This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
File:                     sL_SyF5redRg5mDPlmTe5V3MyMw.mft (raw, json)
Hash identifier:          SfN0GMeLLtk1esuLzwRByFnKD4JRhCX0DiVZwOZhnpY=
Subject key identifier:   6D:DB:07:48:35:52:B9:FF:80:36:2D:EA:9C:5E:94:81:E4:42:35:1C
Authority key identifier: B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC
Certificate issuer:       /CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
Certificate serial:       019BF49944E6C5F2C97AA6AAE89815C6A62B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
Manifest number:          10BF
Signing time:             Sun 25 Jan 2026 10:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:43 +0000
Files and hashes:         1: 1pIm4CEu_J6GPn1TUy1UPhKMBUk.roa (hash: kC5aY81+7wV5FaAuCbcDPO88uURjqA0og191H8ou4nk=)
                          2: IArcm7KHrcc-PY-XbMM0EYnJC8o.roa (hash: D8OnazQ4CkBXy0mTUKLIq9zAP3v8FKdV/2bmVQK5YE4=)
                          3: Wsun9qUEkz7Qte-mPAle0T2WkOc.roa (hash: 3L85Zuxdwbe+qNboOx36lUzHEqWROzqfxPyAEkPek0w=)
                          4: sL_SyF5redRg5mDPlmTe5V3MyMw.crl (hash: z3GLTs7WOO4UF0ArJA6bRrGkIi64WoLpUgcxpNMjPI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:44:e6:c5:f2:c9:7a:a6:aa:e8:98:15:c6:a6:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0bfd2c85e6b79d460e660cf9664dee55dccc8cc
        Validity
            Not Before: Jan 25 10:00:43 2026 GMT
            Not After : Jan 26 10:00:43 2026 GMT
        Subject: CN=6ddb07483552b9ff80362dea9c5e9481e442351c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d9:0b:ba:2a:85:6c:f5:57:24:ef:cc:30:c4:
                    fd:5b:4b:38:5a:f8:7d:c6:73:85:dc:21:bd:63:e6:
                    a8:df:1e:85:d6:0c:69:c7:ab:81:fc:ce:47:f2:f8:
                    b9:51:0e:de:05:b9:88:20:b9:a4:df:37:85:91:b8:
                    68:f6:7a:21:03:ef:de:a0:c3:4e:28:80:14:d8:a5:
                    53:ff:d3:eb:d9:4c:8b:4a:5d:ad:4d:aa:6a:c7:b5:
                    e6:73:bc:44:fe:b1:c7:ba:4a:da:e9:0f:d7:ee:21:
                    73:c9:b8:a1:a5:d1:5a:34:4a:b6:0e:8c:bf:74:c1:
                    db:08:fb:2f:9c:b7:99:31:a7:9e:99:14:5f:12:18:
                    73:48:78:ca:48:bc:1b:74:9f:2c:43:3c:2c:bf:e0:
                    50:72:b9:ad:12:f5:6d:6e:ee:cf:35:e5:36:d2:63:
                    d1:fa:4e:af:fd:d6:2a:35:78:65:4c:17:a3:3f:8b:
                    70:dd:f6:78:5e:b6:6d:1b:23:ae:3b:78:9d:b9:d7:
                    0e:ee:8e:dd:1f:09:7e:8b:3c:06:73:02:63:bc:21:
                    e3:97:9e:10:6d:c6:77:a0:ac:a0:10:97:90:d0:dd:
                    51:49:d4:f1:06:c0:ba:82:7c:bd:d6:de:0d:ed:32:
                    89:60:58:93:63:d0:32:c6:26:04:21:bf:a8:93:8c:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DB:07:48:35:52:B9:FF:80:36:2D:EA:9C:5E:94:81:E4:42:35:1C
