This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
File:                     g2Rixix_Y9L114enAdd5q2luIjY.mft (raw, json)
Hash identifier:          v9lhtkMa7x0tRBuhYl0QYM1ymxmnf6XLfdOtRVkSDl8=
Subject key identifier:   87:42:5D:4F:4C:AF:A6:45:CA:79:F9:BE:E7:3C:00:A0:93:B7:E0:9A
Authority key identifier: 83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36
Certificate issuer:       /CN=836462c62c7f63d2f5d787a701d779ab696e2236
Certificate serial:       019BF76388E960E10BFD6B1253B994467B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
Manifest number:          08FE
Signing time:             Sun 25 Jan 2026 23:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:54 +0000
Files and hashes:         1: 3xPRafeWx70gR7UkLCG5F9C2rHo.roa (hash: U7UkGJf+A9s/ynCa6+kyvE2RYV9ZJf+qvn3E4k0mve0=)
                          2: fRxvcTM6ZsttHwF0WM1Q-yByE2A.roa (hash: 82Lay6XggknlrO9CTIQXr6DOK4XN7yH0WY72KW8YeUk=)
                          3: g2Rixix_Y9L114enAdd5q2luIjY.crl (hash: IemtDcLn57ClyaUk5iqDcfJWkowwxnl/6/NCJOW35XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:88:e9:60:e1:0b:fd:6b:12:53:b9:94:46:7b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=836462c62c7f63d2f5d787a701d779ab696e2236
        Validity
            Not Before: Jan 25 23:00:54 2026 GMT
            Not After : Jan 26 23:00:54 2026 GMT
        Subject: CN=87425d4f4cafa645ca79f9bee73c00a093b7e09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:09:a3:12:72:fe:b0:fa:e9:b9:ea:28:a8:b9:
                    ac:b8:ec:2a:39:16:e8:f4:a0:06:de:8d:d1:1f:8e:
                    65:33:7c:4a:a0:9c:8a:cb:c9:0c:c2:a0:52:0e:48:
                    23:a4:dd:9d:ea:ef:f5:2d:1f:67:09:55:c9:3d:d3:
                    64:60:7f:2a:fc:04:e0:76:5e:fb:49:82:a1:9c:88:
                    66:dd:4f:13:a1:21:07:fb:18:7d:9e:36:07:b1:5b:
                    17:59:a8:0d:b6:58:47:8f:fc:b2:41:7d:f4:a6:48:
                    5c:e2:9a:0d:29:c4:76:7c:e1:8b:10:e9:a8:64:f9:
                    e7:3c:90:51:d6:7a:3e:bc:10:ac:ab:2f:ed:70:59:
                    02:36:f4:ca:b5:52:b4:3f:d2:a9:f5:be:ef:44:4a:
                    2b:cb:7b:32:58:71:10:5b:22:ca:f5:11:99:66:47:
                    a6:88:2d:f0:90:a4:97:bb:3b:ff:4b:11:e3:b2:00:
                    81:e0:f8:2e:08:f9:db:e8:fa:64:b8:cc:ed:fa:23:
                    57:04:b1:5a:7b:a6:ad:bc:64:e1:e1:88:3c:29:e4:
                    7a:ea:ff:bf:ab:fe:b9:d8:80:f1:67:a3:c8:b8:4d:
                    df:d4:53:07:91:13:c0:fc:bd:b3:29:e9:5b:0f:f1:
                    44:de:f6:e4:f1:cb:0c:07:0e:16:da:8b:71:86:53:
                    c1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:42:5D:4F:4C:AF:A6:45:CA:79:F9:BE:E7:3C:00:A0:93:B7:E0:9A
            X509v3 Authority Key Identifier:
