This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
File:                     MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft (raw, json)
Hash identifier:          /R3GunZUmmq2Q7u0IMY73n2CPsyQfSvFfRhm/hqIzSs=
Subject key identifier:   CC:29:DD:EE:24:89:AA:1C:2B:3F:70:4C:96:A2:1B:6B:5B:17:60:EE
Authority key identifier: 32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42
Certificate issuer:       /CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
Certificate serial:       019BF6BF7248DC8319621D24EA3996AE33BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
Manifest number:          17F5
Signing time:             Sun 25 Jan 2026 20:01:40 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:40 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:40 +0000
Files and hashes:         1: 1-5YvMXH0hxTnFsj1sAzG_06N-p8.roa (hash: qtH86zFamX3mvPAvdw+q4UCXn4ioDZi9V1NWUgQSNY4=)
                          2: FVTkjzWbmN1CXQ1gquYHPct9ixg.roa (hash: O+F6tjESCYzZkWop7KXE+D6dIUDkHaDfPEsn4FO2i5Y=)
                          3: MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl (hash: bMMc/uTlpvwy7aduk5J7O+eDUh4UgmSYPHIzMuYBQ3k=)
                          4: U_NZYpjmvtYZaAL9QOJbt18Da90.roa (hash: ImEoqLKkocpZGN3jliyG2JmnXa2NgKRx1aFT2s7Ccsg=)
                          5: XjDc2QA9m4quHMdfD5XNqmD-sRU.roa (hash: hUIq0ryrPFUtWnGVn0EVGNy126+7rvo1zZWi0URfcgg=)
                          6: b-jvFTusq2yMHvQus-EOGvQIcIU.roa (hash: UEESHc2CoqAdsZBnwreDavJ8dh67qE0F5/NXF/uJif0=)
                          7: eVf9uWw4an4J37lWXFXCY7TXLRA.roa (hash: TLeYBm2fbdmHg6RfdNeCWlTy8uamiAq/QUF9qcFVMZU=)
                          8: ossK8NVWIjYFpVS_EefAqYZy2IE.roa (hash: /y0pnw5X9uBmKvZNWFvXcQIM9KTs6u2DfBY5eqhbuoU=)
                          9: tsRs_smMGnXJS6Ngg5EdidV6amo.roa (hash: s9qZIcL7Vpb5CW9P2b/OUKeQv+DX4uJC5U3wk2Lpo2c=)
                          10: txvH1TOH6wMQ5yQgLlacwoKKBQ4.roa (hash: edU/OVpHTHKV2scSWmXngs1gD9tCdP7QXrGFexnNs6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:72:48:dc:83:19:62:1d:24:ea:39:96:ae:33:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32508fb781ca6dbd8221f2c2f954a3a7446b2b42
        Validity
            Not Before: Jan 25 20:01:40 2026 GMT
            Not After : Jan 26 20:01:40 2026 GMT
        Subject: CN=cc29ddee2489aa1c2b3f704c96a21b6b5b1760ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:e9:1f:85:1f:88:99:25:5b:55:3e:fa:29:
                    fe:ad:70:af:ed:69:05:17:66:20:e7:e9:cb:f3:ca:
                    05:c7:48:e8:a7:fe:bd:96:a4:d8:8f:17:1b:3e:5c:
                    29:42:3f:73:28:18:b5:e9:6b:7d:ec:51:f7:bf:03:
                    78:2b:25:96:44:31:5a:f8:56:6e:82:d0:93:17:44:
                    43:b8:9f:a9:f5:da:58:d8:58:02:0b:0b:8c:24:1a:
                    d2:72:2d:f1:2c:34:8b:d2:6d:43:53:87:ce:22:0b:
                    76:d2:ae:0a:3d:a4:3b:2f:78:35:a2:f1:81:fb:31:
                    ea:43:e5:6b:d7:49:81:95:5d:fd:24:39:fb:4a:27:
                    0e:e1:46:15:47:f6:b0:1e:c6:d6:21:f7:52:ce:9a:
                    89:4d:67:75:f2:ef:72:d9:56:65:e1:b9:c1:a1:9f:
                    7c:cd:30:d7:dc:b5:32:64:a1:d9:d8:23:3c:6c:a1:
                    19:1e:23:d5:17:b3:43:36:5c:3e:97:74:1b:c5:cf:
                    89:f9:8a:b6:03:33:99:e8:4d:37:6d:be:42:4a:15:
                    a6:c8:b3:46:e5:06:a6:e9:63:69:f5:89:0e:68:a3:
                    ca:be:96:17:36:73:2f:7d:9d:f7:2e:34:50:ce:36:
                    88:1d:c0:31:d3:b8:1b:ed:83:91:4f:c0:3b:f8:24:
                    2b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:DD:EE:24:89:AA:1C:2B:3F:70:4C:96:A2:1B:6B:5B:17:60:EE
            X509v3 Authority Key Identifier:
                keyid:32:50:8F:B7:81:CA:6D:BD:82:21:F2:C2:F9:54:A3:A7:44:6B:2B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlCPt4HKbb2CIfLC-VSjp0RrK0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6c203d-6221-460a-af49-c12218765154/1/MlCPt4HKbb2CIfLC-VSjp0RrK0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:17:d8:17:f0:cb:86:5d:8f:e3:3b:95:93:ea:46:14:34:99:
         c0:18:00:cf:65:e1:08:4c:ef:92:e5:22:66:e0:0c:9c:81:13:
         a6:ca:a9:18:73:56:ec:f8:c2:d5:ce:5c:09:5f:c6:e8:75:2a:
         a3:00:13:89:9c:91:47:57:42:d9:46:d4:3f:9b:73:97:4d:5d:
         3a:37:81:b7:16:a2:3c:b2:5c:47:d5:af:61:60:01:70:0d:56:
         d2:71:37:c6:d4:4a:56:fa:36:ba:fe:6f:18:42:81:ab:0b:d8:
         85:de:ea:51:b6:46:59:14:77:e1:12:12:19:36:71:0f:fd:25:
         4d:32:1d:ee:1d:1f:ec:f2:5d:dc:50:97:0e:5a:0c:26:f7:e9:
         e6:f6:85:9d:05:db:54:db:a5:07:d6:d0:77:2d:9d:18:39:2e:
         a8:40:ea:4c:f4:43:61:ad:b9:f0:9d:32:75:81:a3:a9:b9:cb:
         8e:14:d8:32:3b:35:f0:7d:3a:4c:a5:06:67:ff:b1:e9:42:8e:
         e8:fe:71:03:6c:db:7e:9d:92:d6:52:a6:db:da:1c:e0:01:76:
         d9:d8:b5:e2:8a:8e:9e:ef:ab:96:06:8b:1d:cb:e7:4a:11:2d:
         0d:14:f7:0e:1d:f5:53:65:8b:10:fa:b3:05:34:f0:20:e9:25:
         d3:36:a6:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2v3JI3IMZYh0k6jmWrjO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyNTA4ZmI3ODFjYTZkYmQ4MjIxZjJjMmY5NTRhM2E3NDQ2
YjJiNDIwHhcNMjYwMTI1MjAwMTQwWhcNMjYwMTI2MjAwMTQwWjAzMTEwLwYDVQQD
EyhjYzI5ZGRlZTI0ODlhYTFjMmIzZjcwNGM5NmEyMWI2YjViMTc2MGVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUHpH4UfiJklW1U++in+rXCv7WkF
F2Yg5+nL88oFx0jop/69lqTYjxcbPlwpQj9zKBi16Wt97FH3vwN4KyWWRDFa+FZu
gtCTF0RDuJ+p9dpY2FgCCwuMJBrSci3xLDSL0m1DU4fOIgt20q4KPaQ7L3g1ovGB
+zHqQ+Vr10mBlV39JDn7SicO4UYVR/awHsbWIfdSzpqJTWd18u9y2VZl4bnBoZ98
zTDX3LUyZKHZ2CM8bKEZHiPVF7NDNlw+l3Qbxc+J+Yq2AzOZ6E03bb5CShWmyLNG
5Qam6WNp9YkOaKPKvpYXNnMvfZ33LjRQzjaIHcAx07gb7YORT8A7+CQrtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwp3e4kiaocKz9wTJaiG2tbF2DuMB8GA1UdIwQY
MBaAFDJQj7eBym29giHywvlUo6dEaytCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDkt
YzEyMjE4NzY1MTU0LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi82YzIwM2QtNjIyMS00NjBhLWFmNDktYzEyMjE4NzY1MTU0
LzEvTWxDUHQ0SEtiYjJDSWZMQy1WU2pwMFJySzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFRfYF/DL
hl2P4zuVk+pGFDSZwBgAz2XhCEzvkuUiZuAMnIETpsqpGHNW7PjC1c5cCV/G6HUq
owATiZyRR1dC2UbUP5tzl01dOjeBtxaiPLJcR9WvYWABcA1W0nE3xtRKVvo2uv5v
GEKBqwvYhd7qUbZGWRR34RISGTZxD/0lTTId7h0f7PJd3FCXDloMJvfp5vaFnQXb
VNulB9bQdy2dGDkuqEDqTPRDYa258J0ydYGjqbnLjhTYMjs18H06TKUGZ/+x6UKO
6P5xA2zbfp2S1lKm29oc4AF22di14oqOnu+rlgaLHcvnShEtDRT3Dh31U2WLEPqz
BTTwIOkl0zam0Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:34:38 2026 by rpki-client