This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
File:                     67wNYL06kL1eMVCd6t9EcHaweNg.mft (raw, json)
Hash identifier:          NQrdaIE50mVPguyokldPKmLlS1oAJz6GZYWyPCJQx5E=
Subject key identifier:   5F:F3:12:FF:3B:34:BD:54:89:63:6B:71:75:DA:F2:DD:6B:3F:52:A9
Authority key identifier: EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8
Certificate issuer:       /CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
Certificate serial:       019BF9F713D613198F47AF11432889693413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 11:01:17 +0000
Manifest this update:     Mon 26 Jan 2026 11:01:17 +0000
Manifest next update:     Tue 27 Jan 2026 11:01:17 +0000
Files and hashes:         1: 4Ozn4Unrsy8Tgxp91WwiFZKytkU.roa (hash: Rohs1aSjVXWL0rCfUlHjGhKgh4NddWQEmfzTXXTVjxE=)
                          2: 67wNYL06kL1eMVCd6t9EcHaweNg.crl (hash: 0WBE0icF1EiKDc+cHiOTZQDjlEupfPTrSKzNUmyDozg=)
                          3: Lni0Hg51K4L3QNDzyIIc5yODXjI.roa (hash: gv0qHBnJC/7TrslaRP9zYprmaic9WMI2dM0X709uqrI=)
                          4: WoQboQGGusiNaqyn8jRMBDu3Vvs.roa (hash: spWQsiuCrGGqTTUZBAQNl/ggbHw2wL+q6jT+X13QEFg=)
                          5: rdfW53cfGFv_YgxwDty6e7ihnuY.roa (hash: h3oTAKzXhami9yqYo4w2QzINnY33lJyuys0rpltxvDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f7:13:d6:13:19:8f:47:af:11:43:28:89:69:34:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebbc0d60bd3a90bd5e31509deadf447076b078d8
        Validity
            Not Before: Jan 26 11:01:17 2026 GMT
            Not After : Jan 27 11:01:17 2026 GMT
        Subject: CN=5ff312ff3b34bd5489636b7175daf2dd6b3f52a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:71:0f:20:df:91:24:8e:0e:2a:d4:97:c4:c0:
                    b1:ce:80:64:b3:60:1e:83:fb:df:da:2a:02:1a:7d:
                    48:db:43:8b:40:30:d2:84:b4:8b:e9:67:89:03:57:
                    10:93:53:4c:1c:79:e0:56:a2:a1:cd:65:8c:00:62:
                    ac:e8:3b:23:0b:4e:01:1d:4d:d1:ad:2c:2a:f8:d7:
                    fb:8c:98:b3:88:67:15:8e:5b:78:c2:17:e4:0e:3a:
                    48:a1:bd:b0:73:99:47:21:ce:4e:81:a9:2a:92:98:
                    2b:cc:70:90:db:f3:7d:22:ae:77:ee:74:98:01:6c:
                    32:62:2e:56:b4:d1:19:76:d8:9e:34:ae:6d:26:3e:
                    51:2a:5a:9e:5e:e0:53:87:9d:cd:2c:e6:b4:1f:c1:
                    b9:32:9b:44:a1:6c:7b:51:ea:53:a7:89:b6:7f:b8:
                    dc:34:9e:cc:01:f9:7b:dc:36:f0:6e:85:d7:dd:d4:
                    a7:95:07:00:64:07:9e:11:32:3c:2e:9d:5f:7a:65:
                    9e:57:ca:28:8d:05:65:04:c1:21:25:4d:1c:f5:00:
                    3a:7b:ab:0e:ce:48:16:6a:05:4d:ef:67:44:3a:75:
                    e3:9b:86:00:38:d4:7f:f3:17:14:47:ae:41:ba:96:
                    ba:93:15:4c:30:f8:9e:92:33:db:95:aa:35:67:7c:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F3:12:FF:3B:34:BD:54:89:63:6B:71:75:DA:F2:DD:6B:3F:52:A9
