This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
File:                     n2m9-bvSpFl-Js4gv-E4YkytM9w.mft (raw, json)
Hash identifier:          lu2HL4B+aYhzpKHhIIawTrQ8V8/eB/Zsj52HvPncvr0=
Subject key identifier:   01:C6:F2:8B:8E:DC:D9:2F:5B:84:35:E2:E1:7A:37:94:42:D1:EB:22
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Certificate issuer:       /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial:       019BF53EFB04ADDB20599B0E751AA9D92C50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 13:01:43 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:43 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:43 +0000
Files and hashes:         1: ax-_Txj0CX184s7yaQUE1z5JmL0.roa (hash: SkAHqlZ+jgnUZoHQzNhptAmXxqgxJ8UA0ILHaB/nBhU=)
                          2: n2m9-bvSpFl-Js4gv-E4YkytM9w.crl (hash: RNT1QcbspeeI6c1dT3D2Q/IAkDOf06ATtfNg5qm2lrU=)
                          3: s3L0l4qF3K7jw8TMCiB-9AN71UI.roa (hash: 0RGzdmuY2tV2GXNZ55W5LJa/3HUtCfJOAjKYME+51vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:fb:04:ad:db:20:59:9b:0e:75:1a:a9:d9:2c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
        Validity
            Not Before: Jan 25 13:01:43 2026 GMT
            Not After : Jan 26 13:01:43 2026 GMT
        Subject: CN=01c6f28b8edcd92f5b8435e2e17a379442d1eb22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:24:17:cf:14:33:c6:e4:ca:40:4c:71:98:01:
                    b6:8d:9e:5c:f4:d1:eb:de:aa:1e:74:04:50:be:5d:
                    86:f4:5d:1d:50:fb:7c:f7:22:2d:b2:bd:02:0a:68:
                    2f:13:fd:e7:53:94:28:c6:3c:2c:95:c8:9a:a5:ef:
                    46:1b:08:a1:b8:e8:f4:6e:4e:29:60:73:fd:91:26:
                    d1:40:51:f8:d2:77:bd:b1:2f:f4:ee:70:e4:bf:5c:
                    ac:b0:e4:01:c5:c7:28:14:ef:53:3d:e8:ba:52:1f:
                    4a:5e:c6:e2:23:35:75:31:95:88:06:e3:26:24:55:
                    2f:17:df:ed:47:b7:3a:f6:94:5e:6d:2f:87:50:eb:
                    56:87:43:60:f3:e8:09:bf:ae:d7:af:02:0b:ec:c0:
                    24:e5:74:29:53:dd:1a:54:b8:ff:3e:89:a4:8e:2e:
                    7f:cc:9d:aa:a1:22:ac:de:b1:14:a1:c5:48:d6:d8:
                    d7:12:2d:a0:ba:ea:ac:50:27:91:e3:ac:5d:b7:85:
                    3a:c3:43:f3:67:c8:8f:46:9e:27:12:56:49:4b:f8:
                    44:6a:22:de:23:1a:94:4c:d4:1f:99:8f:ba:0b:71:
                    fb:a9:60:7f:f6:67:1b:71:3a:ce:9d:8c:36:dd:ec:
                    21:32:81:30:92:87:40:89:ae:55:7b:ca:b6:f3:5b:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C6:F2:8B:8E:DC:D9:2F:5B:84:35:E2:E1:7A:37:94:42:D1:EB:22
