This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File:                     x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier:          8qSQRo4HjjDkg9fMS4tyPezvUnS/Y3VrTm5SFarg4oM=
Subject key identifier:   4A:F9:FA:21:AD:69:34:2A:6B:6C:6A:00:4B:2D:B3:82:22:97:16:85
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer:       /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial:       019BFA9C2E0DB9BE3434C16E72227CF4E567
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number:          177F
Signing time:             Mon 26 Jan 2026 14:01:37 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:37 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:37 +0000
Files and hashes:         1: Qd96EibuUMUl47bpcNIQg2lzdXM.roa (hash: bfpu3e5a3SbtwnPEBP2TMhw1nW2Ik4salWdsyYywAxI=)
                          2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: qBWtsTgwQbowyX/WlKKZ4yml6YMx5lKIWQWh0KOa6EQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:2e:0d:b9:be:34:34:c1:6e:72:22:7c:f4:e5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
        Validity
            Not Before: Jan 26 14:01:37 2026 GMT
            Not After : Jan 27 14:01:37 2026 GMT
        Subject: CN=4af9fa21ad69342a6b6c6a004b2db38222971685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:76:38:b3:6d:5a:20:6d:39:eb:fa:8c:b7:6c:
                    dd:1f:ac:10:78:85:07:fe:75:76:00:3f:aa:f6:13:
                    1c:4e:98:8e:17:89:fe:a3:d1:0a:b0:d2:47:9b:3f:
                    e0:4f:2a:ed:d0:44:bf:8b:0a:fb:76:5f:76:42:77:
                    4d:4a:06:f7:ee:29:32:03:41:55:e3:f8:f7:7d:f6:
                    dd:a7:5b:c0:8d:5a:75:64:39:bf:b3:7a:c6:0a:b5:
                    8f:72:47:e1:52:99:7e:21:93:b5:86:5d:2b:61:41:
                    c3:e7:4c:d6:12:ae:e0:65:86:e7:7c:da:1c:5b:31:
                    5e:b8:54:ca:83:6f:26:d9:a4:ba:ea:5a:3d:2d:9a:
                    15:b8:bf:11:e5:6f:bd:0b:76:c9:4d:9a:22:19:05:
                    d9:28:4d:01:7a:53:00:34:75:b3:37:74:b2:e7:32:
                    12:ec:c7:b6:db:9e:11:77:09:2c:eb:61:d5:53:3c:
                    18:11:9f:53:fd:e1:35:56:22:68:ec:70:ed:dd:71:
                    99:78:05:8d:ca:7b:f7:0e:03:05:07:3e:5d:a8:07:
                    aa:f7:e9:40:1c:a1:d9:25:f4:9f:8d:2b:3d:f6:ed:
                    4d:a8:5d:6c:5c:b6:19:1a:72:af:cb:94:33:74:f1:
                    79:96:9f:19:ae:c9:e5:d1:1a:98:c0:0d:36:d1:01:
                    b6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F9:FA:21:AD:69:34:2A:6B:6C:6A:00:4B:2D:B3:82:22:97:16:85
            X509v3 Authority Key Identifier:
                keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:ca:f0:48:fe:10:cf:e5:32:f3:49:9c:1d:f1:7c:74:4a:
         ab:58:ef:0d:68:a1:1c:8d:c3:c2:0f:72:ed:bb:6b:74:dc:b3:
         66:ba:57:b6:ea:0a:9a:67:d4:7d:a8:37:ec:b6:aa:a2:47:9c:
         16:43:36:61:ad:96:88:bf:cf:9c:09:5e:48:d8:57:c3:3e:00:
         72:d2:97:18:4f:9a:4a:37:bd:ab:3a:91:3f:7d:ed:77:bb:da:
         d7:ea:1e:de:f1:f2:6b:e7:bb:57:b9:a6:90:b5:60:92:c0:c1:
         80:da:5c:3f:59:69:01:7b:b4:4d:f9:d2:42:13:d3:ca:87:23:
         b5:51:88:b6:73:00:7e:b5:66:db:ff:ae:fd:b8:4a:b7:cc:a5:
         76:8c:ce:37:ca:94:1d:38:00:15:5a:e1:93:72:0a:61:3e:32:
         f2:28:81:d0:08:31:ff:aa:36:47:2c:16:86:ad:7d:54:21:d8:
         eb:57:f2:63:36:f8:51:00:fd:cc:d8:47:0b:dc:c6:c4:be:6c:
         55:01:08:e1:8f:ce:9a:eb:5d:0c:f9:dd:8c:49:98:9a:31:ad:
         98:d5:bb:a8:9c:a6:86:e9:35:d8:fe:ec:56:ab:51:81:28:20:
         08:5b:c4:62:fb:69:30:a1:2f:ad:a6:63:2c:5e:d3:da:d9:3e:
         12:e9:f4:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6nC4Nub40NMFuciJ89OVnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NGRhMjFkYTgwMzhhODIwNTQyYjNhZmFmYmVhYWFhNjY2
YjdiMjcwHhcNMjYwMTI2MTQwMTM3WhcNMjYwMTI3MTQwMTM3WjAzMTEwLwYDVQQD
Eyg0YWY5ZmEyMWFkNjkzNDJhNmI2YzZhMDA0YjJkYjM4MjIyOTcxNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Y4s21aIG056/qMt2zdH6wQeIUH
/nV2AD+q9hMcTpiOF4n+o9EKsNJHmz/gTyrt0ES/iwr7dl92QndNSgb37ikyA0FV
4/j3ffbdp1vAjVp1ZDm/s3rGCrWPckfhUpl+IZO1hl0rYUHD50zWEq7gZYbnfNoc
WzFeuFTKg28m2aS66lo9LZoVuL8R5W+9C3bJTZoiGQXZKE0BelMANHWzN3Sy5zIS
7Me2254Rdwks62HVUzwYEZ9T/eE1ViJo7HDt3XGZeAWNynv3DgMFBz5dqAeq9+lA
HKHZJfSfjSs99u1NqF1sXLYZGnKvy5QzdPF5lp8Zrsnl0RqYwA020QG2TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEr5+iGtaTQqa2xqAEsts4IilxaFMB8GA1UdIwQY
MBaAFMdNoh2oA4qCBUKzr6++qqpma3snMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgt
ODAxZDg5ZDczNjZkLzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80Zjg0NDQtMmMzZC00NTkyLTk0NTgtODAxZDg5ZDczNjZk
LzEveDAyaUhhZ0Rpb0lGUXJPdnI3NnFxbVpyZXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXLK8Ej+
EM/lMvNJnB3xfHRKq1jvDWihHI3Dwg9y7btrdNyzZrpXtuoKmmfUfag37Laqokec
FkM2Ya2WiL/PnAleSNhXwz4ActKXGE+aSje9qzqRP33td7va1+oe3vHya+e7V7mm
kLVgksDBgNpcP1lpAXu0TfnSQhPTyocjtVGItnMAfrVm2/+u/bhKt8yldozON8qU
HTgAFVrhk3IKYT4y8iiB0Agx/6o2RywWhq19VCHY61fyYzb4UQD9zNhHC9zGxL5s
VQEI4Y/OmutdDPndjEmYmjGtmNW7qJymhuk12P7sVqtRgSggCFvEYvtpMKEvraZj
LF7T2tk+Eun0Sw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 18:18:06 2026 by rpki-client