This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
File:                     q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft (raw, json)
Hash identifier:          JtYsbuK3V8hz4wX9DparpN5e01ktd4iu9KR7jo3G+aA=
Subject key identifier:   D4:23:35:D8:F6:64:40:AF:AF:3A:53:92:7D:FF:82:91:FF:28:D4:A9
Authority key identifier: AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12
Certificate issuer:       /CN=ababd67e3e108c19f34fc00c76c6005993233512
Certificate serial:       019BF574EBADF4969D3A91633DC6D770464E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
Manifest number:          14
Signing time:             Sun 25 Jan 2026 14:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:38 +0000
Files and hashes:         1: 7OQN7r5DJUM5siG_lWgqrJZ8eZU.asa (hash: CMQHPUDAYob7IJjdHsUOnORXcTlXuEsyaurp+mS4Rxk=)
                          2: Sh_0eGA4pFFGTsJ_JR1HATFe-Tw.roa (hash: C9qojbsI3Xlw6OIL8wWbpyEwtHBl4MzqP3Rqmjk310k=)
                          3: q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl (hash: PsgWEGvanI8ngKSi2h5kejCq4bCo2vVMgQNjAWItwqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:eb:ad:f4:96:9d:3a:91:63:3d:c6:d7:70:46:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ababd67e3e108c19f34fc00c76c6005993233512
        Validity
            Not Before: Jan 25 14:00:38 2026 GMT
            Not After : Jan 26 14:00:38 2026 GMT
        Subject: CN=d42335d8f66440afaf3a53927dff8291ff28d4a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:13:1e:f5:80:e1:65:84:a0:35:e3:d5:5f:e7:
                    83:67:86:13:fb:e9:0c:66:fa:ea:a9:5e:5b:62:f0:
                    7c:e4:f9:94:06:a3:c4:01:32:99:34:36:60:44:83:
                    52:8f:5c:f2:10:ad:50:40:bc:ed:49:ae:ec:bb:b2:
                    9f:e0:58:b4:2b:ff:9f:cb:bd:cc:92:08:89:f4:99:
                    a6:3c:68:a9:ad:2f:2a:b2:3e:4b:9f:54:1d:c2:a6:
                    58:3b:82:7f:e7:d1:d9:ad:4e:0a:45:a4:34:80:0e:
                    20:e9:9e:9f:4f:85:77:19:8e:c7:fb:8d:8d:56:9f:
                    f0:53:8e:20:e2:a6:c0:a2:fc:e6:af:0f:60:2f:cd:
                    65:a4:a8:b0:95:32:fc:c7:77:3a:f4:e3:8c:d9:f8:
                    0c:92:81:8a:07:61:cb:ba:83:86:09:7c:71:2c:d1:
                    02:d9:18:29:d4:1e:91:a6:1b:d8:fe:70:5c:a7:6e:
                    ac:9b:df:c8:38:a3:c4:40:52:5a:49:2a:7e:8b:50:
                    22:f8:6e:cb:00:c9:3d:24:2d:62:e3:1c:6a:a4:fc:
                    ea:e2:8f:b1:d2:c9:48:c7:4b:af:ca:5f:79:ba:8a:
                    ed:b6:8e:b7:d0:66:2d:ad:86:23:cc:fa:4c:f7:11:
                    34:16:1b:5a:5f:05:de:e0:68:2c:09:32:6c:79:a5:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:23:35:D8:F6:64:40:AF:AF:3A:53:92:7D:FF:82:91:FF:28:D4:A9
            X509v3 Authority Key Identifier:
                keyid:AB:AB:D6:7E:3E:10:8C:19:F3:4F:C0:0C:76:C6:00:59:93:23:35:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q6vWfj4QjBnzT8AMdsYAWZMjNRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/25d540-4f5b-4a5b-88ec-624584d1fd96/1/q6vWfj4QjBnzT8AMdsYAWZMjNRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:10:55:80:5c:3e:ef:e3:8e:f5:ab:75:27:a6:4f:d3:98:02:
         ea:af:97:22:21:9b:fc:e6:ca:09:25:65:06:1d:be:30:29:6c:
         28:0e:ab:38:b8:2e:33:20:e0:bb:b9:c9:81:ef:d7:9f:bf:f9:
         cd:d1:e8:d2:d4:13:26:72:40:89:72:b4:9b:e1:46:9e:55:a0:
         6e:49:18:85:d6:65:5d:62:81:71:4e:1a:54:e5:29:cf:7e:bb:
         9c:e3:3a:28:0c:55:88:85:db:d4:09:a1:04:3d:26:0a:bb:e2:
         82:d5:42:02:bb:e3:42:97:66:19:ca:1a:f8:f1:e3:37:e1:88:
         60:3f:72:f2:59:31:dc:50:f2:f2:ad:91:37:52:57:83:6a:60:
         b6:be:a1:74:95:33:d8:a8:dc:c4:66:0b:d3:cc:87:11:1a:26:
         d7:ce:1e:bd:7e:6f:71:a4:3c:82:46:8f:60:ed:4e:fc:ff:b1:
         9d:c8:b1:f0:84:2c:d1:ac:66:9e:98:91:35:29:bf:4d:20:74:
         6c:92:f2:35:4c:aa:73:01:a8:c9:13:c3:ea:9e:7c:89:d0:e9:
         f9:45:ad:25:0f:8c:50:df:a8:85:4b:d4:db:35:ac:53:ed:a5:
         00:95:d0:1b:8f:d8:a4:db:e5:d9:d0:2d:5d:47:50:44:95:21:
         49:2f:d1:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dOut9JadOpFjPcbXcEZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYWJkNjdlM2UxMDhjMTlmMzRmYzAwYzc2YzYwMDU5OTMy
MzM1MTIwHhcNMjYwMTI1MTQwMDM4WhcNMjYwMTI2MTQwMDM4WjAzMTEwLwYDVQQD
EyhkNDIzMzVkOGY2NjQ0MGFmYWYzYTUzOTI3ZGZmODI5MWZmMjhkNGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRMe9YDhZYSgNePVX+eDZ4YT++kM
ZvrqqV5bYvB85PmUBqPEATKZNDZgRINSj1zyEK1QQLztSa7su7Kf4Fi0K/+fy73M
kgiJ9JmmPGiprS8qsj5Ln1QdwqZYO4J/59HZrU4KRaQ0gA4g6Z6fT4V3GY7H+42N
Vp/wU44g4qbAovzmrw9gL81lpKiwlTL8x3c69OOM2fgMkoGKB2HLuoOGCXxxLNEC
2Rgp1B6RphvY/nBcp26sm9/IOKPEQFJaSSp+i1Ai+G7LAMk9JC1i4xxqpPzq4o+x
0slIx0uvyl95uortto630GYtrYYjzPpM9xE0FhtaXwXe4GgsCTJseaUFswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQjNdj2ZECvrzpTkn3/gpH/KNSpMB8GA1UdIwQY
MBaAFKur1n4+EIwZ80/ADHbGAFmTIzUSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTZ2V2ZqNFFqQm56VDhBTWRzWUFXWk1qTlJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yNWQ1NDAtNGY1Yi00YTViLTg4ZWMt
NjI0NTg0ZDFmZDk2LzEvcTZ2V2ZqNFFqQm56VDhBTWRzWUFXWk1qTlJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yNWQ1NDAtNGY1Yi00YTViLTg4ZWMtNjI0NTg0ZDFmZDk2
LzEvcTZ2V2ZqNFFqQm56VDhBTWRzWUFXWk1qTlJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfhBVgFw+
7+OO9at1J6ZP05gC6q+XIiGb/ObKCSVlBh2+MClsKA6rOLguMyDgu7nJge/Xn7/5
zdHo0tQTJnJAiXK0m+FGnlWgbkkYhdZlXWKBcU4aVOUpz367nOM6KAxViIXb1Amh
BD0mCrvigtVCArvjQpdmGcoa+PHjN+GIYD9y8lkx3FDy8q2RN1JXg2pgtr6hdJUz
2KjcxGYL08yHERom184evX5vcaQ8gkaPYO1O/P+xncix8IQs0axmnpiRNSm/TSB0
bJLyNUyqcwGoyRPD6p58idDp+UWtJQ+MUN+ohUvU2zWsU+2lAJXQG4/YpNvl2dAt
XUdQRJUhSS/R5w==
-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:14 2026 by rpki-client