This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File:                     4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier:          6NH0AkLm1KynPf72jgg7oXtHDzwqo1JmbGBLqpeA/Xo=
Subject key identifier:   57:F3:00:49:72:5F:4E:5E:38:2C:8A:99:1A:84:4D:E4:C7:36:6B:56
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer:       /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial:       019BF951C775D463CD0E47D14A47B05920FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number:          131D
Signing time:             Mon 26 Jan 2026 08:00:44 +0000
Manifest this update:     Mon 26 Jan 2026 08:00:44 +0000
Manifest next update:     Tue 27 Jan 2026 08:00:44 +0000
Files and hashes:         1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: nua/Kc7u4mAtNlSr8c/5fhS7jaONjeKyTvTnRho//Bk=)
                          2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
                          3: ObqCC5ItaIb9zSaMr1gSLuQWW7g.roa (hash: z8qeiKJfszyHlpziW66XElBOILDVztPeTixCMaYCXnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:51:c7:75:d4:63:cd:0e:47:d1:4a:47:b0:59:20:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
        Validity
            Not Before: Jan 26 08:00:44 2026 GMT
            Not After : Jan 27 08:00:44 2026 GMT
        Subject: CN=57f30049725f4e5e382c8a991a844de4c7366b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:54:75:06:42:cd:f9:e0:aa:ba:bd:9b:1f:
                    bd:9c:88:92:62:fb:e6:d9:e5:7d:7a:46:e3:4d:f5:
                    7c:d0:f3:2c:a4:76:d5:3f:ad:5c:29:74:e0:ae:05:
                    e9:68:75:ad:6e:92:39:c3:86:93:73:89:c7:f6:01:
                    ed:3f:8a:51:98:b3:15:94:e4:29:ec:e3:f9:8a:a1:
                    92:ba:17:2e:91:92:6a:47:3c:0e:66:7e:1f:7d:eb:
                    45:37:76:10:23:fd:5f:6e:0f:2f:d5:32:ab:2d:34:
                    92:3b:6d:57:3b:b9:7c:c5:6c:94:d6:29:15:37:b6:
                    25:99:0b:d2:bc:8b:a0:05:ec:04:7a:9f:ad:64:b2:
                    5b:f5:65:66:48:89:54:db:42:c1:7b:1f:c9:a6:49:
                    2c:b5:3f:c2:5d:5c:87:1e:01:dd:69:d1:f7:15:96:
                    bb:d5:8c:08:5e:b0:ed:69:81:cc:8c:9a:52:14:b7:
                    3f:3e:b1:ad:a2:60:b3:78:a5:36:54:24:bf:7e:b7:
                    8a:15:07:54:11:8e:c7:0f:c2:b9:ff:29:ae:3f:26:
                    13:cb:7f:1e:9d:75:e7:b6:33:96:a4:48:ee:91:f6:
                    94:84:0e:d2:86:0a:64:1e:a3:3b:8d:bc:e9:6b:34:
                    ab:6e:e8:43:38:bb:0c:84:57:88:f4:5a:c3:cb:f5:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F3:00:49:72:5F:4E:5E:38:2C:8A:99:1A:84:4D:E4:C7:36:6B:56
            X509v3 Authority Key Identifier:
                keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:9a:c0:dc:0d:ab:39:45:2f:b0:7d:08:13:ae:60:3b:6d:
         fe:7c:97:ee:34:6a:c9:c6:c2:24:a3:ce:76:80:93:76:d5:69:
         21:27:bb:7f:b9:4a:d0:4e:56:ad:62:6f:ba:b0:c6:22:f4:bf:
         f9:8e:b1:09:94:f2:8f:35:cf:f2:4e:94:07:6c:89:d7:20:98:
         75:0d:73:27:ec:f0:8e:92:fa:07:03:be:fa:24:04:71:4b:73:
         3e:cc:7c:6c:5a:ca:a8:11:cb:04:9e:47:0e:a1:c2:bc:8a:11:
         f3:b2:85:9e:02:6f:d7:01:dd:b5:e9:58:5e:1b:2f:f9:fc:f1:
         16:68:96:7e:fe:74:ac:d7:80:d0:21:8d:8b:bd:1c:cb:b2:cf:
         e0:e1:83:cb:6c:f8:44:b8:ef:6e:04:5a:d2:ec:0f:e1:b9:63:
         e8:92:fd:ee:0a:3f:1e:04:d8:b0:f8:9f:62:ab:83:ac:cc:cd:
         16:c2:fd:2f:5a:6e:c4:25:5d:9c:9e:68:8e:3a:37:16:04:47:
         14:d1:25:13:14:10:1a:62:6f:09:5c:c6:1c:e6:3c:fd:34:40:
         71:b2:03:88:4e:7d:35:6c:1e:85:12:72:71:0b:57:ce:2b:27:
         4a:19:66:43:5a:4a:fd:75:f6:62:cb:c8:23:76:ae:d1:c6:f8:
         fd:49:bd:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5Ucd11GPNDkfRSkewWSD8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWRiMGM1YjJkOTYxMGVmNTg2ZTk3ZmJhMWZjYTg3NTAw
NmYzZGEwHhcNMjYwMTI2MDgwMDQ0WhcNMjYwMTI3MDgwMDQ0WjAzMTEwLwYDVQQD
Eyg1N2YzMDA0OTcyNWY0ZTVlMzgyYzhhOTkxYTg0NGRlNGM3MzY2YjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqctUdQZCzfngqrq9mx+9nIiSYvvm
2eV9ekbjTfV80PMspHbVP61cKXTgrgXpaHWtbpI5w4aTc4nH9gHtP4pRmLMVlOQp
7OP5iqGSuhcukZJqRzwOZn4ffetFN3YQI/1fbg8v1TKrLTSSO21XO7l8xWyU1ikV
N7YlmQvSvIugBewEep+tZLJb9WVmSIlU20LBex/JpkkstT/CXVyHHgHdadH3FZa7
1YwIXrDtaYHMjJpSFLc/PrGtomCzeKU2VCS/freKFQdUEY7HD8K5/ymuPyYTy38e
nXXntjOWpEjukfaUhA7ShgpkHqM7jbzpazSrbuhDOLsMhFeI9FrDy/XtXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfzAElyX05eOCyKmRqETeTHNmtWMB8GA1UdIwQY
MBaAFOGdsMWy2WEO9Ybpf7ofyodQBvPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQt
MGNmNzRiZTMwM2ZmLzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC82Yjc4YTUtNGM1Yy00MzgzLTg3ZmQtMGNmNzRiZTMwM2Zm
LzEvNFoyd3hiTFpZUTcxaHVsX3VoX0toMUFHODlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAehiawNwN
qzlFL7B9CBOuYDtt/nyX7jRqycbCJKPOdoCTdtVpISe7f7lK0E5WrWJvurDGIvS/
+Y6xCZTyjzXP8k6UB2yJ1yCYdQ1zJ+zwjpL6BwO++iQEcUtzPsx8bFrKqBHLBJ5H
DqHCvIoR87KFngJv1wHdtelYXhsv+fzxFmiWfv50rNeA0CGNi70cy7LP4OGDy2z4
RLjvbgRa0uwP4blj6JL97go/HgTYsPifYquDrMzNFsL9L1puxCVdnJ5ojjo3FgRH
FNElExQQGmJvCVzGHOY8/TRAcbIDiE59NWwehRJycQtXzisnShlmQ1pK/XX2YsvI
I3au0cb4/Um9CQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:16 2026 by rpki-client