This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
File:                     IraiXy90GRvp6gypwZFf50XPV8g.mft (raw, json)
Hash identifier:          yaYigaYMKNxzcupfXySEs1PwOfRFlzWI6PGLkp0Bqi0=
Subject key identifier:   A7:1F:56:FF:8A:4B:0E:AE:4D:CD:BA:B8:9D:FC:F4:D6:43:30:B0:7C
Authority key identifier: 22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8
Certificate issuer:       /CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
Certificate serial:       019BF619D22C44D65FB663707ABCAA3CB784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
Manifest number:          177B
Signing time:             Sun 25 Jan 2026 17:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:45 +0000
Files and hashes:         1: I9_8ex5RLgU9zB0YLgF9xqOG47g.roa (hash: dmFylddSKzwNHu+y0Wqd1+q/KRNXfD2djp0HKezq3HE=)
                          2: IraiXy90GRvp6gypwZFf50XPV8g.crl (hash: VkAYDvA7y4zA+P+wLkaJsSXjGMuOhgt28X/luvzNNZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:d2:2c:44:d6:5f:b6:63:70:7a:bc:aa:3c:b7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b6a25f2f74191be9ea0ca9c1915fe745cf57c8
        Validity
            Not Before: Jan 25 17:00:45 2026 GMT
            Not After : Jan 26 17:00:45 2026 GMT
        Subject: CN=a71f56ff8a4b0eae4dcdbab89dfcf4d64330b07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0e:43:a5:8c:11:76:61:15:1b:2d:16:ea:40:
                    62:56:27:dd:f4:40:92:9f:8a:2a:9a:7b:f4:a9:82:
                    0f:8c:17:cb:6c:1f:d6:54:50:c6:ae:7f:e9:65:ec:
                    40:86:59:b8:88:85:94:b7:c3:38:3f:ce:65:6e:90:
                    ea:54:74:7b:76:7c:b3:bb:3f:b6:50:64:e2:a6:90:
                    98:75:db:db:ed:24:cb:75:07:1d:91:5c:94:68:03:
                    a9:ee:ee:91:ca:f8:bc:4a:6a:8f:45:ef:12:22:58:
                    55:db:a8:25:ba:79:b8:79:f4:68:28:89:f2:d1:0d:
                    ba:5b:f5:58:82:a4:32:6e:4c:9d:83:56:eb:d2:ce:
                    3d:c2:f0:72:36:21:79:cf:57:40:6a:82:47:00:47:
                    bb:72:ae:6c:da:a3:2a:5b:dc:af:6a:05:72:73:c5:
                    ea:7e:04:71:03:77:8c:91:e8:c8:ba:52:82:7e:6a:
                    a8:8f:1d:e3:dc:53:d7:9b:f2:6e:96:f2:b0:13:6f:
                    24:12:bb:1b:ad:16:55:5c:61:43:b0:76:96:98:37:
                    c0:49:04:99:9c:d4:fd:42:1d:26:c4:38:0f:7c:2b:
                    1b:c7:b9:17:fd:00:5d:82:28:4c:31:5a:c0:26:ce:
                    b8:90:d4:2e:76:f2:9e:30:84:d3:32:98:39:0c:a5:
                    e0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:1F:56:FF:8A:4B:0E:AE:4D:CD:BA:B8:9D:FC:F4:D6:43:30:B0:7C
            X509v3 Authority Key Identifier:
                keyid:22:B6:A2:5F:2F:74:19:1B:E9:EA:0C:A9:C1:91:5F:E7:45:CF:57:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IraiXy90GRvp6gypwZFf50XPV8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1cec14-db59-4950-bdb8-b90a941ea51a/1/IraiXy90GRvp6gypwZFf50XPV8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:8c:37:1a:87:61:17:1a:5e:fb:d9:24:1d:11:3c:95:9e:51:
         52:c1:9d:ee:ed:dd:8c:ef:6d:1c:10:0a:43:a5:6c:7b:d1:f1:
         2c:73:ce:4c:ec:a8:a4:bf:65:80:84:a7:e2:64:4b:98:b1:5d:
         f9:96:c8:ca:2e:e0:4d:92:60:af:53:30:74:4f:69:64:6e:75:
         89:f1:69:3c:78:6f:15:d6:5f:59:2f:63:3b:02:bf:f5:87:7f:
         28:fb:df:b0:3e:ea:30:bb:5f:85:c7:84:ab:5a:3c:22:c7:0e:
         e1:c0:0c:d8:a2:56:b0:12:cc:50:8e:2c:39:c3:95:33:0e:f1:
         d2:2d:ae:fc:fe:af:f6:04:4b:51:c7:3b:9e:c7:be:dc:af:4f:
         7d:43:e3:87:1d:11:3f:9c:d8:d7:66:58:2c:33:d3:f2:dc:c0:
         bb:fe:8a:4b:43:e0:35:22:91:3a:46:28:26:70:f7:30:64:83:
         2b:f7:ba:f7:07:e1:d6:8c:58:eb:d6:dc:74:37:49:39:5d:a2:
         19:08:06:37:68:af:38:a1:a4:9b:19:d2:7c:53:a8:72:34:35:
         c9:7d:0b:a5:b8:1b:05:b4:2d:c3:04:53:e1:c9:b2:85:6a:34:
         14:c1:74:c1:0d:ee:58:67:fc:39:eb:e4:85:bf:bf:50:e6:35:
         12:47:78:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2GdIsRNZftmNweryqPLeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYjZhMjVmMmY3NDE5MWJlOWVhMGNhOWMxOTE1ZmU3NDVj
ZjU3YzgwHhcNMjYwMTI1MTcwMDQ1WhcNMjYwMTI2MTcwMDQ1WjAzMTEwLwYDVQQD
EyhhNzFmNTZmZjhhNGIwZWFlNGRjZGJhYjg5ZGZjZjRkNjQzMzBiMDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ5DpYwRdmEVGy0W6kBiVifd9ECS
n4oqmnv0qYIPjBfLbB/WVFDGrn/pZexAhlm4iIWUt8M4P85lbpDqVHR7dnyzuz+2
UGTippCYddvb7STLdQcdkVyUaAOp7u6Ryvi8SmqPRe8SIlhV26glunm4efRoKIny
0Q26W/VYgqQybkydg1br0s49wvByNiF5z1dAaoJHAEe7cq5s2qMqW9yvagVyc8Xq
fgRxA3eMkejIulKCfmqojx3j3FPXm/JulvKwE28kErsbrRZVXGFDsHaWmDfASQSZ
nNT9Qh0mxDgPfCsbx7kX/QBdgihMMVrAJs64kNQudvKeMITTMpg5DKXgXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcfVv+KSw6uTc26uJ389NZDMLB8MB8GA1UdIwQY
MBaAFCK2ol8vdBkb6eoMqcGRX+dFz1fIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgt
YjkwYTk0MWVhNTFhLzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xY2VjMTQtZGI1OS00OTUwLWJkYjgtYjkwYTk0MWVhNTFh
LzEvSXJhaVh5OTBHUnZwNmd5cHdaRmY1MFhQVjhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArYw3Godh
Fxpe+9kkHRE8lZ5RUsGd7u3djO9tHBAKQ6Vse9HxLHPOTOyopL9lgISn4mRLmLFd
+ZbIyi7gTZJgr1MwdE9pZG51ifFpPHhvFdZfWS9jOwK/9Yd/KPvfsD7qMLtfhceE
q1o8IscO4cAM2KJWsBLMUI4sOcOVMw7x0i2u/P6v9gRLUcc7nse+3K9PfUPjhx0R
P5zY12ZYLDPT8tzAu/6KS0PgNSKROkYoJnD3MGSDK/e69wfh1oxY69bcdDdJOV2i
GQgGN2ivOKGkmxnSfFOocjQ1yX0LpbgbBbQtwwRT4cmyhWo0FMF0wQ3uWGf8Oevk
hb+/UOY1Ekd4uA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 00:20:19 2026 by rpki-client