This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
File:                     5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft (raw, json)
Hash identifier:          vzvUCluw1UhsHOppeu4cCP1chOXV4Q/GcVpoNAh18qk=
Subject key identifier:   9C:EB:A9:63:D8:E1:39:03:C9:FB:C8:BE:AD:0D:C3:10:59:85:4E:1A
Authority key identifier: E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01
Certificate issuer:       /CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
Certificate serial:       019BF7D15A1B0110D8051675D3E7E187CBA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 01:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:50 +0000
Files and hashes:         1: 5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl (hash: cihIpPSUUrRUDus2G0Xkhm3qiVjpAKxjX6HQKHK1l6w=)
                          2: B6iysmHDbleRVKIuBhreNxTvPy4.roa (hash: fb8tZxqx2SdW+lzSZRG1WIbgYJH2tXqvILVLuIwY8Cs=)
                          3: SRCBhIkP-Hqzoh2rZQemvVRuvuw.roa (hash: p/d5YtiIC7MAwrPek8AUJQpdVyLGSdu9mLSnMckIXnc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:5a:1b:01:10:d8:05:16:75:d3:e7:e1:87:cb:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e73cf9433eb80fe9027084529a25412ddfe5bd01
        Validity
            Not Before: Jan 26 01:00:50 2026 GMT
            Not After : Jan 27 01:00:50 2026 GMT
        Subject: CN=9ceba963d8e13903c9fbc8bead0dc31059854e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:2a:52:e5:da:0b:39:34:1f:06:62:55:9f:
                    96:15:77:b8:81:fd:b7:e2:ed:f7:63:e9:4b:51:a6:
                    f3:a2:1a:d7:16:5a:4a:03:c2:0d:0b:d3:d2:2d:97:
                    d2:29:6a:ae:4e:ca:da:6c:66:70:ac:55:84:e6:92:
                    59:9e:b3:09:2c:4a:1f:fc:d8:bb:e6:06:6d:43:22:
                    94:30:fe:e5:41:88:a7:3b:2d:87:e8:b6:72:56:bf:
                    72:d4:7c:f7:74:eb:c9:47:43:43:cc:18:34:42:09:
                    3d:a4:a5:21:a4:1c:96:50:0d:03:64:37:57:c6:bf:
                    01:69:51:6e:bb:98:7b:f4:b6:87:f6:41:5f:fc:63:
                    30:31:3c:c6:3b:d3:2e:78:ed:e2:9d:9c:2c:87:df:
                    9c:6e:68:71:ee:f5:9a:3e:c2:3e:55:13:81:f3:ab:
                    49:ee:6f:cf:30:14:45:fd:c1:18:c9:e1:df:bb:9c:
                    6a:a0:e9:0f:78:a1:7f:f1:c6:ef:c1:9f:9b:2a:3b:
                    b4:87:f1:17:6a:56:32:76:f9:a4:f8:4e:e0:eb:97:
                    4e:a3:b9:f5:66:e9:4e:60:47:18:43:3c:cb:f1:d1:
                    4c:e0:21:77:e5:0d:7b:e3:f9:4f:30:aa:a1:20:f5:
                    c7:55:88:a6:7e:08:39:43:7c:7a:4b:01:40:59:f1:
                    e9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:A9:63:D8:E1:39:03:C9:FB:C8:BE:AD:0D:C3:10:59:85:4E:1A
            X509v3 Authority Key Identifier:
                keyid:E7:3C:F9:43:3E:B8:0F:E9:02:70:84:52:9A:25:41:2D:DF:E5:BD:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zz5Qz64D-kCcIRSmiVBLd_lvQE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/817c14-b800-4c15-a89e-704f263389e2/1/5zz5Qz64D-kCcIRSmiVBLd_lvQE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:4d:b4:5b:63:79:60:f6:be:8a:f8:0b:b3:ab:7c:5f:ef:dc:
         74:ea:eb:68:ab:9f:60:5e:8f:9a:94:f7:7b:38:50:80:e6:0d:
         16:9d:64:95:2b:a0:84:fd:81:62:d7:24:5f:38:4b:e5:19:50:
         90:1c:3d:ad:bc:0a:5d:99:fb:6f:2e:f6:08:95:04:b5:2a:55:
         8f:a6:3e:54:90:c6:93:a6:db:10:7b:d2:98:8a:9b:8e:71:60:
         7f:60:22:0f:f0:d0:bd:5b:49:fe:e6:05:3e:81:55:91:f0:f7:
         75:82:86:94:5b:25:ff:72:30:72:18:97:71:a1:37:08:54:77:
         94:ad:1a:9c:65:35:51:02:03:17:b9:6f:f7:ec:8c:c1:88:80:
         5b:c7:09:9f:52:33:f0:e3:4d:e4:cd:31:61:8d:da:a6:6e:eb:
         79:b0:c8:16:b7:46:4a:66:39:40:57:e1:0e:31:2c:ed:4c:35:
         37:d4:bc:c6:9a:58:ad:73:b9:2d:f3:86:bd:2e:f5:6f:2b:cc:
         30:e8:fd:61:12:43:4c:6b:20:27:20:0f:76:29:0f:02:ed:1d:
         70:c7:77:82:15:9a:89:37:f5:76:13:a7:c5:63:fc:d1:00:4a:
         01:b6:31:f2:eb:36:80:e3:4b:f1:9d:99:76:ce:4e:5a:6d:e1:
         55:34:48:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv30VobARDYBRZ10+fhh8ugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3M2NmOTQzM2ViODBmZTkwMjcwODQ1MjlhMjU0MTJkZGZl
NWJkMDEwHhcNMjYwMTI2MDEwMDUwWhcNMjYwMTI3MDEwMDUwWjAzMTEwLwYDVQQD
Eyg5Y2ViYTk2M2Q4ZTEzOTAzYzlmYmM4YmVhZDBkYzMxMDU5ODU0ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmoqUuXaCzk0HwZiVZ+WFXe4gf23
4u33Y+lLUabzohrXFlpKA8INC9PSLZfSKWquTsrabGZwrFWE5pJZnrMJLEof/Ni7
5gZtQyKUMP7lQYinOy2H6LZyVr9y1Hz3dOvJR0NDzBg0Qgk9pKUhpByWUA0DZDdX
xr8BaVFuu5h79LaH9kFf/GMwMTzGO9MueO3inZwsh9+cbmhx7vWaPsI+VROB86tJ
7m/PMBRF/cEYyeHfu5xqoOkPeKF/8cbvwZ+bKju0h/EXalYydvmk+E7g65dOo7n1
ZulOYEcYQzzL8dFM4CF35Q174/lPMKqhIPXHVYimfgg5Q3x6SwFAWfHp0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzrqWPY4TkDyfvIvq0NwxBZhU4aMB8GA1UdIwQY
MBaAFOc8+UM+uA/pAnCEUpolQS3f5b0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUt
NzA0ZjI2MzM4OWUyLzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni84MTdjMTQtYjgwMC00YzE1LWE4OWUtNzA0ZjI2MzM4OWUy
LzEvNXp6NVF6NjRELWtDY0lSU21pVkJMZF9sdlFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1E20W2N5
YPa+ivgLs6t8X+/cdOrraKufYF6PmpT3ezhQgOYNFp1klSughP2BYtckXzhL5RlQ
kBw9rbwKXZn7by72CJUEtSpVj6Y+VJDGk6bbEHvSmIqbjnFgf2AiD/DQvVtJ/uYF
PoFVkfD3dYKGlFsl/3IwchiXcaE3CFR3lK0anGU1UQIDF7lv9+yMwYiAW8cJn1Iz
8ONN5M0xYY3apm7rebDIFrdGSmY5QFfhDjEs7Uw1N9S8xppYrXO5LfOGvS71byvM
MOj9YRJDTGsgJyAPdikPAu0dcMd3ghWaiTf1dhOnxWP80QBKAbYx8us2gONL8Z2Z
ds5OWm3hVTRIzw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:57:38 2026 by rpki-client