This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
File:                     oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft (raw, json)
Hash identifier:          zqXuN52kY61eDhzZ/R07+tUdUPlE64T/WHRwVNE15So=
Subject key identifier:   91:61:FC:B2:50:75:82:B3:4D:17:F4:8A:6C:F6:F7:DE:2D:99:47:46
Authority key identifier: A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4
Certificate issuer:       /CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
Certificate serial:       019BE18098DF4C4DFC3825C8D1340EC24EB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
Manifest number:          17E3
Signing time:             Wed 21 Jan 2026 17:00:59 +0000
Manifest this update:     Wed 21 Jan 2026 17:00:59 +0000
Manifest next update:     Thu 22 Jan 2026 17:00:59 +0000
Files and hashes:         1: 1D6VdZ93vriFw0vJq3zsA_SVHYQ.roa (hash: wfcEJ94VdVBOXkIE/uYqWDRHCjqI3CAKjspAjKdc5FA=)
                          2: 6ANG8OJh4OznV_DcZX5PWVtHheM.roa (hash: NqWuvD35Q6Kj2pzaFTf900GyG3MSTmGkmgkkAWcoTkE=)
                          3: oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl (hash: xoDwA+GY3EzW7CUzRYwPwlAAPFy9GerOkQTZ3zcKB/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 15:22:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e1:80:98:df:4c:4d:fc:38:25:c8:d1:34:0e:c2:4e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a15e3f974b5f974656ccf4d45596caad1b9096d4
        Validity
            Not Before: Jan 21 17:00:59 2026 GMT
            Not After : Jan 22 17:00:59 2026 GMT
        Subject: CN=9161fcb2507582b34d17f48a6cf6f7de2d994746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:94:12:7a:14:0d:fb:11:97:42:f5:46:2c:46:
                    e6:d0:d4:51:88:41:2d:b8:88:44:48:46:e6:fb:89:
                    ed:10:a5:55:33:ce:79:e8:93:f0:99:8e:7b:a6:92:
                    67:26:b9:cb:8f:3a:b3:6e:c8:29:73:21:27:fc:a2:
                    11:7d:3e:12:38:36:1e:aa:d1:6b:d4:e3:63:79:3a:
                    1d:81:6f:a1:24:52:c8:2e:0b:f8:06:16:a1:38:3f:
                    6e:e3:f2:d2:bb:25:5a:2a:28:36:2f:09:b3:44:17:
                    aa:91:ed:d2:6b:be:e5:20:d1:c2:8c:5e:09:65:64:
                    cb:bd:f2:8e:d6:6c:c3:87:a2:76:ef:75:eb:61:ca:
                    d6:63:98:ec:77:5a:f8:c6:b1:b5:f6:d8:6f:88:ac:
                    0d:6c:98:40:00:5f:2f:e9:94:3e:3b:e3:1f:69:6b:
                    2d:54:33:4c:d1:eb:79:7a:ed:64:35:46:2f:04:7c:
                    62:03:39:b0:68:4c:9b:a5:3a:dc:58:29:98:c1:f9:
                    d5:49:68:51:a4:2f:e7:3f:8e:23:21:6e:b2:24:90:
                    eb:73:d3:48:e3:05:ed:54:27:15:fb:30:db:60:49:
                    4a:50:57:5a:e6:e4:d7:b6:00:15:c1:60:bb:f9:ba:
                    f8:68:5d:7c:b9:ed:56:77:44:c7:84:d9:d2:e7:73:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:61:FC:B2:50:75:82:B3:4D:17:F4:8A:6C:F6:F7:DE:2D:99:47:46
