This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File:                     N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier:          MK5FKfeKXBi8axfBcgrYI734ZnO9B5Bxd3QSCpHno7o=
Subject key identifier:   8A:11:5F:7A:93:B6:96:5B:B4:4B:4F:35:97:68:56:9E:A7:34:AA:A2
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer:       /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial:       019BFD657754666DC92FBD83D9FB7D511B78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number:          1747
Signing time:             Tue 27 Jan 2026 03:00:43 +0000
Manifest this update:     Tue 27 Jan 2026 03:00:43 +0000
Manifest next update:     Wed 28 Jan 2026 03:00:43 +0000
Files and hashes:         1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: L0g2KV4MtE1ypdtenxyrP2eSiW4UhFXh0F/r2ce0Zu0=)
                          2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
                          3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:65:77:54:66:6d:c9:2f:bd:83:d9:fb:7d:51:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
        Validity
            Not Before: Jan 27 03:00:43 2026 GMT
            Not After : Jan 28 03:00:43 2026 GMT
        Subject: CN=8a115f7a93b6965bb44b4f359768569ea734aaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:c7:ef:19:53:a3:6e:1a:ee:24:d7:e4:c7:
                    12:53:fc:dc:6a:5d:35:a2:fb:f8:1d:a2:67:71:92:
                    78:32:04:58:ba:07:d1:2f:83:8c:b8:33:a9:a7:6d:
                    f8:89:91:7d:20:a7:8f:68:66:1f:c2:2d:67:48:94:
                    a8:26:b1:73:7f:3b:ef:b8:08:14:60:9c:17:65:4a:
                    5a:2d:d8:c8:0f:e4:a0:b9:4e:99:ab:e1:ca:f7:ba:
                    8a:72:af:78:b2:ae:3d:df:08:b8:dd:2d:75:2c:ef:
                    0c:b8:bd:8e:2a:cf:23:9d:de:8d:c2:71:56:80:89:
                    56:fe:89:18:83:62:93:36:b9:30:b3:cb:8b:3f:ef:
                    13:ee:2f:4a:fc:2b:74:85:94:c9:0a:20:01:25:8a:
                    7e:f2:43:5c:87:41:3c:30:5e:a8:38:0b:62:2a:d1:
                    64:cf:cd:9a:08:25:d9:74:40:36:f3:95:4c:bb:cb:
                    b8:ff:da:11:cf:62:0d:aa:58:b8:80:e1:92:e3:60:
                    84:cd:94:f5:e6:7c:8e:7b:c7:ba:7c:26:e0:11:a5:
                    81:14:2a:a5:57:16:ad:df:8a:61:82:bb:76:32:0e:
                    c9:81:bb:8a:81:52:0c:98:00:f5:4a:b8:6d:13:32:
                    b0:15:01:fa:8f:f8:c1:7e:c4:04:07:a8:6c:c3:08:
                    b4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:11:5F:7A:93:B6:96:5B:B4:4B:4F:35:97:68:56:9E:A7:34:AA:A2
            X509v3 Authority Key Identifier:
                keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:81:93:31:4b:71:ea:2d:5f:8e:d5:a0:48:9a:5b:54:3f:74:
         d5:e7:79:37:f4:fd:64:c3:3f:24:d2:4e:d1:ca:3b:c3:c6:13:
         3f:6d:1c:b5:35:69:61:01:75:40:67:c2:ee:cf:53:0d:a2:07:
         91:ae:c4:5f:a5:c2:49:ce:f5:b6:81:ab:41:2d:85:23:3f:c2:
         b6:8e:3f:35:e8:38:05:7f:85:d8:5c:63:f4:2f:79:eb:26:4b:
         51:49:cf:a9:c1:db:81:4f:a1:64:25:ec:59:f0:2e:77:d8:b2:
         66:6f:6c:1c:93:9e:23:f0:99:36:db:52:0a:86:2b:d6:36:5b:
         63:0a:09:29:3f:47:b9:0b:ae:78:41:a5:8e:23:c6:5f:09:d1:
         17:76:00:41:a6:7a:b1:37:52:25:b7:d3:2f:83:84:b4:ac:74:
         90:94:a5:5f:77:2a:9d:94:ff:78:9e:88:52:97:03:7e:48:45:
         ff:d6:e9:0f:ff:4c:15:c4:ef:74:6d:3d:af:22:c3:33:a2:29:
         7f:07:93:4e:12:2c:fe:2f:bb:6b:59:ea:44:19:a5:f7:46:15:
         05:fe:d4:25:22:82:4f:57:5d:87:1a:40:9d:18:40:78:45:b9:
         a2:42:80:10:c1:fd:f8:c7:26:ff:40:e6:15:fd:dc:a5:6d:40:
         4b:6c:48:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv9ZXdUZm3JL72D2ft9URt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz
ODMwMDQwHhcNMjYwMTI3MDMwMDQzWhcNMjYwMTI4MDMwMDQzWjAzMTEwLwYDVQQD
Eyg4YTExNWY3YTkzYjY5NjViYjQ0YjRmMzU5NzY4NTY5ZWE3MzRhYWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCvH7xlTo24a7iTX5McSU/zcal01
ovv4HaJncZJ4MgRYugfRL4OMuDOpp234iZF9IKePaGYfwi1nSJSoJrFzfzvvuAgU
YJwXZUpaLdjID+SguU6Zq+HK97qKcq94sq493wi43S11LO8MuL2OKs8jnd6NwnFW
gIlW/okYg2KTNrkws8uLP+8T7i9K/Ct0hZTJCiABJYp+8kNch0E8MF6oOAtiKtFk
z82aCCXZdEA285VMu8u4/9oRz2INqli4gOGS42CEzZT15nyOe8e6fCbgEaWBFCql
Vxat34phgrt2Mg7JgbuKgVIMmAD1SrhtEzKwFQH6j/jBfsQEB6hswwi0nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoRX3qTtpZbtEtPNZdoVp6nNKqiMB8GA1UdIwQY
MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt
ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy
LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnYGTMUtx
6i1fjtWgSJpbVD901ed5N/T9ZMM/JNJO0co7w8YTP20ctTVpYQF1QGfC7s9TDaIH
ka7EX6XCSc71toGrQS2FIz/Cto4/Neg4BX+F2Fxj9C956yZLUUnPqcHbgU+hZCXs
WfAud9iyZm9sHJOeI/CZNttSCoYr1jZbYwoJKT9HuQuueEGljiPGXwnRF3YAQaZ6
sTdSJbfTL4OEtKx0kJSlX3cqnZT/eJ6IUpcDfkhF/9bpD/9MFcTvdG09ryLDM6Ip
fweTThIs/i+7a1nqRBml90YVBf7UJSKCT1ddhxpAnRhAeEW5okKAEMH9+Mcm/0Dm
Ff3cpW1AS2xIYA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:42:42 2026 by rpki-client