This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
File:                     plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft (raw, json)
Hash identifier:          Lm4UHwF/tFHY8A4KyparC3nslwA0fD1a5VaJIDYYhn4=
Subject key identifier:   0B:D7:53:01:E1:85:8C:6C:AF:DE:D2:42:B6:44:92:4C:FB:D9:22:A4
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Certificate issuer:       /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial:       019BFA2E15385518A1DDB47563DE5DDE3E6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
Manifest number:          17FB
Signing time:             Mon 26 Jan 2026 12:01:22 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:22 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:22 +0000
Files and hashes:         1: 4c4Z5B7lZ2p0HXSBYJnyPpAaAbg.roa (hash: irdZmDg7kfWDw/MMxoEOgDa/mSx5BbRXlIXm1JYPjqo=)
                          2: 6KA1NZY-8uTlMpHRidS_d7PudWA.roa (hash: xUjKfuqdolVHKjbneqZVOfWNZfUlkAINU/NVZ98kNRU=)
                          3: Zm4QLnym_-DDhDcH4DpZJBRqzmI.roa (hash: RKjtOv2bBTwSnsUEn1Xp1qY9ajkemmIgj+R25smjK1A=)
                          4: cFwV6b1vV1ohRKYYWuEDOAdg1N0.asa (hash: Ayfnf+ERuqktIc5tO5+JoNswSsuneeuJ+BLm8Zge0cQ=)
                          5: plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl (hash: sJn5lQdlzphDDSTw9iKXBtblIwv1AHTdjzewB6l1Ho4=)
                          6: rKVa3fR2ADZU0VCCGgXYMqyXBZI.roa (hash: aPmQ9dFrzaY5WBSQSOvpilwEsvImk3jvByr1CJH1OMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:15:38:55:18:a1:dd:b4:75:63:de:5d:de:3e:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
        Validity
            Not Before: Jan 26 12:01:22 2026 GMT
            Not After : Jan 27 12:01:22 2026 GMT
        Subject: CN=0bd75301e1858c6cafded242b644924cfbd922a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ff:f6:19:fb:3f:46:17:a2:b0:3e:73:2a:a7:
                    05:33:13:dd:c0:bc:66:50:f6:d9:31:24:de:77:2e:
                    54:2f:1e:2f:42:b5:56:74:58:2e:da:4e:e8:0c:6c:
                    a3:b5:64:50:ba:23:4f:8d:a4:aa:5a:33:32:77:84:
                    a9:e5:f9:f7:4e:72:a4:20:36:18:1a:13:ab:68:41:
                    d1:af:c5:4d:f9:75:de:ce:ec:d4:ff:85:eb:7d:9d:
                    88:b9:0c:27:cf:91:51:24:f1:ba:03:a4:ca:61:6c:
                    6b:01:3c:e3:f6:76:c0:28:c4:75:c9:2d:a9:f8:24:
                    5c:5b:d9:87:57:fc:cd:29:38:49:bd:b5:43:00:8c:
                    41:3e:ae:e1:c9:1d:93:5d:56:e1:8f:80:43:bd:23:
                    42:40:74:b0:cd:18:5d:e8:49:30:f8:b5:5a:b2:19:
                    71:5a:06:42:38:f7:cc:df:21:f1:34:c5:eb:3f:eb:
                    a3:29:dc:91:9b:65:6b:85:d6:0d:fd:95:68:da:40:
                    eb:21:d1:db:fa:bd:ba:c7:9b:23:59:68:02:26:cd:
                    00:a6:02:48:80:18:43:98:00:0b:04:c1:d1:0b:08:
