This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
File:                     kPJeamiT9GbSaV6QZwwEdENkNwE.mft (raw, json)
Hash identifier:          lOs/R9Zm3pfc1AOp6cGB6i5Gn3i1tm6ecg4QJQl7Jc0=
Subject key identifier:   B0:10:28:22:95:F9:76:13:77:4B:10:93:82:07:77:FD:8C:75:A2:F3
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Certificate issuer:       /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial:       019BF35016C7CFF16522803C99E0C96D641B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
Manifest number:          17FD
Signing time:             Sun 25 Jan 2026 04:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:10 +0000
Files and hashes:         1: 2rYrAzNGLRy2kebzewAymxyAgFI.roa (hash: 7lRGKU9DPcDtXv+u0hXbpyy4aMqg0Uw+oprnJUe2LzA=)
                          2: E80jGEYfLElDqUoZ-chDRB1qCK0.roa (hash: utzWYe6st9xOk92EA2JXpbtTX4vQm0NmwUYg16KiqY4=)
                          3: O0zW5TfYvBKPM_06y39fr20GlgU.roa (hash: o9IJqdu4tvBH89+q/ixOEY64sxONXtm+OJZs9bCwOus=)
                          4: R2FNO1Ygep-crgCBZOCm6rPiC1g.asa (hash: ApEGVteE4lW6zOIWL6jC0gxWXUXXinVHVBq0ULy5NCg=)
                          5: WjH_ZefSAN7wwtbjUvmdIn8zw88.roa (hash: cKkXcE8FM5i99qr1dZG+cPm90fkHci3xI30wSCEhQhk=)
                          6: Xij9xh5DddLLuqwtCNwg7qmWYfY.asa (hash: 3EqZun6qc3DEqBJqVt9g499WWwGeNostKOQ4l981464=)
                          7: ZFX1wiMo9pjybe2C6NOlis161vg.roa (hash: 2gd9X68UIcrLtfaw+PHS88NJNR8euVr2/TC7qbHMmHo=)
                          8: bt7v5S1iGVK94mqOZQHRX86O4nE.asa (hash: swB8MgNoQmF6xNb6V+G76LxIip8Z23hDxriDFCYhY6o=)
                          9: kPJeamiT9GbSaV6QZwwEdENkNwE.crl (hash: Aun9oTQDnosE0GLYE7FZP/c728GllBebkEc24PO8NKY=)
                          10: nWTiWDUsZBq6y-Llds3TNYkdAzA.roa (hash: lu7dgyssWpWTBNpOq8brqIrMrxMRYIWthZEExVfrpEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:16:c7:cf:f1:65:22:80:3c:99:e0:c9:6d:64:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
        Validity
            Not Before: Jan 25 04:01:10 2026 GMT
            Not After : Jan 26 04:01:10 2026 GMT
        Subject: CN=b010282295f97613774b1093820777fd8c75a2f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:a9:2b:2a:a6:d0:9c:a6:7d:d9:c4:35:75:
                    87:98:68:d5:4b:c4:9a:64:ed:db:79:63:fd:a1:0d:
                    a7:38:bc:31:5d:e8:38:4b:0b:7f:ab:10:8b:a9:07:
                    c3:1f:cb:1a:9c:78:41:aa:be:ed:7e:6c:b8:58:fa:
                    a6:47:28:01:a9:32:c0:f6:09:fe:8c:c3:d3:4a:d4:
                    13:e8:b7:0d:b4:e8:74:13:a8:dd:c6:79:46:8b:85:
                    7e:74:7b:5f:08:b9:9b:07:7f:6e:42:3c:f4:65:28:
                    4c:ad:24:7f:ba:9d:9e:2a:e4:37:62:81:60:38:71:
                    63:bb:3d:69:ff:4f:48:c2:d0:a6:41:09:28:cd:80:
                    e8:a6:56:77:09:56:6d:c5:d9:e6:51:7b:3d:ac:ab:
                    89:d2:af:48:65:39:00:e2:b2:1d:39:cb:4b:9d:a5:
                    b9:34:15:5c:67:10:63:ce:1a:3a:47:96:12:c7:d2:
                    72:d4:b2:80:f1:c7:88:70:1a:d7:f4:95:3b:6e:1f:
                    08:6b:fd:85:f9:ff:1e:63:87:b7:1a:1c:6a:db:9d:
                    52:94:31:d6:da:87:ac:fa:5e:14:ab:2c:18:12:e2:
                    5d:d5:43:3e:26:37:55:de:0f:9d:53:cd:6e:38:72:
                    55:52:9b:7a:55:1f:16:9b:60:8e:d9:97:24:08:db:
                    aa:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:10:28:22:95:F9:76:13:77:4B:10:93:82:07:77:FD:8C:75:A2:F3
            X509v3 Authority Key Identifier:
                keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:6d:7d:b6:d7:51:9d:24:f5:15:40:2a:6f:b4:8b:af:eb:bc:
         6b:51:f2:8a:d5:99:ed:b4:34:1c:fc:43:42:69:49:b6:b6:23:
         12:60:1b:ff:1f:fc:34:b6:72:e9:f3:b2:92:0e:c0:59:7c:05:
         df:27:07:2c:26:3b:f5:29:4b:3a:1e:42:14:d1:f7:32:41:9d:
         47:03:ba:8e:e3:3e:66:2c:70:10:32:bd:83:fe:e0:61:d8:ce:
         0c:54:8f:48:dc:17:dd:a5:0b:a4:27:a9:98:91:7f:34:5a:9d:
         70:5f:f1:43:ae:4e:6a:5a:34:c8:3a:49:84:e6:1a:fe:65:f8:
         84:11:bd:b1:a2:a7:05:a1:8e:43:ba:a0:dd:8c:a3:3a:e2:9b:
         6f:c0:a8:bd:1b:6f:66:bd:8e:97:51:4b:ae:63:89:5b:09:68:
         9d:ec:91:5d:58:a2:51:0a:85:40:ce:40:d4:72:ed:2e:bc:8c:
         ba:b4:cd:57:79:e5:55:39:a3:e9:da:d5:3d:04:7f:e1:32:11:
         2f:18:9b:52:ad:a3:47:f1:b0:15:d6:65:95:fc:9f:c8:ac:1a:
         95:21:ff:eb:b4:2c:6b:0d:20:cc:07:00:a0:26:63:ef:ac:13:
         3b:97:20:04:80:5d:a7:47:e9:15:4e:87:f2:1b:82:60:7d:d2:
         fb:f0:a7:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUBbHz/FlIoA8meDJbWQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjYwMTI1MDQwMTEwWhcNMjYwMTI2MDQwMTEwWjAzMTEwLwYDVQQD
EyhiMDEwMjgyMjk1Zjk3NjEzNzc0YjEwOTM4MjA3NzdmZDhjNzVhMmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xSpKyqm0JymfdnENXWHmGjVS8Sa
ZO3beWP9oQ2nOLwxXeg4Swt/qxCLqQfDH8sanHhBqr7tfmy4WPqmRygBqTLA9gn+
jMPTStQT6LcNtOh0E6jdxnlGi4V+dHtfCLmbB39uQjz0ZShMrSR/up2eKuQ3YoFg
OHFjuz1p/09IwtCmQQkozYDoplZ3CVZtxdnmUXs9rKuJ0q9IZTkA4rIdOctLnaW5
NBVcZxBjzho6R5YSx9Jy1LKA8ceIcBrX9JU7bh8Ia/2F+f8eY4e3Ghxq251SlDHW
2oes+l4UqywYEuJd1UM+JjdV3g+dU81uOHJVUpt6VR8Wm2CO2ZckCNuqcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAQKCKV+XYTd0sQk4IHd/2MdaLzMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfW19ttdR
nST1FUAqb7SLr+u8a1HyitWZ7bQ0HPxDQmlJtrYjEmAb/x/8NLZy6fOykg7AWXwF
3ycHLCY79SlLOh5CFNH3MkGdRwO6juM+ZixwEDK9g/7gYdjODFSPSNwX3aULpCep
mJF/NFqdcF/xQ65Oalo0yDpJhOYa/mX4hBG9saKnBaGOQ7qg3YyjOuKbb8CovRtv
Zr2Ol1FLrmOJWwloneyRXViiUQqFQM5A1HLtLryMurTNV3nlVTmj6drVPQR/4TIR
LxibUq2jR/GwFdZllfyfyKwalSH/67Qsaw0gzAcAoCZj76wTO5cgBIBdp0fpFU6H
8huCYH3S+/CnfQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 13:11:08 2026 by rpki-client