This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
File:                     pcJJ62-mtduvarnes6d3juDrNIc.mft (raw, json)
Hash identifier:          +3704SY4/CHnpdUqbbitknCPzvl3gRDLGrN4hCxyQJg=
Subject key identifier:   6A:A9:02:31:1F:20:3C:C8:BF:DE:95:89:10:C0:54:70:88:18:78:67
Authority key identifier: A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87
Certificate issuer:       /CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
Certificate serial:       019BF35042DE0A3D2E7407A60ED1C5896258
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
Manifest number:          077E
Signing time:             Sun 25 Jan 2026 04:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:21 +0000
Files and hashes:         1: pcJJ62-mtduvarnes6d3juDrNIc.crl (hash: 8YO+i+7q0r6LoF/qeZlpmEgEcxardc1wRVnnh3XIwks=)
                          2: rmG_Mx4OERgiuD3P5wGx8USzfRc.roa (hash: EVDCfM58CfL8EZ3fG32e3+1OR69T0z1tPNxcvYnXhZw=)
                          3: tvVz3gUCgldDkrhOEK9-WF9eoc4.roa (hash: VM0xQWpxXmLKkz6M8pgyNY4WFuott6QJjASY1s27SWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:42:de:0a:3d:2e:74:07:a6:0e:d1:c5:89:62:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c249eb6fa6b5dbaf6ab9deb3a7778ee0eb3487
        Validity
            Not Before: Jan 25 04:01:21 2026 GMT
            Not After : Jan 26 04:01:21 2026 GMT
        Subject: CN=6aa902311f203cc8bfde958910c0547088187867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:47:87:b1:1b:fa:52:e3:cc:0e:d7:9d:be:87:
                    01:51:89:71:5b:89:e8:e4:e4:ea:4a:2a:f9:e4:a3:
                    03:e7:a5:08:9a:3a:37:4b:9a:98:1e:57:d1:5a:0d:
                    76:c1:ef:ce:0d:76:65:4e:44:26:19:15:8d:10:a5:
                    72:bc:9f:e8:80:ec:8a:ca:3f:cd:51:d6:ef:c7:c4:
                    1c:ba:e5:f1:9f:da:6e:39:b6:a1:e6:85:46:49:b4:
                    14:b7:15:b4:46:db:ec:a7:f7:4b:2c:45:27:fe:fc:
                    6f:88:b4:3c:08:21:ca:eb:2b:6f:a1:9d:85:ac:6a:
                    1d:32:c3:84:dd:47:c8:bf:9d:11:6f:f7:ab:cb:e0:
                    bc:22:33:b3:ae:07:6d:d6:28:02:70:48:05:f7:c4:
                    28:19:a5:fc:25:b7:86:dd:08:36:ba:f7:65:97:0e:
                    74:d6:d6:b4:44:63:9e:92:7b:1e:b4:21:55:52:f2:
                    d1:db:e3:19:ad:60:d7:66:0a:f6:a0:6d:41:88:a4:
                    ca:c7:eb:f5:dc:c5:d7:db:51:58:16:34:9e:3b:ba:
                    d5:8e:a0:81:29:ed:8c:00:13:b9:1d:74:05:3c:79:
                    a7:cc:c5:fe:b3:ab:ad:c3:e5:33:10:b3:ca:cf:c9:
                    de:63:cb:24:a8:1e:ea:c8:7e:45:6c:b8:08:ce:bb:
                    45:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A9:02:31:1F:20:3C:C8:BF:DE:95:89:10:C0:54:70:88:18:78:67
            X509v3 Authority Key Identifier:
