This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
File:                     mJAcfP_Rmk_qePebEASZkmbcwiQ.mft (raw, json)
Hash identifier:          na3b6APVd+JlXdxpRgkBoHugP/TfRduKXutpbK5fPvk=
Subject key identifier:   A6:10:C2:E8:F3:3B:40:B2:B2:AC:82:2E:FF:6E:9B:78:92:D0:92:ED
Authority key identifier: 98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24
Certificate issuer:       /CN=98901c7cffd19a4fea78f79b1004999266dcc224
Certificate serial:       019BFF1CDB99F1D5A4075AAC6EB65C7BA90A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
Manifest number:          17F0
Signing time:             Tue 27 Jan 2026 11:00:39 +0000
Manifest this update:     Tue 27 Jan 2026 11:00:39 +0000
Manifest next update:     Wed 28 Jan 2026 11:00:39 +0000
Files and hashes:         1: Avc3DoG9n8NvJWjUCmVcnkN97O4.roa (hash: YMjpamajsCA46OT3leu0kluW3gE2qUo5wS/kP9h33r8=)
                          2: Ek07ovRM2Kh_Vc9JMXBQkpJ1Q9o.roa (hash: SY/fpD8jCYcf0UhkUzguL/mEf+0d9gsoahH2LNMAjv4=)
                          3: mJAcfP_Rmk_qePebEASZkmbcwiQ.crl (hash: 0ZNgT7XMbOVPWVoiM3yITsALWEFjN6+hcfmHhkX4k30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 11:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ff:1c:db:99:f1:d5:a4:07:5a:ac:6e:b6:5c:7b:a9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98901c7cffd19a4fea78f79b1004999266dcc224
        Validity
            Not Before: Jan 27 11:00:39 2026 GMT
            Not After : Jan 28 11:00:39 2026 GMT
        Subject: CN=a610c2e8f33b40b2b2ac822eff6e9b7892d092ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6d:c5:83:1d:a6:2b:e9:c4:c3:d6:f2:d9:2c:
                    65:08:fb:50:63:99:c5:4c:dc:0d:e9:4f:49:31:79:
                    54:ce:d3:c4:53:93:84:76:a6:b5:8e:8d:fe:1e:f3:
                    4a:04:b4:71:db:a7:94:5c:17:be:a2:36:9c:09:d2:
                    46:f6:62:a2:88:1f:7c:e6:10:5d:2a:b0:c0:d1:80:
                    a4:55:94:f0:67:ea:84:49:a7:9a:ce:51:fc:7f:c8:
                    d8:38:7a:3c:c3:01:6d:36:c1:d8:5e:6c:e9:8d:f0:
                    4a:78:c6:51:8a:5f:12:e9:ef:10:47:08:42:14:a8:
                    4e:e7:b3:79:67:41:e0:c9:9a:73:15:70:9e:2e:10:
                    b4:eb:8a:bd:6e:f4:fb:4d:14:42:d9:6c:9e:e3:fe:
                    a1:f1:f5:d2:7e:b5:fc:97:99:f5:43:7c:23:21:11:
                    a3:bd:df:41:fe:d8:1d:23:32:1f:e4:fc:45:5c:b0:
                    2f:82:20:e8:0d:9f:3c:89:bc:b3:ca:27:27:10:cf:
                    b4:92:5b:eb:ae:83:90:ba:0b:fc:fb:c5:99:c9:19:
                    9e:dd:24:df:07:03:54:72:54:9e:4d:ab:a5:9d:d9:
                    71:b3:8f:03:ab:fa:20:23:57:e0:4d:e0:d6:02:a6:
                    e2:7e:f0:4d:f0:5b:d1:ef:2c:6b:bc:4e:7c:12:f9:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:10:C2:E8:F3:3B:40:B2:B2:AC:82:2E:FF:6E:9B:78:92:D0:92:ED
