This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File:                     vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier:          45btql2e3knVy7CWiWuUfkZKV4z027HjQ5QpHB+LVLI=
Subject key identifier:   79:2D:41:CA:34:2B:17:75:22:67:8D:F2:CF:BD:77:E8:6E:03:5D:29
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer:       /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial:       019BDE1216D6D2CFE9C942E45C8DBA393C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number:          17DE
Signing time:             Wed 21 Jan 2026 01:01:25 +0000
Manifest this update:     Wed 21 Jan 2026 01:01:25 +0000
Manifest next update:     Thu 22 Jan 2026 01:01:25 +0000
Files and hashes:         1: YMLHUww6Ty7DeidmelYQRqZnCdM.roa (hash: P7cWbiKqBlhPbSP1wZkYORC+sgOuxgIGzowAM0v0Bt8=)
                          2: aRZgyD1JgEAzhi78zDQ-rQMTq6s.roa (hash: ElYpbz1hT+tdDX0OO2S2lUgbf4kvMtgLbQtU+Xc+lMY=)
                          3: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: EuzjHnu4mZgiueTsRiUcfCc9FfbsJL3zQZuiIU4a6R4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:12:16:d6:d2:cf:e9:c9:42:e4:5c:8d:ba:39:3c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
        Validity
            Not Before: Jan 21 01:01:25 2026 GMT
            Not After : Jan 22 01:01:25 2026 GMT
        Subject: CN=792d41ca342b177522678df2cfbd77e86e035d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:25:fe:7e:29:12:09:93:e7:0d:a8:b9:e1:
                    b2:84:e3:eb:95:36:a2:c0:ab:3b:d0:26:28:3a:58:
                    bc:c4:3f:65:81:16:5d:38:f7:90:7e:f4:49:ce:58:
                    62:df:7b:f5:be:b6:3c:43:3b:e8:3f:c3:00:03:92:
                    aa:12:05:14:f6:84:75:81:6f:1f:18:09:75:eb:55:
                    54:80:11:e8:f4:e2:b0:f9:4b:c5:ce:57:22:b7:47:
                    2a:59:ba:2f:dd:b0:a2:8d:07:13:e3:1e:a9:40:13:
                    cc:88:ce:7b:04:60:0f:44:77:3b:69:d0:12:de:33:
                    17:a3:82:99:f9:1f:6f:1b:15:a9:84:25:6b:e7:06:
                    00:91:00:31:02:88:9a:ec:18:e9:5a:b8:56:eb:fb:
                    43:f7:79:cc:11:17:af:06:95:64:b1:32:bd:bc:ae:
                    0c:e3:9b:db:6c:0b:82:01:32:51:e4:90:d4:d4:a3:
                    b8:03:fb:cf:55:14:90:ae:dd:1e:da:d0:6a:d1:42:
                    b1:fc:a9:64:88:12:b7:13:84:c3:9d:95:6a:0c:bd:
                    be:df:d9:70:da:fa:b6:20:ea:0d:0a:08:37:7b:51:
                    89:8f:43:23:03:d6:1d:e2:a2:a9:5a:f5:2c:42:f1:
                    13:dd:c6:97:57:e4:3c:15:64:c2:64:57:6a:64:69:
                    49:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2D:41:CA:34:2B:17:75:22:67:8D:F2:CF:BD:77:E8:6E:03:5D:29
