This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File:                     ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier:          9O6lAYicKhLb/qpFtA9N//4H4D9fsj19oARnwryO9oA=
Subject key identifier:   F1:61:08:6F:82:A7:CB:1B:5F:04:19:F2:73:1B:6E:54:5A:11:31:20
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer:       /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial:       019BFA9C06C287AE10CBB1E1DD1D2708E4B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number:          13F8
Signing time:             Mon 26 Jan 2026 14:01:27 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:27 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:27 +0000
Files and hashes:         1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
                          2: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: SuaIQOz08LH+PZj9GsuB90fltMb1lesmrjhYf4vzBbk=)
                          3: vsgPZ-Llb619u55qgh7b3-lyZ9o.roa (hash: ckYR9IaAHgRNaAoZgvMmYQJZEYI6bJQHq2LQFvbQNcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:06:c2:87:ae:10:cb:b1:e1:dd:1d:27:08:e4:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
        Validity
            Not Before: Jan 26 14:01:27 2026 GMT
            Not After : Jan 27 14:01:27 2026 GMT
        Subject: CN=f161086f82a7cb1b5f0419f2731b6e545a113120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f2:e4:80:c8:e8:28:c6:5f:af:f0:df:81:e5:
                    48:1c:87:4f:79:ef:17:be:9a:f5:77:a0:b3:0d:9f:
                    27:96:d0:18:6d:01:9f:f5:72:39:6e:12:e9:d7:71:
                    68:20:2a:b0:5a:ea:1d:ab:38:18:3f:74:09:91:d8:
                    d1:39:1d:f1:9d:a4:93:fd:c4:16:f1:a0:f3:71:cf:
                    d4:e3:d5:3f:45:78:4b:3d:db:ab:44:dc:82:58:fb:
                    8a:28:ea:f3:01:5e:61:f4:5d:21:e1:c6:5c:97:b2:
                    1e:c4:e9:1f:3e:30:2f:90:45:20:11:1c:c4:f0:83:
                    16:d4:37:02:80:55:38:52:c8:a2:74:15:b1:9e:92:
                    54:e7:7e:df:70:f9:fc:90:55:a7:32:81:f5:3e:0b:
                    26:3e:93:39:2a:de:da:a3:c2:8a:f1:c8:0a:98:20:
                    aa:dc:58:69:81:77:d6:ca:91:6b:22:d2:a9:05:28:
                    99:54:9b:1a:5b:c5:ec:83:c9:73:04:a7:21:8e:dc:
                    2b:f0:43:21:f6:8b:c7:08:d0:11:d1:96:6a:0e:ed:
                    82:2c:07:a3:e1:9d:26:79:17:13:57:f9:a0:98:cc:
                    86:95:79:a2:12:99:73:ea:8c:b8:5b:a2:7b:3c:26:
                    bc:5a:4e:90:e4:1b:25:15:95:d8:b5:d5:29:67:8b:
                    3b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:61:08:6F:82:A7:CB:1B:5F:04:19:F2:73:1B:6E:54:5A:11:31:20
            X509v3 Authority Key Identifier:
                keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:09:10:0d:7e:19:63:2b:70:77:3c:ca:4f:42:eb:63:d2:af:
         bc:1b:f5:f8:b5:93:15:d7:e8:a9:f6:f9:31:20:95:e1:34:14:
         6d:c1:45:b0:a0:58:b3:3f:92:86:37:9e:d1:3c:a6:e9:f0:72:
         e6:ad:5f:9a:4e:7b:71:cb:8e:f2:8a:c9:9d:2a:72:83:5a:6c:
         1c:df:5d:a4:aa:e3:ec:67:7d:e6:13:57:68:9d:c2:ba:eb:c5:
         3c:b4:e3:c0:e4:82:4d:7b:68:80:4a:da:6b:95:7f:a9:82:24:
         21:21:8a:d5:22:fe:6e:86:63:bc:78:3b:5a:3d:60:fb:8b:01:
         05:87:66:0f:c4:3f:ec:e7:18:70:8e:90:dd:ca:3e:b1:6c:6f:
         56:5d:8c:41:ab:33:ac:5c:39:b5:0f:bd:74:0c:2a:20:3f:40:
         39:e4:6b:a5:b2:4e:c4:e0:20:1c:6e:30:27:72:5d:46:e7:4f:
         39:a0:e1:34:38:1b:8e:a2:e1:6f:11:0c:3f:c9:5d:1f:f1:06:
         f0:71:44:25:3a:b6:01:9d:e3:27:c4:f5:a3:f6:0b:cd:8e:66:
         0f:60:e0:d1:4d:e0:b3:44:97:42:e3:c6:4f:88:94:03:ae:b9:
         12:89:8f:88:15:f6:c5:97:79:2d:30:24:f1:c7:cf:0a:59:29:
         bc:3e:02:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6nAbCh64Qy7Hh3R0nCOSyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZGYxNTZlZTE4YjY5NThkNDMwNmI2MzExYjRhMDg2NzYz
ZWZmNjIwHhcNMjYwMTI2MTQwMTI3WhcNMjYwMTI3MTQwMTI3WjAzMTEwLwYDVQQD
EyhmMTYxMDg2ZjgyYTdjYjFiNWYwNDE5ZjI3MzFiNmU1NDVhMTEzMTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/LkgMjoKMZfr/DfgeVIHIdPee8X
vpr1d6CzDZ8nltAYbQGf9XI5bhLp13FoICqwWuodqzgYP3QJkdjROR3xnaST/cQW
8aDzcc/U49U/RXhLPdurRNyCWPuKKOrzAV5h9F0h4cZcl7IexOkfPjAvkEUgERzE
8IMW1DcCgFU4UsiidBWxnpJU537fcPn8kFWnMoH1PgsmPpM5Kt7ao8KK8cgKmCCq
3FhpgXfWypFrItKpBSiZVJsaW8Xsg8lzBKchjtwr8EMh9ovHCNAR0ZZqDu2CLAej
4Z0meRcTV/mgmMyGlXmiEplz6oy4W6J7PCa8Wk6Q5BslFZXYtdUpZ4s7FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFhCG+Cp8sbXwQZ8nMbblRaETEgMB8GA1UdIwQY
MBaAFLnfFW7hi2lY1DBrYxG0oIZ2Pv9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYt
NzJhNGIzYTliYjQ0LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYtNzJhNGIzYTliYjQ0
LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwkQDX4Z
YytwdzzKT0LrY9KvvBv1+LWTFdfoqfb5MSCV4TQUbcFFsKBYsz+Shjee0Tym6fBy
5q1fmk57ccuO8orJnSpyg1psHN9dpKrj7Gd95hNXaJ3CuuvFPLTjwOSCTXtogEra
a5V/qYIkISGK1SL+boZjvHg7Wj1g+4sBBYdmD8Q/7OcYcI6Q3co+sWxvVl2MQasz
rFw5tQ+9dAwqID9AOeRrpbJOxOAgHG4wJ3JdRudPOaDhNDgbjqLhbxEMP8ldH/EG
8HFEJTq2AZ3jJ8T1o/YLzY5mD2Dg0U3gs0SXQuPGT4iUA665EomPiBX2xZd5LTAk
8cfPClkpvD4Crg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 22:40:19 2026 by rpki-client