This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
File:                     XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft (raw, json)
Hash identifier:          OhFM4wI5E3lr6nu2NNA6UCKFOg4cN0fSof1sdMT/X8M=
Subject key identifier:   FC:90:2C:76:DC:15:AC:39:B5:51:47:B8:9A:6F:52:CF:42:7C:69:ED
Authority key identifier: 5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F
Certificate issuer:       /CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
Certificate serial:       019BF3505F7F5EA92ED357D7B1BA7CFD5451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 04:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:29 +0000
Files and hashes:         1: B1Zr1yVrX6nGN-n-2veSg5lY90c.roa (hash: /ekoG7YdexMqrOET1yFg/w4l6gLiAl2o840WfcRTqPg=)
                          2: XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl (hash: qXcb2P9tP6LeKeow18o9UHoA30vEmYU0LgIPRTGDXFI=)
                          3: yz4yGl1g1ZXuKdw5owwVJMviKuk.roa (hash: Sc/QeL6Zcy7WtO4lELE9453BMXinD0KNoVI3MxmHoCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:5f:7f:5e:a9:2e:d3:57:d7:b1:ba:7c:fd:54:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c57c8f8d9ee5e2ce7043e1ec26bb1693f7f121f
        Validity
            Not Before: Jan 25 04:01:29 2026 GMT
            Not After : Jan 26 04:01:29 2026 GMT
        Subject: CN=fc902c76dc15ac39b55147b89a6f52cf427c69ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:84:d4:13:f4:c5:05:64:3c:ff:6c:c3:a5:15:
                    1d:25:93:48:7c:ac:ae:7f:a2:7d:68:10:1a:ac:a9:
                    f7:60:11:65:2c:df:3c:e3:76:d0:a8:6c:cf:65:f5:
                    c8:ce:0d:0c:d4:db:d0:bd:f9:35:ce:7b:a1:c5:c5:
                    de:c8:a3:47:2d:17:4d:76:55:2d:ad:56:cf:97:c5:
                    e3:ca:b6:d7:0c:c8:da:33:b6:37:cc:d1:9e:b7:98:
                    81:28:76:e0:1c:ee:18:2c:dc:99:73:7d:58:17:ec:
                    66:c0:1a:8a:48:1f:10:ff:c4:7f:0a:d3:9f:3e:9d:
                    ec:a7:6e:65:36:9f:4d:1b:23:6f:5c:74:83:57:30:
                    b3:3a:2f:0a:03:c5:ee:19:da:31:31:4d:9a:1f:7f:
                    48:44:90:d1:66:ae:04:e2:2b:0d:45:72:1c:30:53:
                    d9:5c:c7:b8:14:2b:17:42:26:b2:29:14:fb:b9:c6:
                    c1:5a:04:35:ee:57:30:a4:47:61:49:9b:f8:2a:60:
                    cd:c7:d6:b2:fb:33:06:33:a6:5c:4f:7c:b7:e0:52:
                    ba:83:3e:37:70:30:fd:6c:be:86:c6:c6:62:98:e4:
                    ed:26:cb:5a:69:20:a2:f3:82:ae:d4:7f:3e:0e:79:
                    7e:7c:9f:86:fa:ae:7d:d3:73:cd:fa:e2:b4:a8:68:
                    79:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:90:2C:76:DC:15:AC:39:B5:51:47:B8:9A:6F:52:CF:42:7C:69:ED
            X509v3 Authority Key Identifier:
