This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
File:                     Akbop20wx8BJW8XOjuURD-qyhuY.mft (raw, json)
Hash identifier:          anM2u02uzVuuwSHasXAC9LEh7UI6r1F1jEauLAI1A5Y=
Subject key identifier:   B1:05:19:48:69:8E:CD:C3:42:A3:57:88:F9:29:7D:E7:C0:5A:38:20
Authority key identifier: 02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6
Certificate issuer:       /CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
Certificate serial:       019BF651279E9D13BAF106EE70E11FF97841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
Manifest number:          169B
Signing time:             Sun 25 Jan 2026 18:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:12 +0000
Files and hashes:         1: Akbop20wx8BJW8XOjuURD-qyhuY.crl (hash: aV91rDjl8TNqIQI4MiR3qRpXBDUbevB3X4CTpuyiISU=)
                          2: H2ga1O1qKzRR8q_8zJazodNjzz8.roa (hash: YVg5eFWXr4f+E2vR45lk4R3YG7ojGn5iinnAnjeUfgQ=)
                          3: N7Chnxgw-54QaVo-7XCK63eAgs4.roa (hash: F81B+a8612MzBa6mf2NWTlwi3qVJtZzatWiSMxmB2y0=)
                          4: mjlQCUwBjGWrcW4jdhqdW0o0SSE.roa (hash: MZkg+G0jF+K909+Jj6nECm0W5mFocEbKr2UCWfN+GJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:27:9e:9d:13:ba:f1:06:ee:70:e1:1f:f9:78:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0246e8a76d30c7c0495bc5ce8ee5110feab286e6
        Validity
            Not Before: Jan 25 18:01:12 2026 GMT
            Not After : Jan 26 18:01:12 2026 GMT
        Subject: CN=b1051948698ecdc342a35788f9297de7c05a3820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:3b:64:a8:40:00:59:11:1b:c0:ed:c0:42:
                    f1:36:45:16:01:41:25:20:a8:87:15:8c:17:dc:02:
                    e1:c5:7f:ae:69:d4:c6:43:31:7c:1b:5f:4c:39:26:
                    c7:50:a6:1c:1f:e2:f5:2f:d0:f6:bf:65:14:31:17:
                    17:92:e9:4b:1b:5a:bf:d5:e8:87:86:81:c4:84:a6:
                    5d:15:df:81:6f:09:d7:3d:c0:88:3a:5e:b8:a9:2a:
                    d3:5b:70:56:84:51:ab:ef:c0:88:20:b4:0d:cd:bf:
                    d6:a9:28:94:46:ea:ff:71:86:27:38:2d:be:dd:10:
                    46:39:03:fc:ea:93:0a:78:9f:73:15:39:c9:f5:3c:
                    ea:d8:cb:f1:81:70:cc:2c:70:61:d6:06:fa:88:8f:
                    df:da:43:cc:6a:eb:6a:55:56:70:fc:a3:04:49:a4:
                    97:dc:b3:2b:86:84:01:38:14:1b:2d:d2:5a:f1:ae:
                    be:b9:fa:16:a7:dd:f9:4e:b9:de:4b:9c:0c:90:b9:
                    87:5c:e1:db:06:8b:87:90:63:34:af:b8:8a:a6:7a:
                    2c:59:5c:be:2d:c6:80:95:01:73:01:f3:46:3d:03:
                    35:7c:9c:83:49:56:53:53:1c:ff:65:86:35:4a:a7:
                    45:55:00:70:d7:b0:ec:55:bc:7e:74:b7:8e:c1:52:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:05:19:48:69:8E:CD:C3:42:A3:57:88:F9:29:7D:E7:C0:5A:38:20
