This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File:                     rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier:          LV9o0vJUNjkULkJbOakhH6jFzXc7Qt8VqjqS+Fjqtm8=
Subject key identifier:   2F:60:89:99:A7:0A:42:B9:D5:76:9E:F9:81:23:4A:B3:EA:F4:43:2E
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       019BF350475C4A16D1EEF49F775525B95356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number:          1801
Signing time:             Sun 25 Jan 2026 04:01:23 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:23 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:23 +0000
Files and hashes:         1: 6GLB9mtHtQ9igAugr-nU-NnOL5I.roa (hash: v+rAB5v9d/a3phjEOAxXcev6bMkZhENGNBYWynOBKZs=)
                          2: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
                          3: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
                          4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
                          5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
                          6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
                          7: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: i7KsvWlx4MWhz4O4d6UXDTCT78+g2WXBlgXs8xg5rhQ=)
                          8: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
                          9: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:47:5c:4a:16:d1:ee:f4:9f:77:55:25:b9:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Jan 25 04:01:23 2026 GMT
            Not After : Jan 26 04:01:23 2026 GMT
        Subject: CN=2f608999a70a42b9d5769ef981234ab3eaf4432e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:5f:2d:2c:de:79:ae:19:a8:ad:d8:64:95:
                    8f:4a:48:04:3e:dd:7f:2b:63:c6:54:c9:0c:31:a1:
                    28:4a:c2:35:a7:42:eb:5b:34:ac:5f:5b:bc:19:cf:
                    ce:3a:e3:11:26:70:c9:0d:d6:3b:41:18:95:f9:bc:
                    f4:72:73:fa:71:11:bf:0c:94:cf:e2:f9:70:aa:b1:
                    96:84:fd:f6:81:4d:c3:2c:45:a3:08:07:e3:6c:4e:
                    71:8d:a5:d4:2c:60:dc:6f:48:fd:9c:32:7a:70:d8:
                    82:13:7e:20:4a:fb:e7:57:e6:4a:59:74:e6:07:81:
                    b9:1a:a2:f7:a3:39:04:ed:51:24:2c:43:45:9a:88:
                    f2:3e:a8:8e:47:55:22:5f:1f:05:05:df:6e:d0:7e:
                    8a:e2:34:a7:29:50:84:81:4d:38:ea:94:86:f7:eb:
                    3e:ff:a4:dd:e5:e5:90:65:ca:a4:8b:77:69:5c:24:
                    b5:bb:c0:05:53:fd:5e:8d:a6:2d:2c:7c:6c:f1:e3:
                    10:74:8b:62:e4:32:e2:0e:74:4b:e0:3e:85:fa:89:
                    bc:95:b0:db:8d:30:f3:7b:45:c9:5f:37:c8:ef:de:
                    fd:ba:ab:bf:3d:31:f0:16:f5:0c:f3:c3:ee:87:b3:
                    b5:1d:5e:65:be:4c:9f:b8:ec:a8:a1:14:e0:d5:20:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:60:89:99:A7:0A:42:B9:D5:76:9E:F9:81:23:4A:B3:EA:F4:43:2E
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:b8:ad:43:f3:17:c5:71:90:2c:dd:ed:b4:40:c1:28:1f:3a:
         52:70:ee:53:2e:d9:db:91:77:aa:e5:4c:40:64:04:28:46:82:
         33:91:73:2e:ca:cf:4b:f7:b0:a5:24:fe:1a:1b:70:df:bc:c5:
         1f:db:70:02:90:e4:2b:06:e4:39:ae:68:33:9c:df:5d:e3:fe:
         4b:c2:36:37:6a:67:36:0e:49:8f:8a:e8:c2:f9:a7:71:20:02:
         8d:d0:ff:57:33:2b:7b:59:bf:43:19:86:2e:e6:81:60:29:35:
         21:d5:43:59:e5:f8:78:53:57:98:67:30:6a:68:f5:aa:7a:b2:
         63:dd:30:ed:3c:22:f7:0e:8f:1e:3f:db:cd:87:ad:d1:30:fe:
         22:48:8f:82:ff:8f:1d:f5:21:4c:0c:81:f8:59:7c:dd:71:43:
         f7:58:cb:d9:eb:46:06:11:1a:ac:ac:84:ea:26:2c:c6:47:e6:
         78:3d:34:57:71:9a:9e:4f:66:6d:eb:a5:1c:c5:9e:bc:da:64:
         92:2c:d8:80:8b:32:5a:42:ad:9a:81:79:00:c9:35:73:70:22:
         d9:05:b6:cf:12:f5:ea:cb:48:08:af:0b:58:d8:73:f0:a1:64:
         69:99:9c:c8:36:7c:0f:e6:1d:2f:ec:35:c0:48:cc:8c:b2:9a:
         d1:69:ca:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUEdcShbR7vSfd1UluVNWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3
ODZlZjUwHhcNMjYwMTI1MDQwMTIzWhcNMjYwMTI2MDQwMTIzWjAzMTEwLwYDVQQD
EygyZjYwODk5OWE3MGE0MmI5ZDU3NjllZjk4MTIzNGFiM2VhZjQ0MzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJBfLSzeea4ZqK3YZJWPSkgEPt1/
K2PGVMkMMaEoSsI1p0LrWzSsX1u8Gc/OOuMRJnDJDdY7QRiV+bz0cnP6cRG/DJTP
4vlwqrGWhP32gU3DLEWjCAfjbE5xjaXULGDcb0j9nDJ6cNiCE34gSvvnV+ZKWXTm
B4G5GqL3ozkE7VEkLENFmojyPqiOR1UiXx8FBd9u0H6K4jSnKVCEgU046pSG9+s+
/6Td5eWQZcqki3dpXCS1u8AFU/1ejaYtLHxs8eMQdIti5DLiDnRL4D6F+om8lbDb
jTDze0XJXzfI7979uqu/PTHwFvUM88Puh7O1HV5lvkyfuOyooRTg1SDe4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9giZmnCkK51Xae+YEjSrPq9EMuMB8GA1UdIwQY
MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It
NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2
LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANbitQ/MX
xXGQLN3ttEDBKB86UnDuUy7Z25F3quVMQGQEKEaCM5FzLsrPS/ewpST+Ghtw37zF
H9twApDkKwbkOa5oM5zfXeP+S8I2N2pnNg5Jj4rowvmncSACjdD/VzMre1m/QxmG
LuaBYCk1IdVDWeX4eFNXmGcwamj1qnqyY90w7Twi9w6PHj/bzYet0TD+IkiPgv+P
HfUhTAyB+Fl83XFD91jL2etGBhEarKyE6iYsxkfmeD00V3Gank9mbeulHMWevNpk
kizYgIsyWkKtmoF5AMk1c3Ai2QW2zxL16stICK8LWNhz8KFkaZmcyDZ8D+YdL+w1
wEjMjLKa0WnKJA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:05 2026 by rpki-client