This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
File:                     ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft (raw, json)
Hash identifier:          UkoMz09OiFkAANSvPHknV9S7DQBbMpl79vtTvKK+j+o=
Subject key identifier:   26:B3:19:35:D5:0A:58:F6:27:0E:8A:5B:99:42:D4:2B:10:C7:0C:31
Authority key identifier: 66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F
Certificate issuer:       /CN=6665dd97665a23b1b183e223822b66b5ae536a2f
Certificate serial:       019BF50761D17825D522727EB081B199A227
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 12:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 12:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 12:01:00 +0000
Files and hashes:         1: 5dpJwurmjcNweBL1k9CqEM749HA.roa (hash: TM/ss4Bk5R6W5257quO9m83xy+4qnqaZUXN12oiEFzU=)
                          2: 7hzhMaHYuL-7BSKPyCuK9LYB9ts.roa (hash: Uix2TsomGcH7KlSyaSm6ItgQxCc3dO2ePCxbE9zpBHQ=)
                          3: GREeqZaODQe_pjDOkl9K06yc2fM.roa (hash: 9+xjCnaLjGsg7N2WRsPTLMdY0ESrGSWfOEeNfY4jOkE=)
                          4: Sw71YjaNP_rQ4woPVfkpIKYk-vY.roa (hash: V8sucqvBo1htAnsnFCbVGLqUSg9yHEvrbxQkCxUkXZc=)
                          5: ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl (hash: FH+ti42FSC9xcAi6x9TN91OACZBkmR+AMT8h9b9YvGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:61:d1:78:25:d5:22:72:7e:b0:81:b1:99:a2:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6665dd97665a23b1b183e223822b66b5ae536a2f
        Validity
            Not Before: Jan 25 12:01:00 2026 GMT
            Not After : Jan 26 12:01:00 2026 GMT
        Subject: CN=26b31935d50a58f6270e8a5b9942d42b10c70c31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a4:a0:bd:53:b2:ed:05:80:29:52:96:5f:b0:
                    63:20:d2:82:14:8f:37:4a:fc:af:b0:40:4c:df:50:
                    26:f6:29:03:76:e9:52:0b:c2:86:46:36:9c:e5:66:
                    0a:6b:ad:70:4c:c3:79:02:0a:76:90:d7:05:66:5a:
                    06:9d:f7:2f:91:59:29:3a:b4:4e:7f:73:09:14:0d:
                    d4:fa:de:75:0a:17:c8:52:4f:0b:f3:6c:8d:94:67:
                    9c:36:7f:21:a4:97:ee:85:0d:de:90:40:7f:33:ee:
                    ae:6f:05:5f:79:56:2a:5c:cc:5f:de:41:8d:80:54:
                    c6:c1:75:df:ee:f8:03:69:53:15:2c:c4:f3:f9:0d:
                    af:88:82:3e:35:3f:84:e0:fa:52:0f:81:cc:27:18:
                    35:ea:22:62:94:4f:f0:b0:cb:0f:4e:71:30:3a:67:
                    77:d4:8a:90:c5:b3:c0:0d:bc:24:05:98:7a:b6:f6:
                    05:51:9b:b0:cd:af:ce:8c:ba:c2:fa:ad:bd:67:80:
                    39:25:f4:0a:d9:f1:bf:dc:0a:0c:03:9c:5e:75:67:
                    3f:fd:d5:9b:a7:30:c7:97:15:4b:b0:dc:dd:1e:c0:
                    8f:88:a8:1b:18:a5:4c:8c:78:a0:a4:c9:ce:a4:8a:
                    1f:52:30:80:64:5f:09:9d:ea:2e:99:a4:f4:05:7d:
