This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
File:                     rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft (raw, json)
Hash identifier:          lmTsH5Nsk7LKwFWxG/V/Pm+l9SUeSUyYqxV6VtgqlZc=
Subject key identifier:   51:1E:99:D3:E8:1D:EC:47:ED:58:3B:A4:05:33:13:1E:C7:DD:3D:40
Authority key identifier: AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2
Certificate issuer:       /CN=ad9681f144db1430ac315c8306e1c14730c5fec2
Certificate serial:       019BF5E342DB3FA394597A5D9788C75BA568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
Manifest number:          14BC
Signing time:             Sun 25 Jan 2026 16:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:10 +0000
Files and hashes:         1: 4QHBn9ucdlKQY-OkJvc7Ig6NIBo.roa (hash: 7wIOmcrsKNPm1pT+25Dr7MjY3mEMyojJiBNkSyV1lM0=)
                          2: Hz2CwE5wcYXTB8FSwWDK5Rt2kgM.roa (hash: IDDqSWOczA2q2urCjohT5PUeAUF0bht4zqH2G2v0ftg=)
                          3: KSdM6O1FKkRc_JqGqlUg5PGDzE4.roa (hash: l71hLYxyaBfjnzVG3OAC3KkLtPDUSTDHWl+YWeICYgs=)
                          4: Zrny0yg3TVa-9PfRlD4jNDdwvaQ.roa (hash: KV55zi4mSfveBw4rPTBhd4Q9yfOZ75ZlhzyzEJkhajg=)
                          5: rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl (hash: fIoNVvXnkHdKV7KzijCY+B6Uq8Du3t+SynbEAADAmWs=)
                          6: tbYt_1HgZu11ZUlS_9RFIWiny-Q.roa (hash: 0H367OeDFx32BeCSB2rFjNElX2FtZo0+OiydPHLocnQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:42:db:3f:a3:94:59:7a:5d:97:88:c7:5b:a5:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad9681f144db1430ac315c8306e1c14730c5fec2
        Validity
            Not Before: Jan 25 16:01:10 2026 GMT
            Not After : Jan 26 16:01:10 2026 GMT
        Subject: CN=511e99d3e81dec47ed583ba40533131ec7dd3d40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:04:f7:6f:12:7d:d5:3c:03:20:8e:aa:8c:da:
                    ba:00:fc:84:cb:0e:f4:4c:90:5b:56:d5:7d:43:97:
                    6f:23:38:0e:3c:91:1f:48:84:5d:33:34:62:c0:5e:
                    7f:50:45:23:7c:23:c3:5e:f5:d6:d1:04:5d:62:34:
                    c5:40:4d:a2:e1:09:90:3f:f3:fb:f1:6d:99:74:c3:
                    c3:da:69:17:7c:19:01:39:99:67:18:96:7f:89:a4:
                    53:53:c4:5e:ca:f2:13:e7:6c:6f:36:8c:21:8f:f7:
                    98:2d:bd:60:53:2b:c8:6c:37:cb:f3:cf:88:0f:97:
                    4e:40:e3:d4:bf:be:f2:ac:3c:8b:d4:9e:df:f4:d8:
                    d1:38:f8:6e:0b:86:81:d9:25:5f:d9:a3:48:f1:f1:
                    29:df:f0:a4:67:7f:be:eb:4d:46:de:37:4f:4e:28:
                    1a:c2:3a:00:af:a7:35:8f:13:86:d9:b4:7a:60:c3:
                    bf:32:d9:d4:24:99:8e:cb:c2:ca:f2:43:47:03:e3:
                    35:61:43:f9:ce:4c:0d:32:80:f1:67:4c:a7:db:76:
                    2b:47:bb:59:ae:cc:e7:dc:21:9b:4e:ac:3b:e3:79:
                    b4:c9:5d:75:fb:9a:4e:b7:ea:99:c5:6e:9e:8f:b1:
                    74:52:5f:e1:79:e1:25:0e:c3:59:72:0d:b3:1f:2b:
                    6f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:1E:99:D3:E8:1D:EC:47:ED:58:3B:A4:05:33:13:1E:C7:DD:3D:40
            X509v3 Authority Key Identifier:
                keyid:AD:96:81:F1:44:DB:14:30:AC:31:5C:83:06:E1:C1:47:30:C5:FE:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZaB8UTbFDCsMVyDBuHBRzDF_sI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/405b5f-8d26-4ee3-b87f-a3a13e3a7d80/1/rZaB8UTbFDCsMVyDBuHBRzDF_sI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4d:51:ad:e8:31:7a:06:3a:54:1e:72:cc:a5:2e:a5:a3:0b:
         15:2e:62:4a:96:c8:4c:4d:fa:36:20:e3:92:e3:73:be:2b:fb:
         e9:4d:10:3a:7d:45:35:9b:58:bf:26:eb:b3:c6:e3:77:37:53:
         d0:c5:18:71:20:f9:d5:21:58:ee:61:fb:b7:d8:73:f1:45:ab:
         5d:cc:d3:77:da:cc:21:32:6a:f9:01:30:aa:fc:4b:d7:8b:05:
         a1:ec:d9:c9:78:d7:7c:55:db:7f:c8:b6:ad:df:5a:7d:eb:7f:
         ef:09:c1:b9:cb:27:14:30:3f:39:5f:2f:74:07:01:49:75:97:
         41:47:a9:c5:65:12:45:ff:94:90:3b:c2:f8:00:58:3a:b8:96:
         6e:80:9e:54:cf:b2:59:3a:a3:54:ce:7d:7f:45:1a:b8:9d:a0:
         0b:29:b4:ff:a5:37:ea:07:98:2a:db:df:47:d3:a0:a2:0f:16:
         54:c0:2e:fd:e5:9c:73:b2:97:ed:64:9d:0f:f6:36:5e:66:ab:
         29:13:45:3b:6e:5f:12:58:8c:64:fe:d7:23:cc:58:12:8c:1c:
         89:bc:3f:45:51:c4:7e:40:3b:bb:44:8b:75:ae:e4:03:41:a5:
         48:3d:a6:17:6d:dc:7d:68:b9:6d:4a:73:2c:ee:26:9c:21:5f:
         22:15:7f:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv140LbP6OUWXpdl4jHW6VoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkOTY4MWYxNDRkYjE0MzBhYzMxNWM4MzA2ZTFjMTQ3MzBj
NWZlYzIwHhcNMjYwMTI1MTYwMTEwWhcNMjYwMTI2MTYwMTEwWjAzMTEwLwYDVQQD
Eyg1MTFlOTlkM2U4MWRlYzQ3ZWQ1ODNiYTQwNTMzMTMxZWM3ZGQzZDQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAT3bxJ91TwDII6qjNq6APyEyw70
TJBbVtV9Q5dvIzgOPJEfSIRdMzRiwF5/UEUjfCPDXvXW0QRdYjTFQE2i4QmQP/P7
8W2ZdMPD2mkXfBkBOZlnGJZ/iaRTU8ReyvIT52xvNowhj/eYLb1gUyvIbDfL88+I
D5dOQOPUv77yrDyL1J7f9NjROPhuC4aB2SVf2aNI8fEp3/CkZ3++601G3jdPTiga
wjoAr6c1jxOG2bR6YMO/MtnUJJmOy8LK8kNHA+M1YUP5zkwNMoDxZ0yn23YrR7tZ
rszn3CGbTqw743m0yV11+5pOt+qZxW6ej7F0Ul/heeElDsNZcg2zHytv4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFEemdPoHexH7Vg7pAUzEx7H3T1AMB8GA1UdIwQY
MBaAFK2WgfFE2xQwrDFcgwbhwUcwxf7CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2Yt
YTNhMTNlM2E3ZDgwLzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy80MDViNWYtOGQyNi00ZWUzLWI4N2YtYTNhMTNlM2E3ZDgw
LzEvclphQjhVVGJGRENzTVZ5REJ1SEJSekRGX3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR01Rregx
egY6VB5yzKUupaMLFS5iSpbITE36NiDjkuNzviv76U0QOn1FNZtYvybrs8bjdzdT
0MUYcSD51SFY7mH7t9hz8UWrXczTd9rMITJq+QEwqvxL14sFoezZyXjXfFXbf8i2
rd9afet/7wnBucsnFDA/OV8vdAcBSXWXQUepxWUSRf+UkDvC+ABYOriWboCeVM+y
WTqjVM59f0UauJ2gCym0/6U36geYKtvfR9Ogog8WVMAu/eWcc7KX7WSdD/Y2Xmar
KRNFO25fEliMZP7XI8xYEowcibw/RVHEfkA7u0SLda7kA0GlSD2mF23cfWi5bUpz
LO4mnCFfIhV/TA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:08:37 2026 by rpki-client