This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
File:                     ssC9r63qeNzjEvhi3fQrG9TE9kU.mft (raw, json)
Hash identifier:          aBVnAAcwcb+NQaN2yfzibBa8mY51ikjjQ7Es6TkohoE=
Subject key identifier:   D1:63:01:E8:81:7E:31:F4:84:96:EC:5E:1D:36:AE:06:B7:2F:DF:BD
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Certificate issuer:       /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial:       019BFB401A8958F3ED202ADE06680E61DD77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
Manifest number:          115A
Signing time:             Mon 26 Jan 2026 17:00:40 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:40 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:40 +0000
Files and hashes:         1: 3JNSQLDSVjMCAeXDdRfs56ArU_A.roa (hash: rZTM/BDsvJUHVVJdlV2ux5RuYfvV5Fs0/F1F4geykB8=)
                          2: maD4ZOo_rUs8z8qAY9Uyjs0wQzk.roa (hash: +0Yc2a4Hcin9UDFGbH7GTi45lPLvJT0qe8vgESqSU1M=)
                          3: sFtpmEwf8BZ7WD7WnZcVk65ZP4c.roa (hash: m7H1o/4M+RauJJ9zEivTYaIxQJNTjYvvSZKIkxe1inE=)
                          4: ssC9r63qeNzjEvhi3fQrG9TE9kU.crl (hash: UesGqDOCQYTqgvo2aV40OIRwDVcEw+UybKw1H8z1egI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:1a:89:58:f3:ed:20:2a:de:06:68:0e:61:dd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
        Validity
            Not Before: Jan 26 17:00:40 2026 GMT
            Not After : Jan 27 17:00:40 2026 GMT
        Subject: CN=d16301e8817e31f48496ec5e1d36ae06b72fdfbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:20:12:3c:c8:ec:93:29:d1:28:68:dd:28:
                    65:78:e3:93:12:16:de:d3:96:f3:05:dc:1d:16:df:
                    65:0e:e3:55:21:d9:6f:53:c7:8a:30:bf:60:01:db:
                    40:43:db:a4:5f:5d:f3:bc:56:50:d0:9a:6d:6c:04:
                    5f:9e:91:7a:6c:cb:86:0f:d1:c7:93:80:d0:25:09:
                    03:a9:24:98:39:3b:eb:23:ae:54:d3:21:aa:38:e8:
                    b7:59:7e:42:87:fe:ca:2a:80:d2:b4:ca:71:d7:6b:
                    6f:37:52:b5:2c:4d:19:fd:86:a6:1d:d7:f5:31:30:
                    8f:57:c9:4a:d7:80:53:36:15:36:9d:56:5c:4d:2a:
                    2c:78:25:e8:92:14:37:dc:b2:9e:36:b8:82:ce:cf:
                    96:da:84:5a:93:fa:bb:c7:43:97:27:b5:81:07:7b:
                    a8:69:f7:d5:1b:34:59:cb:7f:a4:17:92:38:ca:4a:
                    38:3f:74:2a:0e:a9:f2:73:ad:e1:f4:3e:c4:44:3a:
                    dd:db:6b:3b:7a:d6:72:18:3b:c4:42:a0:42:15:ac:
                    50:f7:ba:94:f7:36:4e:19:2f:f8:a3:f5:8c:7f:86:
                    0e:db:50:e0:80:6e:f4:1b:70:2f:2c:3c:c8:71:27:
                    1d:c1:d4:aa:93:98:0a:fb:35:2d:5c:8e:d9:13:8a:
