This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
File:                     ppR2gdoNt_55MV7G29oov41mD8A.mft (raw, json)
Hash identifier:          0hdpWhB0nMFDAXZ2G4hkAghSztaPR7wnf90PFTNQ+uM=
Subject key identifier:   AD:26:A8:CB:AC:71:D1:B9:15:1A:7E:34:42:3C:E4:F6:3E:D0:8D:C2
Authority key identifier: A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0
Certificate issuer:       /CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
Certificate serial:       019BF5754345F0D69687160DE824A42F7AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 14:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:01 +0000
Files and hashes:         1: KImIqYFb29b3KU70kYQGUgTjwXY.roa (hash: OkLquITh6UHZc59jyD3mteFTooB7+Z7+DnhjU4+WM/A=)
                          2: ppR2gdoNt_55MV7G29oov41mD8A.crl (hash: qs9PfCYVipDvLY/8ENE9rTZt+GdrcZRg38wy/F8LajY=)
                          3: wJhrCbB9HaKVaJIOdovc6nXak8I.roa (hash: DNB7tfiEdhadZKuh5CRqn/FIXhNGqeMKaW1BhhcXm8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:43:45:f0:d6:96:87:16:0d:e8:24:a4:2f:7a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6947681da0db7fe79315ec6dbda28bf8d660fc0
        Validity
            Not Before: Jan 25 14:01:01 2026 GMT
            Not After : Jan 26 14:01:01 2026 GMT
        Subject: CN=ad26a8cbac71d1b9151a7e34423ce4f63ed08dc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:f7:78:a6:bf:e8:d6:f9:cb:9e:d6:a4:af:0b:
                    61:87:08:38:37:37:36:e3:01:79:7a:72:f1:bc:d3:
                    01:d8:c5:02:35:03:30:87:26:59:66:6f:7f:fc:23:
                    e6:3d:51:b2:93:7b:f9:f6:65:2a:14:6f:a0:06:4a:
                    52:6c:16:20:a6:ca:dd:cf:fa:3a:c8:e2:b6:1d:b3:
                    a1:d2:38:51:d4:03:58:75:40:5c:3b:48:b6:07:e8:
                    e8:17:4e:87:5a:fd:a0:76:62:46:a6:5d:b0:3c:2e:
                    3e:f2:6a:f0:8c:ed:ce:cc:f7:bb:9b:58:e8:d7:af:
                    8a:d9:59:61:ea:bd:88:81:71:c1:04:bd:95:7f:35:
                    93:aa:cd:84:62:07:2e:81:de:8f:ba:40:0d:4a:e9:
                    e7:35:5a:5c:e9:c6:62:3d:a9:37:73:a1:f0:fe:2e:
                    97:d5:ed:39:63:68:86:ca:a2:59:4a:88:d0:11:f1:
                    b3:51:72:0c:0f:af:97:fd:24:94:93:48:41:88:93:
                    bd:83:5e:40:f2:2d:f0:b3:b2:9a:eb:9a:e3:6b:81:
                    e6:8c:24:c1:5d:70:9b:74:d7:34:80:98:4a:5c:63:
                    71:14:7b:14:0c:da:88:51:01:ad:da:a5:47:75:1f:
                    3e:a0:9e:15:7d:cd:9a:5b:bb:3d:f6:5a:ae:b2:a7:
                    11:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:26:A8:CB:AC:71:D1:B9:15:1A:7E:34:42:3C:E4:F6:3E:D0:8D:C2
            X509v3 Authority Key Identifier:
