This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
File:                     ou0LqLRu8lHloFimSiGzB9NlDdw.mft (raw, json)
Hash identifier:          hSEU2IPlYwjjXvkI9yMi+D5Soepwo30jkeHv7behc50=
Subject key identifier:   F1:15:73:92:02:80:0E:6E:59:55:13:FC:DF:58:29:F4:FA:29:FA:40
Authority key identifier: A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC
Certificate issuer:       /CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
Certificate serial:       019BF763355CC24CE9EA01B29AE3D2C1F72C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 23:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:32 +0000
Files and hashes:         1: TY6_RErHZwMLwaGjVhsCzV2QsIA.roa (hash: Pen7p5QY0R4eFgeU4z2Sze4YFXIqdZffU0dnu0AuPAk=)
                          2: b_1Qwkm_dwtq6WHZLgklv_RTWY8.roa (hash: +hT3xYsa619lAWaMx5WmCqSJiQ9WY/MqRSeQbajC3rQ=)
                          3: ou0LqLRu8lHloFimSiGzB9NlDdw.crl (hash: skltpbIlNUqNSjdM59uMiPFvSMcHrvn3v2hV3SulZJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:35:5c:c2:4c:e9:ea:01:b2:9a:e3:d2:c1:f7:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ed0ba8b46ef251e5a058a64a21b307d3650ddc
        Validity
            Not Before: Jan 25 23:00:32 2026 GMT
            Not After : Jan 26 23:00:32 2026 GMT
        Subject: CN=f115739202800e6e595513fcdf5829f4fa29fa40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:91:0c:9e:e0:d3:05:0c:8c:81:8c:16:45:
                    b8:98:d5:cb:10:a7:dd:cf:f8:c9:e6:2a:d5:41:31:
                    b3:7f:63:7f:67:36:10:8d:51:1c:f8:e2:ab:49:21:
                    fd:a6:be:a9:b5:17:d3:b1:32:d6:f4:32:4e:20:e9:
                    c2:ec:76:41:57:70:7f:4d:b2:99:e9:64:28:d2:bd:
                    2e:a5:0d:85:1d:91:57:9d:d3:5e:b6:2a:d0:a7:ff:
                    63:9d:8b:7f:93:ff:8c:71:81:fa:74:57:e9:eb:97:
                    c2:86:b4:0c:03:cc:b8:cd:b1:69:46:2a:51:0e:fe:
                    c0:c8:84:3b:1f:e8:9c:8b:9f:e1:9a:6b:a2:9f:0a:
                    6f:45:30:17:23:e2:c2:90:9c:47:08:b1:d7:0d:c8:
                    d3:64:9c:65:1f:8a:44:cd:7d:f8:80:d2:3a:31:58:
                    a1:9e:49:f7:95:d0:7d:fd:3f:8a:eb:b0:72:17:56:
                    6d:aa:5a:51:93:7f:30:70:8f:3a:6f:cf:08:ca:90:
                    7b:26:54:e1:22:f7:63:a2:d5:cc:d4:31:5d:fe:99:
                    e6:5c:2a:75:00:e9:19:a4:cb:ba:c3:68:67:25:71:
                    1e:11:38:45:e7:74:d7:0d:5b:5b:85:70:3a:98:a7:
                    76:1a:23:e0:0b:18:35:dc:06:9e:2d:42:ad:a7:b1:
                    99:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:15:73:92:02:80:0E:6E:59:55:13:FC:DF:58:29:F4:FA:29:FA:40
            X509v3 Authority Key Identifier:
