This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File:                     IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier:          Yoq+48QUig1uhQ5ipPNphi1pxaihrI4lG2nWMpXHG64=
Subject key identifier:   93:C8:0D:D3:80:09:F3:B1:8C:61:B2:FE:CD:65:74:21:42:87:53:14
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer:       /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial:       019BFE784D4DD923AF619F9CDF8F93B78D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number:          17EC
Signing time:             Tue 27 Jan 2026 08:00:55 +0000
Manifest this update:     Tue 27 Jan 2026 08:00:55 +0000
Manifest next update:     Wed 28 Jan 2026 08:00:55 +0000
Files and hashes:         1: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: GA8f65wLyMAPIAxpuxHFM0/VDOJQv+CB/9DXxxMSW48=)
                          2: Oe7wTUeOifNOrZPE6s11kQOKX-4.roa (hash: gsLsf04/fdLsccMrWMJ4qLZbQv2ayrUfRSE5fjnchYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:78:4d:4d:d9:23:af:61:9f:9c:df:8f:93:b7:8d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
        Validity
            Not Before: Jan 27 08:00:55 2026 GMT
            Not After : Jan 28 08:00:55 2026 GMT
        Subject: CN=93c80dd38009f3b18c61b2fecd65742142875314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0b:99:a9:32:09:f9:4d:e8:7f:d2:47:80:fd:
                    85:60:35:a4:4f:84:e5:f5:bd:c3:3b:86:13:82:40:
                    8a:e6:5d:e8:d7:be:0e:21:c9:c8:81:5b:9a:44:79:
                    2d:6c:5f:d2:be:62:a9:fd:39:ab:97:b3:f0:24:a7:
                    54:2b:76:22:05:83:43:42:ec:4d:09:6e:ba:07:7d:
                    cf:36:07:31:3c:77:fc:0b:7a:62:b3:3d:8e:b7:73:
                    da:e9:62:c2:b5:aa:e4:45:8d:00:26:1f:ee:c0:cc:
                    74:16:fd:ad:6e:d2:6f:75:30:78:23:ab:64:0c:20:
                    16:06:32:dc:19:e2:9f:df:be:e6:de:2b:44:27:5e:
                    01:4c:6b:8a:d3:c2:75:a8:cc:d0:fd:48:fb:5d:a9:
                    4b:88:a0:a4:71:8d:5e:dc:87:75:d2:b6:cd:19:26:
                    87:ab:b8:bf:4b:06:24:6f:06:5d:77:fc:d1:42:76:
                    9f:f9:2a:6f:49:68:1a:3b:27:05:8b:58:60:ed:7b:
                    da:c2:ac:db:fe:32:9f:aa:31:b9:78:65:2e:54:7b:
                    1f:ec:90:23:71:9e:55:a5:dd:99:a1:4b:3b:db:a3:
                    0e:69:0b:87:da:5a:9d:e8:4b:9f:b9:56:58:c0:5b:
                    fa:68:ac:9b:1b:41:2a:ed:88:a1:fc:c4:e5:44:e1:
                    5c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C8:0D:D3:80:09:F3:B1:8C:61:B2:FE:CD:65:74:21:42:87:53:14
            X509v3 Authority Key Identifier:
                keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:aa:26:f5:5f:56:46:e8:a5:a4:86:70:52:86:ff:bd:6c:7d:
         2b:8d:36:db:70:f1:8a:27:be:91:81:09:d2:f3:ec:87:fb:54:
         a1:92:63:26:1e:f5:ee:8c:17:08:f2:e8:df:d0:3f:ac:af:84:
         c7:bf:18:c8:85:99:78:29:7a:a2:22:2e:a6:e0:66:f0:65:e2:
         95:f3:4e:e7:b0:d8:4f:16:62:73:87:2e:de:7b:f8:78:85:39:
         23:77:9b:62:54:78:9a:a0:be:3b:8e:67:72:f4:b8:30:b8:54:
         bd:0d:c9:1d:b9:de:26:5e:9f:b5:03:f9:3f:37:af:17:0b:f4:
         1a:44:03:cc:2f:c6:07:63:b6:57:78:fe:86:4c:ce:c3:2e:44:
         75:c7:20:c5:de:de:bf:71:ec:a0:bb:90:c1:7e:23:56:37:b2:
         fb:ef:6e:71:80:a7:50:fd:56:8c:13:aa:d5:eb:13:df:0c:11:
         e3:51:cb:95:e3:ae:84:4d:23:40:77:14:86:7d:52:23:56:4c:
         90:62:bb:e3:f1:4a:d5:90:da:5f:2c:c4:da:ea:87:84:77:89:
         70:9c:f6:2c:9c:02:c7:75:e6:57:fb:94:a9:d8:ff:92:cd:8b:
         34:97:04:aa:f9:ce:21:e2:da:d4:a8:e0:2f:14:62:56:c3:91:
         69:62:55:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+eE1N2SOvYZ+c34+Tt403MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDVhZTA2MjEyZjNjMmY4ZjU3M2EwYjU0OTI0NDFlNThm
MjFjNGUwHhcNMjYwMTI3MDgwMDU1WhcNMjYwMTI4MDgwMDU1WjAzMTEwLwYDVQQD
Eyg5M2M4MGRkMzgwMDlmM2IxOGM2MWIyZmVjZDY1NzQyMTQyODc1MzE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQuZqTIJ+U3of9JHgP2FYDWkT4Tl
9b3DO4YTgkCK5l3o174OIcnIgVuaRHktbF/SvmKp/Tmrl7PwJKdUK3YiBYNDQuxN
CW66B33PNgcxPHf8C3pisz2Ot3Pa6WLCtarkRY0AJh/uwMx0Fv2tbtJvdTB4I6tk
DCAWBjLcGeKf377m3itEJ14BTGuK08J1qMzQ/Uj7XalLiKCkcY1e3Id10rbNGSaH
q7i/SwYkbwZdd/zRQnaf+SpvSWgaOycFi1hg7Xvawqzb/jKfqjG5eGUuVHsf7JAj
cZ5Vpd2ZoUs726MOaQuH2lqd6EufuVZYwFv6aKybG0Eq7Yih/MTlROFcWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJPIDdOACfOxjGGy/s1ldCFCh1MUMB8GA1UdIwQY
MBaAFCMFrgYhLzwvj1c6C1SSRB5Y8hxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEt
Y2Y2YjIzZDI2MTdjLzEvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEtY2Y2YjIzZDI2MTdj
LzEvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6om9V9W
RuilpIZwUob/vWx9K40223Dxiie+kYEJ0vPsh/tUoZJjJh717owXCPLo39A/rK+E
x78YyIWZeCl6oiIupuBm8GXilfNO57DYTxZic4cu3nv4eIU5I3ebYlR4mqC+O45n
cvS4MLhUvQ3JHbneJl6ftQP5PzevFwv0GkQDzC/GB2O2V3j+hkzOwy5Edccgxd7e
v3HsoLuQwX4jVjey++9ucYCnUP1WjBOq1esT3wwR41HLleOuhE0jQHcUhn1SI1ZM
kGK74/FK1ZDaXyzE2uqHhHeJcJz2LJwCx3XmV/uUqdj/ks2LNJcEqvnOIeLa1Kjg
LxRiVsORaWJVQw==
-----END CERTIFICATE-----
Generated at Tue Jan 27 17:50:24 2026 by rpki-client