                keyid:83:64:62:C6:2C:7F:63:D2:F5:D7:87:A7:01:D7:79:AB:69:6E:22:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Rixix_Y9L114enAdd5q2luIjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3717cf-fa38-4e3e-aefc-f910e5176b5e/1/g2Rixix_Y9L114enAdd5q2luIjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ad:32:94:b7:d5:84:5a:01:a7:2d:2b:04:fc:c1:7d:af:50:
         21:8e:89:86:19:c5:f4:7a:7a:f2:21:06:8e:71:40:c9:5d:3c:
         ee:c5:2a:98:a0:6f:8c:43:8e:ef:22:aa:40:7e:33:a7:10:d1:
         57:f1:2b:cd:0c:35:26:93:3a:44:37:78:61:d8:d3:6b:bb:7d:
         52:ea:0e:bd:09:28:b6:81:a4:79:e6:4c:59:1e:1a:41:73:34:
         98:92:3e:5e:b7:57:57:6b:49:9b:62:48:11:d1:79:7d:1e:97:
         7c:0d:03:34:03:b8:ab:79:89:ab:ec:ad:ab:7c:a6:2f:44:58:
         45:80:2a:71:39:64:53:d5:7e:77:46:41:de:7e:d8:bc:a9:68:
         fb:45:c2:ca:8e:d9:da:9d:a5:2f:2e:d9:e9:5c:0d:8d:28:02:
         74:93:58:db:a7:55:3c:7e:51:c0:1f:fe:dc:23:af:53:3c:9a:
         a1:b4:9f:10:7b:8a:86:80:0d:8b:e6:28:99:92:de:71:1d:fa:
         3c:6f:de:d3:73:de:41:35:1a:0f:20:5a:2c:ef:6d:e5:25:a2:
         7a:8a:53:af:9b:d1:f3:10:fc:8f:4e:81:9e:90:9a:6a:f6:d4:
         de:e8:70:f9:1b:4e:c8:eb:94:cd:7d:9c:75:15:34:61:79:06:
         dc:7c:86:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3Y4jpYOEL/WsSU7mURntYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNjQ2MmM2MmM3ZjYzZDJmNWQ3ODdhNzAxZDc3OWFiNjk2
ZTIyMzYwHhcNMjYwMTI1MjMwMDU0WhcNMjYwMTI2MjMwMDU0WjAzMTEwLwYDVQQD
Eyg4NzQyNWQ0ZjRjYWZhNjQ1Y2E3OWY5YmVlNzNjMDBhMDkzYjdlMDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QmjEnL+sPrpueooqLmsuOwqORbo
9KAG3o3RH45lM3xKoJyKy8kMwqBSDkgjpN2d6u/1LR9nCVXJPdNkYH8q/ATgdl77
SYKhnIhm3U8ToSEH+xh9njYHsVsXWagNtlhHj/yyQX30pkhc4poNKcR2fOGLEOmo
ZPnnPJBR1no+vBCsqy/tcFkCNvTKtVK0P9Kp9b7vREory3syWHEQWyLK9RGZZkem
iC3wkKSXuzv/SxHjsgCB4PguCPnb6PpkuMzt+iNXBLFae6atvGTh4Yg8KeR66v+/
q/652IDxZ6PIuE3f1FMHkRPA/L2zKelbD/FE3vbk8csMBw4W2otxhlPBBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdCXU9Mr6ZFynn5vuc8AKCTt+CaMB8GA1UdIwQY
MBaAFINkYsYsf2PS9deHpwHXeatpbiI2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMt
ZjkxMGU1MTc2YjVlLzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8zNzE3Y2YtZmEzOC00ZTNlLWFlZmMtZjkxMGU1MTc2YjVl
LzEvZzJSaXhpeF9ZOUwxMTRlbkFkZDVxMmx1SWpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAra0ylLfV
hFoBpy0rBPzBfa9QIY6JhhnF9Hp68iEGjnFAyV087sUqmKBvjEOO7yKqQH4zpxDR
V/ErzQw1JpM6RDd4YdjTa7t9UuoOvQkotoGkeeZMWR4aQXM0mJI+XrdXV2tJm2JI
EdF5fR6XfA0DNAO4q3mJq+ytq3ymL0RYRYAqcTlkU9V+d0ZB3n7YvKlo+0XCyo7Z
2p2lLy7Z6VwNjSgCdJNY26dVPH5RwB/+3COvUzyaobSfEHuKhoANi+YomZLecR36
PG/e03PeQTUaDyBaLO9t5SWieopTr5vR8xD8j06BnpCaavbU3uhw+RtOyOuUzX2c
dRU0YXkG3HyGNw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:16 2026 by rpki-client