This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          hXekBQfk77ISxezeee6G0uh0MFx7KqU7hQ2LEbji0Og=
Subject key identifier:   DF:99:BD:09:26:23:C8:F1:92:8F:07:74:70:85:BE:23:2E:71:AD:0C
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       019BF76378EA93E849DB6C220B05853E2699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          17F3
Signing time:             Sun 25 Jan 2026 23:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:49 +0000
Files and hashes:         1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: YrQ1Fle8bwFZI8jGlrHZHlC1BrIuo5W4udmUQMupsqw=)
                          2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=)
                          3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
                          4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
                          5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
                          6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
                          7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
                          8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
                          9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
                          10: qF5xd0E9VHjEoVDgrR2EV2reNkg.roa (hash: +LVENHANP4Wm2qt1oX01yx6cEEPM3z4kpbtQOwe00sQ=)
                          11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
                          12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:78:ea:93:e8:49:db:6c:22:0b:05:85:3e:26:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Jan 25 23:00:49 2026 GMT
            Not After : Jan 26 23:00:49 2026 GMT
        Subject: CN=df99bd092623c8f1928f07747085be232e71ad0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:63:3b:27:65:4d:6f:da:72:68:dc:61:6c:17:
                    a4:eb:c5:b1:2c:6f:c8:62:16:fb:98:ea:44:c2:55:
                    07:1e:3c:4d:0f:8e:e7:50:00:0f:2d:fd:ff:8c:b4:
                    6c:88:05:b6:37:08:cd:9c:64:00:73:11:01:ac:86:
                    46:c7:58:bf:4d:92:34:e6:6b:80:85:01:9e:0e:b1:
                    79:b1:62:b0:91:f5:04:5b:ef:cf:73:03:14:4c:9d:
                    2d:40:b9:8f:0e:64:76:b2:dc:67:a2:99:a8:a8:75:
                    7d:4f:8b:7f:b1:b8:61:8f:2d:9c:91:2c:ce:36:5b:
                    0d:ef:21:28:aa:50:78:6f:cc:27:76:94:7a:cb:67:
                    c5:bb:6d:68:56:89:45:c8:2e:3c:93:d8:d2:04:b0:
                    b5:cf:2c:7f:f3:23:50:2a:57:87:4e:ba:da:19:da:
                    40:9e:00:07:0a:eb:6c:eb:dc:f8:6f:6f:80:e7:16:
                    5a:5d:6c:51:6d:4f:68:a3:78:a0:e0:b8:c9:87:79:
                    73:90:ec:01:0b:92:58:01:02:3f:bd:67:6a:09:40:
                    65:b5:d8:b3:31:cc:2a:cb:d9:9e:a7:ac:d2:74:84:
                    e0:ad:33:26:33:a8:e0:a5:fb:9f:09:a4:3e:48:43:
                    13:ff:15:af:16:c9:06:2a:06:a3:d2:b9:4a:81:26:
                    ca:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:99:BD:09:26:23:C8:F1:92:8F:07:74:70:85:BE:23:2E:71:AD:0C
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0a:99:87:1d:b5:7b:73:a1:ca:4e:0d:a4:38:b4:d9:66:74:
         6a:e1:b0:2b:b2:00:c6:88:d0:f1:2a:15:23:72:6d:a6:ee:09:
         c2:2c:3c:21:dd:2d:10:c9:02:fd:92:18:f4:5d:05:c2:91:b1:
         8e:78:d5:3f:1a:39:88:c3:2b:79:f0:51:53:fb:1b:c3:88:be:
         3e:6e:b4:d1:30:3f:7f:54:37:22:46:7a:28:ba:72:e6:16:d2:
         f2:25:82:71:4e:de:93:d1:30:12:56:9a:fd:6e:0a:13:dd:87:
         d4:96:f7:60:11:5b:a8:fc:e5:e9:f6:f9:66:a0:63:c8:c1:f8:
         85:64:e2:87:ee:4c:03:02:7f:3e:fe:44:2d:18:d0:18:f6:12:
         a1:b8:83:af:a1:e1:9d:6b:2d:73:12:c0:ca:47:52:a3:70:ed:
         4a:a3:2b:10:e7:48:54:15:28:72:66:85:38:f5:ec:2d:c5:df:
         17:4d:22:7b:0b:69:cf:54:c4:bf:62:74:d8:69:db:cc:6f:5b:
         48:a6:8f:d0:5f:3c:6b:31:98:bb:dc:e6:39:40:55:6a:c9:0c:
         94:8a:ad:0c:82:60:41:fd:47:a6:2f:4b:a8:d6:5f:c9:f0:30:
         61:1e:08:ca:c5:3e:30:8a:52:66:48:25:b2:12:89:dc:a0:7a:
         fe:e0:06:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3Y3jqk+hJ22wiCwWFPiaZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3
N2E2ZWYwHhcNMjYwMTI1MjMwMDQ5WhcNMjYwMTI2MjMwMDQ5WjAzMTEwLwYDVQQD
EyhkZjk5YmQwOTI2MjNjOGYxOTI4ZjA3NzQ3MDg1YmUyMzJlNzFhZDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2M7J2VNb9pyaNxhbBek68WxLG/I
Yhb7mOpEwlUHHjxND47nUAAPLf3/jLRsiAW2NwjNnGQAcxEBrIZGx1i/TZI05muA
hQGeDrF5sWKwkfUEW+/PcwMUTJ0tQLmPDmR2stxnopmoqHV9T4t/sbhhjy2ckSzO
NlsN7yEoqlB4b8wndpR6y2fFu21oVolFyC48k9jSBLC1zyx/8yNQKleHTrraGdpA
ngAHCuts69z4b2+A5xZaXWxRbU9oo3ig4LjJh3lzkOwBC5JYAQI/vWdqCUBltdiz
Mcwqy9mep6zSdITgrTMmM6jgpfufCaQ+SEMT/xWvFskGKgaj0rlKgSbKtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN+ZvQkmI8jxko8HdHCFviMuca0MMB8GA1UdIwQY
MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt
YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh
LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAqZhx21
e3Ohyk4NpDi02WZ0auGwK7IAxojQ8SoVI3Jtpu4Jwiw8Id0tEMkC/ZIY9F0FwpGx
jnjVPxo5iMMrefBRU/sbw4i+Pm600TA/f1Q3IkZ6KLpy5hbS8iWCcU7ek9EwElaa
/W4KE92H1Jb3YBFbqPzl6fb5ZqBjyMH4hWTih+5MAwJ/Pv5ELRjQGPYSobiDr6Hh
nWstcxLAykdSo3DtSqMrEOdIVBUocmaFOPXsLcXfF00iewtpz1TEv2J02GnbzG9b
SKaP0F88azGYu9zmOUBVaskMlIqtDIJgQf1Hpi9LqNZfyfAwYR4IysU+MIpSZkgl
shKJ3KB6/uAGHw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:02 2026 by rpki-client