This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
File:                     PpvRijUxNTVm7RgUDK10GQW-r64.mft (raw, json)
Hash identifier:          1XTTeEEwiRAQrpl42IdDD+FgsOYkLYYbKlN9teTi0/0=
Subject key identifier:   3A:79:32:E4:90:E8:46:A3:72:20:0F:6F:C3:F9:A8:62:15:CC:44:38
Authority key identifier: 3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE
Certificate issuer:       /CN=3e9bd18a3531353566ed18140cad741905beafae
Certificate serial:       019BF499BAD88BCAFF384803EF7C17FCB3BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
Manifest number:          8F
Signing time:             Sun 25 Jan 2026 10:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:14 +0000
Files and hashes:         1: PpvRijUxNTVm7RgUDK10GQW-r64.crl (hash: WfwgDFa9qMGLiJbx1OLN9iC6V8NIQrTwLViDeBIrYy8=)
                          2: _Wx9ZdmaJOp3eTANlK2NIeFmYuk.roa (hash: bRwEhLFQbPYT/IaKYTgc19M1MjVlqvi4YYR+NLvZd8U=)
                          3: c9WYdkuX9vqM1-rZ5wrXob8ras4.roa (hash: ejB+bZrxr1eJ74m85KOaG7NFYs4ZFTEAPocrQGNRHSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:ba:d8:8b:ca:ff:38:48:03:ef:7c:17:fc:b3:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e9bd18a3531353566ed18140cad741905beafae
        Validity
            Not Before: Jan 25 10:01:14 2026 GMT
            Not After : Jan 26 10:01:14 2026 GMT
        Subject: CN=3a7932e490e846a372200f6fc3f9a86215cc4438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3a:2b:ab:ad:06:81:72:3c:15:43:36:35:a7:
                    29:86:4b:c0:2d:76:ba:61:c1:ea:d4:bf:10:68:e8:
                    c3:3e:f5:27:96:2a:86:f9:9d:99:d2:c8:6e:6c:9a:
                    14:21:7f:a3:73:78:85:c2:0e:a8:35:46:aa:a6:de:
                    a0:5f:3c:06:e0:a1:fe:cf:04:e8:ca:cb:5b:3d:0b:
                    70:89:83:c5:b5:ca:5e:73:d4:0b:7f:9d:cc:a2:b7:
                    74:66:a9:fd:f6:20:2e:4c:6b:b4:4a:8b:6e:ee:98:
                    04:92:c7:1b:79:f6:93:ec:7e:04:a2:4c:ff:2e:55:
                    d7:7a:83:60:27:4e:78:a0:4b:77:42:6f:34:d3:85:
                    41:b6:98:07:29:8c:4b:51:f5:77:04:8a:1d:e0:0f:
                    71:91:1d:4c:0a:d5:61:73:0a:5b:4d:f8:31:40:22:
                    85:1d:04:41:cf:86:ed:29:d3:9c:12:62:93:0e:f2:
                    26:d1:58:25:ea:ff:35:7d:b4:23:0d:fa:9b:da:2b:
                    1a:72:27:b0:92:2d:7b:ac:c5:40:ca:f8:58:57:b4:
                    cc:88:7b:73:5c:ee:bf:e3:99:06:8d:e3:65:16:65:
                    52:ae:81:dd:49:26:77:8f:77:6f:95:81:78:98:8a:
                    4b:ba:b7:0e:11:3b:68:18:90:b8:7c:7c:3f:f0:54:
                    47:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:32:E4:90:E8:46:A3:72:20:0F:6F:C3:F9:A8:62:15:CC:44:38
            X509v3 Authority Key Identifier:
