This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
File:                     brZPqOBaLX9WSs8omudXxATN2dA.mft (raw, json)
Hash identifier:          D+vurmuyIZvbaJ1xbZ7Sq4C3zbHAFO0BJ8hoIrHFUQE=
Subject key identifier:   A2:6A:BB:34:18:D3:30:B9:29:62:2B:ED:EF:BF:84:30:FC:8B:CB:32
Authority key identifier: 6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0
Certificate issuer:       /CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
Certificate serial:       019B9E20557C798D6E09B63A20CA8E1E93B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
Manifest number:          05E1
Signing time:             Thu 08 Jan 2026 15:01:17 +0000
Manifest this update:     Thu 08 Jan 2026 15:01:17 +0000
Manifest next update:     Fri 09 Jan 2026 15:01:17 +0000
Files and hashes:         1: brZPqOBaLX9WSs8omudXxATN2dA.crl (hash: wRnR+yKwsgb7eT7hgO1dosUkO8L25GBXOMXBDuetkpA=)
                          2: fjS2CghdsDOfJAGDNNv1IoVdW4A.roa (hash: L16UjIVK52McMfz2H8lqgnkKRY5+lCVRsOxYUIF8LqM=)
                          3: lIE_MUQJUZgNHzMzG7WoMtqvPPw.roa (hash: FgB2VqG3YjiGKZT6wOmQEkgTTE3Qc1LyABUur1KWw40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 15:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:20:55:7c:79:8d:6e:09:b6:3a:20:ca:8e:1e:93:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb64fa8e05a2d7f564acf289ae757c404cdd9d0
        Validity
            Not Before: Jan  8 15:01:17 2026 GMT
            Not After : Jan  9 15:01:17 2026 GMT
        Subject: CN=a26abb3418d330b929622bedefbf8430fc8bcb32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1b:c8:c6:24:a2:e8:f9:10:ff:6c:20:8d:53:
                    85:30:21:c4:ae:45:42:13:de:ee:d8:7d:f1:16:46:
                    46:59:86:e3:a1:6a:8c:d9:89:4a:f1:3f:8d:5e:4a:
                    b8:2e:ee:87:07:42:24:d3:b3:f1:c0:9a:69:a1:d5:
                    0a:b9:e4:96:2b:89:71:20:e9:a6:96:54:6b:4d:c9:
                    c5:57:fb:e3:2b:94:d8:17:7a:90:97:5d:5c:69:19:
                    81:10:47:43:fc:6c:26:b8:a6:f3:dc:bf:66:eb:07:
                    cb:c7:67:bc:1a:a7:11:84:37:74:ad:5f:1c:60:c3:
                    c1:e9:a1:9a:5d:77:f2:9d:f0:fc:d7:4d:a1:5b:c4:
                    9f:bf:15:22:8f:fd:a1:50:92:bb:89:e3:b7:e1:30:
                    c0:06:07:ff:d8:5f:09:b2:d2:21:32:02:c0:2a:ae:
                    43:2c:b0:6c:62:f9:07:93:2c:67:98:5a:a4:21:9e:
                    79:45:36:71:22:91:46:45:f2:d6:5c:13:0e:94:e7:
                    74:8a:39:ae:cf:6d:05:01:c6:e4:94:3d:fe:7c:4f:
                    7a:cc:5c:63:11:c7:0c:ab:33:59:e1:fb:ba:0f:da:
                    ac:75:68:b7:5d:ae:2a:01:98:5e:cb:02:1d:fb:e3:
                    e4:9a:e2:8d:ca:a7:b1:23:7a:ec:07:1c:a7:b8:a6:
                    1e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:6A:BB:34:18:D3:30:B9:29:62:2B:ED:EF:BF:84:30:FC:8B:CB:32
