This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
File:                     csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft (raw, json)
Hash identifier:          eXLltOsL+ae/g1s2MWrCplTXOmgxHCCAAkS1rHIaNZM=
Subject key identifier:   59:8B:4E:B5:56:3E:61:29:DF:74:67:A8:13:E6:4C:82:BD:CA:EB:B6
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Certificate issuer:       /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial:       019BF5AC50D2D39825D40CE57E6F0D339DA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 15:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:09 +0000
Files and hashes:         1: 3nMeVP3tT3HQkOTTt8YDf9LOG-U.roa (hash: oMfy3S3J5yMFJoD9DdHs9/Ccms8GV4Kew6SHBYWA0pI=)
                          2: BgqEiCCAE1vEtOTzbV9_LIj_s3s.roa (hash: a4g/rJW7QVDmBaSO4YTu2x4EbNhaP4qFCMs3UP9frTM=)
                          3: _FB3a1IMmiFPJpYG4zHFh_Bnma4.roa (hash: 6QQmSkfHFBHFiPCb7O/MO/s0noXwpbC2rqthJpYrs20=)
                          4: csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl (hash: CwY+5sx76JZFHa66JYDhwxirsAo4tOyC7uQfYVXmZRQ=)
                          5: onnN0N2kmyAv5mJQx3de7ZXichk.roa (hash: 06UMIq54P6Htrv1qVFN6DTLZlwH5A0msAobKPn8/f50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:50:d2:d3:98:25:d4:0c:e5:7e:6f:0d:33:9d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
        Validity
            Not Before: Jan 25 15:01:09 2026 GMT
            Not After : Jan 26 15:01:09 2026 GMT
        Subject: CN=598b4eb5563e6129df7467a813e64c82bdcaebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:3c:20:31:31:04:31:46:d1:e8:f3:aa:b6:
                    7e:c6:e5:c8:b6:df:ad:42:7f:6a:f2:32:22:ac:c3:
                    d8:e4:25:2d:8a:c9:62:d6:3b:ff:41:58:24:97:cd:
                    9e:98:32:0a:70:a4:ef:21:1c:89:b5:5e:b7:f9:96:
                    bb:6c:a4:4b:a6:42:ee:66:e7:f4:e4:c5:ea:43:3b:
                    41:fa:7e:e3:f5:13:d9:f9:e6:c7:da:67:34:27:34:
                    2c:01:4b:2c:18:c0:7c:59:8c:1e:c0:af:09:6d:2d:
                    c8:a1:8a:43:2f:66:a6:1f:69:eb:ff:d2:c2:00:ab:
                    6c:04:e5:93:b6:dd:1e:ac:f4:c6:69:ff:91:18:4a:
                    1f:3c:1c:01:fd:bf:fa:7c:7c:4c:ad:ba:37:0e:3b:
                    fa:58:f7:e7:88:9b:f7:d9:46:a6:ba:c4:c4:d5:8b:
                    83:93:40:13:ee:40:ae:31:76:66:f7:08:2a:1f:d0:
                    f0:7e:58:f2:eb:af:bb:3d:5e:a8:79:22:11:d7:91:
                    15:52:98:16:56:0e:17:d6:9d:91:50:f7:76:77:7b:
                    af:7b:ef:e0:ac:c2:cc:62:19:25:32:fc:ad:d3:f3:
                    c4:b7:fe:46:ae:65:fe:44:ba:d3:e0:ad:ab:89:a4:
