This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
File:                     pB97t76hWBYk_LZQOrWnD0IMmz4.mft (raw, json)
Hash identifier:          q5YMipGGChKoli9vNsYR0jxF17iLa/q7qLWx/LwGAlU=
Subject key identifier:   15:91:18:C6:13:86:9A:71:DE:C8:C9:7F:DC:4B:69:92:4C:C4:AD:EA
Authority key identifier: A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E
Certificate issuer:       /CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
Certificate serial:       019BF5071C9C541116986437D5B8803269A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
Manifest number:          029B
Signing time:             Sun 25 Jan 2026 12:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:42 +0000
Files and hashes:         1: VWRnL-QChZydlewFf4m0W5IwI7I.roa (hash: 20xjUehHV+vdMcLMkiiK7TR0WGC8wZacMlPvbIysBJk=)
                          2: _8VJWkXr3bzkwgkhCXmclje7ivw.roa (hash: zaM4bElEDCzEKiBqEWYy0K32aC7wXL/fnEdwKNc1ylk=)
                          3: pB97t76hWBYk_LZQOrWnD0IMmz4.crl (hash: 3ik2mRL0EawycK4Ol66Iu1cJCilBPwk2190g9gplUlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:1c:9c:54:11:16:98:64:37:d5:b8:80:32:69:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41f7bb7bea1581624fcb6503ab5a70f420c9b3e
        Validity
            Not Before: Jan 25 12:00:42 2026 GMT
            Not After : Jan 26 12:00:42 2026 GMT
        Subject: CN=159118c613869a71dec8c97fdc4b69924cc4adea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:c2:d4:c7:0b:e9:1b:97:ee:36:58:e7:1c:
                    cb:1d:73:28:0d:92:59:2b:86:d4:fc:dd:76:12:cc:
                    66:04:bb:e6:fb:a8:4a:28:55:23:72:39:7e:7a:ca:
                    21:f1:ed:e2:1f:1c:9f:f6:90:5f:f9:ab:00:da:a5:
                    68:7d:cf:60:7b:80:23:34:39:d6:6e:e3:46:4e:66:
                    31:f2:ff:61:4d:9b:f5:44:fa:fd:9a:6b:8a:62:75:
                    21:c4:f8:32:99:e3:86:7d:13:12:cf:a4:ec:31:77:
                    4f:c8:39:3a:6d:e2:37:79:89:ad:82:12:e2:2d:53:
                    2a:29:33:01:60:dc:b5:d0:69:eb:cb:f1:2d:d9:26:
                    d4:f8:e1:b6:f8:c5:4a:5e:52:1e:f8:aa:a3:21:6b:
                    5c:f0:97:73:67:5b:da:b7:c7:4a:86:fa:74:3c:b5:
                    ce:fe:70:85:9c:ca:8a:9d:2c:c7:25:d0:d3:24:d2:
                    5e:40:a8:d5:d7:69:43:54:19:2a:2c:71:fe:32:26:
                    6c:f7:88:1f:a0:b3:a1:b1:f4:09:5d:87:37:4b:87:
                    a4:70:c7:65:5d:ce:ee:ad:6c:9b:32:91:98:a2:d9:
                    e4:c8:42:c8:a5:37:c0:3f:37:4b:ee:4d:03:9e:a5:
                    f1:9e:a4:9a:ed:72:17:21:43:2b:67:07:09:c0:65:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:91:18:C6:13:86:9A:71:DE:C8:C9:7F:DC:4B:69:92:4C:C4:AD:EA
            X509v3 Authority Key Identifier:
