This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File:                     Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier:          rU6KQKNXy/PCBdzGTXzEIfqdv2IK3Nzhrv6KOBOJkZ8=
Subject key identifier:   2A:63:16:22:62:FF:82:64:F5:2B:BC:46:1F:DC:36:43:E3:89:42:AB
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer:       /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial:       019BF499CDC53534A8A8E891E16DD0B27CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number:          1272
Signing time:             Sun 25 Jan 2026 10:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:18 +0000
Files and hashes:         1: AoZyCGmwWYOvTcBoBxppvgjx5wI.roa (hash: JjEnLVWUXr5ybK4HzaNHUGz7wgv3mVaZHLhSRwmw5kY=)
                          2: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: ehDucQKD5YyCOP6bo2dITsEvL3bxoMsz/xajY8Gzz3I=)
                          3: MUCGMyUzZSrYs0HfPvn9wE8K0Vs.roa (hash: AJPgOXLo9blCFV8x9Zk5FOB9xhjaDRBtGEHIixQGenA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:cd:c5:35:34:a8:a8:e8:91:e1:6d:d0:b2:7c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
        Validity
            Not Before: Jan 25 10:01:18 2026 GMT
            Not After : Jan 26 10:01:18 2026 GMT
        Subject: CN=2a63162262ff8264f52bbc461fdc3643e38942ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:18:31:1a:61:4a:9c:86:07:9a:73:9a:64:2c:
                    7e:38:fd:b8:59:f0:21:73:a4:f6:36:e2:60:a8:dc:
                    b4:f9:ca:38:70:07:fa:be:ae:bb:cb:3e:31:9c:fd:
                    69:c5:e7:44:f7:21:b0:2d:04:2f:bb:1f:cc:4d:3f:
                    b0:6b:ad:63:92:da:26:7d:69:e9:d8:8c:43:39:40:
                    df:65:d8:8d:04:a1:74:34:ad:0b:8b:24:3e:91:76:
                    2a:5b:6f:05:de:be:9e:a8:76:1c:9a:2e:bc:53:69:
                    bf:e5:9e:d6:b4:6f:71:51:9a:cb:45:41:d1:6a:cb:
                    97:7f:e9:cf:55:a7:88:7b:f6:e7:0e:43:67:43:a3:
                    1c:8e:da:55:ca:20:35:c2:5a:47:64:e6:0c:8d:82:
                    f6:92:39:dd:05:83:42:a8:26:1a:ff:56:e5:35:28:
                    a2:74:a0:77:41:86:b3:c7:18:7f:21:f6:c7:11:c7:
                    64:1b:40:9c:66:fc:e0:52:f4:d5:e2:e6:6b:11:4a:
                    d3:15:6c:a0:9d:c6:a0:d4:1a:18:c0:3a:a2:7e:2d:
                    c3:ba:b0:e8:7d:0a:8b:6a:c8:9d:bf:e5:d8:72:d4:
                    61:a3:8f:73:46:65:03:8a:03:07:dc:7d:46:17:c7:
                    96:3a:56:aa:fc:5a:86:dd:37:07:f5:77:35:b8:b9:
                    a9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:63:16:22:62:FF:82:64:F5:2B:BC:46:1F:DC:36:43:E3:89:42:AB
            X509v3 Authority Key Identifier:
                keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:aa:7a:0a:fc:52:e0:3d:21:a7:05:0f:f2:b8:71:f9:70:1b:
         3d:95:37:72:2f:c0:21:d4:59:2d:fd:03:8c:48:db:48:9e:e5:
         5b:65:ec:fd:1d:e0:80:05:20:8e:8f:ed:6e:ef:e2:40:7e:a4:
         59:7c:2b:3e:5f:0e:96:d6:87:fc:1d:47:5c:d5:19:6d:f6:6d:
         bd:bd:87:36:e3:19:2d:1a:a4:ac:71:03:21:94:61:16:ae:37:
         e1:09:64:66:56:0f:88:e2:5b:6f:b8:18:2d:8e:13:f0:68:39:
         c8:97:70:80:1b:0f:bb:cd:c1:fb:0f:90:c0:01:49:b0:9b:2e:
         77:39:10:2e:60:49:dc:e7:e9:6a:f8:2f:be:94:85:99:92:72:
         ec:f8:ca:df:49:d4:42:0d:4c:a3:66:14:7e:df:bf:d1:9c:76:
         30:43:09:16:6f:94:85:32:6e:95:fb:55:f2:ae:8e:50:c1:f0:
         b0:96:95:64:2a:df:dd:a8:91:b4:88:1b:a8:96:d0:0c:9d:b9:
         cd:c7:a8:7d:75:77:eb:0f:72:1b:a0:57:17:ce:06:e7:be:e1:
         53:e3:a6:25:2e:99:db:fb:f1:a1:3a:9c:77:a1:73:a6:5f:5d:
         87:25:a8:f5:f4:0d:45:54:bd:ef:44:df:37:2b:09:6a:00:43:
         c4:fb:8a:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0mc3FNTSoqOiR4W3Qsny0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZWViMjQyZmIwYWZhYTAzN2Q5Y2FmNTYwNGM2NTg3ZTQw
ZGUzYjUwHhcNMjYwMTI1MTAwMTE4WhcNMjYwMTI2MTAwMTE4WjAzMTEwLwYDVQQD
EygyYTYzMTYyMjYyZmY4MjY0ZjUyYmJjNDYxZmRjMzY0M2UzODk0MmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBgxGmFKnIYHmnOaZCx+OP24WfAh
c6T2NuJgqNy0+co4cAf6vq67yz4xnP1pxedE9yGwLQQvux/MTT+wa61jktomfWnp
2IxDOUDfZdiNBKF0NK0LiyQ+kXYqW28F3r6eqHYcmi68U2m/5Z7WtG9xUZrLRUHR
asuXf+nPVaeIe/bnDkNnQ6McjtpVyiA1wlpHZOYMjYL2kjndBYNCqCYa/1blNSii
dKB3QYazxxh/IfbHEcdkG0CcZvzgUvTV4uZrEUrTFWygncag1BoYwDqifi3DurDo
fQqLasidv+XYctRho49zRmUDigMH3H1GF8eWOlaq/FqG3TcH9Xc1uLmp3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpjFiJi/4Jk9Su8Rh/cNkPjiUKrMB8GA1UdIwQY
MBaAFCLuskL7CvqgN9nK9WBMZYfkDeO1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYt
MjUxNTYyZjAwZmM1LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDYyYzAtZTVkYi00ZDk0LWJhMGYtMjUxNTYyZjAwZmM1
LzEvSXU2eVF2c0stcUEzMmNyMVlFeGxoLVFONDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKp6CvxS
4D0hpwUP8rhx+XAbPZU3ci/AIdRZLf0DjEjbSJ7lW2Xs/R3ggAUgjo/tbu/iQH6k
WXwrPl8OltaH/B1HXNUZbfZtvb2HNuMZLRqkrHEDIZRhFq434QlkZlYPiOJbb7gY
LY4T8Gg5yJdwgBsPu83B+w+QwAFJsJsudzkQLmBJ3OfpavgvvpSFmZJy7PjK30nU
Qg1Mo2YUft+/0Zx2MEMJFm+UhTJulftV8q6OUMHwsJaVZCrf3aiRtIgbqJbQDJ25
zceofXV36w9yG6BXF84G577hU+OmJS6Z2/vxoTqcd6Fzpl9dhyWo9fQNRVS970Tf
NysJagBDxPuKNA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:46 2026 by rpki-client