This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File:                     mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier:          I94JxbFoIbPszd5BpNzYC3+wg4mNzj0NA2NQ8QXK5YA=
Subject key identifier:   9E:26:93:AD:AB:52:5D:D0:FB:B3:83:66:5D:72:A1:00:5F:CD:72:55
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer:       /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial:       019BF76334C878E12F23BB775513BDFB6E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 23:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:32 +0000
Files and hashes:         1: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
                          2: Ek07ovRM2Kh_Vc9JMXBQkpJ1Q9o.roa (hash: SY/fpD8jCYcf0UhkUzguL/mEf+0d9gsoahH2LNMAjv4=)
                          3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: AN5AwYQ+/eRvs/vtEI6xhaUpHFoCrM4l0cjT5nx/aFU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:34:c8:78:e1:2f:23:bb:77:55:13:bd:fb:6e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
        Validity
            Not Before: Jan 25 23:00:32 2026 GMT
            Not After : Jan 26 23:00:32 2026 GMT
        Subject: CN=9e2693adab525dd0fbb383665d72a1005fcd7255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:1b:68:ec:f9:7f:14:20:ae:64:ea:8c:0d:
                    67:2e:45:26:cf:87:2b:02:94:d4:55:57:c3:7f:bc:
                    bb:a4:da:b1:24:6a:e2:c2:d1:f3:2a:80:3e:b4:c5:
                    b6:d3:28:48:86:c4:92:57:a2:a7:65:f7:3d:3e:0e:
                    ff:a9:2f:c9:3e:dd:b0:bb:ad:7f:31:1e:b9:9e:6b:
                    e6:67:b8:ac:f6:50:13:b6:da:d3:29:2b:4b:b2:0e:
                    ec:e5:1c:ce:65:83:04:ca:e8:d4:b3:2c:17:17:88:
                    53:bd:e9:68:42:c1:90:38:1a:ca:90:f3:4a:68:f1:
                    61:0c:86:17:b6:89:dd:fa:0d:af:8d:56:77:99:09:
                    1c:f8:b3:c9:65:a1:a9:c2:e2:bb:9f:ba:e4:ef:55:
                    20:d6:2b:22:b9:6c:80:29:af:06:5c:7f:43:39:ec:
                    c4:cb:96:32:50:91:73:a5:aa:32:66:e9:69:5a:a6:
                    ce:e9:b9:bb:90:0e:86:91:f9:37:a4:62:01:01:16:
                    c4:08:07:fa:0d:a4:e3:c4:d7:8a:7a:d3:3b:bd:17:
                    27:15:05:46:cf:2e:0c:d6:dd:10:2c:c6:4b:c7:fb:
                    5c:63:15:5b:7c:98:a2:35:2e:53:d7:6f:2b:db:42:
                    96:45:16:57:ec:56:c3:e6:e2:5a:1a:e3:c0:df:57:
                    53:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:26:93:AD:AB:52:5D:D0:FB:B3:83:66:5D:72:A1:00:5F:CD:72:55
            X509v3 Authority Key Identifier:
                keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:41:78:eb:4d:46:ea:57:6c:35:3d:6e:2e:fe:31:1c:71:1d:
         6e:10:ac:3e:29:6e:f8:ce:67:04:bb:e3:20:d0:86:82:41:71:
         7d:88:d5:9d:2b:b9:66:f0:d6:13:87:3c:91:c9:4f:aa:1d:97:
         fa:d7:40:f0:14:49:da:df:46:94:62:a5:d2:8c:e3:05:85:08:
         eb:e5:b2:59:39:a1:a2:53:f6:14:67:77:3c:d9:a5:5e:61:ce:
         59:8f:e2:a7:cf:db:90:80:d3:12:30:03:2f:37:61:94:10:62:
         62:09:04:1d:88:23:91:d4:dd:82:50:b6:0b:9f:bc:6f:f5:b6:
         00:95:d9:32:aa:cf:c9:46:91:64:e5:cd:89:b5:bd:54:b4:97:
         fe:2b:23:89:c2:29:e9:e0:d7:1e:a5:91:d5:52:12:f3:cd:be:
         80:be:90:f5:fb:b9:9d:5f:c9:ab:c4:c6:79:68:13:99:d6:c4:
         99:fd:0b:56:c6:2f:9b:1f:5f:1f:7f:1b:c3:80:71:5c:e3:fb:
         ee:a1:86:12:64:18:4f:53:e0:c4:fc:fe:a2:f1:7d:8b:7f:8d:
         38:75:c1:3e:34:99:bf:d3:be:13:37:3a:60:34:c9:51:ec:f4:
         39:e6:6b:b3:42:6f:43:8d:56:90:86:90:5a:7f:0d:f6:a2:5f:
         a0:c3:3a:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3YzTIeOEvI7t3VRO9+25DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjYwMTI1MjMwMDMyWhcNMjYwMTI2MjMwMDMyWjAzMTEwLwYDVQQD
Eyg5ZTI2OTNhZGFiNTI1ZGQwZmJiMzgzNjY1ZDcyYTEwMDVmY2Q3MjU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+AbaOz5fxQgrmTqjA1nLkUmz4cr
ApTUVVfDf7y7pNqxJGriwtHzKoA+tMW20yhIhsSSV6KnZfc9Pg7/qS/JPt2wu61/
MR65nmvmZ7is9lATttrTKStLsg7s5RzOZYMEyujUsywXF4hTveloQsGQOBrKkPNK
aPFhDIYXtond+g2vjVZ3mQkc+LPJZaGpwuK7n7rk71Ug1isiuWyAKa8GXH9DOezE
y5YyUJFzpaoyZulpWqbO6bm7kA6Gkfk3pGIBARbECAf6DaTjxNeKetM7vRcnFQVG
zy4M1t0QLMZLx/tcYxVbfJiiNS5T128r20KWRRZX7FbD5uJaGuPA31dTewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ4mk62rUl3Q+7ODZl1yoQBfzXJVMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJUF4601G
6ldsNT1uLv4xHHEdbhCsPilu+M5nBLvjINCGgkFxfYjVnSu5ZvDWE4c8kclPqh2X
+tdA8BRJ2t9GlGKl0ozjBYUI6+WyWTmholP2FGd3PNmlXmHOWY/ip8/bkIDTEjAD
LzdhlBBiYgkEHYgjkdTdglC2C5+8b/W2AJXZMqrPyUaRZOXNibW9VLSX/isjicIp
6eDXHqWR1VIS882+gL6Q9fu5nV/Jq8TGeWgTmdbEmf0LVsYvmx9fH38bw4BxXOP7
7qGGEmQYT1PgxPz+ovF9i3+NOHXBPjSZv9O+Ezc6YDTJUez0OeZrs0JvQ41WkIaQ
Wn8N9qJfoMM6qw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:14:39 2026 by rpki-client