                keyid:A4:1F:7B:B7:BE:A1:58:16:24:FC:B6:50:3A:B5:A7:0F:42:0C:9B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pB97t76hWBYk_LZQOrWnD0IMmz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/2160f4-7d57-4c7c-89af-98f1a2dfc39c/1/pB97t76hWBYk_LZQOrWnD0IMmz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:28:65:45:f3:1e:27:85:3c:69:9a:4e:0f:83:71:57:01:5d:
         85:30:be:bd:8d:23:42:23:bb:91:48:ae:2d:53:36:c5:8c:d5:
         4f:bc:99:17:bb:25:c2:27:5f:f9:fc:ad:97:b3:5e:e9:23:2b:
         84:a5:83:f1:34:2c:5f:a0:81:d0:12:40:8f:02:9d:3b:0d:77:
         80:09:b4:46:93:ad:7c:c6:a7:c4:d2:ff:ae:ab:84:b7:81:16:
         ad:40:3a:81:a4:c9:0d:91:a1:d8:ee:7f:32:5e:b6:ff:33:b7:
         e3:9e:a1:9f:e6:cb:80:48:82:1d:58:44:37:49:75:98:45:a0:
         ca:72:5d:7f:1b:d9:f9:da:3e:aa:45:dd:5f:e5:2d:86:c6:c5:
         8f:75:48:d0:65:ab:bb:72:ff:fa:8b:4c:ed:64:ba:fa:64:fa:
         d7:2f:bd:a9:06:83:ee:f6:f8:a9:98:91:cb:50:97:ce:7e:49:
         24:dc:dc:18:dc:9a:b6:3f:e9:d8:7b:22:f4:cc:57:3e:83:67:
         ab:f0:18:19:af:46:7f:8e:73:97:4c:b5:48:d6:32:31:ef:84:
         a8:8e:fa:82:13:ef:d5:db:b8:31:fc:66:ea:46:9f:c0:10:97:
         2f:12:4b:6a:7e:75:b4:aa:14:e5:ed:28:da:83:44:55:ad:9a:
         b0:81:a9:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1BxycVBEWmGQ31biAMmmpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MWY3YmI3YmVhMTU4MTYyNGZjYjY1MDNhYjVhNzBmNDIw
YzliM2UwHhcNMjYwMTI1MTIwMDQyWhcNMjYwMTI2MTIwMDQyWjAzMTEwLwYDVQQD
EygxNTkxMThjNjEzODY5YTcxZGVjOGM5N2ZkYzRiNjk5MjRjYzRhZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiXC1McL6RuX7jZY5xzLHXMoDZJZ
K4bU/N12EsxmBLvm+6hKKFUjcjl+esoh8e3iHxyf9pBf+asA2qVofc9ge4AjNDnW
buNGTmYx8v9hTZv1RPr9mmuKYnUhxPgymeOGfRMSz6TsMXdPyDk6beI3eYmtghLi
LVMqKTMBYNy10Gnry/Et2SbU+OG2+MVKXlIe+KqjIWtc8JdzZ1vat8dKhvp0PLXO
/nCFnMqKnSzHJdDTJNJeQKjV12lDVBkqLHH+MiZs94gfoLOhsfQJXYc3S4ekcMdl
Xc7urWybMpGYotnkyELIpTfAPzdL7k0DnqXxnqSa7XIXIUMrZwcJwGWx1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWRGMYThppx3sjJf9xLaZJMxK3qMB8GA1UdIwQY
MBaAFKQfe7e+oVgWJPy2UDq1pw9CDJs+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYt
OThmMWEyZGZjMzljLzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8yMTYwZjQtN2Q1Ny00YzdjLTg5YWYtOThmMWEyZGZjMzlj
LzEvcEI5N3Q3NmhXQllrX0xaUU9yV25EMElNbXo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVyhlRfMe
J4U8aZpOD4NxVwFdhTC+vY0jQiO7kUiuLVM2xYzVT7yZF7slwidf+fytl7Ne6SMr
hKWD8TQsX6CB0BJAjwKdOw13gAm0RpOtfManxNL/rquEt4EWrUA6gaTJDZGh2O5/
Ml62/zO3456hn+bLgEiCHVhEN0l1mEWgynJdfxvZ+do+qkXdX+UthsbFj3VI0GWr
u3L/+otM7WS6+mT61y+9qQaD7vb4qZiRy1CXzn5JJNzcGNyatj/p2Hsi9MxXPoNn
q/AYGa9Gf45zl0y1SNYyMe+EqI76ghPv1du4Mfxm6kafwBCXLxJLan51tKoU5e0o
2oNEVa2asIGp7A==
-----END CERTIFICATE-----
Generated at Sun Jan 25 18:54:30 2026 by rpki-client