This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
File:                     snJh1xU0i_1zzp27ckiGVpk7ovE.mft (raw, json)
Hash identifier:          HVVkly+PKYjQ25YMJdUAXuZcm6QmifCUtIYjLQyT8rw=
Subject key identifier:   02:22:C6:4B:F9:B0:3B:D8:A1:81:64:89:C1:AD:A0:20:42:23:35:E4
Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1
Certificate issuer:       /CN=b27261d715348bfd73ce9dbb72488656993ba2f1
Certificate serial:       019BF8AD9E94A3580FBC4D77DDCC7B6BD58C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
Manifest number:          1317
Signing time:             Mon 26 Jan 2026 05:01:26 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:26 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:26 +0000
Files and hashes:         1: 604DVjW89FcTF-J3OlDY0xygtP0.roa (hash: DEfDKsdOogNIkUL8SOV8s+auFLI8n9dOB4Wep4bTTqg=)
                          2: 8Lu4DZzB_vxfnH6NwGiNXO689Ug.roa (hash: rEMwOO6lSnO1YlEyeJow58wL/2TfCKPn4IBjRuIkc0Y=)
                          3: 8lPmNR8kC5qE5Lxt_zKmkqCnA_M.roa (hash: Ik4QED5F6sI3OJklEdpUYZ0TKdybSr6g6ZurSavfP2U=)
                          4: EIJhIjJtEMnHVUQ212bTckjgB0I.roa (hash: EybXD780CwAqGIpHjiQwUZRlhbfLzk1+eybY/uGp/io=)
                          5: G25W8rWynHVqOw08BsNDQCX7r4k.roa (hash: lP+BuX9RXuXg15DfmgethXUeCq5zgrMORumyH2g7dwI=)
                          6: LDiAx4mH-l2McqHvkuEwEg3VQmo.roa (hash: hHjSOBQ7GK7UhrCnhltMggAjTsVyGTTWQh8ZK+1z/d8=)
                          7: RZ7OjE_uz9kQm_N05glcQaVKBCI.roa (hash: FZSwjKnEe/WNTvIFtlBH2t2jJQlqscx5RYqxrilnkJM=)
                          8: Wt9ypheec9GpOk_86DTL3w6D2tk.roa (hash: aRWLUqX5vTU61VSd9AOD3yJeqO5wgKqFkxtzxw3VLKA=)
                          9: b1C5tQPSDgyOYMEa2vtiHCVTu3w.roa (hash: m+CwEMaGPey4t5aVnMPNBJGIOj9PYMcxJas6I4mb38c=)
                          10: ci2RBJP7wBZT9607Ek93x3v-DJg.roa (hash: rQsPZOnMLyTQdUIKObokqHCmODTdjtz2irzXClA4KLY=)
                          11: ezjdknW8yKvW_oPzf0czr_SHPos.roa (hash: Ke5tCHtNlbJY4VFVoI0K+8QDexK6VL6V1j/4AYy554g=)
                          12: jU4Lr0RWqeKwbtj_mpkI_cSuuKQ.roa (hash: yPSwJ7BnVd6OtmjXkcMdWkJgliiWudINiSFU9FCJQiQ=)
                          13: snJh1xU0i_1zzp27ckiGVpk7ovE.crl (hash: QDiZHF21DYdnRvDnWpD8aK1Kq7hw0/CXw99DDKJyD+g=)
                          14: xeKu-YZxEc8ydQI0uzpgttKRF9s.roa (hash: OIvXQcQeayjejLI4847MVkofRUX3vV1PuAUvz7Z84Jc=)
                          15: yYo92JwdAK0Yb36h4od0SkR-8PQ.roa (hash: UkVRpXuv1yNCqqHU2bi8PbnwrwXCTcNm+/wk+zbOQNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 05:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:9e:94:a3:58:0f:bc:4d:77:dd:cc:7b:6b:d5:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1