                keyid:3E:9B:D1:8A:35:31:35:35:66:ED:18:14:0C:AD:74:19:05:BE:AF:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PpvRijUxNTVm7RgUDK10GQW-r64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/86dbb4-6ae4-476e-a601-ea277b492f1e/1/PpvRijUxNTVm7RgUDK10GQW-r64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:47:38:58:7a:30:b8:d2:41:bc:67:c8:88:c1:4d:4c:b8:
         48:aa:1b:27:a6:9a:9c:be:78:dd:36:8a:fe:e2:a1:d7:94:15:
         31:03:3a:ea:7e:9f:5b:14:94:e7:9b:22:0b:16:19:ac:72:7f:
         8c:9c:ee:65:3e:28:ac:14:db:c8:58:96:e2:14:9e:d9:32:9d:
         e1:6b:f8:d4:6c:3a:06:1e:67:b1:e0:9e:7f:14:5d:44:ed:e3:
         31:0c:8c:0c:e3:ab:20:9a:7f:b1:cc:6c:f5:fe:a3:53:01:dd:
         79:b0:3c:2f:72:9f:1f:25:f3:64:2e:0c:c5:cd:76:40:14:9d:
         93:dc:74:2d:6a:ec:e0:6f:33:7c:c3:6a:c1:d7:09:b1:58:62:
         28:22:63:fd:08:26:bc:c4:a0:11:a5:2e:57:99:44:43:ea:8f:
         ab:79:41:5a:88:6b:f6:2f:82:2e:4c:4f:fe:e6:8e:6a:af:cc:
         44:f5:ee:38:a3:b1:48:ea:40:49:1a:86:c4:47:44:da:fe:94:
         2b:4b:f0:50:0d:e4:d6:96:d4:88:8b:f5:dd:49:86:f5:e6:86:
         c2:d8:c8:61:9b:1a:18:87:a7:34:81:c2:2c:ac:a5:34:11:27:
         88:9b:6b:c4:30:d7:68:a4:5b:fb:3f:c3:42:b9:d2:4a:5a:fd:
         d2:37:3b:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0mbrYi8r/OEgD73wX/LO9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlOWJkMThhMzUzMTM1MzU2NmVkMTgxNDBjYWQ3NDE5MDVi
ZWFmYWUwHhcNMjYwMTI1MTAwMTE0WhcNMjYwMTI2MTAwMTE0WjAzMTEwLwYDVQQD
EygzYTc5MzJlNDkwZTg0NmEzNzIyMDBmNmZjM2Y5YTg2MjE1Y2M0NDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jorq60GgXI8FUM2NacphkvALXa6
YcHq1L8QaOjDPvUnliqG+Z2Z0shubJoUIX+jc3iFwg6oNUaqpt6gXzwG4KH+zwTo
ystbPQtwiYPFtcpec9QLf53Mord0Zqn99iAuTGu0Sotu7pgEkscbefaT7H4Eokz/
LlXXeoNgJ054oEt3Qm8004VBtpgHKYxLUfV3BIod4A9xkR1MCtVhcwpbTfgxQCKF
HQRBz4btKdOcEmKTDvIm0Vgl6v81fbQjDfqb2isaciewki17rMVAyvhYV7TMiHtz
XO6/45kGjeNlFmVSroHdSSZ3j3dvlYF4mIpLurcOETtoGJC4fHw/8FRHFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDp5MuSQ6EajciAPb8P5qGIVzEQ4MB8GA1UdIwQY
MBaAFD6b0Yo1MTU1Zu0YFAytdBkFvq+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEt
ZWEyNzdiNDkyZjFlLzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS84NmRiYjQtNmFlNC00NzZlLWE2MDEtZWEyNzdiNDkyZjFl
LzEvUHB2UmlqVXhOVFZtN1JnVURLMTBHUVctcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMetHOFh6
MLjSQbxnyIjBTUy4SKobJ6aanL543TaK/uKh15QVMQM66n6fWxSU55siCxYZrHJ/
jJzuZT4orBTbyFiW4hSe2TKd4Wv41Gw6Bh5nseCefxRdRO3jMQyMDOOrIJp/scxs
9f6jUwHdebA8L3KfHyXzZC4Mxc12QBSdk9x0LWrs4G8zfMNqwdcJsVhiKCJj/Qgm
vMSgEaUuV5lEQ+qPq3lBWohr9i+CLkxP/uaOaq/MRPXuOKOxSOpASRqGxEdE2v6U
K0vwUA3k1pbUiIv13UmG9eaGwtjIYZsaGIenNIHCLKylNBEniJtrxDDXaKRb+z/D
QrnSSlr90jc7/g==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:28:22 2026 by rpki-client