            X509v3 Authority Key Identifier:
                keyid:A1:5E:3F:97:4B:5F:97:46:56:CC:F4:D4:55:96:CA:AD:1B:90:96:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d6a422-3612-45af-83ab-d24b68966e0e/1/oV4_l0tfl0ZWzPTUVZbKrRuQltQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d7:a3:aa:6a:e7:f1:cb:68:b4:6f:d5:7f:b6:89:76:89:b9:
         db:2a:13:8c:9d:ab:31:92:68:ae:05:4e:fc:39:93:76:21:eb:
         2d:a3:2e:c1:62:81:b8:5a:a4:c2:40:87:7f:5f:74:f7:a5:82:
         c6:ac:39:56:fd:44:55:64:bd:bc:d5:69:4a:c4:0a:2f:4c:06:
         34:87:a0:93:e3:a4:ce:8f:11:6b:bb:f2:0c:05:01:1a:95:4f:
         39:5a:1f:32:34:57:02:2d:08:97:c5:70:6f:06:e8:45:27:eb:
         fa:3a:e1:83:00:ec:6c:ac:76:fa:fd:27:d5:cf:63:cb:73:b0:
         23:b0:ac:3b:89:a3:df:2b:da:89:a4:63:6b:a6:3b:bf:a7:6c:
         a0:f3:21:7a:0a:8b:01:ec:04:1d:f0:cb:98:f3:90:33:b6:53:
         91:8b:04:ae:5d:c6:49:ab:03:a0:45:74:80:b0:4b:0f:f7:d6:
         9a:51:49:e2:fa:fb:83:a5:1a:1d:57:f8:7e:80:9e:8e:a4:17:
         92:48:cc:aa:02:d6:84:ef:47:07:7f:44:3c:1e:75:23:2c:aa:
         a0:42:92:95:df:e3:50:92:ec:c6:0b:ce:de:be:9e:ec:91:94:
         8a:c2:69:a4:64:32:b1:62:bd:fb:a8:cb:0b:91:a9:a0:e9:56:
         63:b2:9a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvhgJjfTE38OCXI0TQOwk6xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNWUzZjk3NGI1Zjk3NDY1NmNjZjRkNDU1OTZjYWFkMWI5
MDk2ZDQwHhcNMjYwMTIxMTcwMDU5WhcNMjYwMTIyMTcwMDU5WjAzMTEwLwYDVQQD
Eyg5MTYxZmNiMjUwNzU4MmIzNGQxN2Y0OGE2Y2Y2ZjdkZTJkOTk0NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JQSehQN+xGXQvVGLEbm0NRRiEEt
uIhESEbm+4ntEKVVM8556JPwmY57ppJnJrnLjzqzbsgpcyEn/KIRfT4SODYeqtFr
1ONjeTodgW+hJFLILgv4BhahOD9u4/LSuyVaKig2LwmzRBeqke3Sa77lINHCjF4J
ZWTLvfKO1mzDh6J273XrYcrWY5jsd1r4xrG19thviKwNbJhAAF8v6ZQ+O+MfaWst
VDNM0et5eu1kNUYvBHxiAzmwaEybpTrcWCmYwfnVSWhRpC/nP44jIW6yJJDrc9NI
4wXtVCcV+zDbYElKUFda5uTXtgAVwWC7+br4aF18ue1Wd0THhNnS53MlNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJFh/LJQdYKzTRf0imz2994tmUdGMB8GA1UdIwQY
MBaAFKFeP5dLX5dGVsz01FWWyq0bkJbUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWIt
ZDI0YjY4OTY2ZTBlLzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kNmE0MjItMzYxMi00NWFmLTgzYWItZDI0YjY4OTY2ZTBl
LzEvb1Y0X2wwdGZsMFpXelBUVVZaYktyUnVRbHRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdejqmrn
8ctotG/Vf7aJdom52yoTjJ2rMZJorgVO/DmTdiHrLaMuwWKBuFqkwkCHf19096WC
xqw5Vv1EVWS9vNVpSsQKL0wGNIegk+Okzo8Ra7vyDAUBGpVPOVofMjRXAi0Il8Vw
bwboRSfr+jrhgwDsbKx2+v0n1c9jy3OwI7CsO4mj3yvaiaRja6Y7v6dsoPMhegqL
AewEHfDLmPOQM7ZTkYsErl3GSasDoEV0gLBLD/fWmlFJ4vr7g6UaHVf4foCejqQX
kkjMqgLWhO9HB39EPB51IyyqoEKSld/jUJLsxgvO3r6e7JGUisJppGQysWK9+6jL
C5GpoOlWY7Kaew==
-----END CERTIFICATE-----
Generated at Wed Jan 21 23:41:30 2026 by rpki-client