This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File:                     INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier:          kzq2LAz3ykD5T3ceJRWI65BDAPXKxHxN+1rr62Pz2p0=
Subject key identifier:   97:4B:D7:AE:1B:19:82:D6:20:A0:AC:FA:7A:78:62:DB:9D:DF:96:D4
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer:       /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial:       019BF619C51B9ADF9F303C5847581BA597A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number:          05DD
Signing time:             Sun 25 Jan 2026 17:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:42 +0000
Files and hashes:         1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: X6KTaC+MYz+MgPnkjF6mt49xkE14vlqItEtWtYSm41M=)
                          2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:c5:1b:9a:df:9f:30:3c:58:47:58:1b:a5:97:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
        Validity
            Not Before: Jan 25 17:00:42 2026 GMT
            Not After : Jan 26 17:00:42 2026 GMT
        Subject: CN=974bd7ae1b1982d620a0acfa7a7862db9ddf96d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c7:93:4c:e3:be:5f:e2:41:a8:ac:9f:1a:e7:
                    95:45:11:27:61:0d:8b:94:0f:27:fb:a0:a1:b7:95:
                    f0:fa:22:fa:8b:0b:ea:1e:cb:e6:fb:93:3f:59:e2:
                    72:be:8c:7e:58:09:0f:58:13:7a:fa:b8:93:23:37:
                    c0:6a:cf:b6:d5:e3:df:c0:59:25:ca:3f:c0:c4:03:
                    25:ee:2c:9d:36:36:68:b4:c0:54:63:79:ec:51:b3:
                    74:45:4f:8c:84:01:e5:fc:15:8f:5a:de:bc:2f:f1:
                    98:f1:32:cb:78:b5:6a:72:78:cc:69:ca:10:8c:4e:
                    ed:2a:36:52:11:ad:33:d0:4b:0e:d2:96:0d:11:47:
                    38:36:ab:12:51:4d:f3:0a:2b:9b:a8:49:66:b6:58:
                    32:fc:36:34:b3:04:f6:22:b3:92:ae:27:6b:9c:18:
                    fc:4c:ab:e6:68:2d:09:85:6a:0f:7c:3f:94:55:44:
                    45:84:20:b5:5a:0f:5c:60:9d:f0:b3:0e:a6:9d:63:
                    80:ed:98:40:28:31:ac:f2:c6:2c:d3:11:d7:23:c3:
                    81:be:fa:6a:ea:35:79:56:a0:ee:a7:95:55:16:92:
                    c9:60:ae:01:89:43:47:e9:66:22:31:d4:11:84:59:
                    b7:c6:f2:7f:8f:28:61:c9:50:5b:be:20:90:89:98:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:4B:D7:AE:1B:19:82:D6:20:A0:AC:FA:7A:78:62:DB:9D:DF:96:D4
            X509v3 Authority Key Identifier:
                keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:cf:e8:5a:64:d1:6c:be:f3:66:5f:ee:ad:0c:aa:c4:04:
         d4:24:31:20:bb:4e:65:e8:52:04:bc:1a:cb:22:2a:83:bd:08:
         42:8d:4c:a4:a3:f3:39:1b:98:1b:ec:2f:ba:f9:45:2f:6c:50:
         06:95:b0:6c:de:ea:f5:f7:c1:fb:da:6b:74:7b:ed:b4:a0:fd:
         01:bb:82:16:c0:f3:86:62:b5:ad:a4:84:9e:3d:0a:24:d0:2d:
         2a:f9:f4:d4:33:0c:4d:d3:bd:36:db:d4:bc:f0:be:cd:78:e6:
         b4:bb:f2:3b:a2:bc:1b:b5:ee:40:7b:8d:ad:f7:e9:a6:5a:f3:
         d4:95:3b:58:d9:80:eb:1e:dc:45:2e:f1:39:6f:22:d4:bb:f5:
         cd:73:7c:64:ca:45:7a:ba:57:be:1e:7f:70:53:db:3c:30:46:
         fe:25:74:9f:d9:e4:a7:6b:13:76:20:41:b7:8a:e4:e9:34:bc:
         c3:f2:b1:1d:ca:4a:8d:48:92:48:f6:32:fc:7c:3b:99:71:f5:
         75:82:25:b7:27:81:a7:9c:c4:80:1e:47:c9:34:e6:90:68:32:
         dc:41:fa:02:e8:c8:67:80:4b:37:f6:ee:8e:aa:35:22:67:1e:
         87:70:f1:18:68:2b:cc:04:e0:5f:cc:60:2a:95:8c:fe:9c:57:
         dd:78:88:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2GcUbmt+fMDxYR1gbpZegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDY4MTgzZDYwMThmNTA0YzVlNmZhZTIyOGUxYjM1MGM2
ZjBmZWYwHhcNMjYwMTI1MTcwMDQyWhcNMjYwMTI2MTcwMDQyWjAzMTEwLwYDVQQD
Eyg5NzRiZDdhZTFiMTk4MmQ2MjBhMGFjZmE3YTc4NjJkYjlkZGY5NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvceTTOO+X+JBqKyfGueVRREnYQ2L
lA8n+6Cht5Xw+iL6iwvqHsvm+5M/WeJyvox+WAkPWBN6+riTIzfAas+21ePfwFkl
yj/AxAMl7iydNjZotMBUY3nsUbN0RU+MhAHl/BWPWt68L/GY8TLLeLVqcnjMacoQ
jE7tKjZSEa0z0EsO0pYNEUc4NqsSUU3zCiubqElmtlgy/DY0swT2IrOSridrnBj8
TKvmaC0JhWoPfD+UVURFhCC1Wg9cYJ3wsw6mnWOA7ZhAKDGs8sYs0xHXI8OBvvpq
6jV5VqDup5VVFpLJYK4BiUNH6WYiMdQRhFm3xvJ/jyhhyVBbviCQiZiHowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdL164bGYLWIKCs+np4Ytud35bUMB8GA1UdIwQY
MBaAFCDWgYPWAY9QTF5vriKOGzUMbw/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQt
YWI3ODgxYjBkZjJiLzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQtYWI3ODgxYjBkZjJi
LzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAovzP6Fpk
0Wy+82Zf7q0MqsQE1CQxILtOZehSBLwayyIqg70IQo1MpKPzORuYG+wvuvlFL2xQ
BpWwbN7q9ffB+9prdHvttKD9AbuCFsDzhmK1raSEnj0KJNAtKvn01DMMTdO9NtvU
vPC+zXjmtLvyO6K8G7XuQHuNrffpplrz1JU7WNmA6x7cRS7xOW8i1Lv1zXN8ZMpF
erpXvh5/cFPbPDBG/iV0n9nkp2sTdiBBt4rk6TS8w/KxHcpKjUiSSPYy/Hw7mXH1
dYIltyeBp5zEgB5HyTTmkGgy3EH6AujIZ4BLN/bujqo1Imceh3DxGGgrzATgX8xg
KpWM/pxX3XiIfQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:51 2026 by rpki-client