This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
File:                     ApMPjGiMBNF0M6K5xySbxiW84xY.mft (raw, json)
Hash identifier:          Vh6HRrWU6aJTll4VgPIQ9w151+E867GLWLa4O8cmfDo=
Subject key identifier:   72:B1:6B:B1:59:26:BD:B6:FC:32:82:A9:ED:79:35:F8:A4:B8:BB:81
Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16
Certificate issuer:       /CN=02930f8c688c04d17433a2b9c7249bc625bce316
Certificate serial:       019BF50716B7B7E6CA0AFEC742AD5C8345C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 12:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:40 +0000
Files and hashes:         1: 14ynEoJXV6cGESEueCUwh87gUXg.roa (hash: JZTxhgcbHYTEiHxAG17P9Cv6dpEw0XIS5Wi97I1GPsQ=)
                          2: 4KH5oPqlph7SdgPsUcEksiUn8vI.roa (hash: lkUeA2Dm3n5cyMOdG1B7Cdcwz6ExvSxL9MH87e90v8c=)
                          3: ApMPjGiMBNF0M6K5xySbxiW84xY.crl (hash: HMb6/RFRct1B20Op5G1xy05pwQMSX182vDuOvwyYVok=)
                          4: MuW1vBLnQsOOOxKeFnBgdQx4Agc.roa (hash: 9v3FzvgOk0G6DAUkUFkW2Culw+ELff9ofWV2w3FNrHo=)
                          5: ZRIHFb09Mm1K55dH2vncQglBaXI.roa (hash: WFUjrCrkcCkKZQJsNV3ho4q8qDbHnlkrC4J5Z75DuBs=)
                          6: aeINCm8UEmjt6W6_5LOCbiM43pQ.roa (hash: FiSOUOoA6+XFwnTZVcoBNqJEsC2qiF3Rs0rciACSzBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:16:b7:b7:e6:ca:0a:fe:c7:42:ad:5c:83:45:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316
        Validity
            Not Before: Jan 25 12:00:40 2026 GMT
            Not After : Jan 26 12:00:40 2026 GMT
        Subject: CN=72b16bb15926bdb6fc3282a9ed7935f8a4b8bb81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:e8:98:60:67:df:30:39:3b:a2:c0:13:b4:
                    d4:8f:aa:64:fb:84:b8:d9:92:b7:1f:ba:07:75:e8:
                    f9:01:79:9c:ba:05:5c:ba:3d:23:2a:85:27:d6:4f:
                    46:a1:76:b5:6f:bc:ac:4f:cd:da:d8:b4:8d:74:f7:
                    f5:17:4e:66:23:66:82:20:66:d7:92:ce:d3:7a:4d:
                    97:1c:76:68:1e:0e:6b:2f:d8:d1:21:d7:e0:c1:cc:
                    8a:0c:37:ec:15:da:07:69:7a:35:a2:17:22:5e:c8:
                    52:26:53:5c:1c:fc:48:76:8a:6c:d2:67:e8:fd:cf:
                    93:bb:db:d5:ea:a9:21:fd:8a:f0:3b:4a:76:32:c3:
                    2c:7b:8e:a9:cc:0d:22:d6:c4:da:57:90:c3:25:34:
                    a7:e6:a8:0f:3e:8b:fb:77:52:b0:7f:05:25:9d:aa:
                    75:60:1b:59:98:ab:77:70:2e:91:69:d2:22:de:c5:
                    58:21:9e:1d:11:d4:55:57:81:8b:a6:64:78:d6:ed:
                    0c:58:36:23:7f:5d:c9:0a:e0:a5:29:1c:6d:f2:5e:
                    5e:06:e3:3f:70:de:c7:c7:cc:52:23:29:5d:d4:b0:
                    da:88:36:d5:c1:16:dd:5f:2b:b4:f0:c0:85:96:39:
                    37:d8:a7:53:45:b4:29:d0:88:52:ba:7f:b4:6f:dd:
                    1a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B1:6B:B1:59:26:BD:B6:FC:32:82:A9:ED:79:35:F8:A4:B8:BB:81
            X509v3 Authority Key Identifier:
                keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9d:d4:d3:1b:24:d5:9e:0a:40:51:1b:00:7c:6d:60:95:15:
         79:32:d1:90:b7:54:83:f1:29:f4:3d:d1:a4:0d:f4:96:88:0d:
         68:82:df:f4:02:b9:45:82:2f:b9:eb:5b:af:f4:b3:a7:b6:dc:
         78:ea:ac:37:bd:38:49:a4:7f:95:84:42:dc:b7:97:85:da:9c:
         e4:af:b7:ed:39:44:99:eb:4b:2e:c0:75:dc:ba:b2:73:61:bf:
         1e:92:13:be:73:1c:06:e8:22:fe:08:93:6e:1c:73:6a:fd:a0:
         22:c4:bf:ce:1a:2f:c6:c4:35:85:9d:88:53:0f:29:d9:fd:76:
         23:5d:54:73:80:43:97:43:d1:24:bd:8e:cb:40:1d:7a:43:f9:
         ed:68:c6:fa:cc:79:8f:f7:68:1a:d0:4a:8d:bf:9e:35:bc:cc:
         5d:fd:23:a5:a2:6e:9f:03:2b:49:b7:98:68:ee:06:44:a8:d3:
         b1:19:37:2d:8d:cf:66:db:31:a3:d2:b9:78:11:9a:89:ce:c3:
         02:01:5f:31:c9:e9:5d:58:c2:ab:e2:95:a2:08:b5:37:7b:97:
         08:2b:03:53:6f:ca:68:10:38:c3:ce:d0:59:c8:0a:1d:1f:fa:
         a9:2b:80:4f:e5:a4:d1:40:5a:35:73:47:6f:b8:6a:77:a0:38:
         59:29:a9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:32:23 2026 by rpki-client