            X509v3 Authority Key Identifier:
                keyid:98:90:1C:7C:FF:D1:9A:4F:EA:78:F7:9B:10:04:99:92:66:DC:C2:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJAcfP_Rmk_qePebEASZkmbcwiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/e20c95-0f92-4598-96df-cbc2797c1d0a/1/mJAcfP_Rmk_qePebEASZkmbcwiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:54:5e:05:60:0f:56:f1:54:1f:77:b2:06:d2:37:56:fe:17:
         7a:06:53:81:3c:75:d5:8a:79:b9:d8:d0:5f:a3:b9:15:d5:17:
         1b:da:fa:d1:a0:ae:b1:31:1b:fc:bf:42:e2:99:2f:83:05:4d:
         7c:fc:20:55:80:64:87:6a:7f:32:13:d1:ce:5b:f2:a8:24:28:
         3d:0d:bc:d5:07:57:3b:82:b1:05:6e:23:ce:fe:36:0a:45:81:
         9f:47:e7:2d:c4:e0:7e:29:a2:f6:f2:62:a6:48:08:e2:4a:f1:
         f2:05:65:a7:cb:1e:a3:d9:fa:a2:0d:ed:44:f0:a5:3d:be:b3:
         84:1a:e9:57:ee:aa:84:03:c5:30:19:5e:62:5b:95:65:87:b0:
         5c:49:ee:79:92:a1:2a:cb:28:ea:bd:c5:e1:f3:6c:71:5c:e0:
         e9:96:6e:20:5f:2a:b4:28:f9:99:9e:56:a0:ba:9c:b4:4e:23:
         27:d1:c0:83:14:1c:fc:1e:e1:2b:f7:e0:b8:13:d7:9c:c0:8d:
         0f:a4:92:0b:ef:37:d6:36:d5:59:9f:4a:c3:8c:10:e0:14:7b:
         a1:54:ea:fd:d3:5f:37:52:01:a8:7d:ad:70:e6:31:e5:6e:d1:
         81:0a:3c:cd:fe:22:7a:ff:62:18:53:af:cc:00:59:fe:94:af:
         11:6e:d8:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv/HNuZ8dWkB1qsbrZce6kKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTAxYzdjZmZkMTlhNGZlYTc4Zjc5YjEwMDQ5OTkyNjZk
Y2MyMjQwHhcNMjYwMTI3MTEwMDM5WhcNMjYwMTI4MTEwMDM5WjAzMTEwLwYDVQQD
EyhhNjEwYzJlOGYzM2I0MGIyYjJhYzgyMmVmZjZlOWI3ODkyZDA5MmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG3Fgx2mK+nEw9by2SxlCPtQY5nF
TNwN6U9JMXlUztPEU5OEdqa1jo3+HvNKBLRx26eUXBe+ojacCdJG9mKiiB985hBd
KrDA0YCkVZTwZ+qESaeazlH8f8jYOHo8wwFtNsHYXmzpjfBKeMZRil8S6e8QRwhC
FKhO57N5Z0HgyZpzFXCeLhC064q9bvT7TRRC2Wye4/6h8fXSfrX8l5n1Q3wjIRGj
vd9B/tgdIzIf5PxFXLAvgiDoDZ88ibyzyicnEM+0klvrroOQugv8+8WZyRme3STf
BwNUclSeTaulndlxs48Dq/ogI1fgTeDWAqbifvBN8FvR7yxrvE58EvmQ9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYQwujzO0CysqyCLv9um3iS0JLtMB8GA1UdIwQY
MBaAFJiQHHz/0ZpP6nj3mxAEmZJm3MIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYt
Y2JjMjc5N2MxZDBhLzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC9lMjBjOTUtMGY5Mi00NTk4LTk2ZGYtY2JjMjc5N2MxZDBh
LzEvbUpBY2ZQX1Jta19xZVBlYkVBU1prbWJjd2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFReBWAP
VvFUH3eyBtI3Vv4XegZTgTx11Yp5udjQX6O5FdUXG9r60aCusTEb/L9C4pkvgwVN
fPwgVYBkh2p/MhPRzlvyqCQoPQ281QdXO4KxBW4jzv42CkWBn0fnLcTgfimi9vJi
pkgI4krx8gVlp8seo9n6og3tRPClPb6zhBrpV+6qhAPFMBleYluVZYewXEnueZKh
Ksso6r3F4fNscVzg6ZZuIF8qtCj5mZ5WoLqctE4jJ9HAgxQc/B7hK/fguBPXnMCN
D6SSC+831jbVWZ9Kw4wQ4BR7oVTq/dNfN1IBqH2tcOYx5W7RgQo8zf4iev9iGFOv
zABZ/pSvEW7Y3g==
-----END CERTIFICATE-----
Generated at Tue Jan 27 19:18:58 2026 by rpki-client