This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
File:                     AnTQhnltTXea0WTCTCI_JrMoTtQ.mft (raw, json)
Hash identifier:          LD94N6wFjS+bc7Z02np452DRdyLHCTdqkn3aKBgyCXo=
Subject key identifier:   06:7F:D8:69:E5:18:B6:BE:5C:86:19:56:1D:CE:44:D5:17:64:DE:81
Authority key identifier: 02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4
Certificate issuer:       /CN=0274d086796d4d779ad164c24c223f26b3284ed4
Certificate serial:       019BF80888CFCF6C3AE1F93EBE3DF18D5BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 02:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:07 +0000
Files and hashes:         1: AnTQhnltTXea0WTCTCI_JrMoTtQ.crl (hash: 2UnD4OkEdKbuiMqOap/L9VwMofKNfF9lQOtMxqW2p50=)
                          2: N9Z8L17gqp_DcaleVfZ6DeSdxAE.roa (hash: BFqHODDxXRowsBsTAMdXlRDLIa4Wr3+1J82Zf5HSPCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:88:cf:cf:6c:3a:e1:f9:3e:be:3d:f1:8d:5b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0274d086796d4d779ad164c24c223f26b3284ed4
        Validity
            Not Before: Jan 26 02:01:07 2026 GMT
            Not After : Jan 27 02:01:07 2026 GMT
        Subject: CN=067fd869e518b6be5c8619561dce44d51764de81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9a:98:aa:2b:0f:a8:d6:6e:20:3d:b0:9b:7d:
                    c0:1d:96:d3:cc:8a:81:41:38:cd:27:6e:d0:ca:da:
                    57:f6:49:8b:18:55:de:95:b1:0f:79:93:3a:ae:db:
                    27:05:75:5d:41:1f:9b:a3:6a:4a:34:bb:5a:ee:29:
                    c2:2e:37:ea:4d:88:7d:67:b0:f4:e3:28:cd:5b:f1:
                    7a:dd:c6:3f:05:4d:85:cc:ec:27:46:84:35:11:0c:
                    30:c2:00:1b:5d:df:83:f1:96:14:c4:3d:b3:9b:39:
                    66:e2:18:fa:bc:72:c3:71:1d:b1:eb:b2:b3:95:b9:
                    7f:50:0f:fa:3e:15:a1:a0:15:f7:77:be:c6:fb:30:
                    33:89:0d:46:a1:14:b3:00:3f:b2:a3:f2:72:d3:5d:
                    cd:49:df:a5:0e:b4:f6:41:ad:9a:91:7d:29:30:a7:
                    4d:90:31:02:57:de:48:57:28:97:ab:1f:cb:52:e2:
                    08:20:96:59:41:65:3b:d4:99:3b:2a:40:53:a5:4a:
                    91:46:3f:2e:f0:b6:d4:76:95:e9:9e:82:8f:9d:6c:
                    e3:a4:93:f6:31:89:13:bf:cc:35:83:23:91:84:b9:
                    d2:7d:0f:4a:4c:88:57:8e:0c:df:4b:c4:85:68:43:
                    fe:fd:29:60:ec:d6:43:c9:ad:a3:e9:73:b6:30:90:
                    7e:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7F:D8:69:E5:18:B6:BE:5C:86:19:56:1D:CE:44:D5:17:64:DE:81
            X509v3 Authority Key Identifier:
