This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File:                     KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier:          WNi+AOvI15GbUTsQkZ6AzdAT4XHAXKu2Ing6nNE3QVw=
Subject key identifier:   4E:10:79:D6:25:16:A9:B8:F3:6C:0D:07:38:BC:62:A3:C2:93:4C:EF
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer:       /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial:       019BF83FB5BDB1D9337A278D8FF5A76951B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number:          17E9
Signing time:             Mon 26 Jan 2026 03:01:23 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:23 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:23 +0000
Files and hashes:         1: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: CQYUAWyVqoMGHUvX5RlC8MLkkmhU7gjADnsi0h2UjaQ=)
                          2: TSModa-LABny3OYpVDVxvacd8aI.roa (hash: hIqc5amM31Tv3k4RRh8nzbd5nZLZypZmgW9WNaeRtgs=)
                          3: u8wfrBPP_bxqtWNVJcNz551H_3o.roa (hash: KJpAbjudf9h7GbmiPhF4TzDU9L0KhquOeIK1wF+fmEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:b5:bd:b1:d9:33:7a:27:8d:8f:f5:a7:69:51:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
        Validity
            Not Before: Jan 26 03:01:23 2026 GMT
            Not After : Jan 27 03:01:23 2026 GMT
        Subject: CN=4e1079d62516a9b8f36c0d0738bc62a3c2934cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:88:76:2a:0d:db:c4:2c:c3:eb:3c:c3:e1:
                    eb:3d:2b:4b:44:3c:8a:95:07:71:8c:1a:fe:67:33:
                    19:b7:ef:f1:8a:10:1a:ef:e6:cd:de:8f:9a:2d:70:
                    d1:15:f0:2b:09:25:93:98:37:4a:00:ec:fe:f1:43:
                    49:84:cc:3d:1a:78:7a:f0:8a:36:78:aa:14:d7:81:
                    43:59:e4:2b:c0:13:ba:15:73:2b:73:fe:f7:78:7c:
                    ec:89:9f:03:e0:7c:44:de:19:f3:fe:17:3f:cc:a5:
                    c6:50:0f:c4:3f:51:cc:4a:bf:b4:a0:a1:b9:23:b7:
                    2c:12:2e:23:5c:8f:3a:53:b3:ab:59:36:5e:28:61:
                    f3:ca:69:1a:86:a0:c5:47:cb:67:a7:75:80:0e:1d:
                    ab:90:1f:d2:ae:27:26:ec:c9:02:5b:05:2e:ed:f1:
                    bc:cc:fa:e5:73:fc:fe:09:02:ad:fa:e1:fd:35:02:
                    23:d1:c7:03:43:f4:ee:2b:d0:68:38:eb:00:37:10:
                    0c:c0:b4:5f:79:30:d4:87:25:a8:2b:26:cb:4f:d1:
                    a8:33:1a:0f:48:b5:a3:9b:34:a4:50:07:48:76:cd:
                    90:de:9a:9d:89:ef:82:9b:19:50:b3:cc:f7:c3:f3:
                    50:d6:6a:d3:81:53:e6:a8:b2:6d:e4:1e:f4:7f:53:
                    f7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:10:79:D6:25:16:A9:B8:F3:6C:0D:07:38:BC:62:A3:C2:93:4C:EF
