This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          CPQkF00Sl4J08iEgCsmPQAz4VW8gUvprtPnHUvXQWUE=
Subject key identifier:   59:29:4E:88:D0:19:AD:24:77:5C:7E:45:E5:5B:2D:02:57:B1:3A:82
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019BF9522D402CF688FBA7873D8BAC3175B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          17F1
Signing time:             Mon 26 Jan 2026 08:01:10 +0000
Manifest this update:     Mon 26 Jan 2026 08:01:10 +0000
Manifest next update:     Tue 27 Jan 2026 08:01:10 +0000
Files and hashes:         1: JiEsZ1zOe46gzADySdG16eZ5Sjo.roa (hash: 0bq0qa1f8p4Ial4yz+WAIFxn5n2T06ajuz5dHOKo9Bg=)
                          2: ZmDQJclFbfRowgpnHRptrYIeIug.roa (hash: H/7KqBnapWq4unhs3UjmS/EFy+upD+qehXGAkF2UTwA=)
                          3: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: VehBQfrWIkAqJyqZqs1AthjnD1L3rBf52rmwtBfWPak=)
                          4: gX_bo7WycAyP4eHEuchQhpnD15s.roa (hash: 4TJL/ac+L1uxUdH7FW4vMCHyhAZJAL3RXJ9Pg1etDtA=)
                          5: yNoIji7kPj6SkrPhrYc1VI7PgwE.roa (hash: y0iJCdo0OgTZ1Mu1ZduXdjf6TefpBi+JC2BMHyoKy/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:52:2d:40:2c:f6:88:fb:a7:87:3d:8b:ac:31:75:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Jan 26 08:01:10 2026 GMT
            Not After : Jan 27 08:01:10 2026 GMT
        Subject: CN=59294e88d019ad24775c7e45e55b2d0257b13a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9a:51:c4:7d:75:2b:31:ab:6d:8d:e7:25:6c:
                    d9:1d:fa:e5:ca:1b:2c:97:5a:91:2a:7a:75:7b:7a:
                    64:09:3d:3b:43:d8:aa:37:b9:bb:9d:fa:49:2c:a1:
                    c6:82:14:a7:8a:f3:e8:98:ea:f0:0d:f1:e5:0c:26:
                    47:a9:21:93:21:f7:ea:b2:78:eb:f4:b3:04:24:4c:
                    ac:29:67:81:36:67:de:28:fa:3f:2a:90:19:1d:15:
                    fc:35:7f:d4:3a:cc:96:c4:91:90:af:a3:19:3c:29:
                    7b:40:9c:82:49:4a:86:d9:83:70:0f:33:0e:63:10:
                    2b:87:71:7d:3e:f3:92:11:60:94:3b:4f:fb:40:7f:
                    ef:d6:bc:48:a9:bd:f1:61:75:de:23:3c:5a:0a:44:
                    38:d6:89:1e:cd:f0:0d:f3:0e:3d:14:52:b2:9c:90:
                    49:01:5a:13:99:1b:e2:90:c3:06:3e:04:c0:c3:38:
                    d2:39:91:4e:d2:d8:c5:34:6d:e2:88:be:1e:02:c7:
                    1b:bd:b4:1a:e2:9a:2c:c9:7c:54:a3:6c:80:c8:30:
                    5a:4d:1b:aa:ff:54:f1:dd:e6:69:30:f0:dc:d3:26:
                    ce:fa:a1:44:42:84:b0:b8:40:96:6f:94:bc:59:68:
                    67:4c:ac:6f:7b:74:57:19:e4:c8:e9:94:fd:6b:c6:
                    69:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:29:4E:88:D0:19:AD:24:77:5C:7E:45:E5:5B:2D:02:57:B1:3A:82
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:07:4a:5d:dd:22:6b:b0:f6:14:3a:ff:30:5d:54:f5:8e:22:
         22:9c:0f:16:5e:a4:99:bd:80:ca:f2:75:bf:71:fa:ae:4e:7b:
         c9:a8:0b:77:ee:89:ca:9e:2c:d9:45:7d:b2:e9:55:c0:e9:3b:
         f0:0d:45:69:2d:d0:72:26:8f:05:cb:88:55:32:00:49:44:c0:
         25:1c:0c:fa:98:7e:88:8b:7a:06:4a:dc:14:82:63:85:ab:70:
         32:57:aa:1b:3e:0b:b0:0f:5e:59:53:45:19:46:92:41:b9:d6:
         50:f9:02:80:14:c3:a6:74:6d:99:d3:f4:8c:0a:c1:a2:23:f0:
         d5:68:a4:14:cf:15:17:93:59:27:25:4c:f5:0a:92:78:a5:04:
         e1:c6:fa:43:ef:5e:56:ad:4c:3f:87:f3:01:e4:1d:6c:d9:2b:
         85:d8:be:59:eb:be:64:be:2c:a8:54:2e:26:a0:07:6e:e6:34:
         56:a2:6b:df:07:a0:25:6e:96:09:b9:f5:ac:22:af:52:7d:51:
         22:33:45:d7:3e:5e:fa:dc:75:43:0f:8b:f8:0a:19:a1:76:98:
         32:24:13:3c:19:5d:0d:4a:d4:3f:15:a4:3c:78:40:73:84:8d:
         56:74:90:82:e3:49:63:8f:26:9a:f8:41:c0:ff:08:92:55:af:
         de:09:94:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5Ui1ALPaI+6eHPYusMXW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkMjYxZDQ1MzE5ZTgzNzUxODc0MzZkYTQ0YmY1YjlhZGIw
NDRhN2YwHhcNMjYwMTI2MDgwMTEwWhcNMjYwMTI3MDgwMTEwWjAzMTEwLwYDVQQD
Eyg1OTI5NGU4OGQwMTlhZDI0Nzc1YzdlNDVlNTViMmQwMjU3YjEzYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZpRxH11KzGrbY3nJWzZHfrlyhss
l1qRKnp1e3pkCT07Q9iqN7m7nfpJLKHGghSnivPomOrwDfHlDCZHqSGTIffqsnjr
9LMEJEysKWeBNmfeKPo/KpAZHRX8NX/UOsyWxJGQr6MZPCl7QJyCSUqG2YNwDzMO
YxArh3F9PvOSEWCUO0/7QH/v1rxIqb3xYXXeIzxaCkQ41okezfAN8w49FFKynJBJ
AVoTmRvikMMGPgTAwzjSOZFO0tjFNG3iiL4eAscbvbQa4posyXxUo2yAyDBaTRuq
/1Tx3eZpMPDc0ybO+qFEQoSwuECWb5S8WWhnTKxve3RXGeTI6ZT9a8ZpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkpTojQGa0kd1x+ReVbLQJXsTqCMB8GA1UdIwQY
MBaAFP0mHUUxnoN1GHQ22kS/W5rbBEp/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQt
ZWI1MDkzYjIzMWMxLzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81ODJiMTctZjQ2Zi00MWViLThmZDQtZWI1MDkzYjIzMWMx
LzEvX1NZZFJUR2VnM1VZZERiYVJMOWJtdHNFU244LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgdKXd0i
a7D2FDr/MF1U9Y4iIpwPFl6kmb2AyvJ1v3H6rk57yagLd+6Jyp4s2UV9sulVwOk7
8A1FaS3QciaPBcuIVTIASUTAJRwM+ph+iIt6BkrcFIJjhatwMleqGz4LsA9eWVNF
GUaSQbnWUPkCgBTDpnRtmdP0jArBoiPw1WikFM8VF5NZJyVM9QqSeKUE4cb6Q+9e
Vq1MP4fzAeQdbNkrhdi+Weu+ZL4sqFQuJqAHbuY0VqJr3wegJW6WCbn1rCKvUn1R
IjNF1z5e+tx1Qw+L+AoZoXaYMiQTPBldDUrUPxWkPHhAc4SNVnSQguNJY48mmvhB
wP8IklWv3gmUIA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 18:22:07 2026 by rpki-client