This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
File:                     p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json)
Hash identifier:          DBjadWGHaVvmdbiNMHB7UDXhyRqlwvCbD2TO8YILcLM=
Subject key identifier:   69:7F:68:04:51:1B:F5:F5:E5:4F:A9:AE:C5:7E:67:25:40:39:EE:AB
Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93
Certificate issuer:       /CN=a79bba2805a988954e4fec42570530f16f9e7093
Certificate serial:       019BAF4B6368FAEE01EA645900B5C7784B66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
Manifest number:          17DE
Signing time:             Sun 11 Jan 2026 23:01:51 +0000
Manifest this update:     Sun 11 Jan 2026 23:01:51 +0000
Manifest next update:     Mon 12 Jan 2026 23:01:51 +0000
Files and hashes:         1: 4L_3KrprYTwmc6F0VK5YpQh7-ng.roa (hash: uekFvxE8fCG4iinAEMabm31AvzlJiPb5Eowm61DVMsU=)
                          2: cSElFw2-npFTxsWdmh_TS_DX1JM.roa (hash: uQXzfb9jOFxKjYKBJjLHpQzon0I+K9i1XFfrYpIMvJY=)
                          3: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: WfehlalhQZ/oj7T52aQnouUietacyWgtDG32FDfR7Co=)
                          4: yU3X6K3B4JZT9bvq8QhnbjxPF2c.roa (hash: 2A76nDGpl64/49OxgRrM5/iYg+gEwhn7gAXzWZ5+Pfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:af:4b:63:68:fa:ee:01:ea:64:59:00:b5:c7:78:4b:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093
        Validity
            Not Before: Jan 11 23:01:51 2026 GMT
            Not After : Jan 12 23:01:51 2026 GMT
        Subject: CN=697f6804511bf5f5e54fa9aec57e67254039eeab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a9:b7:e9:6d:95:a3:47:6f:9e:5b:df:42:75:
                    ed:fe:a7:4c:cb:2b:af:ca:eb:f9:99:02:d5:af:19:
                    ac:0a:6f:42:f4:8c:98:67:48:5f:bd:56:c5:a7:5f:
                    52:1d:c6:e4:a5:38:ea:43:ca:7a:b7:c8:91:1a:e8:
                    8e:46:72:54:04:eb:97:b5:d8:78:3c:b8:d9:4f:de:
                    a9:3d:40:1a:4f:4a:ca:05:b6:b7:e5:6a:90:46:e2:
                    65:8e:10:b2:66:4a:43:db:ab:26:e8:4a:ca:e7:44:
                    8f:eb:6f:e4:14:5d:3d:1d:56:96:f0:c3:d5:8c:c9:
                    49:8b:84:a8:7f:38:43:f8:07:3a:59:b1:e0:bb:97:
                    2d:77:f7:fc:c8:ab:29:30:40:7c:4a:c3:77:90:27:
                    24:54:09:8f:28:8f:cc:61:32:d5:76:a0:db:64:93:
                    1e:b5:44:74:22:cc:65:37:cb:c9:0f:13:46:d6:10:
                    01:8b:02:42:0c:f7:92:38:d5:a8:60:90:06:c4:73:
                    55:99:41:e1:78:c1:69:2c:e9:64:92:46:bd:b4:5d:
                    06:2a:ea:49:72:87:99:a8:bf:32:f6:aa:29:8e:8f:
                    af:1e:fa:66:ae:a8:ca:b2:db:86:a1:37:62:f4:cd:
                    20:13:83:9b:bd:84:05:ab:cb:79:58:43:10:44:ed:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:68:04:51:1B:F5:F5:E5:4F:A9:AE:C5:7E:67:25:40:39:EE:AB
            X509v3 Authority Key Identifier:
                keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:e8:ed:53:ad:4d:ff:5e:aa:a4:6c:10:f1:55:2d:a1:57:16:
         0f:8d:87:cc:bd:c0:ad:29:57:60:57:07:5f:fb:81:89:16:b3:
         33:ee:75:13:b0:fa:34:08:4a:38:5e:93:46:d2:a1:d9:ac:6f:
         4c:e6:2e:40:72:69:ce:42:7b:30:be:3c:1d:ee:e6:43:52:aa:
         92:1a:06:9c:c9:60:93:25:fa:61:89:ea:80:3e:55:93:7a:53:
         ec:d4:15:3b:a7:60:63:30:8e:90:69:ea:99:d4:1d:e1:90:0d:
         16:cb:53:30:b1:e4:f5:e5:60:a1:ef:e8:a5:bc:ec:e2:d3:e2:
         be:cf:1a:a6:a9:b7:2e:8f:2d:38:cb:b0:95:57:2a:0c:2b:06:
         37:f7:d7:81:91:af:f1:c6:5e:38:33:e6:73:2e:d0:bc:d1:80:
         78:e2:fa:9a:c0:e0:91:c3:ff:7c:84:80:93:82:55:0c:fe:01:
         3a:39:55:0d:f8:47:ae:29:e7:1f:96:de:73:58:1e:6c:3c:31:
         e0:2b:06:b9:13:12:93:93:5b:ae:32:f1:f5:5a:a7:f7:9e:02:
         d8:52:0b:30:23:96:c1:9e:5e:df:2b:8c:64:64:1e:a5:54:e0:
         85:90:6c:ed:de:9e:28:67:47:a0:40:71:0b:9f:24:f0:1a:d3:
         8c:6e:bb:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuvS2No+u4B6mRZALXHeEtmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5
ZTcwOTMwHhcNMjYwMTExMjMwMTUxWhcNMjYwMTEyMjMwMTUxWjAzMTEwLwYDVQQD
Eyg2OTdmNjgwNDUxMWJmNWY1ZTU0ZmE5YWVjNTdlNjcyNTQwMzllZWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKm36W2Vo0dvnlvfQnXt/qdMyyuv
yuv5mQLVrxmsCm9C9IyYZ0hfvVbFp19SHcbkpTjqQ8p6t8iRGuiORnJUBOuXtdh4
PLjZT96pPUAaT0rKBba35WqQRuJljhCyZkpD26sm6ErK50SP62/kFF09HVaW8MPV
jMlJi4SofzhD+Ac6WbHgu5ctd/f8yKspMEB8SsN3kCckVAmPKI/MYTLVdqDbZJMe
tUR0IsxlN8vJDxNG1hABiwJCDPeSONWoYJAGxHNVmUHheMFpLOlkkka9tF0GKupJ
coeZqL8y9qopjo+vHvpmrqjKstuGoTdi9M0gE4ObvYQFq8t5WEMQRO3hVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl/aARRG/X15U+prsV+ZyVAOe6rMB8GA1UdIwQY
MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt
ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh
LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxOjtU61N
/16qpGwQ8VUtoVcWD42HzL3ArSlXYFcHX/uBiRazM+51E7D6NAhKOF6TRtKh2axv
TOYuQHJpzkJ7ML48He7mQ1KqkhoGnMlgkyX6YYnqgD5Vk3pT7NQVO6dgYzCOkGnq
mdQd4ZANFstTMLHk9eVgoe/opbzs4tPivs8apqm3Lo8tOMuwlVcqDCsGN/fXgZGv
8cZeODPmcy7QvNGAeOL6msDgkcP/fISAk4JVDP4BOjlVDfhHrinnH5bec1gebDwx
4CsGuRMSk5NbrjLx9Vqn954C2FILMCOWwZ5e3yuMZGQepVTghZBs7d6eKGdHoEBx
C58k8BrTjG67pw==
-----END CERTIFICATE-----
Generated at Mon Jan 12 02:13:07 2026 by rpki-client