                keyid:A2:ED:0B:A8:B4:6E:F2:51:E5:A0:58:A6:4A:21:B3:07:D3:65:0D:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ou0LqLRu8lHloFimSiGzB9NlDdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5be8f7-1ad0-44bf-8b3e-791c5a85390d/1/ou0LqLRu8lHloFimSiGzB9NlDdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ae:d3:52:3c:04:7d:d7:ea:09:26:a4:c7:b1:4c:e7:64:e1:
         d7:dc:83:af:6a:96:4b:be:ef:01:5b:b9:9a:15:66:da:6f:df:
         1c:a7:38:4b:b1:1f:17:f4:fe:8f:8c:3e:16:bf:a9:5d:b1:d9:
         ce:66:0a:55:de:9b:cb:e0:bd:32:9e:af:79:f6:f8:c0:30:ff:
         e4:b2:93:07:9f:e5:c7:ff:be:a6:68:14:13:70:c7:13:69:0c:
         e4:e4:a3:02:f2:b1:8c:ed:0e:c8:84:09:a1:c7:92:f6:5a:6f:
         02:d4:f8:1f:8d:20:1f:8d:73:cc:f8:bd:2f:1e:56:46:d1:8a:
         f7:7c:01:7e:2e:44:75:27:a7:9e:bc:fc:5d:2d:2f:99:89:51:
         a5:22:44:32:9e:e8:ef:b0:2d:1b:76:b6:7d:99:53:69:63:b9:
         29:de:8d:6c:b8:c1:26:25:00:b2:1e:0b:12:48:07:95:bf:76:
         ea:54:b8:35:29:11:62:04:a7:4d:eb:1c:1a:28:3c:e5:af:28:
         45:2a:31:fb:a7:2f:21:18:38:97:52:91:23:5c:ce:c8:f4:cd:
         a2:e0:58:80:88:78:79:08:ce:dd:98:63:67:5e:f6:3b:4a:0b:
         e3:02:57:ae:1c:08:a5:bc:be:83:84:60:70:64:3c:14:07:18:
         07:4c:e0:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3YzVcwkzp6gGymuPSwfcsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZWQwYmE4YjQ2ZWYyNTFlNWEwNThhNjRhMjFiMzA3ZDM2
NTBkZGMwHhcNMjYwMTI1MjMwMDMyWhcNMjYwMTI2MjMwMDMyWjAzMTEwLwYDVQQD
EyhmMTE1NzM5MjAyODAwZTZlNTk1NTEzZmNkZjU4MjlmNGZhMjlmYTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0yRDJ7g0wUMjIGMFkW4mNXLEKfd
z/jJ5irVQTGzf2N/ZzYQjVEc+OKrSSH9pr6ptRfTsTLW9DJOIOnC7HZBV3B/TbKZ
6WQo0r0upQ2FHZFXndNetirQp/9jnYt/k/+McYH6dFfp65fChrQMA8y4zbFpRipR
Dv7AyIQ7H+ici5/hmmuinwpvRTAXI+LCkJxHCLHXDcjTZJxlH4pEzX34gNI6MVih
nkn3ldB9/T+K67ByF1ZtqlpRk38wcI86b88IypB7JlThIvdjotXM1DFd/pnmXCp1
AOkZpMu6w2hnJXEeEThF53TXDVtbhXA6mKd2GiPgCxg13AaeLUKtp7GZsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEVc5ICgA5uWVUT/N9YKfT6KfpAMB8GA1UdIwQY
MBaAFKLtC6i0bvJR5aBYpkohswfTZQ3cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2Ut
NzkxYzVhODUzOTBkLzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC81YmU4ZjctMWFkMC00NGJmLThiM2UtNzkxYzVhODUzOTBk
LzEvb3UwTHFMUnU4bEhsb0ZpbVNpR3pCOU5sRGR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ67TUjwE
fdfqCSakx7FM52Th19yDr2qWS77vAVu5mhVm2m/fHKc4S7EfF/T+j4w+Fr+pXbHZ
zmYKVd6by+C9Mp6vefb4wDD/5LKTB5/lx/++pmgUE3DHE2kM5OSjAvKxjO0OyIQJ
oceS9lpvAtT4H40gH41zzPi9Lx5WRtGK93wBfi5EdSennrz8XS0vmYlRpSJEMp7o
77AtG3a2fZlTaWO5Kd6NbLjBJiUAsh4LEkgHlb926lS4NSkRYgSnTescGig85a8o
RSox+6cvIRg4l1KRI1zOyPTNouBYgIh4eQjO3ZhjZ172O0oL4wJXrhwIpby+g4Rg
cGQ8FAcYB0zgjA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:26:31 2026 by rpki-client