This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File:                     kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier:          y3d/v8R9R9QCI+SXrxNnwRlQCIogkF7wrQLIOrScbig=
Subject key identifier:   76:33:7B:7C:6F:FD:E1:63:67:6F:F6:61:26:19:A1:3A:1C:D9:35:8F
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer:       /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial:       019BFE0AA24917A500BBEF15E531D2D672AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number:          1751
Signing time:             Tue 27 Jan 2026 06:01:08 +0000
Manifest this update:     Tue 27 Jan 2026 06:01:08 +0000
Manifest next update:     Wed 28 Jan 2026 06:01:08 +0000
Files and hashes:         1: HdqGeJaEHIIOGidEfUQbYKxZrGM.roa (hash: 3Kt5L7WEjQ8tJGELhy3NdQWPHa66vAzIxlcJB4RUAnY=)
                          2: RPK9lofx2vpfDz3fVaT_lQtdT8k.roa (hash: c8dHr4W3wR+aiojlJOFNLRKnfR/Yoz1DHFKCuyaqE0M=)
                          3: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: gpivcxHDBjHaC3sWSqweORGud0hSUNB5ujCK6o5gvMU=)
                          4: mP8W7TMyviTbTSoXDcPVC4ui5L4.roa (hash: 6juiOWCmEUWksztqfKv/1hmW4YE+zbFyyfjzUEd04ug=)
                          5: y6FPGhs0Ss6vJphqQXiX0e2wQdg.roa (hash: nRUF1yLs0gzZVnAltxQkhe0KlScioNi5NL99DbX38f8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:a2:49:17:a5:00:bb:ef:15:e5:31:d2:d6:72:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
        Validity
            Not Before: Jan 27 06:01:08 2026 GMT
            Not After : Jan 28 06:01:08 2026 GMT
        Subject: CN=76337b7c6ffde163676ff6612619a13a1cd9358f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:01:c0:77:f2:a9:23:2b:21:e1:92:df:84:46:
                    8b:be:ac:86:1e:c3:40:a7:74:e1:2e:aa:7d:7c:af:
                    43:7c:25:1a:9b:85:43:ad:76:0b:0d:ae:46:a0:3f:
                    1b:c6:42:f0:73:51:f9:5b:7b:c3:1e:b3:c9:ba:d8:
                    d7:3c:32:d7:b0:00:47:2c:59:88:23:ac:28:cd:49:
                    d8:61:5a:e4:b8:a8:b4:28:3e:b0:79:9a:bf:82:52:
                    6c:72:f9:92:ca:98:5b:7a:af:5b:cf:9b:e7:23:90:
                    1a:55:76:b6:a4:80:e8:98:98:68:b0:f2:49:8c:fb:
                    1e:bc:bf:8c:f4:e4:1c:4d:c1:0e:25:62:34:01:7e:
                    6b:33:fd:c2:be:25:3d:aa:04:fb:34:0c:cd:22:7b:
                    fc:cb:b2:da:4f:05:cc:10:af:a9:7f:30:60:80:1b:
                    a8:d8:c1:27:9e:7f:15:05:cf:8f:bc:9f:cf:57:ae:
                    9f:44:05:d6:da:22:63:f2:01:81:24:66:b3:1c:95:
                    49:c4:2c:aa:02:81:6c:7d:8f:09:67:62:85:6e:de:
                    44:bf:fb:e9:d5:ad:5f:39:51:fc:f9:6c:04:2f:ea:
                    30:75:8b:17:f7:cc:eb:2b:fc:a7:ed:4d:26:1d:ea:
                    f5:a4:f0:11:3d:39:24:ca:37:0a:92:b6:64:4d:cf:
                    9b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:33:7B:7C:6F:FD:E1:63:67:6F:F6:61:26:19:A1:3A:1C:D9:35:8F
            X509v3 Authority Key Identifier:
                keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c4:84:0f:78:2e:ff:7d:bc:cf:9a:51:66:00:b3:38:b7:36:
         8e:f2:09:4c:fd:a0:4c:d4:79:c1:73:9b:39:d5:ea:06:69:62:
         3c:43:29:cf:75:8a:fe:bc:48:f1:4b:72:f4:c2:b3:b1:94:c9:
         92:62:c9:58:14:b1:ec:dd:58:97:3f:89:84:49:66:50:af:5a:
         b4:a5:d6:75:df:4a:57:cc:1c:b9:f0:e3:ce:81:e2:da:0e:83:
         1c:a2:89:e4:90:95:fd:5e:b7:e0:d4:8c:87:a0:07:01:b7:e5:
         39:b7:24:49:5a:93:c4:12:2b:1e:86:e5:b1:f6:bb:bb:5f:58:
         a0:b2:81:94:9e:bc:e5:a2:bd:94:20:b4:c7:fa:87:a1:07:54:
         66:82:2d:34:e3:4d:2e:27:b2:25:7a:2b:eb:e3:0c:2c:a6:07:
         59:cd:d3:5c:69:b9:18:76:ba:b6:12:eb:cf:5a:1e:41:43:c2:
         f1:68:ce:66:9a:ab:ba:3f:a2:3f:74:b8:1f:c8:f1:68:30:d6:
         e8:1e:c5:96:4f:be:76:28:2e:6e:8d:15:7e:b6:46:f2:38:c7:
         a5:16:66:5a:5f:4b:8a:c3:d7:9a:01:25:de:96:8c:b2:aa:03:
         b5:67:76:de:1a:5f:cf:f2:2e:d3:0a:1a:3e:60:2b:c1:a1:24:
         35:73:40:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+CqJJF6UAu+8V5THS1nKrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjhhMTU0NjZjM2ZmMWU5MTVkNzgwYTEwYjBiYWE5YWQ2
OTQ4NjAwHhcNMjYwMTI3MDYwMTA4WhcNMjYwMTI4MDYwMTA4WjAzMTEwLwYDVQQD
Eyg3NjMzN2I3YzZmZmRlMTYzNjc2ZmY2NjEyNjE5YTEzYTFjZDkzNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgHAd/KpIysh4ZLfhEaLvqyGHsNA
p3ThLqp9fK9DfCUam4VDrXYLDa5GoD8bxkLwc1H5W3vDHrPJutjXPDLXsABHLFmI
I6wozUnYYVrkuKi0KD6weZq/glJscvmSyphbeq9bz5vnI5AaVXa2pIDomJhosPJJ
jPsevL+M9OQcTcEOJWI0AX5rM/3CviU9qgT7NAzNInv8y7LaTwXMEK+pfzBggBuo
2MEnnn8VBc+PvJ/PV66fRAXW2iJj8gGBJGazHJVJxCyqAoFsfY8JZ2KFbt5Ev/vp
1a1fOVH8+WwEL+owdYsX98zrK/yn7U0mHer1pPARPTkkyjcKkrZkTc+bCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYze3xv/eFjZ2/2YSYZoToc2TWPMB8GA1UdIwQY
MBaAFJC4oVRmw/8ekV14ChCwuqmtaUhgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDct
NzhlOTk3ODY5OTUyLzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMmRmNDQtMzhiMi00ZDEyLTgzNDctNzhlOTk3ODY5OTUy
LzEva0xpaFZHYkRfeDZSWFhnS0VMQzZxYTFwU0dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcSED3gu
/328z5pRZgCzOLc2jvIJTP2gTNR5wXObOdXqBmliPEMpz3WK/rxI8Uty9MKzsZTJ
kmLJWBSx7N1Ylz+JhElmUK9atKXWdd9KV8wcufDjzoHi2g6DHKKJ5JCV/V634NSM
h6AHAbflObckSVqTxBIrHoblsfa7u19YoLKBlJ685aK9lCC0x/qHoQdUZoItNONN
LieyJXor6+MMLKYHWc3TXGm5GHa6thLrz1oeQUPC8WjOZpqruj+iP3S4H8jxaDDW
6B7Flk++digubo0VfrZG8jjHpRZmWl9LisPXmgEl3paMsqoDtWd23hpfz/Iu0woa
PmArwaEkNXNAQg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 11:16:02 2026 by rpki-client