This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
File:                     L4FK3B1SCeCY8HitvIVrrYO3ScI.mft (raw, json)
Hash identifier:          Jh6kX//9eoBhiiN5op+H5KJSwIPEQTqe3yXuH4oeRSQ=
Subject key identifier:   72:68:63:00:14:B8:07:77:27:4F:56:EB:9F:5D:E5:BD:8F:AF:50:7F
Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2
Certificate issuer:       /CN=2f814adc1d5209e098f078adbc856bad83b749c2
Certificate serial:       019BFC1CC914FEBE377E42B17C97FDFE69A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
Manifest number:          182A
Signing time:             Mon 26 Jan 2026 21:01:43 +0000
Manifest this update:     Mon 26 Jan 2026 21:01:43 +0000
Manifest next update:     Tue 27 Jan 2026 21:01:43 +0000
Files and hashes:         1: Fs9aAyK9lTsbVm0NOu0XxmRrYvM.roa (hash: RzyHKDUe729UgBjp7Kobbrat8Gaw2JQ/Zg4A7HvcVdI=)
                          2: L4FK3B1SCeCY8HitvIVrrYO3ScI.crl (hash: 0W0Ob4JKoEbRYQybDnj1fdwFZHIsAC6VA7vBXmo+bY8=)
                          3: MrkTSTOQnAaGRm2DjkE4wDAii6I.roa (hash: IemK3qnTPE/e8MsNSBvQ7f7MgzptN5jWR7/rlu58qzM=)
                          4: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (hash: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI=)
                          5: gF4iUNMjCX6YP857V9CNjLm-AIg.roa (hash: FhDwHm21Q6QTRo/sfldBISr1alr6N55dx1Ou14/lEJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:c9:14:fe:be:37:7e:42:b1:7c:97:fd:fe:69:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2
        Validity
            Not Before: Jan 26 21:01:43 2026 GMT
            Not After : Jan 27 21:01:43 2026 GMT
        Subject: CN=7268630014b80777274f56eb9f5de5bd8faf507f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:61:c5:f4:ac:0e:5e:05:5e:21:43:03:31:e1:
                    86:01:33:0e:bf:75:a1:9e:a5:b9:4c:74:c2:5c:06:
                    d3:22:f8:67:84:0f:e3:74:63:97:81:c3:dc:e5:5e:
                    3c:a3:1e:d9:8c:7e:ee:77:2e:ee:1c:ed:43:74:62:
                    47:eb:31:9b:36:b3:9c:73:0d:9f:d0:83:5e:6f:2b:
                    4b:6a:ae:10:91:17:82:98:17:26:ab:ce:c5:66:c6:
                    d8:f2:2b:f9:6a:5b:d6:47:9d:97:8c:24:80:64:55:
                    53:69:30:50:78:58:0f:81:79:53:dd:df:f6:28:92:
                    c3:04:85:7d:a7:bd:be:93:0c:88:b0:ed:4d:48:44:
                    b6:75:26:fa:39:d4:8a:55:1b:bd:2c:92:31:68:9f:
                    92:08:63:98:a4:7d:27:84:c6:11:2d:65:32:7d:a3:
                    0e:c3:5a:a4:7c:1e:d5:0f:cb:db:57:7f:1a:7b:11:
                    49:c4:e2:5d:3b:c9:1c:bd:2e:5c:c6:d9:89:dd:e7:
                    aa:8e:6d:18:9c:cd:02:56:58:18:5e:d3:99:46:ae:
                    d5:35:5a:73:8f:a0:be:ea:29:67:0c:e5:18:0b:7d:
                    a9:42:72:d1:7a:9d:d0:68:08:a4:88:6c:5b:3b:d0:
                    90:6d:a0:b4:a6:6c:17:ce:9e:35:0e:12:6f:bb:58:
                    56:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:68:63:00:14:B8:07:77:27:4F:56:EB:9F:5D:E5:BD:8F:AF:50:7F
            X509v3 Authority Key Identifier:
                keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6e:43:01:9a:00:8a:29:dc:23:11:d5:8a:76:29:79:21:52:
         39:0d:77:f1:7f:61:7c:9a:55:c2:ec:ca:3f:69:05:ed:37:94:
         49:6f:02:18:07:86:5d:d9:64:a8:0b:87:30:5a:22:e7:ca:db:
         e3:82:2a:5c:ff:cc:6c:ed:f2:f0:d8:d2:0e:4c:97:81:95:7e:
         1f:3b:58:6c:19:99:ad:f5:b3:35:95:59:c3:25:9e:65:ba:f3:
         a0:96:4b:cd:f1:28:f3:87:76:37:f0:ed:eb:cb:89:d5:ac:88:
         56:b9:33:14:f1:fa:6c:65:bb:65:40:16:5a:80:55:ec:5e:fd:
         b9:bc:3d:98:d7:76:64:13:4e:49:be:bb:f8:05:fb:b3:dc:ad:
         3a:c8:c9:ce:17:60:2a:6f:12:07:0b:d0:9b:87:0d:de:08:2b:
         e6:29:c3:40:44:c7:16:fa:89:62:9c:14:85:14:85:de:1d:fc:
         2b:33:0b:27:15:c5:a2:ce:7e:42:32:1d:6b:2d:b3:0b:8d:2a:
         ec:7b:c1:a7:5d:6b:2f:d3:49:da:e5:dd:75:25:0e:60:45:33:
         84:6b:b6:41:af:19:65:5f:0c:84:f5:b8:a7:e6:04:8b:07:00:
         81:74:53:10:24:d2:8c:21:88:e8:38:19:59:01:a2:be:3e:b2:
         e8:49:ad:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8HMkU/r43fkKxfJf9/mmgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi
NzQ5YzIwHhcNMjYwMTI2MjEwMTQzWhcNMjYwMTI3MjEwMTQzWjAzMTEwLwYDVQQD
Eyg3MjY4NjMwMDE0YjgwNzc3Mjc0ZjU2ZWI5ZjVkZTViZDhmYWY1MDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmHF9KwOXgVeIUMDMeGGATMOv3Wh
nqW5THTCXAbTIvhnhA/jdGOXgcPc5V48ox7ZjH7udy7uHO1DdGJH6zGbNrOccw2f
0INebytLaq4QkReCmBcmq87FZsbY8iv5alvWR52XjCSAZFVTaTBQeFgPgXlT3d/2
KJLDBIV9p72+kwyIsO1NSES2dSb6OdSKVRu9LJIxaJ+SCGOYpH0nhMYRLWUyfaMO
w1qkfB7VD8vbV38aexFJxOJdO8kcvS5cxtmJ3eeqjm0YnM0CVlgYXtOZRq7VNVpz
j6C+6ilnDOUYC32pQnLRep3QaAikiGxbO9CQbaC0pmwXzp41DhJvu1hWBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJoYwAUuAd3J09W659d5b2Pr1B/MB8GA1UdIwQY
MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt
ZGY4NmI2ZGQ5OTdjLzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj
LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG5DAZoA
iincIxHVinYpeSFSOQ138X9hfJpVwuzKP2kF7TeUSW8CGAeGXdlkqAuHMFoi58rb
44IqXP/MbO3y8NjSDkyXgZV+HztYbBmZrfWzNZVZwyWeZbrzoJZLzfEo84d2N/Dt
68uJ1ayIVrkzFPH6bGW7ZUAWWoBV7F79ubw9mNd2ZBNOSb67+AX7s9ytOsjJzhdg
Km8SBwvQm4cN3ggr5inDQETHFvqJYpwUhRSF3h38KzMLJxXFos5+QjIday2zC40q
7HvBp11rL9NJ2uXddSUOYEUzhGu2Qa8ZZV8MhPW4p+YEiwcAgXRTECTSjCGI6DgZ
WQGivj6y6Emtzw==
-----END CERTIFICATE-----
Generated at Tue Jan 27 06:06:32 2026 by rpki-client