                keyid:5C:57:C8:F8:D9:EE:5E:2C:E7:04:3E:1E:C2:6B:B1:69:3F:7F:12:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFfI-NnuXiznBD4ewmuxaT9_Eh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/29fcb9-305c-406b-a7a4-1f6b2d14f4f9/1/XFfI-NnuXiznBD4ewmuxaT9_Eh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:5f:41:35:53:75:c8:16:cb:c8:5e:42:05:f2:6d:cd:22:43:
         b0:28:51:18:b5:92:b2:64:00:37:6b:71:d2:06:45:41:e1:35:
         4f:91:6a:bc:ed:72:ce:20:d0:c6:04:f9:19:29:07:3f:23:e6:
         11:4c:7e:16:d9:de:98:82:59:3b:ba:0d:b4:ec:ff:5f:c4:9d:
         8f:61:c7:ec:b0:ac:39:6f:2b:f3:b7:de:a0:35:c0:9a:4b:33:
         8e:d0:9e:7a:cc:10:dc:45:1b:bf:5e:73:ad:22:1c:f4:56:96:
         0a:71:ec:6a:2e:82:99:74:51:95:b0:00:eb:0c:9c:b0:7b:f5:
         c1:e6:64:ce:3c:38:8c:51:85:2f:34:cb:f9:d0:ba:af:b3:2a:
         87:b9:23:32:b0:4a:74:b4:2c:58:bd:57:40:0b:bd:38:f5:73:
         8d:1a:73:f5:fc:4e:1e:23:8d:0f:68:2d:78:54:a3:39:e1:aa:
         87:17:e3:32:99:09:4d:bb:1d:c0:66:6a:50:f2:a1:4a:8e:1f:
         fd:b7:75:78:56:47:e0:79:50:f5:fe:51:7d:f2:f8:b5:62:26:
         07:e2:04:78:7d:39:7c:39:98:fc:6a:d5:ad:17:e9:91:1b:bf:
         3a:9b:e6:94:fb:5e:58:b5:ed:bb:ce:45:b7:94:d8:76:e3:35:
         0c:c1:83:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUF9/Xqku01fXsbp8/VRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNTdjOGY4ZDllZTVlMmNlNzA0M2UxZWMyNmJiMTY5M2Y3
ZjEyMWYwHhcNMjYwMTI1MDQwMTI5WhcNMjYwMTI2MDQwMTI5WjAzMTEwLwYDVQQD
EyhmYzkwMmM3NmRjMTVhYzM5YjU1MTQ3Yjg5YTZmNTJjZjQyN2M2OWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54TUE/TFBWQ8/2zDpRUdJZNIfKyu
f6J9aBAarKn3YBFlLN8843bQqGzPZfXIzg0M1NvQvfk1znuhxcXeyKNHLRdNdlUt
rVbPl8XjyrbXDMjaM7Y3zNGet5iBKHbgHO4YLNyZc31YF+xmwBqKSB8Q/8R/CtOf
Pp3sp25lNp9NGyNvXHSDVzCzOi8KA8XuGdoxMU2aH39IRJDRZq4E4isNRXIcMFPZ
XMe4FCsXQiayKRT7ucbBWgQ17lcwpEdhSZv4KmDNx9ay+zMGM6ZcT3y34FK6gz43
cDD9bL6GxsZimOTtJstaaSCi84Ku1H8+Dnl+fJ+G+q5903PN+uK0qGh5GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyQLHbcFaw5tVFHuJpvUs9CfGntMB8GA1UdIwQY
MBaAFFxXyPjZ7l4s5wQ+HsJrsWk/fxIfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQt
MWY2YjJkMTRmNGY5LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8yOWZjYjktMzA1Yy00MDZiLWE3YTQtMWY2YjJkMTRmNGY5
LzEvWEZmSS1ObnVYaXpuQkQ0ZXdtdXhhVDlfRWg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS19BNVN1
yBbLyF5CBfJtzSJDsChRGLWSsmQAN2tx0gZFQeE1T5FqvO1yziDQxgT5GSkHPyPm
EUx+FtnemIJZO7oNtOz/X8Sdj2HH7LCsOW8r87feoDXAmkszjtCeeswQ3EUbv15z
rSIc9FaWCnHsai6CmXRRlbAA6wycsHv1weZkzjw4jFGFLzTL+dC6r7Mqh7kjMrBK
dLQsWL1XQAu9OPVzjRpz9fxOHiOND2gteFSjOeGqhxfjMpkJTbsdwGZqUPKhSo4f
/bd1eFZH4HlQ9f5RffL4tWImB+IEeH05fDmY/GrVrRfpkRu/OpvmlPteWLXtu85F
t5TYduM1DMGDKQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:28 2026 by rpki-client