        Validity
            Not Before: Jan 26 05:01:26 2026 GMT
            Not After : Jan 27 05:01:26 2026 GMT
        Subject: CN=0222c64bf9b03bd8a1816489c1ada020422335e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:41:dd:0e:bf:ee:1d:2d:15:4f:9c:1e:89:2d:
                    84:a3:04:bf:cc:75:df:cd:b1:cd:05:4c:ce:77:57:
                    dc:f8:18:8a:f5:6f:05:df:bf:9e:54:61:89:2f:39:
                    19:cf:5d:81:7e:fb:8d:98:16:06:28:93:0c:20:83:
                    d4:b1:88:90:2b:a1:6b:f6:e7:92:b6:8c:a3:3c:97:
                    48:1f:ff:e1:da:6f:be:cc:be:1a:86:b5:95:32:fe:
                    2f:c5:60:1b:15:06:89:19:4a:82:75:13:35:88:59:
                    56:5f:9f:9c:78:03:4f:a1:56:49:a6:74:91:59:52:
                    69:5d:59:97:8d:7a:fe:51:58:42:07:d4:e0:ce:aa:
                    57:3b:39:3a:c9:c0:f4:33:6d:34:f8:14:83:cd:72:
                    6b:6d:17:a0:9c:c5:9f:12:67:04:97:0a:4a:74:41:
                    c8:35:19:ef:93:7a:f6:ef:b4:05:47:90:1b:43:a3:
                    bc:2a:06:78:6a:f8:1d:7d:3c:9e:90:8f:d2:e5:66:
                    e7:8e:3d:fa:40:0f:5d:6c:eb:ae:cf:55:22:38:c9:
                    b5:e5:1c:02:cc:3f:40:d9:ec:9e:4e:4f:5e:09:ff:
                    a8:68:56:f0:0a:eb:f5:75:2b:5f:37:98:fe:2d:4d:
                    a2:96:37:84:3b:56:2d:74:a8:db:55:1c:25:6d:38:
                    9b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:22:C6:4B:F9:B0:3B:D8:A1:81:64:89:C1:AD:A0:20:42:23:35:E4
            X509v3 Authority Key Identifier:
                keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:e4:41:83:3d:c2:90:13:3b:04:6a:30:a6:c3:65:9b:c7:f1:
         eb:56:bf:19:d7:7f:1d:15:36:9c:34:38:2a:1d:56:d6:6a:72:
         7a:a1:9b:c6:6a:54:0c:ee:5b:43:ed:53:4e:7b:f6:17:93:4e:
         41:52:c8:ee:48:c2:73:d9:fa:11:2d:f4:39:59:d8:6f:78:f1:
         26:b0:3c:8d:38:69:1b:62:2a:a5:62:d4:02:3c:d7:7a:3b:b3:
         c4:d4:3b:c8:8a:75:e8:be:c7:a2:39:cd:b4:7f:67:94:fb:3b:
         95:1b:53:56:a4:bc:17:e0:e6:a8:82:05:14:13:e2:05:b9:6f:
         58:02:df:0a:23:36:7a:93:fb:54:40:6a:60:cb:7c:82:7c:a7:
         91:91:e5:c0:43:ae:20:60:69:12:a4:57:7d:70:4d:1a:9f:9d:
         a4:d0:30:8e:47:5a:ab:c8:72:a2:62:3f:0b:40:b7:35:06:d5:
         fa:d4:07:cc:fe:fe:be:e1:16:38:6e:f1:ec:fb:7b:b2:89:f9:
         f8:71:b2:7c:00:e3:fa:7b:cc:c3:28:be:45:3f:e6:3e:59:90:
         64:5f:04:e9:db:eb:37:96:82:71:e7:71:1b:55:7b:ad:10:b9:
         44:58:4b:76:75:e2:3f:0c:2f:9c:af:3d:4f:94:33:55:03:c7:
         fc:58:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:39:54 2026 by rpki-client