This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File:                     rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier:          sKIb7fiJT7o/23QzNfkxybI+fyH+FDHPKNnJs16Kok8=
Subject key identifier:   1A:2F:1C:BB:FB:08:44:A4:56:F6:5E:76:F3:A5:06:D2:24:17:70:45
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer:       /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial:       019BF53EA30B4FF9CE7E6B783C29E43DC27A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 13:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:21 +0000
Files and hashes:         1: Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa (hash: /a7senBqK2MBRmr1Qn/8yhUtEA4NdcKwqwCyWHEGON0=)
                          2: p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa (hash: Wra3ytDrU1p2ihMOSoZL7h8AIxob8hYx1NIw6YWVOAs=)
                          3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: utnb0AYN5kF9Tqbft3ZunFgfeUChzcbeJC5DIk2b5ms=)
                          4: vKrnz1PqS6qb2zcTLwUYNYqlKd4.roa (hash: 1IT80fZU/ax5KvjXCy5/nxPjuHIDLBfsXUQ0YfHBn7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:a3:0b:4f:f9:ce:7e:6b:78:3c:29:e4:3d:c2:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
        Validity
            Not Before: Jan 25 13:01:21 2026 GMT
            Not After : Jan 26 13:01:21 2026 GMT
        Subject: CN=1a2f1cbbfb0844a456f65e76f3a506d224177045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:24:72:ee:97:2f:da:76:ba:4f:ff:21:47:40:
                    f5:91:96:00:f1:07:c2:0d:1e:ab:c3:87:2a:00:a7:
                    2d:3e:c3:dd:2e:21:7c:4d:26:9d:ce:0a:9f:c5:18:
                    93:9f:a5:e9:51:12:ba:d0:cf:11:6d:08:a7:15:8d:
                    4a:a3:30:38:4b:a1:1d:b1:d7:bf:9f:31:95:6e:22:
                    5b:54:c5:ef:8d:85:3e:76:e6:7f:07:ac:e1:72:8a:
                    f8:c2:0a:40:69:c2:df:5c:ad:df:0e:72:ad:3b:b1:
                    8c:81:5c:e3:8d:15:29:bc:e9:86:9c:91:e6:bb:6b:
                    f6:a7:c9:cc:0d:41:09:ef:00:63:4a:1d:3a:4c:f5:
                    19:8b:3f:1b:b8:e3:7e:71:04:9a:84:bf:6d:c2:f9:
                    f3:bd:30:95:a9:fd:fa:b0:3f:d8:57:1d:cd:48:65:
                    82:f7:04:36:27:7b:cd:e6:33:a4:7a:bb:ee:54:69:
                    90:57:70:bd:02:40:f3:ce:36:04:79:82:7f:29:d3:
                    06:8c:a8:52:0a:5a:b8:dc:9a:ea:86:6c:65:fd:de:
                    f8:e2:00:25:0f:5b:70:39:15:68:33:51:74:79:0c:
                    bc:fe:f8:80:cf:0d:17:c6:ef:ae:f9:50:12:31:15:
                    0b:52:da:86:b5:80:3a:7e:98:8c:64:9d:0e:ec:8c:
                    ca:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2F:1C:BB:FB:08:44:A4:56:F6:5E:76:F3:A5:06:D2:24:17:70:45
            X509v3 Authority Key Identifier:
                keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:87:4e:50:8f:32:0e:5c:ed:c6:02:71:21:a4:1a:3c:ca:f4:
         dc:f0:c2:3e:40:80:af:05:fa:7a:2d:d9:5b:e5:4d:58:df:11:
         e4:72:24:03:0d:b6:36:bc:9e:12:78:67:f3:71:ea:cd:44:4f:
         7f:ba:71:7c:3b:9d:e5:8e:c9:d9:6b:17:cd:01:36:e3:e4:94:
         27:7a:c0:4e:36:b5:ec:3e:43:93:08:86:38:06:f9:18:2c:aa:
         d7:96:57:75:25:25:45:e0:8d:a2:90:55:9d:80:61:2e:50:9c:
         b4:38:49:ea:19:7e:be:10:d0:4f:a1:65:32:ae:c0:8d:91:d5:
         1c:08:95:8a:0b:e3:7a:45:5e:f0:03:03:b4:e9:7f:95:74:8f:
         d6:2a:b9:8e:46:4f:94:b0:a3:6f:43:83:1a:67:8d:04:8f:91:
         4f:a5:4a:59:2e:33:ae:94:9e:5a:25:dd:d2:bb:97:37:2d:b0:
         7b:d6:0b:f8:fa:d0:b5:68:35:1f:1d:a3:f8:41:8f:64:16:76:
         b1:a7:70:ed:9d:52:16:c8:d1:cc:84:5e:30:8c:23:7d:5b:d6:
         3a:32:f1:39:45:b7:4e:75:a4:76:d3:3f:94:c8:2c:e9:f6:85:
         bc:60:66:74:65:a5:70:89:37:34:de:b8:62:d4:c2:c0:0f:70:
         a7:a8:05:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PqMLT/nOfmt4PCnkPcJ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYmUyMTJhMmYxYTExOWVmNjRhYjYyZTFhOTZkNzExNTI0
YzhiYzcwHhcNMjYwMTI1MTMwMTIxWhcNMjYwMTI2MTMwMTIxWjAzMTEwLwYDVQQD
EygxYTJmMWNiYmZiMDg0NGE0NTZmNjVlNzZmM2E1MDZkMjI0MTc3MDQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryRy7pcv2na6T/8hR0D1kZYA8QfC
DR6rw4cqAKctPsPdLiF8TSadzgqfxRiTn6XpURK60M8RbQinFY1KozA4S6Edsde/
nzGVbiJbVMXvjYU+duZ/B6zhcor4wgpAacLfXK3fDnKtO7GMgVzjjRUpvOmGnJHm
u2v2p8nMDUEJ7wBjSh06TPUZiz8buON+cQSahL9twvnzvTCVqf36sD/YVx3NSGWC
9wQ2J3vN5jOkervuVGmQV3C9AkDzzjYEeYJ/KdMGjKhSClq43Jrqhmxl/d744gAl
D1twORVoM1F0eQy8/viAzw0Xxu+u+VASMRULUtqGtYA6fpiMZJ0O7IzKGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBovHLv7CESkVvZedvOlBtIkF3BFMB8GA1UdIwQY
MBaAFKy+ISovGhGe9kq2LhqW1xFSTIvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYt
MjNjMzM4NjgwNzcxLzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9jNWExNTktODU2OC00OTQ1LTgwMjYtMjNjMzM4NjgwNzcx
LzEvckw0aEtpOGFFWjcyU3JZdUdwYlhFVkpNaThjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmodOUI8y
DlztxgJxIaQaPMr03PDCPkCArwX6ei3ZW+VNWN8R5HIkAw22NryeEnhn83HqzURP
f7pxfDud5Y7J2WsXzQE24+SUJ3rATja17D5DkwiGOAb5GCyq15ZXdSUlReCNopBV
nYBhLlCctDhJ6hl+vhDQT6FlMq7AjZHVHAiVigvjekVe8AMDtOl/lXSP1iq5jkZP
lLCjb0ODGmeNBI+RT6VKWS4zrpSeWiXd0ruXNy2we9YL+PrQtWg1Hx2j+EGPZBZ2
sadw7Z1SFsjRzIReMIwjfVvWOjLxOUW3TnWkdtM/lMgs6faFvGBmdGWlcIk3NN64
YtTCwA9wp6gFxw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:30:33 2026 by rpki-client