This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
File:                     kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json)
Hash identifier:          pYc3CbnYVzCLeJ7zQItgUqzZRO3anyZtBWsfni65B/k=
Subject key identifier:   61:0C:8D:D9:49:F6:F7:CB:3A:29:B6:B1:8C:37:E5:07:D5:DB:F8:E7
Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55
Certificate issuer:       /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
Certificate serial:       019BFA9C179E163562A19F0328B5C11E3202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
Manifest number:          17FE
Signing time:             Mon 26 Jan 2026 14:01:32 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:32 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:32 +0000
Files and hashes:         1: 1-Av5slqVQGl13SrEfsDMUE9C8xw.roa (hash: fHxcC/pLnuuTMmJ/MEePK0x7KhULD48H+HBYLlLnLM0=)
                          2: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=)
                          3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=)
                          4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=)
                          5: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=)
                          6: HfpMqcQpb_Oyo8q91Gxgrjfcnfs.roa (hash: 3z+4GXfqGZOD8OYrsC4T9FL0WEjQRqb08RZme3k48Lw=)
                          7: JsVZuQIKNIHzo3qKU_aGaN9TGy0.roa (hash: W7p0gBk862eedQpONG4wyoOk08n0osQClMT4stp+hJs=)
                          8: PyPswdGk1ZVrHOm_LMSZBjhQB1A.roa (hash: +8V8Dt++uOTSXhRHoCWJ+fxEyoBe8YcJTvD0shhiPWM=)
                          9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=)
                          10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=)
                          11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=)
                          12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: YqAczcQKFGNnQcZXujATBUIuGhONgff+tGn9MUY0hQA=)
                          13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=)
                          14: oYXyy77jFFZFt2039BhjAw8G3L0.roa (hash: Cn7bnwSGye9UBPsmnOsVK1mE3z5k0eAVuqmgNwd2Ik4=)
                          15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=)
                          16: s1pXuGWW8y0eMDg2PLAPlJOS44g.roa (hash: 65AbhQkFbG41XkwAPCWwnfEfJS7XNkEvl4ocnYbT4oA=)
                          17: tKQOFu4gDtiR9E_Fs5E_WSdxqYs.roa (hash: WdBgiiX6jEX+9nf9y/4sf97cV0r9Y0+TqLFDE6JwVjA=)
                          18: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=)
                          19: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=)
                          20: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:17:9e:16:35:62:a1:9f:03:28:b5:c1:1e:32:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055
        Validity
            Not Before: Jan 26 14:01:32 2026 GMT
            Not After : Jan 27 14:01:32 2026 GMT
        Subject: CN=610c8dd949f6f7cb3a29b6b18c37e507d5dbf8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:71:cc:7d:e8:a8:39:de:76:b2:14:e7:d8:7a:
                    58:37:f2:bf:6a:96:49:a7:9d:dd:b5:11:88:83:b0:
                    77:5e:3a:2f:e5:58:e1:0c:dd:49:47:bd:84:ec:5c:
                    b3:79:0d:e2:09:37:e0:10:17:40:41:7a:76:28:86:
                    dd:d6:e6:3d:60:8e:f0:9d:c9:a0:08:09:84:19:09:
                    92:5b:da:a7:ca:f6:c8:2f:20:ce:77:3f:1f:1d:fb:
                    e8:50:71:32:60:82:61:bb:19:6e:1b:b7:79:02:94:
                    87:41:cf:0e:9d:3f:5c:b1:5e:9f:e3:64:08:15:29:
                    a9:09:06:90:17:f8:cf:ee:f9:2f:69:80:be:8c:0b:
                    76:20:eb:c7:1c:2a:b4:0b:f5:6d:cf:b1:a9:aa:6a:
                    5d:0c:60:d2:3a:74:59:42:03:ce:a1:d5:0b:0f:8a:
                    8e:8c:0c:09:9a:77:70:f4:fe:96:b9:45:70:b0:13:
                    40:7a:f2:e2:3b:28:d3:8c:90:4c:11:84:18:10:47:
                    89:86:e3:ec:b7:47:0b:79:4c:88:98:7d:fb:d5:71:
                    e6:42:29:d9:c8:46:ab:da:ff:f0:2a:52:52:a7:76:
                    55:8d:ef:c4:ca:6f:e9:d2:04:0c:65:d1:0c:31:d2:
                    d9:0d:0b:2b:b2:66:e6:8b:da:4c:85:52:a9:b7:ab:
                    13:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0C:8D:D9:49:F6:F7:CB:3A:29:B6:B1:8C:37:E5:07:D5:DB:F8:E7
            X509v3 Authority Key Identifier:
                keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:05:8e:de:6e:da:bf:f2:aa:82:4f:52:63:36:56:08:b3:a1:
         10:e8:8a:4e:cc:c1:d9:5b:80:e9:c8:69:fe:6c:0b:fe:d8:60:
         c3:57:25:f9:cf:62:0d:c8:4d:2c:86:4e:28:0d:46:b0:74:5c:
         38:47:b9:f4:34:db:0c:6d:c3:7f:95:34:76:4c:4f:8c:f1:41:
         ed:6e:43:96:8f:04:b7:dc:f6:de:d5:a6:1c:3b:45:6b:a3:2c:
         77:1c:d8:0c:41:ba:09:ca:2d:6d:29:c9:5a:80:b9:ac:83:62:
         24:d5:df:56:76:3f:c8:2a:58:d2:2e:d0:cb:3a:6b:aa:a2:dc:
         e8:cb:fb:36:ee:f1:9e:80:58:0f:73:3f:0f:79:93:d2:2b:bc:
         42:30:c4:7c:54:c4:28:ad:52:eb:b9:f6:10:00:09:96:19:a8:
         f1:b3:3d:ee:68:33:71:2c:b3:22:16:5a:6c:73:7c:8f:4c:ea:
         46:94:2a:46:f5:9b:04:8d:fe:d5:db:ba:d8:c6:92:3f:5d:95:
         8d:78:86:15:82:ff:5e:e6:dd:bf:63:79:cf:b1:c4:c1:c1:b7:
         73:62:7c:e8:4b:93:06:5d:b8:b6:14:de:01:db:56:0e:fd:36:
         38:90:42:e5:64:6e:91:5d:71:f4:6a:8d:08:2b:9c:82:05:08:
         38:e2:1c:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6nBeeFjVioZ8DKLXBHjICMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1
NTEwNTUwHhcNMjYwMTI2MTQwMTMyWhcNMjYwMTI3MTQwMTMyWjAzMTEwLwYDVQQD
Eyg2MTBjOGRkOTQ5ZjZmN2NiM2EyOWI2YjE4YzM3ZTUwN2Q1ZGJmOGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXHMfeioOd52shTn2HpYN/K/apZJ
p53dtRGIg7B3Xjov5VjhDN1JR72E7FyzeQ3iCTfgEBdAQXp2KIbd1uY9YI7wncmg
CAmEGQmSW9qnyvbILyDOdz8fHfvoUHEyYIJhuxluG7d5ApSHQc8OnT9csV6f42QI
FSmpCQaQF/jP7vkvaYC+jAt2IOvHHCq0C/Vtz7GpqmpdDGDSOnRZQgPOodULD4qO
jAwJmndw9P6WuUVwsBNAevLiOyjTjJBMEYQYEEeJhuPst0cLeUyImH371XHmQinZ
yEar2v/wKlJSp3ZVje/Eym/p0gQMZdEMMdLZDQsrsmbmi9pMhVKpt6sTbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEMjdlJ9vfLOim2sYw35QfV2/jnMB8GA1UdIwQY
MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct
YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh
LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAWO3m7a
v/Kqgk9SYzZWCLOhEOiKTszB2VuA6chp/mwL/thgw1cl+c9iDchNLIZOKA1GsHRc
OEe59DTbDG3Df5U0dkxPjPFB7W5Dlo8Et9z23tWmHDtFa6MsdxzYDEG6CcotbSnJ
WoC5rINiJNXfVnY/yCpY0i7QyzprqqLc6Mv7Nu7xnoBYD3M/D3mT0iu8QjDEfFTE
KK1S67n2EAAJlhmo8bM97mgzcSyzIhZabHN8j0zqRpQqRvWbBI3+1du62MaSP12V
jXiGFYL/Xubdv2N5z7HEwcG3c2J86EuTBl24thTeAdtWDv02OJBC5WRukV1x9GqN
CCucggUIOOIcwg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 18:38:34 2026 by rpki-client