This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File:                     kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier:          vaBTQiNkPEV61onSwirH3YZWv18n6pxdJBwdJ3Ep6po=
Subject key identifier:   5F:5F:F9:31:01:27:29:C4:D1:3D:CC:95:06:86:E2:E8:77:A8:C9:00
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer:       /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial:       019BFB77729A01791936039992BD51E672F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number:          180C
Signing time:             Mon 26 Jan 2026 18:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 18:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 18:01:07 +0000
Files and hashes:         1: JusMkeLnpwZerjRmrLfh18Ll6fs.roa (hash: 3QHrOt+mUzTsdAhnaZvehOeizpN1D+y9MLiru36nQ0s=)
                          2: MIyWfq9gpX_eI_ED1ii5vOGaWmM.roa (hash: u6guXrywPfx5K9H1XrSR92ZwtD6DI3B8S7D6GcWPq6E=)
                          3: QecGwK74B6zUHtUhTMCZnZhdc-I.roa (hash: aKnsrMiz1TExOCFQauB98iUzX+RHG82R4UA+NNcGRUk=)
                          4: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: ordhQ95rv+IkN+8uCQAPMyhwUHU+fR/HTzEoNOCUUHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:72:9a:01:79:19:36:03:99:92:bd:51:e6:72:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
        Validity
            Not Before: Jan 26 18:01:07 2026 GMT
            Not After : Jan 27 18:01:07 2026 GMT
        Subject: CN=5f5ff931012729c4d13dcc950686e2e877a8c900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:ff:d6:77:a7:13:3b:83:18:37:e8:df:1c:
                    02:c9:2d:f9:e2:36:ce:5d:a3:36:5b:a5:51:6a:36:
                    5e:36:90:de:dc:3c:a2:0b:c0:2a:c3:4f:69:6c:d0:
                    a4:10:63:3e:8f:66:0f:e4:30:4d:23:83:74:e0:ba:
                    9a:dd:b4:c1:f3:aa:2a:54:b6:03:8b:24:44:d3:d0:
                    2c:58:9c:b7:d9:63:9c:e1:5b:bf:e3:cf:ff:81:bd:
                    9a:57:b9:46:80:bc:74:5a:40:1c:b2:0a:26:5d:1d:
                    20:e5:d7:5d:69:02:d6:c5:3c:da:d4:91:b6:5c:cc:
                    91:a7:37:2c:10:10:ff:d2:bc:d7:44:9a:c6:9b:4d:
                    90:32:cf:51:24:a5:96:5d:f9:b2:24:9f:ff:29:c2:
                    59:51:da:c0:fa:44:69:26:c9:b5:e3:ef:10:48:47:
                    9a:e4:8c:fe:44:0d:b9:4f:17:f9:76:86:ec:a7:78:
                    13:a3:f6:bd:eb:d3:ca:b3:3c:bf:bf:ce:3c:8f:54:
                    8e:69:e3:59:22:18:89:17:b6:aa:6b:9f:b8:17:3a:
                    92:a1:0f:c1:da:eb:02:2c:20:9e:bd:e4:73:44:23:
                    6f:5c:50:f4:a1:16:dd:55:6e:9c:95:0d:e9:8f:d8:
                    45:41:cf:f3:61:1d:67:bb:37:b9:07:86:00:32:a4:
                    72:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:5F:F9:31:01:27:29:C4:D1:3D:CC:95:06:86:E2:E8:77:A8:C9:00
            X509v3 Authority Key Identifier:
                keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:53:cf:84:da:42:0b:8b:19:d5:46:45:3d:35:8c:50:d2:
         4e:8c:c4:94:33:30:3a:30:4e:9b:4e:61:fe:9c:4c:f0:23:c4:
         0a:07:af:21:f3:1b:26:b8:00:04:1a:0e:cc:a1:a2:f7:61:70:
         f0:51:e2:3a:2b:fc:f4:49:5b:e4:70:c4:1b:42:03:f5:aa:3f:
         dc:7f:82:37:cc:12:ea:c3:94:2f:99:3b:3f:a7:fc:2d:ce:d9:
         a3:d2:c7:7d:1b:7f:36:e0:26:07:cb:59:53:be:55:ab:bb:dd:
         0a:1e:63:b0:fc:b6:3f:59:02:da:52:19:fb:12:34:ad:3c:64:
         63:bd:90:6a:89:31:45:b1:26:62:27:e9:c3:ea:6f:a8:0d:ff:
         bc:c7:a2:f3:5c:48:a8:ec:fe:07:49:f3:c0:33:f1:e0:80:24:
         57:0c:c7:1a:55:1f:92:14:7b:bc:d9:35:65:6f:04:1d:ed:6b:
         75:57:bf:b0:f1:6d:7e:16:03:27:df:ae:7c:6d:ac:57:c7:ea:
         80:aa:5e:18:48:0c:a7:a6:b5:e7:65:a6:b9:2f:d2:d9:b6:f5:
         5b:e1:1c:3e:e6:4e:98:9c:76:85:3d:2c:a5:68:88:fb:c9:12:
         07:1f:d3:6f:c2:12:31:e9:46:e8:b0:ed:5a:b4:a2:86:83:d3:
         be:2b:64:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7d3KaAXkZNgOZkr1R5nL1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjYwMTI2MTgwMTA3WhcNMjYwMTI3MTgwMTA3WjAzMTEwLwYDVQQD
Eyg1ZjVmZjkzMTAxMjcyOWM0ZDEzZGNjOTUwNjg2ZTJlODc3YThjOTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCH/1nenEzuDGDfo3xwCyS354jbO
XaM2W6VRajZeNpDe3DyiC8Aqw09pbNCkEGM+j2YP5DBNI4N04Lqa3bTB86oqVLYD
iyRE09AsWJy32WOc4Vu/48//gb2aV7lGgLx0WkAcsgomXR0g5dddaQLWxTza1JG2
XMyRpzcsEBD/0rzXRJrGm02QMs9RJKWWXfmyJJ//KcJZUdrA+kRpJsm14+8QSEea
5Iz+RA25Txf5dobsp3gTo/a969PKszy/v848j1SOaeNZIhiJF7aqa5+4FzqSoQ/B
2usCLCCeveRzRCNvXFD0oRbdVW6clQ3pj9hFQc/zYR1nuze5B4YAMqRyjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9f+TEBJynE0T3MlQaG4uh3qMkAMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhBTz4Ta
QguLGdVGRT01jFDSTozElDMwOjBOm05h/pxM8CPECgevIfMbJrgABBoOzKGi92Fw
8FHiOiv89Elb5HDEG0ID9ao/3H+CN8wS6sOUL5k7P6f8Lc7Zo9LHfRt/NuAmB8tZ
U75Vq7vdCh5jsPy2P1kC2lIZ+xI0rTxkY72QaokxRbEmYifpw+pvqA3/vMei81xI
qOz+B0nzwDPx4IAkVwzHGlUfkhR7vNk1ZW8EHe1rdVe/sPFtfhYDJ9+ufG2sV8fq
gKpeGEgMp6a152WmuS/S2bb1W+EcPuZOmJx2hT0spWiI+8kSBx/Tb8ISMelG6LDt
WrSihoPTvitk6w==
-----END CERTIFICATE-----
Generated at Tue Jan 27 02:12:42 2026 by rpki-client