This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
File:                     ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft (raw, json)
Hash identifier:          bCxwvjW8rGVC4Vr9l9FqQVCXZXjNpms/+8ZYoy2PpLw=
Subject key identifier:   8B:3C:D4:F7:F5:3A:FB:D6:DC:B0:6E:8A:19:7A:86:F2:CA:E7:E2:9D
Authority key identifier: 65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61
Certificate issuer:       /CN=651bad95276947c7be536af4c870a3721f0b7761
Certificate serial:       019BF650F2373572577235BFA7BE70D6A434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 18:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:58 +0000
Files and hashes:         1: ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl (hash: PpxuJgzpwmeuN/DihNSH1Zem1wPd0YbZ4arlEUQ3NVE=)
                          2: grSCYxr48GkiiLbXBFVvfPRGYDo.roa (hash: ORzXiCXEzDF1CBNSnKaHZkAM6lGFJh0djBj0NrfV6eg=)
                          3: mzEPgdHmNv6bVe96qDtXIbjnZeI.roa (hash: tpqt79V0TYHF3bsLDiHBBd9SAjg/wnNF2aCiJu5NIss=)
                          4: nqWceW59cc5C0IxxcTrydFGb1mM.roa (hash: Mg96y0myQny6t5nbNgLVhCKgERm7JW8N5FpEDhGxjoY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:f2:37:35:72:57:72:35:bf:a7:be:70:d6:a4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=651bad95276947c7be536af4c870a3721f0b7761
        Validity
            Not Before: Jan 25 18:00:58 2026 GMT
            Not After : Jan 26 18:00:58 2026 GMT
        Subject: CN=8b3cd4f7f53afbd6dcb06e8a197a86f2cae7e29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2a:dd:db:4c:a4:9f:3e:49:54:1b:04:8a:c1:
                    5d:bd:fa:76:66:fd:f2:4e:13:d5:5e:3d:03:e4:a7:
                    a6:61:f4:f5:a5:28:b2:77:dc:21:65:a0:58:11:b1:
                    aa:0f:38:11:1d:9a:b5:d3:56:ed:51:19:d2:33:70:
                    15:b2:d8:28:3a:73:ae:16:9c:71:04:5d:71:62:e7:
                    a1:7e:9d:97:1c:3a:c5:8f:76:de:98:56:bc:47:23:
                    f6:18:75:9b:48:38:98:b6:27:b4:3c:8d:24:23:65:
                    c0:97:66:bf:6c:2e:57:ef:59:6d:49:52:bf:0c:09:
                    a2:e4:f9:60:c3:95:d5:77:1f:7d:e5:f0:69:76:01:
                    3d:6f:39:52:c4:a2:2f:8a:1c:f2:ea:6a:58:33:a7:
                    05:3d:03:93:4b:37:e1:09:4c:a1:af:6b:76:88:59:
                    56:f6:f4:12:da:ca:a8:2f:8e:c9:54:f8:78:9b:0d:
                    ad:42:d5:a9:fd:2a:fb:92:e1:1e:e0:88:fd:5d:5c:
                    0a:58:a5:a7:78:f2:ce:c0:8b:16:15:3a:f4:32:7e:
                    eb:6c:5f:e5:e0:ea:b9:b6:56:0a:7e:ea:5b:17:1e:
                    31:42:e3:ae:5e:31:fc:f8:4d:52:4f:74:38:4f:9b:
                    3c:37:58:d8:3c:d6:14:3e:ff:ad:87:49:67:f2:e1:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3C:D4:F7:F5:3A:FB:D6:DC:B0:6E:8A:19:7A:86:F2:CA:E7:E2:9D
