This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File:                     U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier:          JX4cgxtWliKv/b2wJhEZ9XksN8ubOJSiaKXkcM2W7Oo=
Subject key identifier:   00:FD:BA:74:10:3A:8E:04:B5:4D:80:0C:9C:A9:FD:20:C0:6B:C0:22
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer:       /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial:       019BF6BEA27CA4B1098A14766A24D1134673
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 20:00:46 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:46 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:46 +0000
Files and hashes:         1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
                          2: LJPLYMO5vOxs_MtRPfGWysA-2S4.roa (hash: RrDOCY1v4Pi574dcipWzNUzibj7ERd9ByP6OHQKcs1o=)
                          3: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: XSVOSxQQ2YMJQJNHeOntVwFHA5cKHgROdC59SMxkivc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:a2:7c:a4:b1:09:8a:14:76:6a:24:d1:13:46:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
        Validity
            Not Before: Jan 25 20:00:46 2026 GMT
            Not After : Jan 26 20:00:46 2026 GMT
        Subject: CN=00fdba74103a8e04b54d800c9ca9fd20c06bc022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3c:3a:94:dd:75:01:73:00:9e:3b:a7:fa:a0:
                    67:5d:ff:57:2d:ad:99:9c:ff:54:37:88:6b:97:30:
                    7b:f4:5f:34:d6:ad:46:ef:dd:4a:69:e5:4e:bf:08:
                    1f:62:84:10:bf:0e:30:01:cb:0c:77:43:67:85:9f:
                    54:de:4f:b6:c7:97:2c:d0:ef:2b:fe:e9:ec:27:cf:
                    43:30:5b:52:51:4b:be:ef:32:74:b2:d7:46:58:08:
                    2b:7d:50:8e:bb:71:86:f3:ed:76:85:f1:b7:a4:f9:
                    3b:76:63:ab:dd:04:6f:80:ce:e2:47:00:87:2d:96:
                    f5:d5:28:be:9f:87:dd:35:98:3f:50:1e:0f:10:3d:
                    13:45:56:d3:2a:4d:f6:b1:73:bc:9e:fa:9f:e5:f6:
                    6b:49:b3:69:57:23:ba:80:4e:c2:7b:47:c5:b5:d7:
                    85:a5:8d:b8:a8:df:84:ae:8d:e0:87:a6:1b:78:1f:
                    23:cb:31:01:c1:8d:98:86:4e:9b:08:f4:8c:90:6c:
                    1e:aa:57:cf:da:f8:18:00:aa:bb:cd:d7:47:da:6c:
                    c8:eb:a2:91:f1:00:4a:11:78:fd:f6:cf:8b:e4:37:
                    ab:ab:03:32:2a:e4:d3:11:ce:de:d2:d4:96:35:f4:
                    8b:4c:ac:b7:98:38:05:b6:39:ae:f6:eb:d4:c4:63:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FD:BA:74:10:3A:8E:04:B5:4D:80:0C:9C:A9:FD:20:C0:6B:C0:22
            X509v3 Authority Key Identifier:
                keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:59:46:e8:b4:22:f0:15:4e:04:a5:5d:1c:47:6a:e1:41:b8:
         79:34:2e:4b:e2:58:cc:e9:99:5a:af:63:3b:5e:c9:d0:ac:8e:
         a1:60:e9:5e:4b:14:d6:12:96:01:c5:02:38:4b:ce:48:77:80:
         08:99:07:0a:2d:0f:a3:c2:f2:9e:79:8a:7b:47:5f:92:5e:be:
         ee:bf:33:93:89:11:67:0c:f1:57:53:57:29:3a:e9:bb:a3:cf:
         a0:0c:3c:78:97:09:1b:91:02:34:34:e3:a1:99:38:1d:d0:2f:
         74:bb:dd:3e:f8:66:f4:24:87:2b:b4:60:d8:41:a6:51:2e:40:
         72:c9:c5:4e:29:42:c0:0f:f2:55:8a:6a:4b:0c:c2:f9:ff:13:
         d7:65:7e:6e:08:6c:30:dd:9a:da:ce:21:71:43:79:45:40:6c:
         a8:98:d9:d0:10:7c:78:36:98:60:b8:f7:7e:1e:7b:77:32:79:
         ea:a5:aa:97:d0:00:86:d1:d3:93:94:ea:de:07:92:cc:48:df:
         fc:a7:2c:19:7f:d3:91:96:a7:e9:26:ab:eb:c3:83:65:52:d0:
         a2:42:e0:fc:47:e3:c9:c1:26:0f:c7:d1:a1:50:92:31:be:e2:
         2b:81:3e:d1:92:68:fa:cb:a6:db:f6:cb:12:95:10:70:84:fc:
         c4:e5:70:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2vqJ8pLEJihR2aiTRE0ZzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNzY0NjdlZjA5MjFjNTExOTBlMmVhNjBmMmFiYjNiZDZl
OWMxOWYwHhcNMjYwMTI1MjAwMDQ2WhcNMjYwMTI2MjAwMDQ2WjAzMTEwLwYDVQQD
EygwMGZkYmE3NDEwM2E4ZTA0YjU0ZDgwMGM5Y2E5ZmQyMGMwNmJjMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzw6lN11AXMAnjun+qBnXf9XLa2Z
nP9UN4hrlzB79F801q1G791KaeVOvwgfYoQQvw4wAcsMd0NnhZ9U3k+2x5cs0O8r
/unsJ89DMFtSUUu+7zJ0stdGWAgrfVCOu3GG8+12hfG3pPk7dmOr3QRvgM7iRwCH
LZb11Si+n4fdNZg/UB4PED0TRVbTKk32sXO8nvqf5fZrSbNpVyO6gE7Ce0fFtdeF
pY24qN+Ero3gh6YbeB8jyzEBwY2Yhk6bCPSMkGweqlfP2vgYAKq7zddH2mzI66KR
8QBKEXj99s+L5DerqwMyKuTTEc7e0tSWNfSLTKy3mDgFtjmu9uvUxGNmDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAD9unQQOo4EtU2ADJyp/SDAa8AiMB8GA1UdIwQY
MBaAFFN2Rn7wkhxRGQ4upg8quzvW6cGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2Yt
MmM3YTJhNzQ2Mjc5LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9jOWRiMGUtOTAzZS00ODVlLWI2N2YtMmM3YTJhNzQ2Mjc5
LzEvVTNaR2Z2Q1NIRkVaRGk2bUR5cTdPOWJwd1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAFlG6LQi
8BVOBKVdHEdq4UG4eTQuS+JYzOmZWq9jO17J0KyOoWDpXksU1hKWAcUCOEvOSHeA
CJkHCi0Po8LynnmKe0dfkl6+7r8zk4kRZwzxV1NXKTrpu6PPoAw8eJcJG5ECNDTj
oZk4HdAvdLvdPvhm9CSHK7Rg2EGmUS5AcsnFTilCwA/yVYpqSwzC+f8T12V+bghs
MN2a2s4hcUN5RUBsqJjZ0BB8eDaYYLj3fh57dzJ56qWql9AAhtHTk5Tq3geSzEjf
/KcsGX/TkZan6Sar68ODZVLQokLg/EfjycEmD8fRoVCSMb7iK4E+0ZJo+sum2/bL
EpUQcIT8xOVw5Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 02:04:08 2026 by rpki-client