            X509v3 Authority Key Identifier:
                keyid:EB:BC:0D:60:BD:3A:90:BD:5E:31:50:9D:EA:DF:44:70:76:B0:78:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67wNYL06kL1eMVCd6t9EcHaweNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/080af6-8dc4-48e6-9c63-a6b95991cd2c/1/67wNYL06kL1eMVCd6t9EcHaweNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:76:a3:38:1f:33:83:27:9e:fa:fa:53:eb:5c:81:b9:64:
         6f:ea:2f:61:91:72:15:8d:06:fd:b5:7c:7b:ba:12:92:11:8e:
         9e:9e:63:e1:70:d4:8c:aa:1d:8e:d6:97:1f:df:48:2a:22:cc:
         4c:a3:1a:43:ec:f2:ff:86:ab:2e:82:70:00:58:f7:32:28:62:
         a7:0c:78:e1:66:77:0b:8e:94:3c:ac:77:cf:4b:f6:e0:6b:39:
         b1:35:40:9e:1d:75:38:be:79:cb:e0:ed:65:a7:07:b1:37:bb:
         40:cf:6f:d7:a4:6b:0b:3e:51:c6:dd:27:8b:84:22:68:78:54:
         c2:4d:44:02:bf:8b:13:35:71:59:34:3f:78:d9:05:74:81:95:
         40:4c:ee:f6:a8:88:41:3c:50:39:04:9e:68:24:2b:e5:d6:7b:
         0e:f7:3a:6f:ca:e2:d6:e1:5b:a5:df:5e:b6:16:3b:a3:ed:ae:
         f0:ca:71:d4:50:81:6d:ff:f0:62:7d:4b:42:3f:95:86:a9:89:
         07:95:a5:53:1e:0f:06:fb:52:cf:0c:fb:c4:f0:d1:e3:6b:e9:
         7b:02:72:ea:ba:48:05:a5:61:2a:72:92:36:8e:21:e1:57:00:
         d4:6a:9f:d6:ba:ba:1f:06:5a:ea:e6:c0:66:eb:9b:5c:59:cc:
         bf:9a:d8:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv59xPWExmPR68RQyiJaTQTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYmMwZDYwYmQzYTkwYmQ1ZTMxNTA5ZGVhZGY0NDcwNzZi
MDc4ZDgwHhcNMjYwMTI2MTEwMTE3WhcNMjYwMTI3MTEwMTE3WjAzMTEwLwYDVQQD
Eyg1ZmYzMTJmZjNiMzRiZDU0ODk2MzZiNzE3NWRhZjJkZDZiM2Y1MmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnEPIN+RJI4OKtSXxMCxzoBks2Ae
g/vf2ioCGn1I20OLQDDShLSL6WeJA1cQk1NMHHngVqKhzWWMAGKs6DsjC04BHU3R
rSwq+Nf7jJiziGcVjlt4whfkDjpIob2wc5lHIc5OgakqkpgrzHCQ2/N9Iq537nSY
AWwyYi5WtNEZdtieNK5tJj5RKlqeXuBTh53NLOa0H8G5MptEoWx7UepTp4m2f7jc
NJ7MAfl73DbwboXX3dSnlQcAZAeeETI8Lp1femWeV8oojQVlBMEhJU0c9QA6e6sO
zkgWagVN72dEOnXjm4YAONR/8xcUR65Bupa6kxVMMPiekjPblao1Z3y+yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF/zEv87NL1UiWNrcXXa8t1rP1KpMB8GA1UdIwQY
MBaAFOu8DWC9OpC9XjFQnerfRHB2sHjYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMt
YTZiOTU5OTFjZDJjLzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8wODBhZjYtOGRjNC00OGU2LTljNjMtYTZiOTU5OTFjZDJj
LzEvNjd3TllMMDZrTDFlTVZDZDZ0OUVjSGF3ZU5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAofZ2ozgf
M4Mnnvr6U+tcgblkb+ovYZFyFY0G/bV8e7oSkhGOnp5j4XDUjKodjtaXH99IKiLM
TKMaQ+zy/4arLoJwAFj3Mihipwx44WZ3C46UPKx3z0v24Gs5sTVAnh11OL55y+Dt
ZacHsTe7QM9v16RrCz5Rxt0ni4QiaHhUwk1EAr+LEzVxWTQ/eNkFdIGVQEzu9qiI
QTxQOQSeaCQr5dZ7Dvc6b8ri1uFbpd9ethY7o+2u8Mpx1FCBbf/wYn1LQj+VhqmJ
B5WlUx4PBvtSzwz7xPDR42vpewJy6rpIBaVhKnKSNo4h4VcA1Gqf1rq6HwZa6ubA
ZuubXFnMv5rYbg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 13:49:19 2026 by rpki-client