                keyid:A6:94:76:81:DA:0D:B7:FE:79:31:5E:C6:DB:DA:28:BF:8D:66:0F:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppR2gdoNt_55MV7G29oov41mD8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f649a2-518d-4456-98a7-23c3df82c230/1/ppR2gdoNt_55MV7G29oov41mD8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:e5:55:4a:a8:65:b0:ee:c1:c4:b0:59:a5:ef:1f:bb:e4:55:
         9d:18:54:ce:da:58:b1:c5:14:78:1c:db:f6:7e:e0:8c:08:70:
         e6:7a:ca:50:f7:c4:9c:3a:c8:37:0d:f0:89:3a:66:35:9e:46:
         f0:fe:ff:38:57:08:b6:fb:dc:ed:e9:dc:a6:38:18:2a:92:5f:
         98:3a:92:4b:49:2c:f3:91:bb:b1:6a:a4:4c:ce:73:57:8b:61:
         9a:96:95:a1:3c:3e:19:56:24:1f:6c:1e:d5:d2:22:7b:1c:09:
         9a:d5:48:b5:c4:97:bf:24:bb:e5:34:94:8c:4b:34:9c:b9:12:
         3c:45:48:8d:11:e9:4e:d3:6c:00:06:75:8e:d2:4c:21:7c:b1:
         9a:f8:1e:09:6c:22:ca:1d:0d:69:41:5f:67:2c:c2:ba:61:33:
         3f:c3:85:eb:2a:b2:f3:c8:6f:88:a9:15:6d:89:96:bc:17:bd:
         4d:26:38:3f:43:f2:bd:b8:21:05:66:76:6e:3f:dc:de:5f:cd:
         9f:15:f2:50:57:42:43:98:96:6e:47:84:38:0a:f2:6e:12:73:
         53:a6:f3:da:3f:60:84:b1:a4:28:c0:b0:85:2c:f7:08:53:39:
         c9:ef:56:51:70:fb:52:ce:d0:9f:ca:06:28:51:cb:98:ca:d3:
         d8:66:5e:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1dUNF8NaWhxYN6CSkL3riMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2OTQ3NjgxZGEwZGI3ZmU3OTMxNWVjNmRiZGEyOGJmOGQ2
NjBmYzAwHhcNMjYwMTI1MTQwMTAxWhcNMjYwMTI2MTQwMTAxWjAzMTEwLwYDVQQD
EyhhZDI2YThjYmFjNzFkMWI5MTUxYTdlMzQ0MjNjZTRmNjNlZDA4ZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vd4pr/o1vnLntakrwthhwg4Nzc2
4wF5enLxvNMB2MUCNQMwhyZZZm9//CPmPVGyk3v59mUqFG+gBkpSbBYgpsrdz/o6
yOK2HbOh0jhR1ANYdUBcO0i2B+joF06HWv2gdmJGpl2wPC4+8mrwjO3OzPe7m1jo
16+K2Vlh6r2IgXHBBL2VfzWTqs2EYgcugd6PukANSunnNVpc6cZiPak3c6Hw/i6X
1e05Y2iGyqJZSojQEfGzUXIMD6+X/SSUk0hBiJO9g15A8i3ws7Ka65rja4HmjCTB
XXCbdNc0gJhKXGNxFHsUDNqIUQGt2qVHdR8+oJ4Vfc2aW7s99lqusqcR8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0mqMuscdG5FRp+NEI85PY+0I3CMB8GA1UdIwQY
MBaAFKaUdoHaDbf+eTFextvaKL+NZg/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTct
MjNjM2RmODJjMjMwLzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9mNjQ5YTItNTE4ZC00NDU2LTk4YTctMjNjM2RmODJjMjMw
LzEvcHBSMmdkb050XzU1TVY3RzI5b292NDFtRDhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuVVSqhl
sO7BxLBZpe8fu+RVnRhUztpYscUUeBzb9n7gjAhw5nrKUPfEnDrINw3wiTpmNZ5G
8P7/OFcItvvc7encpjgYKpJfmDqSS0ks85G7sWqkTM5zV4thmpaVoTw+GVYkH2we
1dIiexwJmtVItcSXvyS75TSUjEs0nLkSPEVIjRHpTtNsAAZ1jtJMIXyxmvgeCWwi
yh0NaUFfZyzCumEzP8OF6yqy88hviKkVbYmWvBe9TSY4P0PyvbghBWZ2bj/c3l/N
nxXyUFdCQ5iWbkeEOArybhJzU6bz2j9ghLGkKMCwhSz3CFM5ye9WUXD7Us7Qn8oG
KFHLmMrT2GZebw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 21:09:56 2026 by rpki-client