This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
File:                     RS59h5IhKd-QxIcNoqdzhARySFg.mft (raw, json)
Hash identifier:          0RwlfIInlzEKOrVFLL4hyjuUXawUnpcl/XBMDWO6C/w=
Subject key identifier:   6B:92:A7:34:D5:2A:62:F4:05:B1:40:A7:29:90:2E:D0:73:81:00:E8
Authority key identifier: 45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58
Certificate issuer:       /CN=452e7d87922129df90c4870da2a7738404724858
Certificate serial:       019BF4628579E147EFFA44611BB3EB9DE504
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
Manifest number:          063D
Signing time:             Sun 25 Jan 2026 09:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:55 +0000
Files and hashes:         1: 1-hMzdQcNiHlC1ILPCSFeyzc3V18.roa (hash: pQ5b3SKsH66K13eGB0zI0xg6+iC58sAtCToDI1E0I1c=)
                          2: ASjcIfGbiNQMdDG-NkaJ2godGXI.roa (hash: eOAB7JSxUOBnovgBRfzr3wOE0ITCJL98E+CzEew1Lmo=)
                          3: RS59h5IhKd-QxIcNoqdzhARySFg.crl (hash: psaauiPqkgQqHjDxfmmY1JMQjERbzgcd7aPUDfDuRm4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:85:79:e1:47:ef:fa:44:61:1b:b3:eb:9d:e5:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452e7d87922129df90c4870da2a7738404724858
        Validity
            Not Before: Jan 25 09:00:55 2026 GMT
            Not After : Jan 26 09:00:55 2026 GMT
        Subject: CN=6b92a734d52a62f405b140a729902ed0738100e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:df:17:ff:02:8d:a9:dc:18:f1:2f:5b:af:1a:
                    f9:2e:76:b1:ee:c6:d8:81:da:eb:51:e7:ba:43:62:
                    04:44:64:b8:58:20:b7:94:28:2d:f0:e7:d7:9d:d0:
                    b4:80:34:15:f9:3c:52:94:72:21:66:ab:94:8d:e0:
                    86:54:fb:f7:1b:d1:8a:27:e0:2b:d3:f7:17:ea:67:
                    f8:0c:c2:f7:c4:0b:4b:2c:53:67:d7:ce:b6:23:71:
                    84:c1:17:34:76:b5:0f:2c:2c:32:1d:3e:ac:2e:d8:
                    5e:3a:0b:dc:04:ee:25:8b:06:06:51:0a:25:aa:c9:
                    02:3f:4e:c6:9e:13:4c:79:3d:d9:93:3c:17:d0:05:
                    b7:03:e1:8d:3d:a2:5a:6d:6d:1f:cd:4d:02:e0:17:
                    01:bb:6d:19:75:70:95:68:d3:f5:77:2f:aa:39:57:
                    e4:37:a8:88:d0:12:1b:fd:e0:f1:e2:2f:8d:28:82:
                    59:0f:93:9f:27:e6:01:52:e1:46:58:d0:f7:28:82:
                    74:fb:b4:96:dc:00:ae:6c:be:4e:58:8b:de:3e:9c:
                    a6:e5:b2:e2:3b:df:25:04:a4:44:65:c5:9d:a5:c9:
                    63:74:55:75:56:3f:40:cf:6c:67:76:d5:a1:43:64:
                    fb:ae:4e:10:ae:0a:02:3c:f6:ce:c4:24:6c:5b:c2:
                    6d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:A7:34:D5:2A:62:F4:05:B1:40:A7:29:90:2E:D0:73:81:00:E8
            X509v3 Authority Key Identifier:
