This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File:                     _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier:          vP3wjU4jAcUc/V7+zXyOTZf1lBg/HUFAuWORUK/Em3s=
Subject key identifier:   66:49:60:65:9D:88:FC:38:18:DE:C3:E9:E3:00:4A:D6:62:22:A3:2C
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer:       /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial:       019BF79A7260F51AE075F7BE4FA7370462AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number:          0E2D
Signing time:             Mon 26 Jan 2026 00:00:52 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:52 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:52 +0000
Files and hashes:         1: E82B-w4jJKhyGgYx3Ej9sCBHvb4.roa (hash: A+TYWIOmRpCeA175k18MhvZXgytX5Jk9nQ0FQ6VBaqA=)
                          2: Q4zQF0crGItA_1w0I9xQ7hGAgWQ.roa (hash: JfuU3qW2LSn3VZ4RrrVe6pLBVqp+kUuKYjX2iO0ocCI=)
                          3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: F5mqfRjtTlerMEJa4fK6kMAj1yy0ZHPOdFKAGYs9SiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:72:60:f5:1a:e0:75:f7:be:4f:a7:37:04:62:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
        Validity
            Not Before: Jan 26 00:00:52 2026 GMT
            Not After : Jan 27 00:00:52 2026 GMT
        Subject: CN=664960659d88fc3818dec3e9e3004ad66222a32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:22:49:07:ec:de:f1:26:64:fa:43:4b:e9:c5:
                    10:87:d4:73:ca:90:8d:6f:25:f5:e7:e1:42:40:4c:
                    b0:9b:73:eb:0b:30:8b:48:3c:1d:2c:9a:4a:e7:63:
                    d4:b1:23:6a:d2:70:c8:a3:81:ba:7a:3d:c2:08:f7:
                    0b:4f:bd:54:30:50:3c:65:e1:af:cb:c0:b9:7a:5b:
                    50:d3:7c:a1:c1:f2:b4:3a:c1:de:12:6d:63:50:82:
                    9f:c5:1f:d5:b1:64:cd:99:5b:98:21:05:87:73:b7:
                    0f:88:74:d6:63:5e:81:09:75:c8:0d:94:fd:93:59:
                    cc:95:39:34:a6:4d:74:60:55:ab:ef:b6:51:fd:77:
                    ed:89:b1:f4:94:31:63:59:59:87:42:77:fc:63:dd:
                    d5:1e:e6:bb:3c:7a:84:c5:1e:a0:60:be:f3:f3:c6:
                    2d:80:d8:42:28:18:ec:2e:8d:f1:38:c5:a5:f3:6b:
                    6f:7f:49:02:d2:30:67:bc:09:b8:db:c9:a9:62:22:
                    c5:71:c3:7d:1f:a2:32:f2:2d:3d:5d:ba:dd:b5:be:
                    ce:50:60:8b:79:2b:b0:d5:42:37:1b:04:5c:97:36:
                    7f:b4:26:c1:37:b6:61:3c:3b:b8:93:a5:a9:c1:fd:
                    27:96:5d:46:04:63:fc:37:22:32:38:a7:7d:17:f3:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:49:60:65:9D:88:FC:38:18:DE:C3:E9:E3:00:4A:D6:62:22:A3:2C
            X509v3 Authority Key Identifier:
                keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1d:42:11:1a:2b:3c:36:6e:f4:c3:bb:cb:6f:34:ae:14:23:
         67:c4:86:82:52:30:c8:68:6d:23:84:66:aa:8c:d3:29:d3:be:
         17:57:92:e9:57:99:03:7d:5f:2e:77:d8:30:47:a0:fb:c4:5f:
         5e:46:83:c5:ac:b8:02:07:2f:86:fd:ed:24:c2:28:5c:72:13:
         c5:ea:de:84:07:c0:fb:78:5a:d7:3d:cb:83:be:b5:15:63:9b:
         07:72:6b:1d:35:6c:10:8b:84:10:c3:4b:2e:f1:0e:4a:31:67:
         d3:a6:d9:e1:da:c8:a9:82:90:25:e0:d1:c6:7e:00:d7:dd:4d:
         5f:ea:65:c3:a6:92:fe:f1:e6:65:45:b3:61:f9:a5:92:a7:d6:
         a6:d3:46:cb:9b:1d:43:45:43:1a:eb:c6:bf:cd:0d:f1:ca:db:
         c9:a0:41:97:7c:1b:b2:ef:6e:f4:f9:a9:2a:78:e9:bb:97:3d:
         a5:47:8f:ed:27:f8:01:34:b8:ee:b5:c3:82:43:ec:4b:2d:1e:
         7a:e8:88:e4:3c:14:14:70:60:83:8f:df:37:3a:c1:98:5c:0b:
         f4:f1:e6:f4:4d:3f:ed:1f:ad:30:53:64:c3:7c:6a:12:8c:26:
         e7:00:89:48:62:6a:90:5e:28:83:d4:1a:94:db:de:4e:00:2c:
         bc:a7:f1:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mnJg9Rrgdfe+T6c3BGKqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkN2QxY2IxMTQ5NGViMzg5OGYxMGQzZDYzNWJlNzVmMTZi
MmRjNTEwHhcNMjYwMTI2MDAwMDUyWhcNMjYwMTI3MDAwMDUyWjAzMTEwLwYDVQQD
Eyg2NjQ5NjA2NTlkODhmYzM4MThkZWMzZTllMzAwNGFkNjYyMjJhMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiJJB+ze8SZk+kNL6cUQh9RzypCN
byX15+FCQEywm3PrCzCLSDwdLJpK52PUsSNq0nDIo4G6ej3CCPcLT71UMFA8ZeGv
y8C5eltQ03yhwfK0OsHeEm1jUIKfxR/VsWTNmVuYIQWHc7cPiHTWY16BCXXIDZT9
k1nMlTk0pk10YFWr77ZR/XftibH0lDFjWVmHQnf8Y93VHua7PHqExR6gYL7z88Yt
gNhCKBjsLo3xOMWl82tvf0kC0jBnvAm428mpYiLFccN9H6Iy8i09Xbrdtb7OUGCL
eSuw1UI3GwRclzZ/tCbBN7ZhPDu4k6Wpwf0nll1GBGP8NyIyOKd9F/PWJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZJYGWdiPw4GN7D6eMAStZiIqMsMB8GA1UdIwQY
MBaAFP19HLEUlOs4mPENPWNb518WstxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUt
NzY1OWJmODZhYzRjLzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9hNmMxNTItMzdkMy00Zjg2LThmNmUtNzY1OWJmODZhYzRj
LzEvX1gwY3NSU1U2emlZOFEwOVkxdm5YeGF5M0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXh1CERor
PDZu9MO7y280rhQjZ8SGglIwyGhtI4RmqozTKdO+F1eS6VeZA31fLnfYMEeg+8Rf
XkaDxay4Agcvhv3tJMIoXHITxerehAfA+3ha1z3Lg761FWObB3JrHTVsEIuEEMNL
LvEOSjFn06bZ4drIqYKQJeDRxn4A191NX+plw6aS/vHmZUWzYfmlkqfWptNGy5sd
Q0VDGuvGv80N8crbyaBBl3wbsu9u9PmpKnjpu5c9pUeP7Sf4ATS47rXDgkPsSy0e
euiI5DwUFHBgg4/fNzrBmFwL9PHm9E0/7R+tMFNkw3xqEowm5wCJSGJqkF4og9Qa
lNveTgAsvKfxFw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:46:24 2026 by rpki-client