This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File:                     T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier:          eG4wWd7oxyxz8q6OnXdCrHc+NBY8H928PUQCHPO8cMU=
Subject key identifier:   A0:03:93:A0:E3:EB:B8:1E:34:3B:E8:64:52:57:3E:78:73:FD:16:BB
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer:       /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial:       019BA7FFD4D43389EA28134DFE5FD4AA7EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number:          17C2
Signing time:             Sat 10 Jan 2026 13:01:59 +0000
Manifest this update:     Sat 10 Jan 2026 13:01:59 +0000
Manifest next update:     Sun 11 Jan 2026 13:01:59 +0000
Files and hashes:         1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: A9/i+v/8oY01McdxZhggQebBZF9s2iXhHvDXmc7kjmk=)
                          2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
                          3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a7:ff:d4:d4:33:89:ea:28:13:4d:fe:5f:d4:aa:7e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
        Validity
            Not Before: Jan 10 13:01:59 2026 GMT
            Not After : Jan 11 13:01:59 2026 GMT
        Subject: CN=a00393a0e3ebb81e343be86452573e7873fd16bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4d:d4:39:8d:40:b3:5d:7e:ad:03:61:7b:de:
                    57:b6:0a:15:a0:cd:5c:03:94:d0:be:8b:e5:48:6f:
                    ee:7a:6b:f0:cd:2a:43:bd:bd:63:a7:f7:f8:b1:e6:
                    8e:2c:f2:3a:13:fe:40:27:81:00:99:37:90:25:00:
                    7e:66:4d:97:24:8d:98:06:de:8e:d7:1e:60:d0:e1:
                    9f:64:e4:f0:53:61:1c:4e:b2:70:c6:f8:5d:78:4c:
                    62:f3:db:15:91:5f:ab:d7:71:95:0c:f2:5d:71:e7:
                    03:20:3f:9d:5c:4a:ac:b1:5f:b1:34:5f:b2:96:21:
                    e8:dc:52:45:1c:88:5b:55:ba:b3:27:da:ce:2e:38:
                    ab:af:e8:dc:11:e9:83:59:94:f1:e3:67:1e:23:d9:
                    3d:cd:1d:8f:2b:76:7a:f4:75:6e:67:33:09:0a:ed:
                    58:84:01:f0:5f:06:55:2a:7b:a4:45:a5:1c:0f:5e:
                    87:fd:97:de:f6:ee:8c:43:fb:d3:3f:9c:be:ed:3d:
                    ee:fa:05:21:8b:46:d4:0e:70:65:5e:ab:55:fe:f5:
                    08:2f:2f:5e:03:96:14:13:d7:3b:aa:22:45:63:75:
                    de:bf:9c:18:62:14:10:4a:81:21:d5:b0:ab:f2:f2:
                    f2:8f:2d:2c:15:cb:3f:b0:0a:48:9a:d5:ed:86:d3:
                    22:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:03:93:A0:E3:EB:B8:1E:34:3B:E8:64:52:57:3E:78:73:FD:16:BB
            X509v3 Authority Key Identifier:
                keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2a:64:4f:49:4d:59:a8:72:79:fb:18:de:2d:cb:d6:7f:33:
         d8:8f:9a:a9:40:c9:16:6f:e0:2c:a2:e9:2f:59:d5:a7:1d:dd:
         14:35:4f:1f:97:bc:29:7e:39:0c:ab:91:0e:65:59:51:91:9e:
         2c:8f:89:4f:64:a2:07:38:5c:ab:e0:5c:2a:30:14:54:dd:f0:
         03:3c:f0:4c:4e:0f:51:cb:d3:cf:11:60:c3:df:ef:3a:04:8e:
         04:87:5b:b7:55:59:b2:6f:70:81:b7:35:12:14:91:dd:6a:64:
         db:ab:34:f8:7d:2c:83:82:93:9b:1d:56:1a:89:e9:b5:5d:90:
         84:fc:b4:07:69:fc:07:49:a9:b5:0e:e3:3a:4b:49:f5:e3:b7:
         61:fe:c9:20:f6:69:a2:d3:f3:6d:06:17:ac:53:87:a9:cc:f6:
         da:9c:18:21:4f:70:c7:fb:39:7c:b6:b1:ee:97:af:0c:10:e2:
         aa:e4:b9:59:21:9a:05:69:74:39:73:bb:5b:a6:38:c4:d6:b8:
         db:8e:30:6c:7c:71:1b:62:7b:8e:50:b9:02:0d:cf:2e:38:84:
         3e:80:8a:fb:5c:25:50:dc:d5:ed:a8:35:59:7e:8c:1c:f5:e2:
         f3:63:d0:ae:c9:36:b8:c9:35:02:c4:c7:84:0e:41:3c:eb:c7:
         cf:05:df:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZun/9TUM4nqKBNN/l/Uqn79MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTA4YTZkODY4YWI5ZTliZGIxMDQ3MmZiZWMzMWM5NjZl
OTQyNzQwHhcNMjYwMTEwMTMwMTU5WhcNMjYwMTExMTMwMTU5WjAzMTEwLwYDVQQD
EyhhMDAzOTNhMGUzZWJiODFlMzQzYmU4NjQ1MjU3M2U3ODczZmQxNmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq03UOY1As11+rQNhe95XtgoVoM1c
A5TQvovlSG/uemvwzSpDvb1jp/f4seaOLPI6E/5AJ4EAmTeQJQB+Zk2XJI2YBt6O
1x5g0OGfZOTwU2EcTrJwxvhdeExi89sVkV+r13GVDPJdcecDID+dXEqssV+xNF+y
liHo3FJFHIhbVbqzJ9rOLjirr+jcEemDWZTx42ceI9k9zR2PK3Z69HVuZzMJCu1Y
hAHwXwZVKnukRaUcD16H/Zfe9u6MQ/vTP5y+7T3u+gUhi0bUDnBlXqtV/vUILy9e
A5YUE9c7qiJFY3Xev5wYYhQQSoEh1bCr8vLyjy0sFcs/sApImtXthtMiswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKADk6Dj67geNDvoZFJXPnhz/Ra7MB8GA1UdIwQY
MBaAFE+Qim2GirnpvbEEcvvsMclm6UJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEt
MWM2ZWU1YmJlYjY2LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEtMWM2ZWU1YmJlYjY2
LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSpkT0lN
WahyefsY3i3L1n8z2I+aqUDJFm/gLKLpL1nVpx3dFDVPH5e8KX45DKuRDmVZUZGe
LI+JT2SiBzhcq+BcKjAUVN3wAzzwTE4PUcvTzxFgw9/vOgSOBIdbt1VZsm9wgbc1
EhSR3Wpk26s0+H0sg4KTmx1WGonptV2QhPy0B2n8B0mptQ7jOktJ9eO3Yf7JIPZp
otPzbQYXrFOHqcz22pwYIU9wx/s5fLax7pevDBDiquS5WSGaBWl0OXO7W6Y4xNa4
244wbHxxG2J7jlC5Ag3PLjiEPoCK+1wlUNzV7ag1WX6MHPXi82PQrsk2uMk1AsTH
hA5BPOvHzwXfUQ==
-----END CERTIFICATE-----
Generated at Sat Jan 10 16:27:31 2026 by rpki-client