                keyid:45:2E:7D:87:92:21:29:DF:90:C4:87:0D:A2:A7:73:84:04:72:48:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RS59h5IhKd-QxIcNoqdzhARySFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/487962-8588-4f0a-bb7d-aaa8d3a940ac/1/RS59h5IhKd-QxIcNoqdzhARySFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:11:08:c4:53:75:e0:67:5d:01:22:b6:6d:2d:39:ea:2d:a4:
         9b:db:06:0a:66:3c:86:57:e6:13:e9:28:ae:e5:a9:d3:fc:d3:
         31:46:37:bb:06:b3:50:55:e0:89:55:8c:c3:c3:97:f7:21:0c:
         68:ac:ac:85:5e:68:fa:1c:1c:ee:38:7b:02:b9:6b:5e:1c:ac:
         56:d9:4d:48:32:89:59:2c:c0:ce:a5:aa:65:99:cf:6a:d2:11:
         f5:a4:00:49:fb:57:d5:10:0c:70:54:05:3a:5d:9a:7b:43:e3:
         b6:9e:ed:f8:bb:14:62:c7:14:c7:7c:ad:ea:9b:91:80:a9:6d:
         51:4c:ee:db:04:48:c8:57:9f:0e:6f:cb:d2:f9:00:2d:f4:c4:
         c2:76:4d:5b:e8:69:9a:71:e7:6a:8a:ce:bc:c8:af:f7:85:3c:
         d0:30:5f:e6:e9:57:c0:0d:91:32:8e:97:a6:ab:b4:c7:93:b9:
         2b:1a:66:00:17:39:d8:a0:61:53:40:98:d2:20:9e:e0:c9:62:
         c8:7e:46:4b:57:d4:3f:8c:ea:ad:4f:b8:53:19:0d:fa:9b:2b:
         95:ef:14:5b:db:7a:c1:d5:81:c5:1e:ae:11:09:46:fe:82:42:
         e6:26:ea:fa:b5:8e:06:6e:04:95:16:dd:2d:6a:10:fd:c7:4e:
         e3:a9:03:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0YoV54Ufv+kRhG7PrneUEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MmU3ZDg3OTIyMTI5ZGY5MGM0ODcwZGEyYTc3Mzg0MDQ3
MjQ4NTgwHhcNMjYwMTI1MDkwMDU1WhcNMjYwMTI2MDkwMDU1WjAzMTEwLwYDVQQD
Eyg2YjkyYTczNGQ1MmE2MmY0MDViMTQwYTcyOTkwMmVkMDczODEwMGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1d8X/wKNqdwY8S9brxr5Lnax7sbY
gdrrUee6Q2IERGS4WCC3lCgt8OfXndC0gDQV+TxSlHIhZquUjeCGVPv3G9GKJ+Ar
0/cX6mf4DML3xAtLLFNn1862I3GEwRc0drUPLCwyHT6sLtheOgvcBO4liwYGUQol
qskCP07GnhNMeT3ZkzwX0AW3A+GNPaJabW0fzU0C4BcBu20ZdXCVaNP1dy+qOVfk
N6iI0BIb/eDx4i+NKIJZD5OfJ+YBUuFGWND3KIJ0+7SW3ACubL5OWIvePpym5bLi
O98lBKREZcWdpcljdFV1Vj9Az2xndtWhQ2T7rk4QrgoCPPbOxCRsW8JtGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuSpzTVKmL0BbFApymQLtBzgQDoMB8GA1UdIwQY
MBaAFEUufYeSISnfkMSHDaKnc4QEckhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2Qt
YWFhOGQzYTk0MGFjLzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC80ODc5NjItODU4OC00ZjBhLWJiN2QtYWFhOGQzYTk0MGFj
LzEvUlM1OWg1SWhLZC1ReEljTm9xZHpoQVJ5U0ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxEIxFN1
4GddASK2bS056i2km9sGCmY8hlfmE+koruWp0/zTMUY3uwazUFXgiVWMw8OX9yEM
aKyshV5o+hwc7jh7ArlrXhysVtlNSDKJWSzAzqWqZZnPatIR9aQASftX1RAMcFQF
Ol2ae0Pjtp7t+LsUYscUx3yt6puRgKltUUzu2wRIyFefDm/L0vkALfTEwnZNW+hp
mnHnaorOvMiv94U80DBf5ulXwA2RMo6Xpqu0x5O5KxpmABc52KBhU0CY0iCe4Mli
yH5GS1fUP4zqrU+4UxkN+psrle8UW9t6wdWBxR6uEQlG/oJC5ibq+rWOBm4ElRbd
LWoQ/cdO46kDtQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 20:10:51 2026 by rpki-client