            X509v3 Authority Key Identifier:
                keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:31:9a:60:7c:5c:91:d9:6c:ab:4f:4e:52:fc:5a:3b:fe:
         4c:96:ea:7d:a3:18:be:2a:60:6a:11:45:f3:58:79:1e:d7:44:
         94:f6:b9:3e:43:89:68:c3:df:48:89:89:c6:5d:be:52:3f:1e:
         0a:69:97:25:ce:ef:40:0d:e8:54:e7:74:17:b9:66:08:b7:10:
         90:be:43:c5:4d:9a:0d:00:87:d9:13:a6:de:e9:d4:7a:08:28:
         97:49:4e:8a:19:3e:ec:52:41:29:23:d5:62:52:22:85:3c:c4:
         dc:a5:a4:0c:f4:78:ff:11:65:8e:b0:16:83:8a:1d:4b:6b:5a:
         6a:42:d7:6f:d5:0c:73:42:13:c7:17:a5:69:ec:1e:30:42:06:
         23:d9:12:41:3a:cd:88:2e:44:e4:48:1d:e5:99:e8:69:7a:74:
         a1:7b:81:de:5b:ca:eb:66:f6:38:f9:61:f8:db:a8:49:47:f9:
         4e:2d:ee:1a:3d:43:19:b3:c4:20:c3:13:46:55:13:76:4d:b5:
         a1:e4:09:1a:7e:53:20:ad:3c:94:9c:10:a4:2c:f0:b1:b7:ad:
         11:2b:6b:b6:a7:f4:e8:52:40:b3:0b:02:3d:34:93:59:0d:03:
         7c:73:c7:aa:d2:32:a6:54:ff:9b:6e:90:f1:2d:98:6a:c5:4f:
         6a:79:a0:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PvsErdsgWZsOdRqp2SxQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNjliZGY5YmJkMmE0NTk3ZTI2Y2UyMGJmZTEzODYyNGNh
ZDMzZGMwHhcNMjYwMTI1MTMwMTQzWhcNMjYwMTI2MTMwMTQzWjAzMTEwLwYDVQQD
EygwMWM2ZjI4YjhlZGNkOTJmNWI4NDM1ZTJlMTdhMzc5NDQyZDFlYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yQXzxQzxuTKQExxmAG2jZ5c9NHr
3qoedARQvl2G9F0dUPt89yItsr0CCmgvE/3nU5Qoxjwslciape9GGwihuOj0bk4p
YHP9kSbRQFH40ne9sS/07nDkv1yssOQBxccoFO9TPei6Uh9KXsbiIzV1MZWIBuMm
JFUvF9/tR7c69pRebS+HUOtWh0Ng8+gJv67XrwIL7MAk5XQpU90aVLj/Pomkji5/
zJ2qoSKs3rEUocVI1tjXEi2guuqsUCeR46xdt4U6w0PzZ8iPRp4nElZJS/hEaiLe
IxqUTNQfmY+6C3H7qWB/9mcbcTrOnYw23ewhMoEwkodAia5Ve8q281t3IwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHG8ouO3NkvW4Q14uF6N5RC0esiMB8GA1UdIwQY
MBaAFJ9pvfm70qRZfibOIL/hOGJMrTPcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEt
NjE5MjgxMzgwYmMyLzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9jZGJkMGEtNjhlYy00ODdkLThmZWEtNjE5MjgxMzgwYmMy
LzEvbjJtOS1idlNwRmwtSnM0Z3YtRTRZa3l0TTl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEAxmmB8
XJHZbKtPTlL8Wjv+TJbqfaMYvipgahFF81h5HtdElPa5PkOJaMPfSImJxl2+Uj8e
CmmXJc7vQA3oVOd0F7lmCLcQkL5DxU2aDQCH2ROm3unUeggol0lOihk+7FJBKSPV
YlIihTzE3KWkDPR4/xFljrAWg4odS2taakLXb9UMc0ITxxelaeweMEIGI9kSQTrN
iC5E5Egd5ZnoaXp0oXuB3lvK62b2OPlh+NuoSUf5Ti3uGj1DGbPEIMMTRlUTdk21
oeQJGn5TIK08lJwQpCzwsbetEStrtqf06FJAswsCPTSTWQ0DfHPHqtIyplT/m26Q
8S2YasVPanmgUQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:53 2026 by rpki-client