                    6c:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:01:E8:81:7E:31:F4:84:96:EC:5E:1D:36:AE:06:B7:2F:DF:BD
            X509v3 Authority Key Identifier:
                keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:02:b3:68:a9:c9:cf:59:8d:9b:39:f6:ac:1b:3f:d2:5e:c4:
         72:29:bd:e2:c5:34:6c:78:3d:90:54:10:57:ef:37:2c:7d:1c:
         2d:0e:01:0a:73:5d:82:c4:dc:52:9c:24:a8:f2:2d:13:60:fc:
         2b:d2:16:10:fe:bf:3a:26:df:5e:e4:29:31:ff:09:2d:15:aa:
         a7:3d:1c:e3:e2:d5:1a:03:c3:67:ef:4e:84:0b:d0:28:ac:47:
         87:29:0d:ea:fe:74:b1:7a:93:95:39:35:15:64:c2:9c:74:51:
         36:bb:6b:a7:54:b8:34:7d:a9:53:12:2e:ec:70:80:0b:1d:c4:
         fd:59:18:92:57:ea:61:f9:85:46:59:f5:aa:34:a4:16:9b:84:
         c3:39:ab:48:dd:a4:cc:63:f0:54:05:66:05:3d:c4:5c:f8:51:
         ad:bc:f0:7f:d2:6f:b2:ea:bf:cd:d0:b5:b7:a5:76:8a:06:97:
         ee:5a:b9:94:16:1c:3a:a9:a4:67:b9:97:86:84:d3:c1:bb:70:
         cd:d5:2a:fe:c4:4b:78:76:d3:a4:ff:ad:03:bd:df:50:ba:12:
         00:49:13:e7:be:19:a2:0c:af:ac:91:ff:ae:e1:99:43:44:b0:
         a2:9c:b9:d4:7d:92:ce:58:2e:e2:54:18:c0:45:d4:72:ea:4b:
         00:4b:d3:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7QBqJWPPtICreBmgOYd13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyYzBiZGFmYWRlYTc4ZGNlMzEyZjg2MmRkZjQyYjFiZDRj
NGY2NDUwHhcNMjYwMTI2MTcwMDQwWhcNMjYwMTI3MTcwMDQwWjAzMTEwLwYDVQQD
EyhkMTYzMDFlODgxN2UzMWY0ODQ5NmVjNWUxZDM2YWUwNmI3MmZkZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOUgEjzI7JMp0Sho3ShleOOTEhbe
05bzBdwdFt9lDuNVIdlvU8eKML9gAdtAQ9ukX13zvFZQ0JptbARfnpF6bMuGD9HH
k4DQJQkDqSSYOTvrI65U0yGqOOi3WX5Ch/7KKoDStMpx12tvN1K1LE0Z/YamHdf1
MTCPV8lK14BTNhU2nVZcTSoseCXokhQ33LKeNriCzs+W2oRak/q7x0OXJ7WBB3uo
affVGzRZy3+kF5I4yko4P3QqDqnyc63h9D7ERDrd22s7etZyGDvEQqBCFaxQ97qU
9zZOGS/4o/WMf4YO21DggG70G3AvLDzIcScdwdSqk5gK+zUtXI7ZE4psdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFjAeiBfjH0hJbsXh02rga3L9+9MB8GA1UdIwQY
MBaAFLLAva+t6njc4xL4Yt30KxvUxPZFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMt
ZmNjMzM2ZWVkOGQ3LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8xZjM3MTItY2YyYy00ODZlLTk1YjMtZmNjMzM2ZWVkOGQ3
LzEvc3NDOXI2M3FlTnpqRXZoaTNmUXJHOVRFOWtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwKzaKnJ
z1mNmzn2rBs/0l7Ecim94sU0bHg9kFQQV+83LH0cLQ4BCnNdgsTcUpwkqPItE2D8
K9IWEP6/OibfXuQpMf8JLRWqpz0c4+LVGgPDZ+9OhAvQKKxHhykN6v50sXqTlTk1
FWTCnHRRNrtrp1S4NH2pUxIu7HCACx3E/VkYklfqYfmFRln1qjSkFpuEwzmrSN2k
zGPwVAVmBT3EXPhRrbzwf9Jvsuq/zdC1t6V2igaX7lq5lBYcOqmkZ7mXhoTTwbtw
zdUq/sRLeHbTpP+tA73fULoSAEkT574ZogyvrJH/ruGZQ0Swopy51H2Szlgu4lQY
wEXUcupLAEvTAg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 01:18:56 2026 by rpki-client