                keyid:02:74:D0:86:79:6D:4D:77:9A:D1:64:C2:4C:22:3F:26:B3:28:4E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AnTQhnltTXea0WTCTCI_JrMoTtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/751958-abeb-459e-8141-b95520c872c5/1/AnTQhnltTXea0WTCTCI_JrMoTtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:cf:7e:f3:4b:49:80:e9:46:02:8b:6b:63:cf:8c:74:5d:7a:
         59:c7:3a:46:a3:e8:b1:e6:c4:05:f8:f8:c6:d5:7e:ce:32:1e:
         67:29:e7:fc:fd:fc:f4:e3:c5:4f:b0:9d:b0:2e:81:8c:9e:44:
         6e:1f:d9:aa:e9:3b:f4:d8:4d:8a:36:d3:ec:fc:7d:3f:67:ad:
         6f:86:61:2f:1b:dc:37:6c:2e:98:5a:65:a6:8a:88:10:3c:d6:
         38:9c:83:b9:89:e8:52:49:22:f9:47:75:a8:a9:fd:56:c7:77:
         ee:42:62:fe:4a:a2:1a:81:0f:58:2c:78:8c:17:f6:92:96:61:
         cd:5e:53:31:67:c4:90:63:3d:16:f0:36:cb:7e:7f:b4:76:af:
         62:21:a1:a3:75:e8:3b:0e:81:3e:ef:f2:70:dd:7f:d6:8e:c9:
         89:70:60:e0:89:4e:1a:90:46:15:53:af:5e:07:03:a3:3b:59:
         08:a2:c3:1c:f0:86:87:a4:bb:7b:1d:82:6c:e7:e0:5e:07:9b:
         61:04:2d:f2:8a:cc:ef:6d:76:d1:da:64:46:a7:4b:28:9f:40:
         14:a6:f3:ee:07:e3:eb:39:1b:10:b6:df:a1:d6:c0:b6:90:a8:
         79:ec:20:69:14:27:19:f6:80:89:15:df:aa:c3:cc:18:27:a6:
         6b:94:4e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4CIjPz2w64fk+vj3xjVvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNzRkMDg2Nzk2ZDRkNzc5YWQxNjRjMjRjMjIzZjI2YjMy
ODRlZDQwHhcNMjYwMTI2MDIwMTA3WhcNMjYwMTI3MDIwMTA3WjAzMTEwLwYDVQQD
EygwNjdmZDg2OWU1MThiNmJlNWM4NjE5NTYxZGNlNDRkNTE3NjRkZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JqYqisPqNZuID2wm33AHZbTzIqB
QTjNJ27QytpX9kmLGFXelbEPeZM6rtsnBXVdQR+bo2pKNLta7inCLjfqTYh9Z7D0
4yjNW/F63cY/BU2FzOwnRoQ1EQwwwgAbXd+D8ZYUxD2zmzlm4hj6vHLDcR2x67Kz
lbl/UA/6PhWhoBX3d77G+zAziQ1GoRSzAD+yo/Jy013NSd+lDrT2Qa2akX0pMKdN
kDECV95IVyiXqx/LUuIIIJZZQWU71Jk7KkBTpUqRRj8u8LbUdpXpnoKPnWzjpJP2
MYkTv8w1gyORhLnSfQ9KTIhXjgzfS8SFaEP+/Slg7NZDya2j6XO2MJB+8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZ/2GnlGLa+XIYZVh3ORNUXZN6BMB8GA1UdIwQY
MBaAFAJ00IZ5bU13mtFkwkwiPyazKE7UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEt
Yjk1NTIwYzg3MmM1LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83NTE5NTgtYWJlYi00NTllLTgxNDEtYjk1NTIwYzg3MmM1
LzEvQW5UUWhubHRUWGVhMFdUQ1RDSV9Kck1vVHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc9+80tJ
gOlGAotrY8+MdF16Wcc6RqPosebEBfj4xtV+zjIeZynn/P389OPFT7CdsC6BjJ5E
bh/Zquk79NhNijbT7Px9P2etb4ZhLxvcN2wumFplpoqIEDzWOJyDuYnoUkki+Ud1
qKn9Vsd37kJi/kqiGoEPWCx4jBf2kpZhzV5TMWfEkGM9FvA2y35/tHavYiGho3Xo
Ow6BPu/ycN1/1o7JiXBg4IlOGpBGFVOvXgcDoztZCKLDHPCGh6S7ex2CbOfgXgeb
YQQt8orM72120dpkRqdLKJ9AFKbz7gfj6zkbELbfodbAtpCoeewgaRQnGfaAiRXf
qsPMGCema5ROfg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:37 2026 by rpki-client