This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File:                     KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier:          gqm5RY1FXoRSC6UGxbl2J5pz0PQYc3VQvx0GuhEzJM0=
Subject key identifier:   9E:BC:9A:EC:0F:C5:25:15:0B:12:2A:5E:D0:38:63:78:FD:C6:C2:BD
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer:       /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial:       019BF7D1D30EA075E0C3F944BC9582952F34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number:          1549
Signing time:             Mon 26 Jan 2026 01:01:21 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:21 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:21 +0000
Files and hashes:         1: 8OFbkkZ6KALpSp0mWSybPWGsd-Q.roa (hash: Hw9+SZD9UoFrhny7ksS/HOCqMMmBRPOx+MzOwmt/YbM=)
                          2: CtshxvSjpVHllD9_Sbf7r-8_oP8.roa (hash: 6lSRTxGAefiesacXHB6JDdsI+DGCso7r3hSxwGlHZoo=)
                          3: DSzDYKP0Eliter60MSyPBC3uoBo.roa (hash: VTzEolbK7gpli6RLBjkEbGLC+e38wfEzm+yoXW+fNwY=)
                          4: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: v0naKh6aFrx7NY5ce9Oro6lDIUMLYlssjr/d39cOoEY=)
                          5: o-d6O05K7BPSIDagH_dA7QNFluU.roa (hash: e5fVX0i32Jc4R//E3nrr2ejI2Z6IYOksflnKoAUyHns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:d3:0e:a0:75:e0:c3:f9:44:bc:95:82:95:2f:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
        Validity
            Not Before: Jan 26 01:01:21 2026 GMT
            Not After : Jan 27 01:01:21 2026 GMT
        Subject: CN=9ebc9aec0fc525150b122a5ed0386378fdc6c2bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:77:a5:27:23:64:d5:f1:ec:39:ba:6f:ba:
                    7a:db:70:47:be:49:9f:79:e3:91:d5:cc:c9:6f:76:
                    1d:c2:4e:5e:2c:c7:c3:1f:bc:9c:51:fe:2a:81:26:
                    74:e8:04:5b:c0:48:cc:f5:84:1c:07:13:cd:2f:0e:
                    f4:50:20:1e:08:35:46:8f:ff:0a:12:7b:f4:11:a3:
                    32:c1:5e:5b:fb:38:bc:0e:b7:5c:04:c6:f9:a9:96:
                    b5:c2:37:a4:86:a5:06:6d:c2:2e:e0:98:aa:c0:d6:
                    c0:52:d8:2c:60:31:30:64:82:34:3c:54:c4:a3:ae:
                    05:67:3b:14:75:88:38:41:b7:67:51:f3:6c:c1:0e:
                    4f:2a:13:39:03:27:f9:08:86:57:7f:76:07:f4:ab:
                    73:26:1e:11:2d:24:70:be:e8:1c:71:3b:e1:c3:27:
                    56:ea:91:77:03:bc:22:a0:37:6d:93:05:dd:be:bf:
                    9a:68:fe:fb:89:a5:9f:80:6e:b2:53:80:37:c1:c8:
                    61:32:12:84:b8:5c:7c:70:e7:e9:bc:a4:f2:b5:93:
                    d2:81:b2:fe:c5:74:e6:2a:b8:f0:ce:d7:02:df:83:
                    30:19:34:c1:1f:06:73:04:a3:4c:ea:da:e7:63:22:
                    a1:5e:b4:e3:ae:36:34:9a:10:62:70:77:d1:9b:cf:
                    d3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BC:9A:EC:0F:C5:25:15:0B:12:2A:5E:D0:38:63:78:FD:C6:C2:BD
            X509v3 Authority Key Identifier:
                keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:99:81:a9:77:8b:69:98:d2:73:a3:7f:98:8b:7a:32:6a:5c:
         36:03:95:bd:a6:4f:de:0e:64:de:c1:92:36:80:6b:2d:fd:ee:
         cb:b7:87:ed:ea:cd:7b:f9:2e:61:9f:db:87:4b:91:1c:ae:72:
         da:a5:fe:23:6a:a3:8d:47:b3:ba:48:d9:4d:4f:20:75:89:88:
         13:04:51:70:50:e5:b9:8b:d6:07:c9:98:cc:f8:95:6a:60:91:
         e4:1e:26:3c:4d:45:5e:82:39:7a:2d:e1:c7:51:6d:d0:52:21:
         81:f2:da:63:c5:ce:7f:75:d4:13:c7:ca:b2:2e:cb:5b:91:b9:
         ba:48:6f:98:13:20:3d:f8:03:29:61:19:4e:16:0b:89:2e:2c:
         c1:2b:0c:5c:72:6c:b6:7b:f7:0f:df:0b:c5:29:71:42:eb:75:
         cd:67:cb:1b:a6:ff:d7:da:10:fa:d0:63:b8:b9:f4:2e:c2:d5:
         5e:2c:b4:5b:5a:b4:89:3b:a5:8d:46:c1:02:5c:24:8b:6e:3d:
         68:47:4f:a2:fd:35:10:1c:da:b0:ee:c1:06:ee:a4:9b:6e:3e:
         76:c6:15:72:52:29:c6:9f:3a:f0:bf:c5:10:61:bd:04:2c:0e:
         52:fd:2b:b8:aa:9d:47:a4:10:c0:f0:14:41:3e:ba:da:c0:ac:
         a8:f1:cd:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv30dMOoHXgw/lEvJWClS80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2UwY2Q4YjNlMDQ0ZWRiODIzYWVmNjg4YWFmYjBiNzVk
ZTg2NzUwHhcNMjYwMTI2MDEwMTIxWhcNMjYwMTI3MDEwMTIxWjAzMTEwLwYDVQQD
Eyg5ZWJjOWFlYzBmYzUyNTE1MGIxMjJhNWVkMDM4NjM3OGZkYzZjMmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyul3pScjZNXx7Dm6b7p623BHvkmf
eeOR1czJb3Ydwk5eLMfDH7ycUf4qgSZ06ARbwEjM9YQcBxPNLw70UCAeCDVGj/8K
Env0EaMywV5b+zi8DrdcBMb5qZa1wjekhqUGbcIu4JiqwNbAUtgsYDEwZII0PFTE
o64FZzsUdYg4QbdnUfNswQ5PKhM5Ayf5CIZXf3YH9KtzJh4RLSRwvugccTvhwydW
6pF3A7wioDdtkwXdvr+aaP77iaWfgG6yU4A3wchhMhKEuFx8cOfpvKTytZPSgbL+
xXTmKrjwztcC34MwGTTBHwZzBKNM6trnYyKhXrTjrjY0mhBicHfRm8/TowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ68muwPxSUVCxIqXtA4Y3j9xsK9MB8GA1UdIwQY
MBaAFCk+DNiz4ETtuCOu9oiq+wt13oZ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMt
YmIyMTdjYzNiNzhkLzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC82ZGExYzItMjUyZC00YmQyLWI1NmMtYmIyMTdjYzNiNzhk
LzEvS1Q0TTJMUGdSTzI0STY3MmlLcjdDM1hlaG5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJmBqXeL
aZjSc6N/mIt6MmpcNgOVvaZP3g5k3sGSNoBrLf3uy7eH7erNe/kuYZ/bh0uRHK5y
2qX+I2qjjUezukjZTU8gdYmIEwRRcFDluYvWB8mYzPiVamCR5B4mPE1FXoI5ei3h
x1Ft0FIhgfLaY8XOf3XUE8fKsi7LW5G5ukhvmBMgPfgDKWEZThYLiS4swSsMXHJs
tnv3D98LxSlxQut1zWfLG6b/19oQ+tBjuLn0LsLVXiy0W1q0iTuljUbBAlwki249
aEdPov01EBzasO7BBu6km24+dsYVclIpxp868L/FEGG9BCwOUv0ruKqdR6QQwPAU
QT662sCsqPHNTw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:10:05 2026 by rpki-client