                    0b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B3:19:35:D5:0A:58:F6:27:0E:8A:5B:99:42:D4:2B:10:C7:0C:31
            X509v3 Authority Key Identifier:
                keyid:66:65:DD:97:66:5A:23:B1:B1:83:E2:23:82:2B:66:B5:AE:53:6A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/312529-73f6-4809-af9b-e8d70717ff8a/1/ZmXdl2ZaI7Gxg-Ijgitmta5Tai8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:00:de:e6:7d:14:ac:3f:93:22:9d:88:79:ff:64:bc:e5:a0:
         ed:5d:df:f7:7f:3a:d7:a9:7b:0a:57:07:bb:b8:6d:e9:b9:46:
         4e:d5:57:2e:56:35:c6:75:f1:99:b9:5d:4d:60:26:17:33:a7:
         a3:9d:55:4e:2c:3e:44:2f:a7:f5:b8:b7:e7:93:b1:7f:40:6e:
         b6:4b:a0:c0:92:8b:60:7c:a3:63:67:4e:e9:39:13:ed:8c:99:
         d5:e1:0d:ab:c6:9c:40:8a:22:23:11:d3:d1:84:7e:b1:c2:88:
         41:2f:4b:2b:b8:0b:c8:26:cb:02:de:90:7c:52:6e:36:22:7a:
         7c:f4:72:f7:e8:1d:72:e9:44:86:94:8d:9c:45:47:e7:48:e7:
         c0:e2:e3:04:1f:7d:fe:98:66:71:c6:e5:eb:dd:09:ff:75:80:
         1c:54:05:60:51:41:0c:87:3f:24:c0:6e:23:ac:de:6c:6e:ed:
         42:ac:f4:70:d7:8b:0c:68:cb:2d:75:69:fd:62:ac:e3:86:60:
         4e:ec:da:ab:15:7a:41:9d:25:2d:b0:05:89:58:97:dc:fa:75:
         36:27:42:af:7b:38:73:29:4c:90:cb:41:21:ec:19:c4:6b:b8:
         4b:22:1a:ce:ab:95:bc:d6:64:f3:23:45:63:94:14:41:d6:6b:
         6f:d0:d0:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1B2HReCXVInJ+sIGxmaInMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NjVkZDk3NjY1YTIzYjFiMTgzZTIyMzgyMmI2NmI1YWU1
MzZhMmYwHhcNMjYwMTI1MTIwMTAwWhcNMjYwMTI2MTIwMTAwWjAzMTEwLwYDVQQD
EygyNmIzMTkzNWQ1MGE1OGY2MjcwZThhNWI5OTQyZDQyYjEwYzcwYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaSgvVOy7QWAKVKWX7BjINKCFI83
SvyvsEBM31Am9ikDdulSC8KGRjac5WYKa61wTMN5Agp2kNcFZloGnfcvkVkpOrRO
f3MJFA3U+t51ChfIUk8L82yNlGecNn8hpJfuhQ3ekEB/M+6ubwVfeVYqXMxf3kGN
gFTGwXXf7vgDaVMVLMTz+Q2viII+NT+E4PpSD4HMJxg16iJilE/wsMsPTnEwOmd3
1IqQxbPADbwkBZh6tvYFUZuwza/OjLrC+q29Z4A5JfQK2fG/3AoMA5xedWc//dWb
pzDHlxVLsNzdHsCPiKgbGKVMjHigpMnOpIofUjCAZF8JneoumaT0BX0L/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCazGTXVClj2Jw6KW5lC1CsQxwwxMB8GA1UdIwQY
MBaAFGZl3ZdmWiOxsYPiI4IrZrWuU2ovMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWIt
ZThkNzA3MTdmZjhhLzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8zMTI1MjktNzNmNi00ODA5LWFmOWItZThkNzA3MTdmZjhh
LzEvWm1YZGwyWmFJN0d4Zy1JamdpdG10YTVUYWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATADe5n0U
rD+TIp2Ief9kvOWg7V3f938616l7ClcHu7ht6blGTtVXLlY1xnXxmbldTWAmFzOn
o51VTiw+RC+n9bi355Oxf0ButkugwJKLYHyjY2dO6TkT7YyZ1eENq8acQIoiIxHT
0YR+scKIQS9LK7gLyCbLAt6QfFJuNiJ6fPRy9+gdculEhpSNnEVH50jnwOLjBB99
/phmccbl690J/3WAHFQFYFFBDIc/JMBuI6zebG7tQqz0cNeLDGjLLXVp/WKs44Zg
TuzaqxV6QZ0lLbAFiViX3Pp1NidCr3s4cylMkMtBIewZxGu4SyIazquVvNZk8yNF
Y5QUQdZrb9DQbQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:42:44 2026 by rpki-client