            X509v3 Authority Key Identifier:
                keyid:6E:B6:4F:A8:E0:5A:2D:7F:56:4A:CF:28:9A:E7:57:C4:04:CD:D9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/brZPqOBaLX9WSs8omudXxATN2dA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/584997-83ab-4817-aac3-88cf72ca9e46/1/brZPqOBaLX9WSs8omudXxATN2dA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:36:f5:36:08:03:78:c1:81:e1:a1:97:52:d2:5c:fe:45:6d:
         f0:d5:a6:9c:a8:69:15:5b:80:dd:4f:83:1c:94:3e:cb:66:a6:
         9c:51:d1:0b:15:24:c8:eb:cc:66:a9:3a:ab:6e:f0:cb:55:00:
         a4:56:79:9d:bb:5a:1e:6c:ba:74:90:74:db:b6:1d:67:35:48:
         80:5f:f9:fa:34:a4:ea:4e:78:66:df:ac:07:99:32:5d:c3:12:
         f7:ed:f7:68:b2:40:af:fe:10:6d:a2:45:e8:2b:44:73:ed:e7:
         47:57:cd:49:8b:a2:4b:d6:8f:70:e9:4e:71:d7:7b:aa:8f:6e:
         03:d6:29:6d:a1:91:7c:ae:49:a8:8e:09:b7:19:67:05:e3:85:
         5a:79:29:1d:d3:dc:73:0d:a0:08:92:5e:bb:d3:2d:40:bc:25:
         26:40:10:25:6d:6b:6d:0c:09:15:61:41:a8:a9:46:6f:10:bc:
         72:99:4e:5b:eb:8f:5f:5e:46:b0:43:16:52:48:f3:a0:56:a9:
         53:29:ef:eb:f7:9a:b1:e1:65:eb:3b:2a:26:8f:e0:cf:55:9f:
         05:8e:ca:b0:c3:dd:45:09:7b:d0:26:fd:ce:c0:af:3b:df:b8:
         c0:b0:15:fb:1e:5c:5a:69:10:e6:7d:8a:af:fb:82:b9:1f:a6:
         7c:5d:30:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZueIFV8eY1uCbY6IMqOHpOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYjY0ZmE4ZTA1YTJkN2Y1NjRhY2YyODlhZTc1N2M0MDRj
ZGQ5ZDAwHhcNMjYwMTA4MTUwMTE3WhcNMjYwMTA5MTUwMTE3WjAzMTEwLwYDVQQD
EyhhMjZhYmIzNDE4ZDMzMGI5Mjk2MjJiZWRlZmJmODQzMGZjOGJjYjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BvIxiSi6PkQ/2wgjVOFMCHErkVC
E97u2H3xFkZGWYbjoWqM2YlK8T+NXkq4Lu6HB0Ik07PxwJppodUKueSWK4lxIOmm
llRrTcnFV/vjK5TYF3qQl11caRmBEEdD/GwmuKbz3L9m6wfLx2e8GqcRhDd0rV8c
YMPB6aGaXXfynfD8102hW8SfvxUij/2hUJK7ieO34TDABgf/2F8JstIhMgLAKq5D
LLBsYvkHkyxnmFqkIZ55RTZxIpFGRfLWXBMOlOd0ijmuz20FAcbklD3+fE96zFxj
EccMqzNZ4fu6D9qsdWi3Xa4qAZheywId++PkmuKNyqexI3rsBxynuKYeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKJquzQY0zC5KWIr7e+/hDD8i8syMB8GA1UdIwQY
MBaAFG62T6jgWi1/VkrPKJrnV8QEzdnQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMt
ODhjZjcyY2E5ZTQ2LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy81ODQ5OTctODNhYi00ODE3LWFhYzMtODhjZjcyY2E5ZTQ2
LzEvYnJaUHFPQmFMWDlXU3M4b211ZFh4QVROMmRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqDb1NggD
eMGB4aGXUtJc/kVt8NWmnKhpFVuA3U+DHJQ+y2amnFHRCxUkyOvMZqk6q27wy1UA
pFZ5nbtaHmy6dJB027YdZzVIgF/5+jSk6k54Zt+sB5kyXcMS9+33aLJAr/4QbaJF
6CtEc+3nR1fNSYuiS9aPcOlOcdd7qo9uA9YpbaGRfK5JqI4JtxlnBeOFWnkpHdPc
cw2gCJJeu9MtQLwlJkAQJW1rbQwJFWFBqKlGbxC8cplOW+uPX15GsEMWUkjzoFap
Uynv6/easeFl6zsqJo/gz1WfBY7KsMPdRQl70Cb9zsCvO9+4wLAV+x5cWmkQ5n2K
r/uCuR+mfF0wNw==
-----END CERTIFICATE-----
Generated at Fri Jan 9 01:10:30 2026 by rpki-client