            X509v3 Authority Key Identifier:
                keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:32:9f:2b:1e:9a:7b:7c:a7:81:fa:63:64:70:1c:61:16:
         21:9f:89:c7:2c:89:d6:39:d0:ca:c6:ea:dc:14:eb:53:e6:39:
         10:cb:3e:05:6c:00:f4:e0:ef:9f:b9:2c:d4:8a:92:d9:12:06:
         14:5a:d5:b1:1a:ba:34:f5:93:b6:e4:c5:71:e6:2b:37:ed:c7:
         7c:03:6f:87:4b:8d:7d:c9:f3:93:be:2c:de:33:4c:83:02:61:
         64:8c:ac:d6:ff:8b:82:69:fd:6e:04:9e:54:d2:88:62:3c:3b:
         79:c5:46:b7:94:a6:e2:24:63:1d:10:60:dc:07:c3:30:cf:73:
         a2:95:2f:45:fc:39:f3:93:d3:7e:24:4e:18:51:22:c3:55:f0:
         73:b1:8c:d8:e1:16:af:24:3d:4a:d0:8f:a1:a4:74:c3:8c:50:
         56:8f:68:06:23:90:81:0c:37:06:36:97:a9:25:e5:38:69:15:
         1f:c5:0a:d9:ae:e5:07:f3:f8:7f:89:d0:ec:68:31:66:39:42:
         93:25:31:b7:ef:a1:9d:15:5b:d5:5b:ac:fe:8d:28:45:82:aa:
         9b:2e:21:75:2c:9e:0c:48:0c:02:61:02:74:9d:0b:fa:20:11:
         c3:21:a7:79:db:df:40:94:7f:fa:8f:e0:3e:7e:40:87:45:a0:
         37:19:f0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZveEhbW0s/pyULkXI26OTwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZjUyNTJjY2FjM2Y2ZGMxNDI2YjU1M2YyYzFjNzIzM2Fj
Yzg5NGIwHhcNMjYwMTIxMDEwMTI1WhcNMjYwMTIyMDEwMTI1WjAzMTEwLwYDVQQD
Eyg3OTJkNDFjYTM0MmIxNzc1MjI2NzhkZjJjZmJkNzdlODZlMDM1ZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCIl/n4pEgmT5w2oueGyhOPrlTai
wKs70CYoOli8xD9lgRZdOPeQfvRJzlhi33v1vrY8QzvoP8MAA5KqEgUU9oR1gW8f
GAl161VUgBHo9OKw+UvFzlcit0cqWbov3bCijQcT4x6pQBPMiM57BGAPRHc7adAS
3jMXo4KZ+R9vGxWphCVr5wYAkQAxAoia7BjpWrhW6/tD93nMERevBpVksTK9vK4M
45vbbAuCATJR5JDU1KO4A/vPVRSQrt0e2tBq0UKx/KlkiBK3E4TDnZVqDL2+39lw
2vq2IOoNCgg3e1GJj0MjA9Yd4qKpWvUsQvET3caXV+Q8FWTCZFdqZGlJGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHktQco0Kxd1ImeN8s+9d+huA10pMB8GA1UdIwQY
MBaAFL71JSzKw/bcFCa1U/LBxyM6zIlLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmIt
MTFlNWY2ZDEyZWYxLzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9lN2ZjOTgtMTI4YS00NTNkLWJkZmItMTFlNWY2ZDEyZWYx
LzEvdnZVbExNckQ5dHdVSnJWVDhzSEhJenJNaVVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaToynyse
mnt8p4H6Y2RwHGEWIZ+JxyyJ1jnQysbq3BTrU+Y5EMs+BWwA9ODvn7ks1IqS2RIG
FFrVsRq6NPWTtuTFceYrN+3HfANvh0uNfcnzk74s3jNMgwJhZIys1v+Lgmn9bgSe
VNKIYjw7ecVGt5Sm4iRjHRBg3AfDMM9zopUvRfw585PTfiROGFEiw1Xwc7GM2OEW
ryQ9StCPoaR0w4xQVo9oBiOQgQw3BjaXqSXlOGkVH8UK2a7lB/P4f4nQ7GgxZjlC
kyUxt++hnRVb1Vus/o0oRYKqmy4hdSyeDEgMAmECdJ0L+iARwyGnedvfQJR/+o/g
Pn5Ah0WgNxnwfQ==
-----END CERTIFICATE-----
Generated at Wed Jan 21 08:58:01 2026 by rpki-client