                    81:19:bf:6f:de:aa:cf:b5:82:3f:37:bf:4b:0c:af:
                    57:f8:37:fe:3a:a1:93:f9:49:c4:93:96:fd:cc:16:
                    f9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:D7:53:01:E1:85:8C:6C:AF:DE:D2:42:B6:44:92:4C:FB:D9:22:A4
            X509v3 Authority Key Identifier:
                keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ce:30:b4:64:e8:20:07:23:93:e7:64:71:0a:34:f4:e1:77:
         ff:bb:9b:d7:0a:36:e0:79:23:04:55:9e:96:eb:8e:87:d4:70:
         fe:03:33:50:38:83:7b:00:57:ed:6c:ed:83:fd:19:55:37:98:
         43:81:a2:30:be:13:42:89:2a:a5:89:5e:8c:18:d4:7e:25:42:
         5e:5b:8e:b2:ae:4b:0e:bb:e7:5b:84:bc:a9:1b:7f:ec:80:57:
         3b:b5:3f:5a:64:f3:d2:b3:a4:fc:df:fc:97:0a:62:0a:cc:3d:
         a0:d4:6d:10:5c:a8:60:02:c0:49:27:6c:52:bf:d4:7e:12:d7:
         50:61:27:4b:1d:51:26:f3:26:86:91:19:5c:90:cf:7d:1f:83:
         12:d7:9b:b8:c3:7d:f7:0d:32:88:0c:78:48:ea:fd:91:fd:fa:
         4d:35:98:28:d2:07:1c:f8:da:c8:93:d0:72:09:35:90:4c:19:
         33:3e:e9:25:00:fb:27:fb:26:14:1d:23:60:39:02:fa:51:77:
         7d:fa:b6:d0:88:6e:30:f5:df:48:50:fe:c4:8b:44:db:39:55:
         d6:22:42:a0:5e:4a:af:9f:c4:4c:e0:2d:b7:ca:45:aa:78:00:
         d5:7a:82:80:e3:c9:19:a9:27:f3:1b:e0:06:7f:5e:1e:78:e5:
         63:2f:59:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6LhU4VRih3bR1Y95d3j5vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NTYyZDA4Njk0ODBkYzExYjc0YTU1MmNkMTY3YjZmNjMz
OWM4YmEwHhcNMjYwMTI2MTIwMTIyWhcNMjYwMTI3MTIwMTIyWjAzMTEwLwYDVQQD
EygwYmQ3NTMwMWUxODU4YzZjYWZkZWQyNDJiNjQ0OTI0Y2ZiZDkyMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtv/2Gfs/RheisD5zKqcFMxPdwLxm
UPbZMSTedy5ULx4vQrVWdFgu2k7oDGyjtWRQuiNPjaSqWjMyd4Sp5fn3TnKkIDYY
GhOraEHRr8VN+XXezuzU/4XrfZ2IuQwnz5FRJPG6A6TKYWxrATzj9nbAKMR1yS2p
+CRcW9mHV/zNKThJvbVDAIxBPq7hyR2TXVbhj4BDvSNCQHSwzRhd6Ekw+LVashlx
WgZCOPfM3yHxNMXrP+ujKdyRm2VrhdYN/ZVo2kDrIdHb+r26x5sjWWgCJs0ApgJI
gBhDmAALBMHRCwiBGb9v3qrPtYI/N79LDK9X+Df+OqGT+UnEk5b9zBb5kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAvXUwHhhYxsr97SQrZEkkz72SKkMB8GA1UdIwQY
MBaAFKZWLQhpSA3BG3SlUs0We29jOci6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEt
NDVhOGZlZDNhMmE1LzEvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yMTJkZDItZGE4ZC00MDQ4LTkxNmEtNDVhOGZlZDNhMmE1
LzEvcGxZdENHbElEY0ViZEtWU3pSWjdiMk01eUxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYs4wtGTo
IAcjk+dkcQo09OF3/7ub1wo24HkjBFWeluuOh9Rw/gMzUDiDewBX7Wztg/0ZVTeY
Q4GiML4TQokqpYlejBjUfiVCXluOsq5LDrvnW4S8qRt/7IBXO7U/WmTz0rOk/N/8
lwpiCsw9oNRtEFyoYALASSdsUr/UfhLXUGEnSx1RJvMmhpEZXJDPfR+DEtebuMN9
9w0yiAx4SOr9kf36TTWYKNIHHPjayJPQcgk1kEwZMz7pJQD7J/smFB0jYDkC+lF3
ffq20IhuMPXfSFD+xItE2zlV1iJCoF5Kr5/ETOAtt8pFqngA1XqCgOPJGakn8xvg
Bn9eHnjlYy9Z4A==
-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:32 2026 by rpki-client