            X509v3 Authority Key Identifier:
                keyid:B0:BF:D2:C8:5E:6B:79:D4:60:E6:60:CF:96:64:DE:E5:5D:CC:C8:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sL_SyF5redRg5mDPlmTe5V3MyMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/203a53-058a-4d5d-a761-d371855756c3/1/sL_SyF5redRg5mDPlmTe5V3MyMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:cd:4c:a6:e8:2f:d0:7c:9f:75:30:f6:9b:98:5b:73:8a:f2:
         3f:41:0a:49:9a:f1:fd:a0:49:e6:3b:9c:d4:76:cc:42:94:fd:
         55:15:02:50:96:03:ec:80:7e:71:0c:9d:9c:eb:6c:0a:1d:8b:
         44:81:d1:32:ba:32:69:df:c7:8e:db:17:f7:2d:d4:16:5f:74:
         8d:e4:f6:97:22:d2:cf:69:89:48:64:d4:45:91:6f:61:e1:56:
         2c:59:fd:2b:84:0a:45:d4:6c:13:6f:33:26:d3:92:57:d4:ef:
         76:ae:a3:e9:77:40:2d:83:5a:9b:04:6f:15:a1:04:66:07:51:
         a7:0d:d8:df:b4:ee:17:a5:93:3c:7b:11:6f:b9:7d:46:3a:c8:
         5e:b8:f0:9c:70:f0:7b:1d:0e:08:98:bc:f0:2a:c8:33:d2:56:
         e6:31:4b:c5:ec:54:4e:e7:af:66:0d:ef:c1:17:fd:2a:a9:72:
         c2:0a:c9:56:da:73:36:bc:0d:24:39:85:67:99:ed:0a:78:6b:
         10:84:6c:cc:96:5a:f3:2a:bc:44:bb:6c:5b:73:8b:bf:a8:59:
         bd:f6:01:11:a9:b3:83:5c:75:a8:ca:ae:4b:ad:b4:56:4f:d1:
         85:c2:02:59:dd:fa:37:1b:91:32:d3:1e:5f:ff:e9:f8:74:85:
         e8:a8:61:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0mUTmxfLJeqaq6JgVxqYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYmZkMmM4NWU2Yjc5ZDQ2MGU2NjBjZjk2NjRkZWU1NWRj
Y2M4Y2MwHhcNMjYwMTI1MTAwMDQzWhcNMjYwMTI2MTAwMDQzWjAzMTEwLwYDVQQD
Eyg2ZGRiMDc0ODM1NTJiOWZmODAzNjJkZWE5YzVlOTQ4MWU0NDIzNTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdkLuiqFbPVXJO/MMMT9W0s4Wvh9
xnOF3CG9Y+ao3x6F1gxpx6uB/M5H8vi5UQ7eBbmIILmk3zeFkbho9nohA+/eoMNO
KIAU2KVT/9Pr2UyLSl2tTapqx7Xmc7xE/rHHukra6Q/X7iFzybihpdFaNEq2Doy/
dMHbCPsvnLeZMaeemRRfEhhzSHjKSLwbdJ8sQzwsv+BQcrmtEvVtbu7PNeU20mPR
+k6v/dYqNXhlTBejP4tw3fZ4XrZtGyOuO3idudcO7o7dHwl+izwGcwJjvCHjl54Q
bcZ3oKygEJeQ0N1RSdTxBsC6gny91t4N7TKJYFiTY9AyxiYEIb+ok4zAZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3bB0g1Urn/gDYt6pxelIHkQjUcMB8GA1UdIwQY
MBaAFLC/0shea3nUYOZgz5Zk3uVdzMjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEt
ZDM3MTg1NTc1NmMzLzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8yMDNhNTMtMDU4YS00ZDVkLWE3NjEtZDM3MTg1NTc1NmMz
LzEvc0xfU3lGNXJlZFJnNW1EUGxtVGU1VjNNeU13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOM1Mpugv
0HyfdTD2m5hbc4ryP0EKSZrx/aBJ5juc1HbMQpT9VRUCUJYD7IB+cQydnOtsCh2L
RIHRMroyad/HjtsX9y3UFl90jeT2lyLSz2mJSGTURZFvYeFWLFn9K4QKRdRsE28z
JtOSV9Tvdq6j6XdALYNamwRvFaEEZgdRpw3Y37TuF6WTPHsRb7l9RjrIXrjwnHDw
ex0OCJi88CrIM9JW5jFLxexUTuevZg3vwRf9KqlywgrJVtpzNrwNJDmFZ5ntCnhr
EIRszJZa8yq8RLtsW3OLv6hZvfYBEamzg1x1qMquS620Vk/RhcICWd36NxuRMtMe
X//p+HSF6KhhrA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:52:42 2026 by rpki-client