                keyid:A5:C2:49:EB:6F:A6:B5:DB:AF:6A:B9:DE:B3:A7:77:8E:E0:EB:34:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcJJ62-mtduvarnes6d3juDrNIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/453199-6343-4c67-b87e-32eb3a4ead43/1/pcJJ62-mtduvarnes6d3juDrNIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:08:25:f5:20:67:c5:59:12:d0:f2:15:4d:9f:f0:55:4a:e6:
         ce:65:63:63:32:7e:da:d2:07:c2:3d:70:d4:d0:bf:dc:9a:47:
         85:51:db:e8:06:cc:37:79:fd:ca:21:35:2a:08:a4:64:fd:fa:
         ed:a3:77:3e:4e:a2:22:26:18:64:40:86:52:9c:79:25:5d:9d:
         40:fa:36:0e:53:43:52:95:21:b6:f6:a1:7b:fa:24:62:06:0c:
         0a:81:d0:e0:a8:61:e2:2e:e9:19:55:dd:ae:59:9f:38:83:83:
         12:d9:85:dd:49:21:0b:ab:21:74:48:cb:87:bf:c4:ab:99:65:
         c8:55:7c:7e:b7:06:91:66:d6:83:95:f9:be:1a:12:f6:b7:39:
         2a:7d:fa:cf:35:d1:7f:b2:14:eb:78:06:f9:08:ba:af:0a:32:
         00:56:04:d6:b2:9e:68:20:4f:17:9f:f8:99:3c:a1:67:7e:9a:
         b1:07:9a:fe:26:ed:06:0f:e6:f6:92:b1:03:72:5c:db:2d:11:
         2d:78:77:ea:03:fe:77:0b:6d:7b:98:a9:f9:a6:c3:ec:ab:76:
         63:9c:d2:79:ba:c3:c7:95:c3:22:76:9c:3d:c0:5b:38:af:da:
         33:3f:f8:ff:46:6a:51:7a:ed:5e:8a:50:e0:02:52:ff:26:04:
         e7:2c:32:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUELeCj0udAemDtHFiWJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzI0OWViNmZhNmI1ZGJhZjZhYjlkZWIzYTc3NzhlZTBl
YjM0ODcwHhcNMjYwMTI1MDQwMTIxWhcNMjYwMTI2MDQwMTIxWjAzMTEwLwYDVQQD
Eyg2YWE5MDIzMTFmMjAzY2M4YmZkZTk1ODkxMGMwNTQ3MDg4MTg3ODY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EeHsRv6UuPMDtedvocBUYlxW4no
5OTqSir55KMD56UImjo3S5qYHlfRWg12we/ODXZlTkQmGRWNEKVyvJ/ogOyKyj/N
Udbvx8QcuuXxn9puObah5oVGSbQUtxW0Rtvsp/dLLEUn/vxviLQ8CCHK6ytvoZ2F
rGodMsOE3UfIv50Rb/ery+C8IjOzrgdt1igCcEgF98QoGaX8JbeG3Qg2uvdllw50
1ta0RGOeknsetCFVUvLR2+MZrWDXZgr2oG1BiKTKx+v13MXX21FYFjSeO7rVjqCB
Ke2MABO5HXQFPHmnzMX+s6utw+UzELPKz8neY8skqB7qyH5FbLgIzrtFvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqpAjEfIDzIv96ViRDAVHCIGHhnMB8GA1UdIwQY
MBaAFKXCSetvprXbr2q53rOnd47g6zSHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2Ut
MzJlYjNhNGVhZDQzLzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NTMxOTktNjM0My00YzY3LWI4N2UtMzJlYjNhNGVhZDQz
LzEvcGNKSjYyLW10ZHV2YXJuZXM2ZDNqdURyTkljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwgl9SBn
xVkS0PIVTZ/wVUrmzmVjYzJ+2tIHwj1w1NC/3JpHhVHb6AbMN3n9yiE1KgikZP36
7aN3Pk6iIiYYZECGUpx5JV2dQPo2DlNDUpUhtvahe/okYgYMCoHQ4Khh4i7pGVXd
rlmfOIODEtmF3UkhC6shdEjLh7/Eq5llyFV8frcGkWbWg5X5vhoS9rc5Kn36zzXR
f7IU63gG+Qi6rwoyAFYE1rKeaCBPF5/4mTyhZ36asQea/ibtBg/m9pKxA3Jc2y0R
LXh36gP+dwtte5ip+abD7Kt2Y5zSebrDx5XDInacPcBbOK/aMz/4/0ZqUXrtXopQ
4AJS/yYE5ywyDA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 15:23:27 2026 by rpki-client