This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          uegQOyvZPLBAR2Xg08qjZtcacMxxidDyUwc378wwWow=
Subject key identifier:   8D:3F:00:E3:5F:B5:D4:45:F1:A7:0F:4A:4F:8E:D2:FE:98:67:BB:F8
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019BF5754778987BADDDBEE803E2FE8101DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          17FC
Signing time:             Sun 25 Jan 2026 14:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:02 +0000
Files and hashes:         1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
                          2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
                          3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
                          4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: +rI1UwVQf8yQObhE/F9TZFA5qgdbiW+8+tdmmFLwGWQ=)
                          5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
                          6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
                          7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:47:78:98:7b:ad:dd:be:e8:03:e2:fe:81:01:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Jan 25 14:01:02 2026 GMT
            Not After : Jan 26 14:01:02 2026 GMT
        Subject: CN=8d3f00e35fb5d445f1a70f4a4f8ed2fe9867bbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ac:d5:5f:85:82:b8:7d:a7:4f:eb:e0:eb:6f:
                    0d:8e:8b:c7:15:ac:15:c6:e9:20:7b:de:c0:0b:72:
                    1c:61:87:fe:4e:9d:42:91:7a:ab:d7:3f:87:27:ec:
                    ee:e9:89:68:b6:e2:aa:e5:2b:b8:da:ed:56:cf:2f:
                    42:63:11:3d:cd:69:9f:b0:cc:5e:83:d2:49:eb:8e:
                    ff:bb:48:79:26:b2:d2:ca:41:dc:55:bd:b0:05:82:
                    cd:43:eb:3c:77:9c:e4:27:1f:71:89:71:5e:b5:be:
                    18:46:be:40:6e:e5:93:61:4c:b1:23:d0:b9:39:18:
                    ea:65:8e:b1:46:87:70:c9:34:cb:b9:7c:3b:ee:e0:
                    7c:36:a5:de:d3:c8:7c:6f:b7:c8:55:e4:e5:d4:f1:
                    4a:87:a1:b0:00:2e:f0:5c:fc:fa:fd:52:a6:1a:cb:
                    05:76:ec:4e:22:40:43:3f:80:13:e2:dc:c4:9e:e4:
                    ed:a6:cf:a3:24:2b:c2:f6:d3:8f:30:b7:5a:45:9f:
                    22:e3:78:53:0b:4d:16:42:4f:86:67:93:dc:a8:07:
                    5a:92:a0:7b:a9:ef:4d:8d:32:27:cc:5c:02:c0:eb:
                    c1:12:f1:32:b0:fa:9d:e4:80:52:fa:98:84:dc:7f:
                    0c:d5:11:e3:fb:44:b9:9c:1b:59:10:c7:44:d3:78:
                    fc:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:3F:00:E3:5F:B5:D4:45:F1:A7:0F:4A:4F:8E:D2:FE:98:67:BB:F8
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c4:e5:16:f0:68:4d:df:e7:58:0d:19:de:44:11:3f:1f:a0:
         0c:f3:8c:63:cd:91:ab:37:4a:74:b3:3c:36:d0:7b:ac:f4:1f:
         ca:19:5b:01:b5:cd:92:3f:15:04:98:2f:97:6e:10:30:5b:bc:
         46:d3:11:cc:a5:9a:0d:4b:27:9a:d8:63:84:16:73:74:d6:2f:
         be:6c:60:c4:16:79:cf:6d:b0:91:66:a1:83:f9:0f:f2:0e:d4:
         ce:e8:e2:a1:79:e6:12:3b:5c:d9:09:12:95:92:be:23:d7:6b:
         29:d9:9d:25:d7:e2:12:59:32:c5:fd:7d:96:f8:0a:69:3b:67:
         bc:01:31:4e:54:69:ea:6f:55:3f:b5:31:cc:bc:fb:e4:2d:47:
         a0:f7:a9:fd:19:a2:51:ee:1f:c0:ef:10:00:c6:66:65:e8:9b:
         55:2a:8f:e3:6b:76:9c:98:11:53:87:f1:71:7c:14:18:79:8f:
         95:65:15:20:5c:74:ae:4d:09:6f:6b:f4:78:11:8b:5b:85:de:
         0e:aa:5b:8f:25:48:c6:63:e5:6e:f8:2e:80:3e:4d:db:07:69:
         06:84:87:b8:f8:c9:d3:02:9b:c6:04:8f:97:8b:d3:84:0b:cd:
         73:24:48:11:f0:b5:69:c6:a7:35:5d:0d:7e:36:b6:0f:8b:80:
         0c:7e:1c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dUd4mHut3b7oA+L+gQHfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjYwMTI1MTQwMTAyWhcNMjYwMTI2MTQwMTAyWjAzMTEwLwYDVQQD
Eyg4ZDNmMDBlMzVmYjVkNDQ1ZjFhNzBmNGE0ZjhlZDJmZTk4NjdiYmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmazVX4WCuH2nT+vg628NjovHFawV
xukge97AC3IcYYf+Tp1CkXqr1z+HJ+zu6YlotuKq5Su42u1Wzy9CYxE9zWmfsMxe
g9JJ647/u0h5JrLSykHcVb2wBYLNQ+s8d5zkJx9xiXFetb4YRr5AbuWTYUyxI9C5
ORjqZY6xRodwyTTLuXw77uB8NqXe08h8b7fIVeTl1PFKh6GwAC7wXPz6/VKmGssF
duxOIkBDP4AT4tzEnuTtps+jJCvC9tOPMLdaRZ8i43hTC00WQk+GZ5PcqAdakqB7
qe9NjTInzFwCwOvBEvEysPqd5IBS+piE3H8M1RHj+0S5nBtZEMdE03j88wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0/AONftdRF8acPSk+O0v6YZ7v4MB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8TlFvBo
Td/nWA0Z3kQRPx+gDPOMY82RqzdKdLM8NtB7rPQfyhlbAbXNkj8VBJgvl24QMFu8
RtMRzKWaDUsnmthjhBZzdNYvvmxgxBZ5z22wkWahg/kP8g7UzujioXnmEjtc2QkS
lZK+I9drKdmdJdfiElkyxf19lvgKaTtnvAExTlRp6m9VP7UxzLz75C1HoPep/Rmi
Ue4fwO8QAMZmZeibVSqP42t2nJgRU4fxcXwUGHmPlWUVIFx0rk0Jb2v0eBGLW4Xe
DqpbjyVIxmPlbvgugD5N2wdpBoSHuPjJ0wKbxgSPl4vThAvNcyRIEfC1acanNV0N
fja2D4uADH4cQA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:08 2026 by rpki-client