This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File:                     fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier:          AqJpZ2mLfCDXEfvT1ML7xv832tMmUqv1ONWG0rrD+XM=
Subject key identifier:   22:D6:D5:CB:B8:F4:25:67:BF:A0:FA:1A:C5:AE:2E:75:90:B1:90:4A
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer:       /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial:       019BF9C05E59E1ACA4A1AF170B3BCF826C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number:          1626
Signing time:             Mon 26 Jan 2026 10:01:32 +0000
Manifest this update:     Mon 26 Jan 2026 10:01:32 +0000
Manifest next update:     Tue 27 Jan 2026 10:01:32 +0000
Files and hashes:         1: 6rNJQsn9nenf7gQdwKGULkmO48g.roa (hash: 07pBJi7Nc/k7+K1BPHdbPiHNkGiQWcczdjGOzLq8Sbk=)
                          2: 7c37mQO9hber9Y9a4WDKVYTKyGs.roa (hash: h/wnhDSGEGx3npO9CQ/X4FjS1+UA0bB6gXGJME9onWs=)
                          3: B3wonFQq_huZTMz-8wuSey9Fs1I.roa (hash: JnpdkfXYgXXAYDW/V89kghjchKm1vbi2ArxR3XgZ6B0=)
                          4: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: AwjjG2uNbWnmFwRRo9Do39W6HRuBanvYNLTU9vEa17c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:c0:5e:59:e1:ac:a4:a1:af:17:0b:3b:cf:82:6c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d59659636089e32324697629c218da38a2b673d
        Validity
            Not Before: Jan 26 10:01:32 2026 GMT
            Not After : Jan 27 10:01:32 2026 GMT
        Subject: CN=22d6d5cbb8f42567bfa0fa1ac5ae2e7590b1904a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:82:54:6d:2b:67:95:d1:e4:d3:b6:cb:a2:
                    a8:b4:29:75:30:c6:81:bc:fe:40:91:80:b8:3a:17:
                    e8:b0:80:5a:b6:49:1b:39:d8:41:02:35:f3:68:c9:
                    5e:9c:57:15:b8:7d:4f:78:fe:06:94:a2:87:5e:47:
                    e4:3d:4c:36:d7:7a:7e:92:e7:09:81:61:4e:ce:88:
                    84:5a:44:db:f6:f0:bd:54:90:e3:a6:40:28:bb:30:
                    ef:f8:8e:06:63:32:54:d3:29:62:2d:a9:7b:8a:4f:
                    14:05:70:10:94:48:c9:f8:53:ab:c4:59:99:1c:f0:
                    93:d6:75:d4:2d:f7:7d:59:a5:72:0f:d6:b1:2d:da:
                    96:a7:68:08:82:70:b6:29:99:51:bb:19:b5:6b:c3:
                    92:69:f3:8f:cc:a5:27:22:7c:89:d9:6d:48:b4:eb:
                    f0:25:95:7c:05:33:df:98:24:7c:35:5a:53:d2:19:
                    f4:7d:50:45:49:fc:e2:90:62:8e:4f:e7:ab:e5:60:
                    45:ef:7f:26:63:5a:c9:4f:51:e5:ff:9b:aa:25:f4:
                    c9:1d:d7:c6:ae:cc:06:4c:41:dd:30:c4:f7:9d:7d:
                    ed:a2:0c:43:15:84:ca:8c:5e:21:a0:e0:d5:4a:1e:
                    f1:f8:e4:cd:da:0f:4f:4d:05:6a:df:5f:6f:9c:16:
                    40:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D6:D5:CB:B8:F4:25:67:BF:A0:FA:1A:C5:AE:2E:75:90:B1:90:4A
            X509v3 Authority Key Identifier:
                keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:9a:c3:76:27:e3:48:e3:fa:5f:eb:b2:c7:6a:17:3a:86:3d:
         28:13:84:74:61:01:23:65:15:bd:7b:2f:50:8e:9a:b4:5a:cc:
         91:7d:43:16:66:ab:6a:99:60:de:bd:f5:0d:68:c0:62:fc:86:
         c9:91:60:f1:fc:02:42:4e:b7:f4:d4:c4:ce:d7:b4:4e:ec:1c:
         4f:72:d8:33:d5:6d:40:90:0d:5b:15:5c:e3:e9:83:79:99:8a:
         fb:32:4e:65:65:75:49:9b:92:eb:b1:3b:58:43:ed:50:b3:45:
         63:86:20:2e:b1:71:56:24:80:ae:70:f3:75:1e:66:e7:8d:18:
         a3:2b:70:9d:7b:6d:94:5f:56:d8:06:51:43:9a:5a:e0:7b:99:
         de:95:c7:2d:f6:33:8c:f9:15:5d:2a:2a:ba:46:54:7f:4f:3e:
         b0:6b:6e:5b:72:c0:de:54:78:04:bc:b2:db:a6:5e:66:8b:1e:
         60:fd:af:ff:71:fd:e8:fe:2c:27:dc:b8:7b:a3:e2:14:dd:bb:
         45:2a:d1:ae:6d:db:9b:61:56:58:e7:68:f5:63:02:0d:2b:59:
         24:15:46:7a:01:1f:43:69:6d:de:6b:42:ac:71:6f:9a:3f:ee:
         9f:bd:60:18:c1:9b:56:da:1a:ed:7b:8d:66:e5:1f:fd:1e:b5:
         bb:f3:ce:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv5wF5Z4aykoa8XCzvPgmwOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTk2NTk2MzYwODllMzIzMjQ2OTc2MjljMjE4ZGEzOGEy
YjY3M2QwHhcNMjYwMTI2MTAwMTMyWhcNMjYwMTI3MTAwMTMyWjAzMTEwLwYDVQQD
EygyMmQ2ZDVjYmI4ZjQyNTY3YmZhMGZhMWFjNWFlMmU3NTkwYjE5MDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yyCVG0rZ5XR5NO2y6KotCl1MMaB
vP5AkYC4OhfosIBatkkbOdhBAjXzaMlenFcVuH1PeP4GlKKHXkfkPUw213p+kucJ
gWFOzoiEWkTb9vC9VJDjpkAouzDv+I4GYzJU0yliLal7ik8UBXAQlEjJ+FOrxFmZ
HPCT1nXULfd9WaVyD9axLdqWp2gIgnC2KZlRuxm1a8OSafOPzKUnInyJ2W1ItOvw
JZV8BTPfmCR8NVpT0hn0fVBFSfzikGKOT+er5WBF738mY1rJT1Hl/5uqJfTJHdfG
rswGTEHdMMT3nX3togxDFYTKjF4hoODVSh7x+OTN2g9PTQVq319vnBZACQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLW1cu49CVnv6D6GsWuLnWQsZBKMB8GA1UdIwQY
MBaAFH1ZZZY2CJ4yMkaXYpwhjaOKK2c9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAt
NmMxY2Y3MjVkOGY3LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy82NTJlZjAtYWUzMC00NWJhLTk5NzAtNmMxY2Y3MjVkOGY3
LzEvZlZsbGxqWUluakl5UnBkaW5DR05vNG9yWnowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmJrDdifj
SOP6X+uyx2oXOoY9KBOEdGEBI2UVvXsvUI6atFrMkX1DFmaraplg3r31DWjAYvyG
yZFg8fwCQk639NTEzte0TuwcT3LYM9VtQJANWxVc4+mDeZmK+zJOZWV1SZuS67E7
WEPtULNFY4YgLrFxViSArnDzdR5m540YoytwnXttlF9W2AZRQ5pa4HuZ3pXHLfYz
jPkVXSoqukZUf08+sGtuW3LA3lR4BLyy26ZeZoseYP2v/3H96P4sJ9y4e6PiFN27
RSrRrm3bm2FWWOdo9WMCDStZJBVGegEfQ2lt3mtCrHFvmj/un71gGMGbVtoa7XuN
ZuUf/R61u/PO7Q==
-----END CERTIFICATE-----
Generated at Mon Jan 26 15:05:00 2026 by rpki-client