This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File:                     tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier:          3eQfl6nKeh7KZCFEFb3iC14LCZKa0R7s6rfF5/ZwjYY=
Subject key identifier:   ED:B8:D5:84:39:B7:DF:E1:59:6E:1E:DA:4A:15:BB:62:F3:AF:0D:B5
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer:       /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial:       019BD6FE009F1CAAA92B37414F8481F51A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number:          17D8
Signing time:             Mon 19 Jan 2026 16:02:09 +0000
Manifest this update:     Mon 19 Jan 2026 16:02:09 +0000
Manifest next update:     Tue 20 Jan 2026 16:02:09 +0000
Files and hashes:         1: EQDYZSB-4iaJyQwjSjIIBQzlhys.roa (hash: TgbIpBd4+tQ0V9vZqIWgoPeSE6DQXvJ+wX5nCs7obXI=)
                          2: _Ww4rYBbxbAH2gUCkDRQ1hd15WA.roa (hash: 84bc4cZmGpgQymic02SrkDgsWwCytvG15eu2yEnR910=)
                          3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: VbX0+VXeKXIIrZKjVo9pTOaiZpfFmZImpCePIL6qP20=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 16:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:fe:00:9f:1c:aa:a9:2b:37:41:4f:84:81:f5:1a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
        Validity
            Not Before: Jan 19 16:02:09 2026 GMT
            Not After : Jan 20 16:02:09 2026 GMT
        Subject: CN=edb8d58439b7dfe1596e1eda4a15bb62f3af0db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:e7:ab:ba:33:1a:c9:c4:52:07:26:a2:c9:
                    fb:d0:2d:39:61:51:21:e4:0c:2a:aa:1e:0d:d0:ec:
                    f6:9f:a8:04:3e:d0:0a:3f:22:c3:5f:76:d1:b9:1b:
                    05:25:04:69:fc:75:cf:85:b4:d2:a3:0f:fe:df:2f:
                    d2:d7:7c:5e:2f:14:c0:2d:7f:58:e3:92:b8:c0:c8:
                    60:41:5d:e0:d0:e6:16:4e:87:28:ed:81:7c:c1:8d:
                    3d:50:e1:3a:fb:b3:74:85:c3:52:32:db:16:c4:7e:
                    f7:20:cf:c3:c5:ff:88:c5:37:69:90:a4:82:54:56:
                    a8:74:aa:13:cd:ad:e6:93:dd:f7:d7:5f:35:ec:bf:
                    de:91:c2:4a:bf:a6:20:93:9e:d1:10:1d:3b:ad:29:
                    08:1c:43:00:5c:a8:4c:e6:8b:37:2a:b8:53:62:53:
                    fc:41:c5:03:03:d4:09:77:61:66:ab:a4:f0:c2:3e:
                    37:df:80:2c:45:e8:a4:4c:03:f9:5c:15:54:f4:aa:
                    28:b2:62:8a:98:63:b3:28:4b:18:eb:6e:4a:a6:04:
                    1b:bd:e8:e5:8c:09:43:74:85:7a:7d:f1:8c:08:37:
                    e5:80:fe:d9:ba:20:af:a9:e5:da:e6:2d:0b:08:8f:
                    42:0c:17:5f:63:fa:e5:7d:f4:df:bb:27:5f:46:26:
                    f1:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B8:D5:84:39:B7:DF:E1:59:6E:1E:DA:4A:15:BB:62:F3:AF:0D:B5
            X509v3 Authority Key Identifier:
                keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d0:ce:e4:b2:5f:4d:db:3b:da:f9:09:5a:51:7a:be:ea:7e:
         53:63:8e:1a:df:7a:6c:b0:b2:77:60:03:d5:ea:44:72:41:96:
         52:1c:ad:1a:88:3a:14:10:99:31:14:7b:d1:58:90:9c:cd:00:
         cd:3d:07:f6:f5:7b:b9:70:f8:29:be:7f:17:44:64:c1:c8:83:
         1c:fb:07:86:f9:ce:36:ae:82:17:36:e9:39:94:1d:9b:a5:a5:
         a8:21:b9:93:83:d8:81:39:81:7c:33:24:fd:fe:e9:c9:fb:1e:
         11:6e:07:d8:0a:16:5a:87:e0:e8:d6:59:4e:fe:99:a5:3d:21:
         87:35:db:09:2c:0d:c3:86:e3:2d:f1:f5:55:be:46:ed:bf:4d:
         3c:b3:56:b5:23:a5:9e:28:d3:d9:bc:eb:ed:4b:35:2d:1b:71:
         92:66:0a:01:98:78:0b:0b:79:5e:89:28:f3:1b:58:18:23:8d:
         2b:16:e7:e9:49:80:f4:6d:46:97:ac:d0:1d:14:97:29:cf:ad:
         66:4b:26:43:02:97:0e:11:9b:0f:b1:4d:47:eb:ba:bd:04:e7:
         54:3a:ae:c3:b7:91:eb:ed:2e:27:33:e8:47:17:d1:13:e8:54:
         8a:b5:93:ca:1f:94:70:08:a9:de:23:c0:36:2e:af:6d:2d:13:
         3d:23:69:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvW/gCfHKqpKzdBT4SB9Rp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZDczYTZhZDc3YThmODU5YjQwM2RiMmNlNzE1ZTgyZDFj
ZjMyZmUwHhcNMjYwMTE5MTYwMjA5WhcNMjYwMTIwMTYwMjA5WjAzMTEwLwYDVQQD
EyhlZGI4ZDU4NDM5YjdkZmUxNTk2ZTFlZGE0YTE1YmI2MmYzYWYwZGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszrnq7ozGsnEUgcmosn70C05YVEh
5Awqqh4N0Oz2n6gEPtAKPyLDX3bRuRsFJQRp/HXPhbTSow/+3y/S13xeLxTALX9Y
45K4wMhgQV3g0OYWToco7YF8wY09UOE6+7N0hcNSMtsWxH73IM/Dxf+IxTdpkKSC
VFaodKoTza3mk93311817L/ekcJKv6Ygk57REB07rSkIHEMAXKhM5os3KrhTYlP8
QcUDA9QJd2Fmq6Twwj4334AsReikTAP5XBVU9KoosmKKmGOzKEsY625KpgQbvejl
jAlDdIV6ffGMCDflgP7ZuiCvqeXa5i0LCI9CDBdfY/rlffTfuydfRibxWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO241YQ5t9/hWW4e2koVu2Lzrw21MB8GA1UdIwQY
MBaAFLTXOmrXeo+Fm0A9ss5xXoLRzzL+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYt
NmNmOGU1NjdmZjFjLzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83ZTdlZTctMWJkNC00NDM1LTg3MWYtNmNmOGU1NjdmZjFj
LzEvdE5jNmF0ZDZqNFdiUUQyeXpuRmVndEhQTXY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiNDO5LJf
Tds72vkJWlF6vup+U2OOGt96bLCyd2AD1epEckGWUhytGog6FBCZMRR70ViQnM0A
zT0H9vV7uXD4Kb5/F0RkwciDHPsHhvnONq6CFzbpOZQdm6WlqCG5k4PYgTmBfDMk
/f7pyfseEW4H2AoWWofg6NZZTv6ZpT0hhzXbCSwNw4bjLfH1Vb5G7b9NPLNWtSOl
nijT2bzr7Us1LRtxkmYKAZh4Cwt5Xoko8xtYGCONKxbn6UmA9G1Gl6zQHRSXKc+t
ZksmQwKXDhGbD7FNR+u6vQTnVDquw7eR6+0uJzPoRxfRE+hUirWTyh+UcAip3iPA
Ni6vbS0TPSNpdA==
-----END CERTIFICATE-----
Generated at Tue Jan 20 01:00:14 2026 by rpki-client