This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File:                     IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier:          8eR2Sew/RemBut6eOyofjJJ3hWNIKf0g+DItoabJVgs=
Subject key identifier:   28:2C:D1:61:85:7C:FB:38:69:FF:62:89:A9:0B:91:A7:98:D9:65:3D
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer:       /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial:       019BF8E4880082972249FCA0091FAA54D5D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number:          11BB
Signing time:             Mon 26 Jan 2026 06:01:24 +0000
Manifest this update:     Mon 26 Jan 2026 06:01:24 +0000
Manifest next update:     Tue 27 Jan 2026 06:01:24 +0000
Files and hashes:         1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: amM4a+FscTVknpWJITl68MYiEFHLxEZ3Mb2FKIBwf1c=)
                          2: OIqVwV7eJRjge3Y7JoI6UT8DyHg.roa (hash: 1a+xm03EcG4NIWojKcu02C40HTOK/Zidn5fuQN++My8=)
                          3: RvjdrZHQvT2b90nWXdsgoaDdips.roa (hash: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E=)
                          4: YfMmn3NTxzanjSoW2CgtmSyKoBw.roa (hash: R1/beSy+NbtBJBgUSOR66DtF7b/TO6ueQaOcS29ElbE=)
                          5: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (hash: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e4:88:00:82:97:22:49:fc:a0:09:1f:aa:54:d5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
        Validity
            Not Before: Jan 26 06:01:24 2026 GMT
            Not After : Jan 27 06:01:24 2026 GMT
        Subject: CN=282cd161857cfb3869ff6289a90b91a798d9653d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b3:b3:43:ed:81:c5:56:66:b6:e3:b7:78:a2:
                    cd:32:e9:52:48:2f:71:43:81:7a:9b:5c:c7:17:ee:
                    c7:ad:6f:93:ec:de:da:9c:7b:e4:4e:5d:91:b0:d4:
                    f3:d7:d0:52:85:cb:4b:f1:3c:4c:63:ea:ca:22:b8:
                    41:64:a5:e6:5d:32:90:e5:80:bd:a2:f8:8c:69:59:
                    de:ac:4a:88:ed:22:b5:5b:38:dc:15:87:e7:4d:d4:
                    b3:e4:f6:1d:da:e7:56:92:35:39:67:f6:2b:15:27:
                    9f:a1:0e:d7:d5:bb:a6:36:27:98:4b:ba:20:a6:20:
                    96:ba:10:fc:9e:68:a6:a9:d2:cb:33:2d:d1:40:5e:
                    d0:2b:a4:2c:23:30:64:8c:40:60:84:07:9a:47:86:
                    fb:0e:30:5c:1d:bf:41:78:a1:5f:0f:4c:25:c0:97:
                    d8:d8:58:f5:56:66:52:d3:43:68:22:f6:1f:a4:2b:
                    87:57:9d:46:40:0b:27:e0:27:55:49:67:a7:3d:a2:
                    90:af:d8:33:51:ec:9e:d6:06:21:cc:2f:83:24:bd:
                    87:96:d2:49:84:b4:6a:d1:18:5f:47:f9:5e:17:22:
                    ca:6d:7d:94:d5:a8:4c:30:55:14:89:bb:cb:12:a5:
                    5a:58:b9:2c:49:c4:eb:08:02:78:ea:0c:d3:10:80:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2C:D1:61:85:7C:FB:38:69:FF:62:89:A9:0B:91:A7:98:D9:65:3D
            X509v3 Authority Key Identifier:
                keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:b0:c1:60:4a:cf:dd:95:a7:ae:d3:5c:e8:db:20:71:32:
         ef:33:8f:05:47:a1:ef:bc:57:c9:b4:09:4b:d7:c6:a8:a0:ce:
         9c:30:aa:a8:3c:d7:20:9f:a5:6b:ea:ff:26:90:7d:de:4e:07:
         46:65:25:00:5f:ba:ed:fe:b4:11:33:83:59:da:a4:d6:08:6e:
         bd:5d:3c:22:d7:81:b7:59:22:41:91:de:b6:67:41:28:cc:2e:
         35:59:f8:ac:e1:cf:84:95:2b:20:5f:83:fd:12:fc:03:43:da:
         d4:96:ae:3d:33:bf:75:29:44:d8:c6:1f:74:d1:71:81:b1:b7:
         30:c5:dd:d9:b1:fa:ff:d7:0c:0a:4a:3f:c5:92:13:03:e6:40:
         54:a6:34:55:0e:c7:0f:b6:52:2c:80:6f:2e:d7:3d:59:26:f0:
         44:dc:20:7d:83:ad:cd:34:03:65:d4:df:92:10:75:94:8b:46:
         71:d8:31:4c:b8:6a:55:e1:95:4b:e4:b0:5d:90:d4:33:3d:a9:
         4f:1f:58:8a:f4:62:4b:cf:ec:c2:c3:6e:66:9d:53:a1:09:da:
         d6:60:e1:af:18:9f:f9:41:28:0a:dc:82:bf:13:72:b8:80:96:
         42:eb:50:7b:d8:b8:21:d5:0f:38:f0:d2:be:07:30:9b:a6:45:
         0c:e8:ea:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv45IgAgpciSfygCR+qVNXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZjYzODEwN2FiYjg0YWU2ZmIwM2NjMWRiMmNmZDFiYzQ0
ODdmOGQwHhcNMjYwMTI2MDYwMTI0WhcNMjYwMTI3MDYwMTI0WjAzMTEwLwYDVQQD
EygyODJjZDE2MTg1N2NmYjM4NjlmZjYyODlhOTBiOTFhNzk4ZDk2NTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7OzQ+2BxVZmtuO3eKLNMulSSC9x
Q4F6m1zHF+7HrW+T7N7anHvkTl2RsNTz19BShctL8TxMY+rKIrhBZKXmXTKQ5YC9
oviMaVnerEqI7SK1WzjcFYfnTdSz5PYd2udWkjU5Z/YrFSefoQ7X1bumNieYS7og
piCWuhD8nmimqdLLMy3RQF7QK6QsIzBkjEBghAeaR4b7DjBcHb9BeKFfD0wlwJfY
2Fj1VmZS00NoIvYfpCuHV51GQAsn4CdVSWenPaKQr9gzUeye1gYhzC+DJL2HltJJ
hLRq0RhfR/leFyLKbX2U1ahMMFUUibvLEqVaWLksScTrCAJ46gzTEIBIrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgs0WGFfPs4af9iiakLkaeY2WU9MB8GA1UdIwQY
MBaAFCD2OBB6u4Sub7A8wdss/RvESH+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQt
YTgyODM2ZGUwNWZjLzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC80ZjU4MDgtMWMwNC00MjU1LTliODQtYTgyODM2ZGUwNWZj
LzEvSVBZNEVIcTdoSzV2c0R6QjJ5ejlHOFJJZjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaawwWBK
z92Vp67TXOjbIHEy7zOPBUeh77xXybQJS9fGqKDOnDCqqDzXIJ+la+r/JpB93k4H
RmUlAF+67f60ETODWdqk1ghuvV08IteBt1kiQZHetmdBKMwuNVn4rOHPhJUrIF+D
/RL8A0Pa1JauPTO/dSlE2MYfdNFxgbG3MMXd2bH6/9cMCko/xZITA+ZAVKY0VQ7H
D7ZSLIBvLtc9WSbwRNwgfYOtzTQDZdTfkhB1lItGcdgxTLhqVeGVS+SwXZDUMz2p
Tx9YivRiS8/swsNuZp1ToQna1mDhrxif+UEoCtyCvxNyuICWQutQe9i4IdUPOPDS
vgcwm6ZFDOjqRQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 12:25:44 2026 by rpki-client