This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
File:                     Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json)
Hash identifier:          HCeRCGHyiZAHYvoPaWprsdVGIPqps5qQFB1xC67CuzI=
Subject key identifier:   BB:DD:1C:B3:C7:E9:4B:38:56:03:BD:90:4D:A7:F9:F7:97:B5:6F:A8
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Certificate issuer:       /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial:       019BFCF7CBFAF4B47532ECE39C77A7A25552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
Manifest number:          1480
Signing time:             Tue 27 Jan 2026 01:00:56 +0000
Manifest this update:     Tue 27 Jan 2026 01:00:56 +0000
Manifest next update:     Wed 28 Jan 2026 01:00:56 +0000
Files and hashes:         1: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: XfEWJWCeO73YFvz28jE3hf7lz+Ev7aNDYHoW40XCZoU=)
                          2: KPei4pGh6l2ch2CO4YkeyV22yvw.roa (hash: k1IWbcYO0kXCRKUgrnwnc4nPu4ClnarK73JxRUTod6I=)
                          3: kaDMDof3JnegZ76WynjnrQpCAYo.roa (hash: FDrbnAWfbNlBDk06C3Ts0xLMWNBRoitqJnesKeSlD6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f7:cb:fa:f4:b4:75:32:ec:e3:9c:77:a7:a2:55:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
        Validity
            Not Before: Jan 27 01:00:56 2026 GMT
            Not After : Jan 28 01:00:56 2026 GMT
        Subject: CN=bbdd1cb3c7e94b385603bd904da7f9f797b56fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:df:fa:2b:6a:6d:c2:e5:28:e1:5b:07:09:
                    3c:99:bb:50:c8:24:af:29:8f:60:5e:bd:5a:ed:6a:
                    9d:e0:80:05:30:d3:23:f1:34:81:46:c1:09:ef:b4:
                    73:0b:9a:25:66:d1:42:dd:db:2c:84:96:bd:4a:6e:
                    a6:d6:e4:6f:44:85:84:d8:a1:66:7c:6e:3c:0e:d3:
                    c6:3b:21:f3:ad:4f:c0:a8:69:d6:b3:3f:81:99:71:
                    ab:1d:e8:fa:63:ab:e3:5c:29:6a:57:5a:25:9c:77:
                    92:b5:85:ff:c6:61:2b:64:17:a3:ba:2b:d2:fa:8f:
                    58:8f:10:26:8c:14:7d:7b:bb:e6:39:a2:0a:09:5a:
                    c8:5b:95:68:73:c9:bf:29:a1:a0:e0:31:60:ab:fc:
                    a7:af:80:af:ed:a9:4a:88:7c:eb:48:20:e7:74:ba:
                    9c:31:c4:65:8c:98:f4:c5:e1:28:e5:21:8e:f6:b3:
                    7c:d3:a5:a3:86:d2:c6:55:a9:6e:9c:3a:b3:d5:f1:
                    dd:be:32:04:1c:eb:e3:ae:d2:40:f0:ed:18:e8:95:
                    3e:5e:11:db:c4:42:c7:d5:3f:fb:86:75:9e:d0:5b:
                    bb:74:e1:8e:97:0e:7d:bc:18:cb:9c:89:24:18:ad:
                    8c:1c:41:83:0d:eb:9f:28:2d:9f:42:96:e2:f9:07:
                    bf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DD:1C:B3:C7:E9:4B:38:56:03:BD:90:4D:A7:F9:F7:97:B5:6F:A8
            X509v3 Authority Key Identifier:
                keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:36:49:b7:50:99:87:e1:3c:7b:7c:2f:22:6c:1d:f9:c4:c1:
         88:10:29:fc:e6:f8:89:09:72:00:16:d9:46:b0:3b:8a:08:4b:
         ba:3a:dd:1a:01:72:f6:6d:72:3d:50:1e:10:59:cc:11:f5:be:
         89:54:87:47:42:86:cc:d8:62:1c:7d:b7:b2:11:16:6c:ba:12:
         ee:7e:2f:b6:74:2c:ce:cc:8e:f3:db:ce:f7:aa:4d:7f:b1:d9:
         d4:f3:38:84:f9:b1:a0:70:02:5b:ba:b2:64:e9:d3:49:45:6a:
         60:a8:ae:b3:39:fe:9f:2a:f3:6c:b4:19:c9:a1:f0:66:14:2c:
         6e:36:fc:fc:db:e1:bb:e9:8f:f3:14:8c:a1:84:df:db:97:3a:
         78:1b:cf:30:22:cc:fb:c1:a0:66:cc:73:c2:6d:71:57:f0:c7:
         a1:24:df:91:7d:03:6e:4a:5f:36:3e:7e:06:92:54:29:ff:73:
         8f:5c:19:06:a9:9d:11:01:4a:04:d7:38:7c:f4:14:f4:a7:84:
         00:4f:6d:2c:9a:f7:b4:99:75:d2:52:a0:2e:bf:84:46:35:7b:
         d2:19:0a:ec:15:d1:ef:87:bd:8c:1f:89:0b:42:81:14:54:fa:
         03:a0:93:75:ac:41:3b:40:1d:27:77:f2:4e:e5:a9:68:1b:d9:
         a4:fe:e2:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv898v69LR1MuzjnHenolVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2UwNmI0NGQ4ZGM0M2RjNzQyYzQwZGUzYmRhOGFhMzc0
NGUyYmQwHhcNMjYwMTI3MDEwMDU2WhcNMjYwMTI4MDEwMDU2WjAzMTEwLwYDVQQD
EyhiYmRkMWNiM2M3ZTk0YjM4NTYwM2JkOTA0ZGE3ZjlmNzk3YjU2ZmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNrf+itqbcLlKOFbBwk8mbtQyCSv
KY9gXr1a7Wqd4IAFMNMj8TSBRsEJ77RzC5olZtFC3dsshJa9Sm6m1uRvRIWE2KFm
fG48DtPGOyHzrU/AqGnWsz+BmXGrHej6Y6vjXClqV1olnHeStYX/xmErZBejuivS
+o9YjxAmjBR9e7vmOaIKCVrIW5Voc8m/KaGg4DFgq/ynr4Cv7alKiHzrSCDndLqc
McRljJj0xeEo5SGO9rN806WjhtLGValunDqz1fHdvjIEHOvjrtJA8O0Y6JU+XhHb
xELH1T/7hnWe0Fu7dOGOlw59vBjLnIkkGK2MHEGDDeufKC2fQpbi+Qe/KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvdHLPH6Us4VgO9kE2n+feXtW+oMB8GA1UdIwQY
MBaAFBXOBrRNjcQ9x0LEDeO9qKo3ROK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEt
ZGVlNDMxN2Y1YjE0LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEtZGVlNDMxN2Y1YjE0
LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADzZJt1CZ
h+E8e3wvImwd+cTBiBAp/Ob4iQlyABbZRrA7ighLujrdGgFy9m1yPVAeEFnMEfW+
iVSHR0KGzNhiHH23shEWbLoS7n4vtnQszsyO89vO96pNf7HZ1PM4hPmxoHACW7qy
ZOnTSUVqYKiuszn+nyrzbLQZyaHwZhQsbjb8/Nvhu+mP8xSMoYTf25c6eBvPMCLM
+8GgZsxzwm1xV/DHoSTfkX0DbkpfNj5+BpJUKf9zj1wZBqmdEQFKBNc4fPQU9KeE
AE9tLJr3tJl10lKgLr+ERjV70hkK7BXR74e9jB+JC0KBFFT6A6CTdaxBO0AdJ3fy
TuWpaBvZpP7iSA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:47:58 2026 by rpki-client