                    67:26:4e:9e:c2:71:fc:65:71:d2:b6:3b:5c:99:da:
                    1d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8B:4E:B5:56:3E:61:29:DF:74:67:A8:13:E6:4C:82:BD:CA:EB:B6
            X509v3 Authority Key Identifier:
                keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ae:42:6f:ee:4c:92:c1:6f:d4:29:38:21:25:52:f6:1f:07:
         55:fd:e7:78:73:d3:d6:56:43:67:bb:83:fe:a5:8a:cd:90:46:
         a9:63:4b:c8:72:88:bf:6a:88:2f:76:f4:2d:e3:d7:ba:fc:2e:
         63:cb:0d:04:38:c2:e9:74:24:7e:65:b8:df:9c:86:6b:ce:62:
         6a:59:ec:2d:fb:76:4c:1a:17:b2:d4:58:bc:b5:17:44:b0:39:
         43:7f:5d:28:58:ae:f3:fc:12:6f:cd:f3:c0:dd:3e:1b:dd:8a:
         b1:c2:64:e8:a1:73:51:9b:88:55:ce:5a:75:88:aa:95:43:a4:
         be:76:b3:27:90:db:83:6e:4f:dc:ff:1c:53:d3:72:70:6e:e6:
         c9:76:2a:15:ca:b9:b1:ce:0d:25:8a:cd:20:d1:a4:8d:2b:ed:
         1d:76:44:d3:d4:ef:a6:86:45:03:24:6f:f7:55:fa:73:84:6c:
         7f:6b:30:a5:52:6a:17:a6:e8:12:3a:27:83:a4:94:a0:97:7b:
         5f:a4:be:92:89:65:ea:c6:b0:40:45:0e:c7:4d:d0:29:0f:47:
         e1:68:24:fc:89:75:ce:dc:2c:84:4b:e2:19:b4:db:21:71:4c:
         8b:84:ae:55:6c:30:de:c1:27:4f:f1:06:c3:d1:70:2b:1e:61:
         6b:5b:a7:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1rFDS05gl1Azlfm8NM52jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYzI2YWJjOWUwNmMxYWZlZjliNWZkMmRhNDA0MTJlN2Fl
ZTZiNDcwHhcNMjYwMTI1MTUwMTA5WhcNMjYwMTI2MTUwMTA5WjAzMTEwLwYDVQQD
Eyg1OThiNGViNTU2M2U2MTI5ZGY3NDY3YTgxM2U2NGM4MmJkY2FlYmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuII8IDExBDFG0ejzqrZ+xuXItt+t
Qn9q8jIirMPY5CUtisli1jv/QVgkl82emDIKcKTvIRyJtV63+Za7bKRLpkLuZuf0
5MXqQztB+n7j9RPZ+ebH2mc0JzQsAUssGMB8WYwewK8JbS3IoYpDL2amH2nr/9LC
AKtsBOWTtt0erPTGaf+RGEofPBwB/b/6fHxMrbo3Djv6WPfniJv32UamusTE1YuD
k0AT7kCuMXZm9wgqH9Dwfljy66+7PV6oeSIR15EVUpgWVg4X1p2RUPd2d3uve+/g
rMLMYhklMvyt0/PEt/5GrmX+RLrT4K2riaRnJk6ewnH8ZXHStjtcmdodDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFmLTrVWPmEp33RnqBPmTIK9yuu2MB8GA1UdIwQY
MBaAFHLCaryeBsGv75tf0tpAQS567mtHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMt
Y2Q3ZDYxOTEzMjg4LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMtY2Q3ZDYxOTEzMjg4
LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHa5Cb+5M
ksFv1Ck4ISVS9h8HVf3neHPT1lZDZ7uD/qWKzZBGqWNLyHKIv2qIL3b0LePXuvwu
Y8sNBDjC6XQkfmW435yGa85ialnsLft2TBoXstRYvLUXRLA5Q39dKFiu8/wSb83z
wN0+G92KscJk6KFzUZuIVc5adYiqlUOkvnazJ5Dbg25P3P8cU9NycG7myXYqFcq5
sc4NJYrNINGkjSvtHXZE09TvpoZFAyRv91X6c4Rsf2swpVJqF6boEjong6SUoJd7
X6S+koll6sawQEUOx03QKQ9H4Wgk/Il1ztwshEviGbTbIXFMi4SuVWww3sEnT/EG
w9FwKx5ha1unjQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:51 2026 by rpki-client