This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
File:                     5k3j63dco74tVQPJyc07crvNpJs.mft (raw, json)
Hash identifier:          ZS40DRE6HILcMmTX/SfQvlWuHb29PNPt1XfUV3Hhljw=
Subject key identifier:   93:4A:6D:64:00:05:1C:43:E3:F0:8C:03:AE:8D:35:8F:9A:0A:1C:A2
Authority key identifier: E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B
Certificate issuer:       /CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
Certificate serial:       019BF6F576241875793B78942B1373B2AD5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
Manifest number:          9C
Signing time:             Sun 25 Jan 2026 21:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:40 +0000
Files and hashes:         1: 5k3j63dco74tVQPJyc07crvNpJs.crl (hash: 6STKPm/4iRnFAN2ZUhFki9eSPwaDKzwmNqsUHmyRZg0=)
                          2: tfwhmbNUeb70v_DXkuhRwPo_elo.roa (hash: VbIkneiXqdXvw+KPGB3c+sh95KU6gx9gOTx0TPGcPy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:76:24:18:75:79:3b:78:94:2b:13:73:b2:ad:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e64de3eb775ca3be2d5503c9c9cd3b72bbcda49b
        Validity
            Not Before: Jan 25 21:00:40 2026 GMT
            Not After : Jan 26 21:00:40 2026 GMT
        Subject: CN=934a6d6400051c43e3f08c03ae8d358f9a0a1ca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:83:10:f6:ab:b1:8b:cb:1e:b6:22:c9:5a:
                    94:e4:91:d2:d9:52:d1:78:5c:d2:66:1c:dc:f7:cb:
                    e6:aa:0d:8a:c3:ce:61:54:4c:ed:20:b4:41:de:3c:
                    99:b3:42:e4:58:73:0c:c1:92:86:7e:4d:c4:2f:e9:
                    7c:bf:8c:9f:bb:6a:3c:ae:fa:1f:a6:da:25:a3:01:
                    06:49:f0:53:e9:79:4a:72:1c:1d:4b:72:13:59:9c:
                    df:31:8a:ef:92:df:3b:81:f4:15:69:7b:46:e1:b9:
                    94:a8:97:50:99:8c:f5:80:63:1e:21:77:db:af:42:
                    eb:2f:5f:85:21:55:8c:c6:eb:99:1d:03:e4:fb:23:
                    44:b9:a6:5e:2a:37:86:3e:7c:4f:11:6b:81:1f:09:
                    91:d5:7f:bc:7b:0f:81:f1:9b:99:8f:2f:6c:e5:e9:
                    21:14:ef:46:ff:80:05:9a:29:2e:fe:67:35:53:d5:
                    98:c3:e5:bb:df:bb:28:00:b7:90:07:56:36:d5:4d:
                    75:f0:40:f1:ca:97:e0:5c:c0:e0:bf:00:01:f1:45:
                    66:9e:94:db:bf:f3:eb:a9:57:10:fc:9d:56:95:5f:
                    3e:62:47:6a:62:18:0b:9d:e8:45:9e:b8:18:d4:1a:
                    21:e1:9f:e1:86:17:f7:45:a8:1e:f6:85:73:05:23:
                    55:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4A:6D:64:00:05:1C:43:E3:F0:8C:03:AE:8D:35:8F:9A:0A:1C:A2
            X509v3 Authority Key Identifier:
                keyid:E6:4D:E3:EB:77:5C:A3:BE:2D:55:03:C9:C9:CD:3B:72:BB:CD:A4:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5k3j63dco74tVQPJyc07crvNpJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05ce9d-6dae-4709-971f-341658243b4e/1/5k3j63dco74tVQPJyc07crvNpJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5b:d6:ff:39:44:87:a7:38:95:59:e2:5d:1c:37:87:43:96:
         62:a5:42:04:88:f3:be:af:0b:c3:1a:ab:0f:49:84:c3:cc:78:
         2a:04:d9:0f:2e:09:88:b2:31:72:69:b4:90:00:ac:20:6d:97:
         bc:f5:7e:8e:72:12:69:85:44:ff:2e:a2:f1:7a:6b:fc:03:fe:
         88:62:c3:0a:95:17:a9:c5:00:22:20:d8:b9:11:b8:1a:a3:f4:
         b2:f5:02:2d:76:b5:c6:6a:a1:d0:7d:d7:2e:97:9e:d2:5e:6b:
         9d:c6:3a:17:1d:b3:ea:85:e3:de:84:fd:48:bb:07:c9:70:24:
         40:dc:f7:13:e3:eb:6a:f2:a1:72:30:9b:61:e7:07:e3:fa:3f:
         94:6c:48:58:bc:76:ae:90:9a:e1:a1:3d:f1:44:00:f9:f1:85:
         4c:13:20:e9:42:ed:91:9e:e4:d6:3c:da:b5:ce:c4:d4:f8:94:
         68:18:e9:6c:c3:aa:8f:23:ac:4d:88:60:23:1a:f0:4f:73:0d:
         f7:2a:47:42:cf:15:14:67:20:02:93:e3:6d:95:b0:89:9b:56:
         36:6e:bd:95:b6:81:80:91:9b:1b:b3:ad:95:8e:2a:28:8a:b2:
         97:f0:c3:ef:09:28:f3:8a:d9:6d:4f:30:25:3b:1a:09:92:4d:
         13:9e:c8:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29XYkGHV5O3iUKxNzsq1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NGRlM2ViNzc1Y2EzYmUyZDU1MDNjOWM5Y2QzYjcyYmJj
ZGE0OWIwHhcNMjYwMTI1MjEwMDQwWhcNMjYwMTI2MjEwMDQwWjAzMTEwLwYDVQQD
Eyg5MzRhNmQ2NDAwMDUxYzQzZTNmMDhjMDNhZThkMzU4ZjlhMGExY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkCDEParsYvLHrYiyVqU5JHS2VLR
eFzSZhzc98vmqg2Kw85hVEztILRB3jyZs0LkWHMMwZKGfk3EL+l8v4yfu2o8rvof
ptolowEGSfBT6XlKchwdS3ITWZzfMYrvkt87gfQVaXtG4bmUqJdQmYz1gGMeIXfb
r0LrL1+FIVWMxuuZHQPk+yNEuaZeKjeGPnxPEWuBHwmR1X+8ew+B8ZuZjy9s5ekh
FO9G/4AFmiku/mc1U9WYw+W737soALeQB1Y21U118EDxypfgXMDgvwAB8UVmnpTb
v/PrqVcQ/J1WlV8+YkdqYhgLnehFnrgY1Boh4Z/hhhf3Rage9oVzBSNVkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJNKbWQABRxD4/CMA66NNY+aChyiMB8GA1UdIwQY
MBaAFOZN4+t3XKO+LVUDycnNO3K7zaSbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYt
MzQxNjU4MjQzYjRlLzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wNWNlOWQtNmRhZS00NzA5LTk3MWYtMzQxNjU4MjQzYjRl
LzEvNWszajYzZGNvNzR0VlFQSnljMDdjcnZOcEpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlvW/zlE
h6c4lVniXRw3h0OWYqVCBIjzvq8LwxqrD0mEw8x4KgTZDy4JiLIxcmm0kACsIG2X
vPV+jnISaYVE/y6i8Xpr/AP+iGLDCpUXqcUAIiDYuRG4GqP0svUCLXa1xmqh0H3X
Lpee0l5rncY6Fx2z6oXj3oT9SLsHyXAkQNz3E+PravKhcjCbYecH4/o/lGxIWLx2
rpCa4aE98UQA+fGFTBMg6ULtkZ7k1jzatc7E1PiUaBjpbMOqjyOsTYhgIxrwT3MN
9ypHQs8VFGcgApPjbZWwiZtWNm69lbaBgJGbG7OtlY4qKIqyl/DD7wko84rZbU8w
JTsaCZJNE57IEQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:21 2026 by rpki-client