This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
File:                     iXO4_LiuetyaeZnhNn25WphaweY.mft (raw, json)
Hash identifier:          vet0yoZeGsksBF9WC9RbJMYRaMJG3ZvMNJ9vYoR6S8M=
Subject key identifier:   E6:DC:F0:BB:2F:F0:38:81:65:B1:6C:8F:20:42:F7:42:50:CF:85:1F
Authority key identifier: 89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6
Certificate issuer:       /CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
Certificate serial:       019BFBE4D3DA110F926BBE00B05750B3AB8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
Manifest number:          177D
Signing time:             Mon 26 Jan 2026 20:00:36 +0000
Manifest this update:     Mon 26 Jan 2026 20:00:36 +0000
Manifest next update:     Tue 27 Jan 2026 20:00:36 +0000
Files and hashes:         1: RL-eZBtLpxaBQ-5YuIvqntEMuKw.roa (hash: TSHPY7BwTTX7TS8z+UItG/ro0Zvg2N4BKXVug688uKo=)
                          2: iXO4_LiuetyaeZnhNn25WphaweY.crl (hash: hND8wXPcBKLsji16NFYGA4LFPpL/6iB+oqc2khfPkL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e4:d3:da:11:0f:92:6b:be:00:b0:57:50:b3:ab:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8973b8fcb8ae7adc9a7999e1367db95a985ac1e6
        Validity
            Not Before: Jan 26 20:00:36 2026 GMT
            Not After : Jan 27 20:00:36 2026 GMT
        Subject: CN=e6dcf0bb2ff0388165b16c8f2042f74250cf851f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:6b:ff:92:d2:b7:ce:7a:bb:d4:38:f1:da:
                    db:88:8e:83:58:2e:f5:6b:2e:83:e7:43:46:0e:32:
                    de:29:c5:eb:4c:40:d4:36:14:03:c1:35:ac:29:9f:
                    da:a5:7e:2b:96:81:11:7b:da:79:6b:49:09:ec:17:
                    0a:7d:0e:d0:dc:9e:b2:a7:c0:17:27:7b:89:3c:10:
                    50:05:cf:c4:6b:b5:e1:ce:a0:73:b3:00:51:b7:06:
                    cd:46:26:62:70:05:fe:2c:98:f6:86:1b:97:64:0b:
                    cf:27:ca:da:e2:5e:22:40:51:20:9f:34:10:d1:c6:
                    0c:31:38:6f:03:0a:8b:9d:24:96:53:60:bb:ad:21:
                    fb:1a:8d:5f:dc:4b:cc:aa:b0:7d:47:76:03:2d:d5:
                    f4:10:3c:74:f3:59:46:b3:0e:58:33:a3:73:33:64:
                    a3:a0:31:30:44:5b:fd:23:ab:93:e9:1b:a8:2c:eb:
                    d4:62:c2:bd:06:54:5b:02:e5:08:d4:20:2f:f1:56:
                    a8:97:ff:a9:9b:27:01:7a:47:e6:e0:35:9f:05:c2:
                    57:01:c9:22:c2:2e:6c:fc:1c:71:78:28:37:90:79:
                    9d:02:67:b7:7c:95:38:e9:16:c8:bd:c7:f2:2e:61:
                    bb:86:4a:aa:f5:1d:1a:bd:82:c8:70:66:e7:7d:ba:
                    d9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:DC:F0:BB:2F:F0:38:81:65:B1:6C:8F:20:42:F7:42:50:CF:85:1F
            X509v3 Authority Key Identifier:
