This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
File:                     ho8gMJli98bhwyZ_CD4STYPddvw.mft (raw, json)
Hash identifier:          N3oIQS7fUzHxR+XXluvRKcxM2R1E9na4gSnK842J+98=
Subject key identifier:   83:28:CB:5A:6A:DF:50:CC:75:44:95:23:5E:93:34:39:96:11:DD:37
Authority key identifier: 86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC
Certificate issuer:       /CN=868f20309962f7c6e1c3267f083e124d83dd76fc
Certificate serial:       019BF951F4A9CC7327F8A023BCA0C8E1DD34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 08:00:56 +0000
Manifest this update:     Mon 26 Jan 2026 08:00:56 +0000
Manifest next update:     Tue 27 Jan 2026 08:00:56 +0000
Files and hashes:         1: 55TydbG7XIPM3ovk6O_qtpxMT5g.roa (hash: Irnfw7dwlSnEFTktO5O7WLJDCKpVdnM7re9+EYkh2Fg=)
                          2: ho8gMJli98bhwyZ_CD4STYPddvw.crl (hash: BIHXEBN+vLCTuXqDgvlRBlgkTNzQTSds6CPGjrQavjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:51:f4:a9:cc:73:27:f8:a0:23:bc:a0:c8:e1:dd:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=868f20309962f7c6e1c3267f083e124d83dd76fc
        Validity
            Not Before: Jan 26 08:00:56 2026 GMT
            Not After : Jan 27 08:00:56 2026 GMT
        Subject: CN=8328cb5a6adf50cc754495235e9334399611dd37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:72:14:12:73:9a:2c:6c:28:86:c2:e1:04:1f:
                    0c:84:3f:1f:6e:2f:79:30:6d:47:f4:b3:66:f7:ff:
                    68:9a:10:82:a1:ae:8e:20:0b:17:5c:b0:e2:aa:36:
                    90:69:a7:f7:dc:5e:36:8d:a4:91:c3:e0:e0:bf:08:
                    7f:70:45:12:59:6a:73:11:e2:dd:39:77:2e:61:2d:
                    ef:d7:52:cb:b3:b1:04:c9:cf:08:4a:ac:4e:5e:c9:
                    a5:b3:8c:2f:c3:d4:62:6c:99:2c:34:cd:44:e6:24:
                    92:3d:f5:6e:c7:a6:7b:d3:91:e0:95:9f:ec:d4:fb:
                    a2:27:62:c0:7e:1c:00:62:dc:bb:c1:55:f0:fd:0d:
                    47:4e:c5:cf:5f:2d:d8:19:f6:c2:00:6d:6b:e5:95:
                    b7:14:99:cb:37:29:d9:c6:92:30:2c:70:5f:f5:bc:
                    85:db:6d:1f:b2:3e:4f:67:5d:fb:98:ff:cb:c2:b4:
                    8c:c2:c5:7d:8d:b9:69:ee:16:ef:77:88:20:47:d0:
                    aa:52:af:25:6a:70:41:9e:d4:5d:34:00:8f:42:29:
                    61:5c:7c:d1:b8:e8:28:59:2f:f1:b8:86:9e:19:05:
                    24:18:7d:ac:99:7d:4e:44:b4:7c:5b:8f:bb:a4:23:
                    49:6a:32:08:20:fb:ca:61:f6:80:8e:03:97:0d:ee:
                    87:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:28:CB:5A:6A:DF:50:CC:75:44:95:23:5E:93:34:39:96:11:DD:37
            X509v3 Authority Key Identifier:
                keyid:86:8F:20:30:99:62:F7:C6:E1:C3:26:7F:08:3E:12:4D:83:DD:76:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ho8gMJli98bhwyZ_CD4STYPddvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/126cee-f16c-45a8-97b2-623384f3e125/1/ho8gMJli98bhwyZ_CD4STYPddvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:5b:9b:01:64:89:ff:6b:73:40:0b:b5:b3:8d:0d:32:1e:f3:
         d1:54:8d:f1:84:e9:89:d9:7f:ed:08:81:07:0d:d3:04:06:74:
         d7:07:76:1f:34:99:a4:ac:5a:59:53:1a:28:74:1f:54:76:de:
         5b:1f:cb:a5:33:4b:ba:d5:83:15:11:5f:74:fd:e2:6d:22:12:
         62:3f:4d:6e:9b:07:a4:7a:55:76:28:37:a0:82:3e:a6:24:dc:
         da:d5:fb:98:fe:b2:97:90:80:a9:a5:32:23:03:d7:73:0b:44:
         ee:13:48:d9:fd:82:cc:87:98:3b:e3:a4:6a:2e:5f:14:b8:93:
         8b:12:3a:9c:39:f1:2f:73:f3:eb:60:44:ca:9f:4e:51:d5:20:
         ca:ba:ec:9a:dd:fd:81:61:e1:6a:89:e1:9c:4a:00:de:58:23:
         b3:50:51:ea:e4:f9:5e:26:3a:41:ad:fb:5f:1e:6a:4b:93:fb:
         f4:ed:f1:17:e4:00:f6:30:82:f4:a5:93:84:3b:f3:38:de:5e:
         13:1b:eb:af:4f:f1:e8:87:af:3c:30:34:08:0f:33:19:1c:fc:
         05:5b:bf:85:b6:77:f5:57:03:f4:21:26:55:18:53:30:1e:4d:
         86:77:2a:9d:a2:4f:f2:5a:d7:bd:47:b5:0f:05:8d:e3:44:37:
         af:a3:ad:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5UfSpzHMn+KAjvKDI4d00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OGYyMDMwOTk2MmY3YzZlMWMzMjY3ZjA4M2UxMjRkODNk
ZDc2ZmMwHhcNMjYwMTI2MDgwMDU2WhcNMjYwMTI3MDgwMDU2WjAzMTEwLwYDVQQD
Eyg4MzI4Y2I1YTZhZGY1MGNjNzU0NDk1MjM1ZTkzMzQzOTk2MTFkZDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nIUEnOaLGwohsLhBB8MhD8fbi95
MG1H9LNm9/9omhCCoa6OIAsXXLDiqjaQaaf33F42jaSRw+Dgvwh/cEUSWWpzEeLd
OXcuYS3v11LLs7EEyc8ISqxOXsmls4wvw9RibJksNM1E5iSSPfVux6Z705HglZ/s
1PuiJ2LAfhwAYty7wVXw/Q1HTsXPXy3YGfbCAG1r5ZW3FJnLNynZxpIwLHBf9byF
220fsj5PZ137mP/LwrSMwsV9jblp7hbvd4ggR9CqUq8lanBBntRdNACPQilhXHzR
uOgoWS/xuIaeGQUkGH2smX1ORLR8W4+7pCNJajIIIPvKYfaAjgOXDe6HDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMoy1pq31DMdUSVI16TNDmWEd03MB8GA1UdIwQY
MBaAFIaPIDCZYvfG4cMmfwg+Ek2D3Xb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjIt
NjIzMzg0ZjNlMTI1LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xMjZjZWUtZjE2Yy00NWE4LTk3YjItNjIzMzg0ZjNlMTI1
LzEvaG84Z01KbGk5OGJod3laX0NENFNUWVBkZHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVubAWSJ
/2tzQAu1s40NMh7z0VSN8YTpidl/7QiBBw3TBAZ01wd2HzSZpKxaWVMaKHQfVHbe
Wx/LpTNLutWDFRFfdP3ibSISYj9NbpsHpHpVdig3oII+piTc2tX7mP6yl5CAqaUy
IwPXcwtE7hNI2f2CzIeYO+Okai5fFLiTixI6nDnxL3Pz62BEyp9OUdUgyrrsmt39
gWHhaonhnEoA3lgjs1BR6uT5XiY6Qa37Xx5qS5P79O3xF+QA9jCC9KWThDvzON5e
Exvrr0/x6IevPDA0CA8zGRz8BVu/hbZ39VcD9CEmVRhTMB5NhncqnaJP8lrXvUe1
DwWN40Q3r6OtAg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:41 2026 by rpki-client