This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File:                     urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier:          3LEHmwk5qv13nL4hJd456Jwl7XsDbwGfAXjnFHICGUM=
Subject key identifier:   AA:90:52:ED:8E:0A:D7:09:DC:A3:28:DD:6A:88:75:90:0C:54:D9:C6
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer:       /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial:       019BF46315C8AFF2327FDB697525A1F4AE09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 09:01:32 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:32 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:32 +0000
Files and hashes:         1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
                          2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
                          3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: u32km63dTMOu3vz7l5cjtQ+MQyHk2txidtyITjt9XU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:63:15:c8:af:f2:32:7f:db:69:75:25:a1:f4:ae:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
        Validity
            Not Before: Jan 25 09:01:32 2026 GMT
            Not After : Jan 26 09:01:32 2026 GMT
        Subject: CN=aa9052ed8e0ad709dca328dd6a8875900c54d9c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1d:5e:cb:83:d1:3d:87:0b:42:a9:91:c3:16:
                    4b:19:80:8a:4b:48:f6:50:ae:79:15:b5:65:28:60:
                    da:e2:fc:33:35:ed:4d:a3:89:19:83:c7:3a:03:ea:
                    19:5e:94:ef:cd:9c:63:04:29:cf:f9:e2:d5:61:b8:
                    5f:c6:02:e3:f5:fb:6b:d6:dd:00:f9:7d:c1:eb:73:
                    f0:13:59:24:60:6e:4c:aa:12:54:4b:7b:7d:07:dc:
                    15:76:29:5c:f8:a6:73:ac:51:93:b0:65:c9:ea:e7:
                    34:61:87:8e:99:e5:7e:54:89:e1:9c:c4:9b:c5:ce:
                    1e:ca:9b:98:c1:c6:b4:1d:e7:30:3d:af:dd:81:86:
                    04:85:e2:a6:86:08:60:99:eb:83:8a:59:04:87:04:
                    e0:5c:d7:6b:5f:68:b5:fa:85:d0:a5:cd:9b:fc:02:
                    15:fa:ea:b9:9a:f1:b9:c3:59:2f:79:08:0a:dc:b0:
                    7b:1b:78:19:f7:c3:b7:32:67:eb:79:c2:90:1f:93:
                    24:b4:cc:3e:93:e2:40:05:e9:f7:2f:5b:ea:bd:87:
                    da:df:9b:c6:54:c5:76:93:82:a9:39:07:97:de:3f:
                    16:17:36:f2:ae:76:ba:fa:e7:a4:66:4d:72:04:25:
                    bf:66:e9:36:2f:ce:cf:80:8e:77:ba:e5:fe:2e:be:
                    6d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:90:52:ED:8E:0A:D7:09:DC:A3:28:DD:6A:88:75:90:0C:54:D9:C6
            X509v3 Authority Key Identifier:
                keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cb:aa:35:9f:c9:44:fe:6e:d2:6f:8d:ea:12:34:89:c6:73:
         8c:1e:cf:6c:0d:da:b0:66:30:3c:98:d9:9c:4d:54:68:b9:01:
         71:0f:24:cb:e7:a0:7b:a2:99:ad:fa:da:a6:54:d9:e8:2a:7f:
         18:9c:8f:00:2a:1a:46:85:4c:5c:0f:f7:11:07:24:7b:62:c6:
         10:e1:03:81:81:cc:a2:68:09:f8:39:ae:03:f7:b6:36:a8:b6:
         15:b1:ca:bb:e8:59:9a:89:be:e2:cc:d7:f0:14:2a:24:0d:55:
         b6:79:86:f9:d9:b3:e3:89:02:fe:c6:f5:f8:c0:26:05:ac:3a:
         3b:9e:8c:99:c3:18:e4:73:42:12:37:ae:d1:59:fa:57:f9:ea:
         99:42:af:08:38:b8:bd:e8:ad:f4:14:e6:14:4f:72:b3:53:a1:
         fc:fc:f8:60:f4:72:b9:09:99:df:18:9e:fe:ff:13:37:cf:45:
         95:9b:74:c4:2e:87:b8:0a:f5:ec:ad:c6:90:51:3b:e9:05:8b:
         25:79:72:fb:ee:e5:c9:44:b6:3f:b9:c8:f4:40:f4:07:84:46:
         df:6c:54:0e:fb:05:90:cf:e8:05:3e:da:e3:3a:54:4f:72:fc:
         e8:62:07:b5:9c:1b:15:de:15:51:94:07:82:b1:d5:2c:79:59:
         c9:f0:1f:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0YxXIr/Iyf9tpdSWh9K4JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjIzMmMxZDcyZGMxY2FiYmRhMTZjODcwZWM5NDFkNDU4
YTlmZGMwHhcNMjYwMTI1MDkwMTMyWhcNMjYwMTI2MDkwMTMyWjAzMTEwLwYDVQQD
EyhhYTkwNTJlZDhlMGFkNzA5ZGNhMzI4ZGQ2YTg4NzU5MDBjNTRkOWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh1ey4PRPYcLQqmRwxZLGYCKS0j2
UK55FbVlKGDa4vwzNe1No4kZg8c6A+oZXpTvzZxjBCnP+eLVYbhfxgLj9ftr1t0A
+X3B63PwE1kkYG5MqhJUS3t9B9wVdilc+KZzrFGTsGXJ6uc0YYeOmeV+VInhnMSb
xc4eypuYwca0HecwPa/dgYYEheKmhghgmeuDilkEhwTgXNdrX2i1+oXQpc2b/AIV
+uq5mvG5w1kveQgK3LB7G3gZ98O3MmfrecKQH5MktMw+k+JABen3L1vqvYfa35vG
VMV2k4KpOQeX3j8WFzbyrna6+uekZk1yBCW/Zuk2L87PgI53uuX+Lr5tHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqQUu2OCtcJ3KMo3WqIdZAMVNnGMB8GA1UdIwQY
MBaAFLqyMsHXLcHKu9oWyHDslB1Fip/cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAt
N2QzZWZiNGE2YTdmLzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83OTU3NzQtZmI5ZS00MTNmLTlmNzAtN2QzZWZiNGE2YTdm
LzEvdXJJeXdkY3R3Y3E3MmhiSWNPeVVIVVdLbjl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMuqNZ/J
RP5u0m+N6hI0icZzjB7PbA3asGYwPJjZnE1UaLkBcQ8ky+ege6KZrfraplTZ6Cp/
GJyPACoaRoVMXA/3EQcke2LGEOEDgYHMomgJ+DmuA/e2Nqi2FbHKu+hZmom+4szX
8BQqJA1VtnmG+dmz44kC/sb1+MAmBaw6O56MmcMY5HNCEjeu0Vn6V/nqmUKvCDi4
veit9BTmFE9ys1Oh/Pz4YPRyuQmZ3xie/v8TN89FlZt0xC6HuAr17K3GkFE76QWL
JXly++7lyUS2P7nI9ED0B4RG32xUDvsFkM/oBT7a4zpUT3L86GIHtZwbFd4VUZQH
grHVLHlZyfAfkw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:31:48 2026 by rpki-client