            X509v3 Authority Key Identifier:
                keyid:65:1B:AD:95:27:69:47:C7:BE:53:6A:F4:C8:70:A3:72:1F:0B:77:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRutlSdpR8e-U2r0yHCjch8Ld2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1dbd6b-35cc-4f09-b92e-198b6a61ce85/1/ZRutlSdpR8e-U2r0yHCjch8Ld2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:dc:ba:f1:5f:94:2d:25:cc:eb:bb:b0:cc:0f:50:b0:05:f3:
         a4:02:a6:d1:df:da:4e:2e:ac:bb:94:e3:4c:43:f2:64:70:c2:
         77:52:bd:83:14:8e:5f:aa:32:f2:30:07:8f:7e:87:6b:6c:31:
         93:41:85:66:90:79:bd:4d:10:84:bf:9c:eb:80:d0:22:ab:a2:
         7d:6c:40:7e:0e:68:cb:9f:3c:ba:db:64:4b:8f:39:22:f9:71:
         31:eb:71:0e:db:1b:9f:61:32:07:78:25:c0:19:b8:ba:f8:6e:
         25:9b:8d:97:66:cc:a4:59:b1:e1:66:0e:9b:49:aa:a9:2a:ec:
         65:5f:48:d9:c2:14:82:a9:d3:77:a0:33:8b:01:0b:80:2a:b5:
         1c:c7:b5:1e:a3:33:fc:1a:2b:75:ae:fe:b2:b1:fe:38:25:e0:
         c3:e3:a0:ff:40:c5:df:63:f9:65:45:e9:1e:ed:ce:fa:38:7e:
         f2:96:db:5c:88:65:89:bb:ca:00:8a:fe:b6:d5:b8:ef:62:06:
         76:be:da:41:69:44:4e:d3:64:4b:94:6b:61:c0:2e:f9:3c:cf:
         1a:88:8b:1f:6a:3f:53:6b:c9:9e:52:d5:d4:0c:0e:63:f2:e4:
         a6:43:59:47:92:16:4b:45:3c:df:59:8b:ce:31:8c:63:f7:2a:
         9a:f6:e8:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2UPI3NXJXcjW/p75w1qQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MWJhZDk1Mjc2OTQ3YzdiZTUzNmFmNGM4NzBhMzcyMWYw
Yjc3NjEwHhcNMjYwMTI1MTgwMDU4WhcNMjYwMTI2MTgwMDU4WjAzMTEwLwYDVQQD
Eyg4YjNjZDRmN2Y1M2FmYmQ2ZGNiMDZlOGExOTdhODZmMmNhZTdlMjlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsird20yknz5JVBsEisFdvfp2Zv3y
ThPVXj0D5KemYfT1pSiyd9whZaBYEbGqDzgRHZq101btURnSM3AVstgoOnOuFpxx
BF1xYuehfp2XHDrFj3bemFa8RyP2GHWbSDiYtie0PI0kI2XAl2a/bC5X71ltSVK/
DAmi5Plgw5XVdx995fBpdgE9bzlSxKIvihzy6mpYM6cFPQOTSzfhCUyhr2t2iFlW
9vQS2sqoL47JVPh4mw2tQtWp/Sr7kuEe4Ij9XVwKWKWnePLOwIsWFTr0Mn7rbF/l
4Oq5tlYKfupbFx4xQuOuXjH8+E1ST3Q4T5s8N1jYPNYUPv+th0ln8uGsGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIs81Pf1OvvW3LBuihl6hvLK5+KdMB8GA1UdIwQY
MBaAFGUbrZUnaUfHvlNq9Mhwo3IfC3dhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUt
MTk4YjZhNjFjZTg1LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xZGJkNmItMzVjYy00ZjA5LWI5MmUtMTk4YjZhNjFjZTg1
LzEvWlJ1dGxTZHBSOGUtVTJyMHlIQ2pjaDhMZDJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNy68V+U
LSXM67uwzA9QsAXzpAKm0d/aTi6su5TjTEPyZHDCd1K9gxSOX6oy8jAHj36Ha2wx
k0GFZpB5vU0QhL+c64DQIquifWxAfg5oy588uttkS485IvlxMetxDtsbn2EyB3gl
wBm4uvhuJZuNl2bMpFmx4WYOm0mqqSrsZV9I2cIUgqnTd6AziwELgCq1HMe1HqMz
/Borda7+srH+OCXgw+Og/0DF32P5ZUXpHu3O+jh+8pbbXIhlibvKAIr+ttW472IG
dr7aQWlETtNkS5RrYcAu+TzPGoiLH2o/U2vJnlLV1AwOY/LkpkNZR5IWS0U831mL
zjGMY/cqmvboIA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:20 2026 by rpki-client