This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          pnXcKvsQzK9i6D7FhdDE1Q7Zaz0wzyW+gDVnJYUqp2o=
Subject key identifier:   06:AB:96:48:67:F5:61:8E:6A:3F:15:E5:00:5D:5E:DB:0B:09:20:D9
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019BF76370024BDB95FB83433C0339125703
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          14E8
Signing time:             Sun 25 Jan 2026 23:00:47 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:47 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:47 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: dRQCCzb5ENqsAH+aqIOW0MkMXuXYfHFzLs1OEKofQE8=)
                          2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
                          3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
                          4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
                          5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:70:02:4b:db:95:fb:83:43:3c:03:39:12:57:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Jan 25 23:00:47 2026 GMT
            Not After : Jan 26 23:00:47 2026 GMT
        Subject: CN=06ab964867f5618e6a3f15e5005d5edb0b0920d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:49:0a:ac:07:a6:7b:bf:ad:9f:b1:83:79:aa:
                    f6:a5:33:80:44:ba:cf:96:34:e0:7c:7e:d5:93:47:
                    e8:7c:ea:c6:ab:6a:d0:0d:46:47:c5:f8:74:29:99:
                    65:97:2e:fd:fe:cf:0f:b3:b3:98:3b:ae:de:4e:ae:
                    54:aa:29:65:49:3d:ad:aa:3d:82:54:9d:4f:dc:ef:
                    ce:01:86:a4:25:04:06:9b:e4:f9:cb:a1:47:37:96:
                    53:c1:42:5a:1b:e3:7d:22:b8:9f:0d:53:15:44:c3:
                    4d:41:ff:8d:2e:01:18:c7:4d:d0:a5:7f:59:16:90:
                    39:8d:f9:4d:38:f3:b9:69:84:50:c8:8b:6a:39:7a:
                    cd:61:59:35:76:61:ec:6e:84:90:7c:af:15:db:a3:
                    f5:02:95:17:2f:c5:24:f7:7d:8e:c2:76:1c:7c:85:
                    ed:5c:4f:a0:af:39:aa:0e:8b:43:34:fb:a4:39:d9:
                    70:2b:b9:ac:ad:43:13:42:54:43:1a:4c:ab:c2:a8:
                    16:b4:14:81:70:8b:9b:18:65:18:38:d4:4d:2a:74:
                    73:1d:f6:11:ed:9f:1f:41:e3:b4:d3:be:4a:c7:2a:
                    56:78:66:e3:cf:06:3e:4a:7b:7b:0c:dd:a5:f8:64:
                    4f:5d:6f:75:94:38:07:06:a4:aa:95:3a:63:90:04:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:AB:96:48:67:F5:61:8E:6A:3F:15:E5:00:5D:5E:DB:0B:09:20:D9
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:06:6a:fb:45:65:ee:2c:2c:dd:ab:53:ac:98:ad:eb:c4:4e:
         5e:ac:9a:35:1d:be:a2:80:f9:e4:32:f6:9c:4d:a5:03:26:b4:
         08:67:cf:b6:d5:3e:fb:01:d7:f7:07:83:fa:17:be:3b:fb:26:
         77:ec:77:f3:14:ba:c1:b5:87:39:fa:d5:62:99:31:3d:f3:fa:
         3b:a3:04:b4:6e:84:9d:6f:05:15:46:61:26:69:18:24:fc:5d:
         14:f9:14:db:cd:08:4d:bb:85:54:e6:cf:21:f1:64:13:0f:75:
         4b:62:73:65:18:4a:f5:42:b8:1b:c0:a6:09:af:03:d5:d5:fb:
         9b:85:92:dd:2d:df:84:c4:b2:b2:b7:49:7a:00:a4:76:5f:f5:
         8c:91:49:e1:23:f4:6e:df:62:b1:fb:a5:84:bc:b3:de:0f:10:
         69:34:da:9d:74:3b:49:51:80:21:f7:b6:ed:75:50:6a:44:5a:
         29:ab:a5:23:b2:08:db:a2:94:8e:39:f1:30:b9:c4:36:32:29:
         f1:7b:04:8f:34:51:e8:b3:d9:b0:3f:92:3d:5e:e0:9d:32:a7:
         50:47:35:7f:f9:02:4d:56:6d:77:d2:b6:c7:5f:97:f2:5b:30:
         1e:f6:c7:c5:7b:42:d9:d6:a9:0e:63:a9:f5:dc:9b:ee:bf:b5:
         33:54:21:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3Y3ACS9uV+4NDPAM5ElcDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3
ZjRkNWEwHhcNMjYwMTI1MjMwMDQ3WhcNMjYwMTI2MjMwMDQ3WjAzMTEwLwYDVQQD
EygwNmFiOTY0ODY3ZjU2MThlNmEzZjE1ZTUwMDVkNWVkYjBiMDkyMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkkKrAeme7+tn7GDear2pTOARLrP
ljTgfH7Vk0fofOrGq2rQDUZHxfh0KZllly79/s8Ps7OYO67eTq5UqillST2tqj2C
VJ1P3O/OAYakJQQGm+T5y6FHN5ZTwUJaG+N9IrifDVMVRMNNQf+NLgEYx03QpX9Z
FpA5jflNOPO5aYRQyItqOXrNYVk1dmHsboSQfK8V26P1ApUXL8Uk932OwnYcfIXt
XE+grzmqDotDNPukOdlwK7msrUMTQlRDGkyrwqgWtBSBcIubGGUYONRNKnRzHfYR
7Z8fQeO0075KxypWeGbjzwY+Snt7DN2l+GRPXW91lDgHBqSqlTpjkATZiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAarlkhn9WGOaj8V5QBdXtsLCSDZMB8GA1UdIwQY
MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt
NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm
LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqwZq+0Vl
7iws3atTrJit68ROXqyaNR2+ooD55DL2nE2lAya0CGfPttU++wHX9weD+he+O/sm
d+x38xS6wbWHOfrVYpkxPfP6O6MEtG6EnW8FFUZhJmkYJPxdFPkU280ITbuFVObP
IfFkEw91S2JzZRhK9UK4G8CmCa8D1dX7m4WS3S3fhMSysrdJegCkdl/1jJFJ4SP0
bt9isfulhLyz3g8QaTTanXQ7SVGAIfe27XVQakRaKaulI7II26KUjjnxMLnENjIp
8XsEjzRR6LPZsD+SPV7gnTKnUEc1f/kCTVZtd9K2x1+X8lswHvbHxXtC2dapDmOp
9dyb7r+1M1Qh9w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:33 2026 by rpki-client