmfgMicIn1/a8fB52J92gT+BgjppgJ
evD8d5oWhToGhjbUZmsgIMTz7jHjZrGysJ5cLjuEtEjLPVKq+6jeS8sfjboQWzFl
8fdUo5so4inu3wB8CFnpC+aNWAP5iGKd4BbVi/1fUzDmIfpvVnyRlCIQjngFOlww
gTeF7rtXRr4yyRkZss0ggHiesnbKkYCB3Aq11mNBBoDYw8WnxK2kk7r5HMar2ag1
pCpMbtLbMu1jFUl23LtKq+tkwpi0HqESKl4UROYxBSIAVK3dspQfFgabgMOAyPpZ
QM5y3cTMNfYHPw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:25 2026 by rpki-client