This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
File:                     9JUCyXSCsoUChSyX75vToKKl6fA.mft (raw, json)
Hash identifier:          l4MirfPWrhdz4HJNEt4UnI7af4bwMZjF3MV+9d2qPeg=
Subject key identifier:   86:4A:A8:15:71:36:36:64:03:1C:26:F4:5D:E9:8B:D5:6E:23:CE:86
Authority key identifier: F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0
Certificate issuer:       /CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
Certificate serial:       019BF80834A7A7D55F4919ECE2371F5232BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
Manifest number:          15BA
Signing time:             Mon 26 Jan 2026 02:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:45 +0000
Files and hashes:         1: 9JUCyXSCsoUChSyX75vToKKl6fA.crl (hash: NLMRr9HSx6TYPFiI3O7DWioww2iF75DhYflP2HLzn0Q=)
                          2: QlPUYBIgA-X6jp0IaJHxAc-p46U.roa (hash: HXbV30gZlG5FM4CNzA/Ff6hakg3IrjI+qN7q3gKgozw=)
                          3: tyC-pTUzo6nFgSSwAa_6pbmsyAg.roa (hash: RK6LVWTWWbUKXe8FdCeUVJN0A7lPCOyvPPPfNNmHAao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:34:a7:a7:d5:5f:49:19:ec:e2:37:1f:52:32:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49502c97482b28502852c97ef9bd3a0a2a5e9f0
        Validity
            Not Before: Jan 26 02:00:45 2026 GMT
            Not After : Jan 27 02:00:45 2026 GMT
        Subject: CN=864aa81571363664031c26f45de98bd56e23ce86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:52:f1:eb:24:c4:3d:da:ac:b0:eb:0e:67:6b:
                    44:54:7b:40:ba:88:7b:da:a7:0b:98:02:2b:01:b2:
                    ff:49:29:ec:5d:73:ab:fa:fc:c2:12:22:88:df:a1:
                    48:cc:a9:d4:56:8e:8c:12:75:88:36:6f:04:11:7c:
                    7f:66:98:aa:5c:38:5e:86:3e:52:b0:4b:e6:97:89:
                    59:45:c1:e8:8b:e6:34:8c:3a:54:16:39:ca:f6:4f:
                    36:19:ed:ab:75:da:df:b8:50:a1:ac:80:61:a1:4d:
                    81:f6:c4:39:f3:28:d6:14:fd:88:1c:85:7a:97:cb:
                    13:ce:4f:ab:7d:84:d4:c2:d2:57:69:dd:9b:cc:bd:
                    d1:5b:f3:f6:75:4c:3f:92:d1:75:37:c9:1b:58:f3:
                    0b:95:e1:4b:0a:a7:20:47:82:b3:6a:28:b6:fa:aa:
                    2e:c3:93:57:33:b6:13:70:a5:6c:72:4d:38:3b:8a:
                    de:59:a0:83:55:66:04:65:bb:cc:4f:93:c6:cd:15:
                    f3:08:d4:02:b1:09:fb:75:6c:5f:c6:b9:6e:ed:18:
                    75:9c:ad:19:83:dd:c6:98:85:16:8b:bc:e6:3c:e5:
                    c1:25:93:7d:f1:ea:13:bf:f8:63:1a:c2:59:29:6f:
                    c2:6c:04:e4:65:d4:c1:49:67:b3:55:44:69:1b:7a:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:4A:A8:15:71:36:36:64:03:1C:26:F4:5D:E9:8B:D5:6E:23:CE:86
            X509v3 Authority Key Identifier:
                keyid:F4:95:02:C9:74:82:B2:85:02:85:2C:97:EF:9B:D3:A0:A2:A5:E9:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JUCyXSCsoUChSyX75vToKKl6fA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/1f86d3-087d-4d69-b8e7-73b0c74e9b64/1/9JUCyXSCsoUChSyX75vToKKl6fA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:79:a6:41:b6:6a:0c:ac:ad:2f:19:d7:ef:06:68:b5:58:
         8e:13:49:89:53:4f:85:1a:cb:40:c5:c9:17:f6:00:25:22:fa:
         4a:08:6e:33:0c:b1:56:6b:94:0a:15:89:f2:83:82:60:cf:b2:
         2e:57:7c:c8:e7:7c:42:56:36:af:69:74:e5:0c:a6:28:63:9c:
         a7:24:96:d1:de:a1:ef:a0:26:21:9c:4e:27:36:f2:c1:32:12:
         ea:c0:8f:20:07:74:3b:d0:77:06:d4:6a:00:23:b4:e6:21:ac:
         57:ce:bb:24:21:f9:bb:96:e5:53:08:73:18:78:d7:dd:af:81:
         40:5b:ea:e1:f6:5f:0c:c9:4c:ba:da:af:59:59:48:33:2b:7e:
         de:be:8d:44:2b:12:8e:c4:b8:3e:d0:7b:48:5f:68:44:ec:93:
         32:eb:15:c1:4a:90:5c:e0:81:ae:cd:0b:d0:31:b8:9b:f9:74:
         6b:75:9a:47:37:1c:ad:51:8b:72:47:ee:86:a4:1b:33:82:9a:
         49:eb:3d:22:4b:e2:05:53:b5:bc:44:e4:ba:3f:70:e4:a5:42:
         20:93:df:cd:24:80:44:4f:20:97:fb:0b:c3:73:30:f6:f1:b8:
         2e:54:58:67:87:0e:cd:de:33:e6:2b:bb:d5:ac:1c:a7:dd:68:
         ab:31:04:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4CDSnp9VfSRns4jcfUjK7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTUwMmM5NzQ4MmIyODUwMjg1MmM5N2VmOWJkM2EwYTJh
NWU5ZjAwHhcNMjYwMTI2MDIwMDQ1WhcNMjYwMTI3MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg4NjRhYTgxNTcxMzYzNjY0MDMxYzI2ZjQ1ZGU5OGJkNTZlMjNjZTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVLx6yTEPdqssOsOZ2tEVHtAuoh7
2qcLmAIrAbL/SSnsXXOr+vzCEiKI36FIzKnUVo6MEnWINm8EEXx/ZpiqXDhehj5S
sEvml4lZRcHoi+Y0jDpUFjnK9k82Ge2rddrfuFChrIBhoU2B9sQ58yjWFP2IHIV6
l8sTzk+rfYTUwtJXad2bzL3RW/P2dUw/ktF1N8kbWPMLleFLCqcgR4Kzaii2+qou
w5NXM7YTcKVsck04O4reWaCDVWYEZbvMT5PGzRXzCNQCsQn7dWxfxrlu7Rh1nK0Z
g93GmIUWi7zmPOXBJZN98eoTv/hjGsJZKW/CbATkZdTBSWezVURpG3qp9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZKqBVxNjZkAxwm9F3pi9VuI86GMB8GA1UdIwQY
MBaAFPSVAsl0grKFAoUsl++b06CipenwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTct
NzNiMGM3NGU5YjY0LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xZjg2ZDMtMDg3ZC00ZDY5LWI4ZTctNzNiMGM3NGU5YjY0
LzEvOUpVQ3lYU0Nzb1VDaFN5WDc1dlRvS0tsNmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHd5pkG2
agysrS8Z1+8GaLVYjhNJiVNPhRrLQMXJF/YAJSL6SghuMwyxVmuUChWJ8oOCYM+y
Lld8yOd8QlY2r2l05QymKGOcpySW0d6h76AmIZxOJzbywTIS6sCPIAd0O9B3BtRq
ACO05iGsV867JCH5u5blUwhzGHjX3a+BQFvq4fZfDMlMutqvWVlIMyt+3r6NRCsS
jsS4PtB7SF9oROyTMusVwUqQXOCBrs0L0DG4m/l0a3WaRzccrVGLckfuhqQbM4Ka
Ses9IkviBVO1vETkuj9w5KVCIJPfzSSARE8gl/sLw3Mw9vG4LlRYZ4cOzd4z5iu7
1awcp91oqzEEkQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:00:40 2026 by rpki-client