            X509v3 Authority Key Identifier:
                keyid:02:46:E8:A7:6D:30:C7:C0:49:5B:C5:CE:8E:E5:11:0F:EA:B2:86:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Akbop20wx8BJW8XOjuURD-qyhuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/c0a576-a220-4de0-aac1-7b96a9997718/1/Akbop20wx8BJW8XOjuURD-qyhuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:1a:5f:44:8a:4b:79:1d:13:32:c9:94:02:92:ee:d9:60:8a:
         f1:ad:12:43:5c:48:41:41:a2:4d:84:3c:6e:be:7b:86:15:f8:
         2e:e7:a1:8e:7e:ac:ea:f7:12:18:c7:bc:d8:f1:04:a9:90:b1:
         02:e0:04:04:b4:b3:b6:93:86:4a:45:db:3b:c6:d4:77:34:45:
         27:74:55:ad:f3:6f:33:5a:f3:90:f8:4b:7b:50:df:0e:9d:39:
         b0:df:e1:26:8f:15:fe:56:18:f6:ef:f9:bd:cd:70:33:1f:bf:
         14:37:d9:c9:c1:1f:84:c0:00:ea:89:fa:c1:55:f7:aa:7b:bf:
         8b:b3:db:48:fd:97:8a:9a:fc:f6:5f:a4:0a:40:d1:02:a9:2f:
         3f:a0:ac:57:7b:95:09:44:ee:e9:c1:41:61:1f:fa:db:ba:b1:
         8f:d9:c3:6b:42:aa:59:4f:3b:f4:6d:1d:b6:b6:5a:af:71:84:
         43:61:80:78:06:8a:09:c4:9e:e1:a4:12:c9:c0:f1:b7:82:6b:
         47:f3:65:a5:60:11:9a:85:b6:65:a8:a0:73:ab:c0:79:a7:80:
         42:1c:39:b6:0d:c2:17:87:96:b3:e3:82:35:77:cc:d0:dd:14:
         b5:28:f0:f2:e9:21:9a:0d:6d:99:ba:cd:de:89:e6:4f:6e:74:
         70:4f:b6:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2USeenRO68QbucOEf+XhBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDZlOGE3NmQzMGM3YzA0OTViYzVjZThlZTUxMTBmZWFi
Mjg2ZTYwHhcNMjYwMTI1MTgwMTEyWhcNMjYwMTI2MTgwMTEyWjAzMTEwLwYDVQQD
EyhiMTA1MTk0ODY5OGVjZGMzNDJhMzU3ODhmOTI5N2RlN2MwNWEzODIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f47ZKhAAFkRG8DtwELxNkUWAUEl
IKiHFYwX3ALhxX+uadTGQzF8G19MOSbHUKYcH+L1L9D2v2UUMRcXkulLG1q/1eiH
hoHEhKZdFd+BbwnXPcCIOl64qSrTW3BWhFGr78CIILQNzb/WqSiURur/cYYnOC2+
3RBGOQP86pMKeJ9zFTnJ9Tzq2MvxgXDMLHBh1gb6iI/f2kPMautqVVZw/KMESaSX
3LMrhoQBOBQbLdJa8a6+ufoWp935TrneS5wMkLmHXOHbBouHkGM0r7iKpnosWVy+
LcaAlQFzAfNGPQM1fJyDSVZTUxz/ZYY1SqdFVQBw17DsVbx+dLeOwVIySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLEFGUhpjs3DQqNXiPkpfefAWjggMB8GA1UdIwQY
MBaAFAJG6KdtMMfASVvFzo7lEQ/qsobmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEt
N2I5NmE5OTk3NzE4LzEvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9jMGE1NzYtYTIyMC00ZGUwLWFhYzEtN2I5NmE5OTk3NzE4
LzEvQWtib3AyMHd4OEJKVzhYT2p1VVJELXF5aHVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUhpfRIpL
eR0TMsmUApLu2WCK8a0SQ1xIQUGiTYQ8br57hhX4Luehjn6s6vcSGMe82PEEqZCx
AuAEBLSztpOGSkXbO8bUdzRFJ3RVrfNvM1rzkPhLe1DfDp05sN/hJo8V/lYY9u/5
vc1wMx+/FDfZycEfhMAA6on6wVX3qnu/i7PbSP2Xipr89l+kCkDRAqkvP6CsV3uV
CUTu6cFBYR/627qxj9nDa0KqWU879G0dtrZar3GEQ2GAeAaKCcSe4aQSycDxt4Jr
R/NlpWARmoW2Zaigc6vAeaeAQhw5tg3CF4eWs+OCNXfM0N0UtSjw8ukhmg1tmbrN
3onmT250cE+2dw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:23:50 2026 by rpki-client