This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File:                     fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier:          mGGFHtDWQFFeQqPY855j3UeoB5PzQ9QHqNsSP2DOpKg=
Subject key identifier:   52:4B:C0:DC:DF:EC:59:BF:F7:C8:1C:E6:1D:E5:7D:32:BB:F0:C8:41
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer:       /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial:       019BF7636891714FC93624E37A6A9F835B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number:          0D9D
Signing time:             Sun 25 Jan 2026 23:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:45 +0000
Files and hashes:         1: 3qd6ryJVoFRB650Q_vjYdE5FH3c.roa (hash: 9UIvBWdv4SEGNEIJba6xg1//2eKqhjadOAhSloqCY4U=)
                          2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: HOCfw1iBNKwB6invu818V5N02Op0lDVYlVEuMJE/PaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:68:91:71:4f:c9:36:24:e3:7a:6a:9f:83:5b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
        Validity
            Not Before: Jan 25 23:00:45 2026 GMT
            Not After : Jan 26 23:00:45 2026 GMT
        Subject: CN=524bc0dcdfec59bff7c81ce61de57d32bbf0c841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:0f:7c:1b:33:25:4e:d3:ad:07:0e:86:61:
                    27:96:f4:a5:b2:99:9c:fd:f3:ba:1d:d1:19:d0:fa:
                    8b:21:36:f3:f7:bc:00:8d:68:ff:d3:6d:e3:e1:a5:
                    02:74:fb:5e:29:66:32:4c:00:d7:97:20:bb:83:8a:
                    fa:5a:41:8f:16:57:a5:f0:04:0e:f1:53:ea:83:11:
                    86:db:8a:ef:41:ae:07:17:0b:58:68:34:e2:28:1e:
                    a0:01:cd:25:a2:18:bc:b6:9e:9e:43:31:38:ff:ac:
                    52:ec:45:c1:18:06:c9:d9:51:63:7b:e4:17:77:23:
                    38:43:7e:02:28:16:a2:9d:c4:a9:94:6a:b6:ee:10:
                    f0:17:d0:06:17:d7:2f:da:ee:0d:af:58:e9:bc:64:
                    3b:29:ef:1a:ec:19:be:50:6f:01:62:cd:a5:b2:13:
                    ed:9f:47:39:bd:a3:06:c3:4a:1a:57:cd:f9:53:8e:
                    a7:b2:54:b4:c1:d3:9e:e3:fd:05:40:b0:e3:c2:52:
                    fb:0f:06:f5:38:08:62:a3:87:9b:e4:6c:55:d0:29:
                    af:d0:53:03:44:a8:5e:e5:89:5c:a2:73:51:6e:74:
                    74:e4:21:30:88:1d:61:2a:d0:0a:17:27:34:2f:c0:
                    6b:aa:bc:04:52:cc:9a:c5:a8:b1:7b:f8:fc:ff:a1:
                    00:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4B:C0:DC:DF:EC:59:BF:F7:C8:1C:E6:1D:E5:7D:32:BB:F0:C8:41
            X509v3 Authority Key Identifier:
                keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:2c:54:17:e7:b8:33:a2:11:fd:36:f0:3d:26:51:cc:78:8a:
         91:6c:ed:8e:85:1d:d1:35:7b:c5:6a:f1:62:fd:a4:d1:ac:2b:
         f3:56:7f:49:e2:8b:be:10:8d:ce:1c:99:60:29:49:eb:61:7f:
         f0:d8:b7:a5:71:e3:9a:4e:1d:8a:d4:42:7d:6f:82:b1:b9:63:
         05:7c:ea:1b:d9:4d:bd:65:44:46:32:8e:b5:71:83:08:6e:e4:
         3a:65:f6:49:11:41:b3:3b:1a:1f:0d:d3:57:f3:3d:90:ca:97:
         e2:72:29:99:a9:17:0f:6c:58:ae:0f:de:d7:b0:42:57:d9:2c:
         c3:01:65:b1:22:37:b5:aa:4b:6b:98:6c:35:f3:ef:f2:9e:1e:
         04:8c:1d:80:34:4e:87:88:b5:e0:fc:eb:3c:2c:97:7a:8f:7f:
         86:34:0e:78:0a:e8:b9:5d:c2:92:61:7b:c1:b9:d8:34:3a:45:
         f8:03:d2:d4:af:f9:eb:ae:43:e8:73:9d:fc:3e:9d:41:78:a2:
         a3:e5:75:2c:91:3d:46:de:40:11:b6:ab:c4:e6:3d:1e:f7:9d:
         cb:fe:9d:f3:ee:3e:f1:01:b7:f2:24:af:ae:9d:da:d7:01:d0:
         d7:a7:db:a4:7d:19:95:d0:c3:e1:3f:cf:27:7d:d8:b6:1f:6b:
         b3:12:ff:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3Y2iRcU/JNiTjemqfg1uJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNTU3NTJiN2Q2ZmNlNzI4NmIxYTFhMmU0M2JjODZkNDU4
NGU4M2YwHhcNMjYwMTI1MjMwMDQ1WhcNMjYwMTI2MjMwMDQ1WjAzMTEwLwYDVQQD
Eyg1MjRiYzBkY2RmZWM1OWJmZjdjODFjZTYxZGU1N2QzMmJiZjBjODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFAPfBszJU7TrQcOhmEnlvSlspmc
/fO6HdEZ0PqLITbz97wAjWj/023j4aUCdPteKWYyTADXlyC7g4r6WkGPFlel8AQO
8VPqgxGG24rvQa4HFwtYaDTiKB6gAc0lohi8tp6eQzE4/6xS7EXBGAbJ2VFje+QX
dyM4Q34CKBaincSplGq27hDwF9AGF9cv2u4Nr1jpvGQ7Ke8a7Bm+UG8BYs2lshPt
n0c5vaMGw0oaV835U46nslS0wdOe4/0FQLDjwlL7Dwb1OAhio4eb5GxV0Cmv0FMD
RKhe5YlconNRbnR05CEwiB1hKtAKFyc0L8BrqrwEUsyaxaixe/j8/6EAHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJLwNzf7Fm/98gc5h3lfTK78MhBMB8GA1UdIwQY
MBaAFHxVdSt9b85yhrGhouQ7yG1FhOg/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUt
ZTg4Njk1ZmRkNmU1LzEvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My8zNGUwNzYtNTk4OS00MDJkLTk2ZGUtZTg4Njk1ZmRkNmU1
LzEvZkZWMUszMXZ6bktHc2FHaTVEdkliVVdFNkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyxUF+e4
M6IR/TbwPSZRzHiKkWztjoUd0TV7xWrxYv2k0awr81Z/SeKLvhCNzhyZYClJ62F/
8Ni3pXHjmk4ditRCfW+CsbljBXzqG9lNvWVERjKOtXGDCG7kOmX2SRFBszsaHw3T
V/M9kMqX4nIpmakXD2xYrg/e17BCV9kswwFlsSI3tapLa5hsNfPv8p4eBIwdgDRO
h4i14PzrPCyXeo9/hjQOeArouV3CkmF7wbnYNDpF+APS1K/5665D6HOd/D6dQXii
o+V1LJE9Rt5AEbarxOY9Hvedy/6d8+4+8QG38iSvrp3a1wHQ16fbpH0ZldDD4T/P
J33Yth9rsxL/Bg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:20 2026 by rpki-client