                keyid:89:73:B8:FC:B8:AE:7A:DC:9A:79:99:E1:36:7D:B9:5A:98:5A:C1:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXO4_LiuetyaeZnhNn25WphaweY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/981816-8860-4c2e-adf6-0d0bf2b56d59/1/iXO4_LiuetyaeZnhNn25WphaweY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:91:56:5d:21:dd:f4:fb:ae:5a:5f:ab:5a:36:a6:5e:91:d5:
         8e:f9:28:d5:74:18:0f:2d:ee:88:59:71:b2:53:2e:c7:5f:cf:
         00:0d:40:f6:85:e9:91:46:21:98:e3:8e:e4:7d:f9:3a:50:f3:
         59:1c:58:fc:6c:10:9c:3a:d3:62:90:c6:fc:c9:7c:b7:dc:ba:
         eb:80:c0:54:e3:bc:14:8c:51:77:0e:ca:90:57:0b:7e:93:c6:
         d7:30:9b:73:ae:70:a1:cb:d3:8b:39:a2:90:3b:2a:e7:a2:8b:
         a6:12:bc:82:87:52:ad:7e:3e:31:a4:1e:c4:a7:9c:56:2f:43:
         91:08:3b:22:f2:55:0a:d0:25:5c:ec:19:c7:f0:04:8d:51:98:
         b9:0b:f2:1b:45:2a:16:e6:ea:7f:c3:7d:21:65:49:d6:13:ac:
         5e:c9:91:8a:6c:00:c7:3d:8d:9a:64:6e:90:8a:aa:3b:21:c2:
         5b:58:83:7a:12:db:62:49:a6:26:1e:d2:58:9d:82:a2:80:60:
         74:ae:2d:89:33:dd:37:05:63:3a:88:24:54:a1:31:36:80:d8:
         fb:43:d2:1a:ae:70:a8:b3:22:4e:c7:13:60:88:95:c7:36:9b:
         5e:33:09:ec:a3:51:1d:69:f2:8f:a6:00:a1:67:d4:46:b9:80:
         c7:85:5a:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv75NPaEQ+Sa74AsFdQs6uMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NzNiOGZjYjhhZTdhZGM5YTc5OTllMTM2N2RiOTVhOTg1
YWMxZTYwHhcNMjYwMTI2MjAwMDM2WhcNMjYwMTI3MjAwMDM2WjAzMTEwLwYDVQQD
EyhlNmRjZjBiYjJmZjAzODgxNjViMTZjOGYyMDQyZjc0MjUwY2Y4NTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a9r/5LSt856u9Q48drbiI6DWC71
ay6D50NGDjLeKcXrTEDUNhQDwTWsKZ/apX4rloERe9p5a0kJ7BcKfQ7Q3J6yp8AX
J3uJPBBQBc/Ea7XhzqBzswBRtwbNRiZicAX+LJj2hhuXZAvPJ8ra4l4iQFEgnzQQ
0cYMMThvAwqLnSSWU2C7rSH7Go1f3EvMqrB9R3YDLdX0EDx081lGsw5YM6NzM2Sj
oDEwRFv9I6uT6RuoLOvUYsK9BlRbAuUI1CAv8Vaol/+pmycBekfm4DWfBcJXAcki
wi5s/BxxeCg3kHmdAme3fJU46RbIvcfyLmG7hkqq9R0avYLIcGbnfbrZZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObc8Lsv8DiBZbFsjyBC90JQz4UfMB8GA1UdIwQY
MBaAFIlzuPy4rnrcmnmZ4TZ9uVqYWsHmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYt
MGQwYmYyYjU2ZDU5LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ODE4MTYtODg2MC00YzJlLWFkZjYtMGQwYmYyYjU2ZDU5
LzEvaVhPNF9MaXVldHlhZVpuaE5uMjVXcGhhd2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH5FWXSHd
9PuuWl+rWjamXpHVjvko1XQYDy3uiFlxslMux1/PAA1A9oXpkUYhmOOO5H35OlDz
WRxY/GwQnDrTYpDG/Ml8t9y664DAVOO8FIxRdw7KkFcLfpPG1zCbc65wocvTizmi
kDsq56KLphK8godSrX4+MaQexKecVi9DkQg7IvJVCtAlXOwZx/AEjVGYuQvyG0Uq
Fubqf8N9IWVJ1hOsXsmRimwAxz2NmmRukIqqOyHCW1iDehLbYkmmJh7SWJ2CooBg
dK4tiTPdNwVjOogkVKExNoDY+0PSGq5wqLMiTscTYIiVxzabXjMJ7KNRHWnyj6YA
oWfURrmAx4VaQA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:25 2026 by rpki-client