This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
File:                     nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json)
Hash identifier:          g+7qgp8uwTDEZms+QR2yDbUkgkzSoOHeyi/mp58i1NY=
Subject key identifier:   FC:3F:14:FE:58:ED:25:15:AF:27:87:97:E2:24:21:5E:53:D7:36:DF
Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31
Certificate issuer:       /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
Certificate serial:       019BF6F5690190316BFB655A0026FAFC50ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 21:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:36 +0000
Files and hashes:         1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=)
                          2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=)
                          3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=)
                          4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=)
                          5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=)
                          6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=)
                          7: RfF_v-9FmIipQG47sMLeSIwsCwA.roa (hash: CvFjyOB2OKSAf0EIN8oLCwNbtih0Yd+Yc2x40ZJ9uxE=)
                          8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=)
                          9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=)
                          10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=)
                          11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: uMcGsOEzDBwgwbhL8B8sVw8PL7t0ZMwOsh3ersMJEnM=)
                          12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:69:01:90:31:6b:fb:65:5a:00:26:fa:fc:50:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731
        Validity
            Not Before: Jan 25 21:00:36 2026 GMT
            Not After : Jan 26 21:00:36 2026 GMT
        Subject: CN=fc3f14fe58ed2515af278797e224215e53d736df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:bb:93:73:d0:c1:cd:be:16:6c:12:08:39:
                    1e:fe:fd:bc:93:b9:64:b8:6f:c8:36:0e:67:7f:de:
                    22:b2:4e:b6:f1:4e:37:bc:d6:62:0c:0a:a5:fd:f0:
                    49:bf:90:ae:f4:e5:7c:35:46:b3:2c:c3:9a:ff:98:
                    7f:0b:10:5f:3e:11:ce:6e:89:18:e3:f5:da:f7:bc:
                    2b:30:ae:89:e6:ed:3d:c5:22:65:60:bc:3e:46:d9:
                    ec:43:fe:4b:41:ba:f2:66:a9:2a:c2:43:3b:91:0e:
                    34:15:62:a2:af:a2:bc:96:fe:e2:0e:98:5d:93:5a:
                    e1:d8:f3:ec:1d:ef:e7:94:19:7b:77:67:09:16:3b:
                    44:f3:12:67:f1:de:cf:fc:37:2d:b7:3d:be:63:b3:
                    31:75:bc:16:7b:5a:d1:fe:13:2e:24:4d:07:61:a9:
                    07:81:49:a9:e3:44:54:4e:05:3d:74:4c:3d:e9:9c:
                    80:a3:ba:7f:de:dc:d6:47:a4:e7:0b:91:6c:b8:c1:
                    7c:5a:36:e8:9d:1b:6d:ea:21:35:de:1d:a2:55:a8:
                    ea:9e:b6:70:cf:78:e8:34:2a:4c:4e:fb:33:df:a6:
                    1a:c2:10:fa:02:ba:7e:a3:50:78:9b:bb:1e:e3:d0:
                    e1:41:f2:7b:22:f7:f8:0f:34:69:a8:a3:f1:53:3e:
                    39:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:3F:14:FE:58:ED:25:15:AF:27:87:97:E2:24:21:5E:53:D7:36:DF
            X509v3 Authority Key Identifier:
                keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:c6:b3:2d:51:f4:33:ca:44:eb:7f:8b:f3:b5:13:8a:78:
         f7:e8:bb:ca:c2:29:5b:2a:39:c1:b9:d9:19:41:7a:e2:17:9f:
         1c:16:71:88:70:ed:9c:de:b0:24:36:44:98:be:17:9a:b4:79:
         96:5f:29:04:72:7c:95:8d:ec:47:6f:c7:33:18:23:d7:56:bb:
         19:a2:2d:5b:9d:02:57:b1:57:a4:c9:dd:41:97:db:e2:42:65:
         45:7b:fc:01:39:c8:61:a5:e3:4e:ba:76:70:8a:e3:79:02:f5:
         80:81:25:61:6e:48:ad:00:72:05:23:96:23:e1:4b:85:9e:41:
         f1:62:f8:c7:41:6e:99:57:e8:a6:47:2a:a4:df:19:f6:b2:97:
         67:72:f2:e8:09:67:63:fa:1d:00:6b:f4:c0:8a:0c:11:b3:dc:
         09:fd:6c:33:c0:24:bf:95:92:b9:18:f9:b4:ae:97:70:80:47:
         46:d9:96:17:3b:7a:72:cd:e0:1e:d7:9f:e5:90:b6:b2:91:fb:
         b2:59:52:5d:36:1c:6a:7b:2a:e4:a8:c9:d9:94:95:f2:e5:d2:
         ee:4c:77:98:64:c3:3f:1f:84:12:69:7b:a4:ba:9d:db:7e:d0:
         21:49:c8:7b:e2:f0:d4:66:33:17:27:ea:4b:33:66:01:6e:3e:
         5d:d7:73:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29WkBkDFr+2VaACb6/FDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm
NmM3MzEwHhcNMjYwMTI1MjEwMDM2WhcNMjYwMTI2MjEwMDM2WjAzMTEwLwYDVQQD
EyhmYzNmMTRmZTU4ZWQyNTE1YWYyNzg3OTdlMjI0MjE1ZTUzZDczNmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIy7k3PQwc2+FmwSCDke/v28k7lk
uG/INg5nf94isk628U43vNZiDAql/fBJv5Cu9OV8NUazLMOa/5h/CxBfPhHObokY
4/Xa97wrMK6J5u09xSJlYLw+RtnsQ/5LQbryZqkqwkM7kQ40FWKir6K8lv7iDphd
k1rh2PPsHe/nlBl7d2cJFjtE8xJn8d7P/Dcttz2+Y7MxdbwWe1rR/hMuJE0HYakH
gUmp40RUTgU9dEw96ZyAo7p/3tzWR6TnC5FsuMF8WjbonRtt6iE13h2iVajqnrZw
z3joNCpMTvsz36YawhD6Arp+o1B4m7se49DhQfJ7Ivf4DzRpqKPxUz45MwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPw/FP5Y7SUVryeHl+IkIV5T1zbfMB8GA1UdIwQY
MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt
Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1
LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADSTGsy1R
9DPKROt/i/O1E4p49+i7ysIpWyo5wbnZGUF64hefHBZxiHDtnN6wJDZEmL4XmrR5
ll8pBHJ8lY3sR2/HMxgj11a7GaItW50CV7FXpMndQZfb4kJlRXv8ATnIYaXjTrp2
cIrjeQL1gIElYW5IrQByBSOWI+FLhZ5B8WL4x0FumVfopkcqpN8Z9rKXZ3Ly6Aln
Y/odAGv0wIoMEbPcCf1sM8Akv5WSuRj5tK6XcIBHRtmWFzt6cs3gHtef5ZC2spH7
sllSXTYcansq5KjJ2ZSV8uXS7kx3mGTDPx+EEml7pLqd237QIUnIe+Lw1GYzFyfq
SzNmAW4+XddzbA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:19:33 2026 by rpki-client