            X509v3 Authority Key Identifier:
                keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:62:95:53:ad:d5:7f:4c:5c:63:2c:43:e4:92:38:d5:de:1e:
         1d:84:64:ef:05:6f:3a:a3:a5:5d:ee:fb:8f:e8:3e:e1:16:70:
         7f:64:67:50:f6:fb:55:99:8c:bc:f9:c8:ed:90:89:e2:a9:17:
         c0:1b:a8:68:86:66:d8:13:87:be:24:01:7e:b8:dc:64:c4:94:
         97:15:3f:56:8e:cc:54:32:5e:c3:9b:f3:52:46:e5:d7:22:b2:
         3f:8e:30:6c:8c:9c:fa:d6:fb:d7:ed:7e:67:00:d6:c6:c0:b3:
         50:3d:1c:36:7a:fc:aa:4e:42:88:67:35:8c:e4:60:34:b3:be:
         f9:ca:2d:01:f6:5f:51:83:ac:ec:89:ae:a1:f5:e0:81:2f:fb:
         e8:f8:78:5a:7d:1f:0f:87:63:25:6d:2f:e8:f1:cd:55:a6:dc:
         31:de:ad:4c:a5:a9:f2:f2:bc:ac:7c:56:60:50:9f:a0:33:4a:
         41:ce:24:5e:d9:c6:73:41:33:8a:f8:44:38:5b:14:40:67:ae:
         e4:f8:0a:32:f6:3f:0c:4d:d1:c5:47:17:16:b5:11:00:80:53:
         8a:59:24:72:03:44:e4:1a:cb:ac:3a:84:6e:7a:c1:96:2f:f2:
         9f:f5:1c:21:d0:0a:06:df:1d:5b:53:5c:21:ba:be:e1:63:f5:
         cc:90:52:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv4P7W9sdkzeieNj/WnaVGyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDMxM2E3ZmQyYmEzZDk5NWM0NGE3YWI0YWYzMzJmODc1
Y2M0MGMwHhcNMjYwMTI2MDMwMTIzWhcNMjYwMTI3MDMwMTIzWjAzMTEwLwYDVQQD
Eyg0ZTEwNzlkNjI1MTZhOWI4ZjM2YzBkMDczOGJjNjJhM2MyOTM0Y2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvyIdioN28Qsw+s8w+HrPStLRDyK
lQdxjBr+ZzMZt+/xihAa7+bN3o+aLXDRFfArCSWTmDdKAOz+8UNJhMw9Gnh68Io2
eKoU14FDWeQrwBO6FXMrc/73eHzsiZ8D4HxE3hnz/hc/zKXGUA/EP1HMSr+0oKG5
I7csEi4jXI86U7OrWTZeKGHzymkahqDFR8tnp3WADh2rkB/Sricm7MkCWwUu7fG8
zPrlc/z+CQKt+uH9NQIj0ccDQ/TuK9BoOOsANxAMwLRfeTDUhyWoKybLT9GoMxoP
SLWjmzSkUAdIds2Q3pqdie+CmxlQs8z3w/NQ1mrTgVPmqLJt5B70f1P3YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE4QedYlFqm482wNBzi8YqPCk0zvMB8GA1UdIwQY
MBaAFCnTE6f9K6PZlcRKerSvMy+HXMQMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RNVHBfMHJvOW1WeEVwNnRLOHpMNGRjeEF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lNGVmNTMtMzBiZi00ODk3LWIyMTAt
ZDUxOWI4MmFmYzM2LzEvS2RNVHBfMHJvOW1WeEVwNnRLOHpMNGRjeEF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lNGVmNTMtMzBiZi00ODk3LWIyMTAtZDUxOWI4MmFmYzM2
LzEvS2RNVHBfMHJvOW1WeEVwNnRLOHpMNGRjeEF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJmKVU63V
f0xcYyxD5JI41d4eHYRk7wVvOqOlXe77j+g+4RZwf2RnUPb7VZmMvPnI7ZCJ4qkX
wBuoaIZm2BOHviQBfrjcZMSUlxU/Vo7MVDJew5vzUkbl1yKyP44wbIyc+tb71+1+
ZwDWxsCzUD0cNnr8qk5CiGc1jORgNLO++cotAfZfUYOs7ImuofXggS/76Ph4Wn0f
D4djJW0v6PHNVabcMd6tTKWp8vK8rHxWYFCfoDNKQc4kXtnGc0EzivhEOFsUQGeu
5PgKMvY/DE3RxUcXFrURAIBTilkkcgNE5BrLrDqEbnrBli/yn/UcIdAKBt8dW1Nc
Ibq+4WP1zJBSpg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:52 2026 by rpki-client