This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File:                     RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier:          7LfTxkiZy6ewOi3wgt1ucPRhI7CB3qw6gzU88xGuY6E=
Subject key identifier:   CD:2A:1F:C8:B3:71:92:8E:23:46:96:36:25:29:0A:8A:68:33:A3:2B
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer:       /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial:       019BD80FC52F4185B326D58E193EA63FC010
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number:          1731
Signing time:             Mon 19 Jan 2026 21:01:10 +0000
Manifest this update:     Mon 19 Jan 2026 21:01:10 +0000
Manifest next update:     Tue 20 Jan 2026 21:01:10 +0000
Files and hashes:         1: 0GmT4kuhECd7fZ-tmbGsaxD0Rq0.roa (hash: 2zRsav5IEfSlzcwSQLfdTFA0TTacyX5/9RQCzwFOfMo=)
                          2: 0qaV7J9RK3kRvbrwOrLwGL-59is.roa (hash: UvPJ59WZ0VSeeSOBjE40xguTq+GAWfJ5QMJ5cMTtGWE=)
                          3: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: HKRiTGVbgqeltsOzfr4eC+8AhX9mpQ/qHxVF7SVw8TQ=)
                          4: YjNMtDRzs2TGP5-x14XVzmAfxFs.roa (hash: FsTc0fpESg1ct7d6odO1YuCSb5A2XaTydzLOePR872I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:0f:c5:2f:41:85:b3:26:d5:8e:19:3e:a6:3f:c0:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
        Validity
            Not Before: Jan 19 21:01:10 2026 GMT
            Not After : Jan 20 21:01:10 2026 GMT
        Subject: CN=cd2a1fc8b371928e2346963625290a8a6833a32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:d8:fe:d0:58:76:90:7a:0f:ab:a7:a7:e9:
                    b5:d2:0a:d7:3d:01:5a:20:b5:ab:ed:cd:a7:56:13:
                    f1:95:71:9c:1b:4d:b9:a6:d4:b7:0a:2b:74:82:47:
                    5e:26:ad:3a:21:4b:df:98:7d:3f:f9:99:21:e9:66:
                    bb:f1:56:7a:74:62:55:8c:df:c2:ad:79:2c:8e:7d:
                    66:de:35:2c:14:32:72:77:95:20:7d:72:6f:0e:69:
                    9f:73:bd:cf:f1:18:52:d6:bb:a8:95:56:90:db:77:
                    90:7b:d7:f7:bf:99:03:6a:6c:01:cc:c4:87:97:14:
                    6a:14:08:b5:3b:51:3a:44:56:93:ac:ac:a2:7c:36:
                    e3:92:d6:e1:4e:fc:df:f7:3d:97:b7:89:94:b8:a9:
                    78:c0:93:de:5a:58:5c:2e:e6:16:72:97:c4:0a:ff:
                    66:fe:08:ef:5b:eb:2b:38:3d:20:13:bc:18:c1:ce:
                    26:e8:a9:89:18:7e:8e:6e:e9:1d:da:53:67:bc:66:
                    10:ca:c0:58:c7:41:42:ac:2e:2a:6f:09:20:3a:51:
                    8f:8d:0f:47:8c:15:58:de:eb:df:b0:c9:66:a1:d7:
                    85:ee:cc:38:a5:ea:22:e8:4b:64:a9:23:a2:5c:97:
                    be:c3:8f:68:e3:5f:fb:ff:50:a1:dc:88:69:fc:91:
                    6d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2A:1F:C8:B3:71:92:8E:23:46:96:36:25:29:0A:8A:68:33:A3:2B
            X509v3 Authority Key Identifier:
                keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d9:3e:ec:48:84:a7:a1:bc:f1:9d:f4:1d:b6:33:2d:ba:26:
         46:07:f0:d5:50:e6:76:77:b9:5b:81:e5:2d:b6:67:f7:8e:d4:
         ad:5f:40:a3:1c:7b:c6:1d:c2:fa:26:a1:2b:38:f7:26:76:d5:
         b2:e8:f9:dd:29:11:5c:de:ec:d2:90:92:b4:ff:c2:73:14:03:
         b6:9c:7e:6d:fa:d0:3c:2b:39:9b:f4:03:31:70:1f:c5:21:66:
         d2:b3:2b:39:87:ad:33:ca:35:91:67:a2:b6:c7:d1:d3:49:39:
         dd:9c:c6:0a:9e:fa:63:89:41:b2:d6:67:41:c8:1a:ed:e0:fa:
         de:cb:41:bc:14:d7:9e:24:4c:16:f6:ad:ef:7e:4b:c9:60:8c:
         2c:32:60:48:cd:13:9c:be:14:39:8a:56:43:56:94:a3:e2:56:
         f0:8a:62:cd:ed:51:78:45:4b:9d:05:4a:39:dd:a2:c2:96:b0:
         a6:99:e7:5b:8a:9d:63:a9:00:dc:dd:ff:28:90:12:f7:10:e9:
         88:a9:9c:ad:eb:d4:e4:80:1c:d9:9d:dd:a5:7b:5c:ef:83:32:
         32:c4:a8:34:29:ac:ed:1c:cf:94:97:2e:a4:ba:d2:ba:0c:ec:
         b6:0b:c7:34:81:a2:a8:b3:99:63:7a:3a:7d:50:53:39:47:2c:
         70:66:8f:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvYD8UvQYWzJtWOGT6mP8AQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzY5ZGM1ZGE1ZTRlNzBjNzM1YjIzNTcwNGQ5ZWJjNTgy
NTkzNDkwHhcNMjYwMTE5MjEwMTEwWhcNMjYwMTIwMjEwMTEwWjAzMTEwLwYDVQQD
EyhjZDJhMWZjOGIzNzE5MjhlMjM0Njk2MzYyNTI5MGE4YTY4MzNhMzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDLY/tBYdpB6D6unp+m10grXPQFa
ILWr7c2nVhPxlXGcG025ptS3Cit0gkdeJq06IUvfmH0/+Zkh6Wa78VZ6dGJVjN/C
rXksjn1m3jUsFDJyd5UgfXJvDmmfc73P8RhS1ruolVaQ23eQe9f3v5kDamwBzMSH
lxRqFAi1O1E6RFaTrKyifDbjktbhTvzf9z2Xt4mUuKl4wJPeWlhcLuYWcpfECv9m
/gjvW+srOD0gE7wYwc4m6KmJGH6Obukd2lNnvGYQysBYx0FCrC4qbwkgOlGPjQ9H
jBVY3uvfsMlmodeF7sw4peoi6EtkqSOiXJe+w49o41/7/1Ch3Ihp/JFtnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM0qH8izcZKOI0aWNiUpCopoM6MrMB8GA1UdIwQY
MBaAFEY2ncXaXk5wxzWyNXBNnrxYJZNJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgt
YTkxNjM0ZDJhODA4LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS9mZTY5YjItMGFiYi00ZTU1LThiMzgtYTkxNjM0ZDJhODA4
LzEvUmphZHhkcGVUbkRITmJJMWNFMmV2RmdsazBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADdk+7EiE
p6G88Z30HbYzLbomRgfw1VDmdne5W4HlLbZn947UrV9Aoxx7xh3C+iahKzj3JnbV
suj53SkRXN7s0pCStP/CcxQDtpx+bfrQPCs5m/QDMXAfxSFm0rMrOYetM8o1kWei
tsfR00k53ZzGCp76Y4lBstZnQcga7eD63stBvBTXniRMFvat735LyWCMLDJgSM0T
nL4UOYpWQ1aUo+JW8Ipize1ReEVLnQVKOd2iwpawppnnW4qdY6kA3N3/KJAS9xDp
iKmcrevU5IAc2Z3dpXtc74MyMsSoNCms7RzPlJcupLrSugzstgvHNIGiqLOZY3o6
fVBTOUcscGaPCg==
-----END CERTIFICATE-----
Generated at Tue Jan 20 03:00:41 2026 by rpki-client