This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
File:                     s8UbDAY8_BaUP8mkfiyAWZD26q4.mft (raw, json)
Hash identifier:          tQalmwW0fQg+3RsaSpI5DPkpsmARrM+dWsqse2KgBoA=
Subject key identifier:   D6:D0:7F:DD:3F:B8:9C:1A:01:D1:72:3E:A7:F8:1E:E8:AB:4D:A3:73
Authority key identifier: B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE
Certificate issuer:       /CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
Certificate serial:       019BFA2E52923C1D4F7D947782CF44E3D60B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
Manifest number:          17FB
Signing time:             Mon 26 Jan 2026 12:01:38 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:38 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:38 +0000
Files and hashes:         1: 0SfcrueR4QFb8tc3xCE9ChZKK7I.roa (hash: IdDOQHOx8rCnzoVeUvZ2P/Vc0fq61+r5BuBjfqgD4w8=)
                          2: 4yoK_eJAZQm-WbM5DBSju_S_g9Y.roa (hash: lgK4wDh2/dU2RT27074ZUCpZTP9aGuib0EW4Skf9pnw=)
                          3: 5wHePNmHiLxtlCYvlaGW1MyLNGY.roa (hash: 19szNpHnnm6pkaW4TlJOhu+0nXLMQC+WoPm1n3sfLvM=)
                          4: 60zN1G8HfzYuFPygt3H-4b18ytU.roa (hash: ZIesJxWGT7Q67L0RiBjzfL/tP6joKKOh3GhApUIGf8w=)
                          5: FGXifY4YNXSWwZi4QtD01XX8A_4.roa (hash: r3Yn9lbI97BgnohED52RZmDaF/H4yGegwCsX0vScc1U=)
                          6: a18LnE9DcgG7zugO6ioQ3Y7CS7U.roa (hash: YrbotmHDUF9LRM1RQzShBPkq+JRfuxMVJgnz/gexBZA=)
                          7: cH5VUqUcKkt9HSVAYge0hus4RzQ.roa (hash: wbhN9oe6hbcxDEr+Ij32oivB3HfT5mVhEID8dWUc5rw=)
                          8: dIGZhkcQjwXD6TRRSDLTBNo_khY.roa (hash: iHaZdF9YmqdeJqR3BWg40wlZURcExcqa9x9g9e5Q+Sw=)
                          9: e7AhsDGyXnglWGP4F2vWjFKoYe0.roa (hash: e/toQQVnqhq4qPJ3Y8N1Xo0D5ymFTKzkV6/84IOgDm4=)
                          10: esK7vUUmoe40XTn02C1nePqnmu4.roa (hash: OEIBdY80QQKHjWxchlaPmmZgXh8xpcGsK6uCERu5/OA=)
                          11: fgRbMqN9XRQOyHROi59mKV56wUg.roa (hash: Py8QfC6Me9kljX65ogBUdQo8JbMweZ02w9NGup3yJr4=)
                          12: iENkRlJoBL-J_o4ep2L2WQ9wqhQ.roa (hash: qHRlnH6xTrPGrh7Rcfy15Z1OzJA8rkrqC8qbXcCLhY0=)
                          13: micpmXuBXJ3dOE45zxgN5f1tySY.roa (hash: timEpEuW2bJbH8o0L2R6fxPkiFxXOpRncmuh270Cg8o=)
                          14: qPo7YKl9p3tCFKkxOPVMkK7H2_E.roa (hash: H4C9ry+5IfYnCURh7FDnZSYaZWLRwKVBeS8DaqAWsew=)
                          15: s8UbDAY8_BaUP8mkfiyAWZD26q4.crl (hash: rFpGrZKERHw/kvTwbn9NrWxNWQUb8w5NyN9mbuc1Y9I=)
                          16: xwR5dZkRnrr1skSXQMNYngkeNa8.roa (hash: hOBraH+aXlwWcJU3uccn3dhXaJ0+izS/UP4kbWzbnEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:52:92:3c:1d:4f:7d:94:77:82:cf:44:e3:d6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3c51b0c063cfc16943fc9a47e2c805990f6eaae
        Validity
            Not Before: Jan 26 12:01:38 2026 GMT
            Not After : Jan 27 12:01:38 2026 GMT
        Subject: CN=d6d07fdd3fb89c1a01d1723ea7f81ee8ab4da373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:4c:63:ca:dd:11:4e:df:32:49:45:6b:ed:
                    81:5d:d9:c6:5b:21:30:2e:6e:2a:68:59:e8:0f:54:
                    ab:48:3e:89:cc:df:e0:61:f1:ac:bb:1f:d4:5a:e8:
                    f3:e5:74:00:ae:69:1e:64:f4:8a:9f:b2:47:67:e3:
                    d8:e2:7c:96:e5:fb:d7:a5:02:be:4c:09:56:25:b0:
                    f4:24:76:e8:6c:0f:a6:ad:72:6c:48:f3:15:aa:df:
                    6a:cd:1c:da:59:6d:ea:fd:d0:a7:17:5e:ab:d3:81:
                    1c:1e:91:6a:20:89:f0:59:4c:12:b0:c9:94:09:dd:
                    a5:18:10:03:4d:07:b3:37:09:5e:42:3b:79:75:94:
                    87:70:d2:2a:08:d1:fa:b1:6d:57:62:5d:bf:bf:44:
                    f8:60:78:61:1d:c8:f3:c0:e5:f0:da:ce:0c:4e:37:
                    f7:49:83:75:d9:5e:a2:d2:f8:30:e9:56:ce:7d:f9:
                    12:44:3e:59:fa:42:47:38:a2:d4:53:13:1b:ee:6e:
                    e5:da:97:be:c6:e4:0f:44:73:3b:e6:c6:fb:67:8f:
                    74:9f:bd:97:de:41:10:66:b2:8c:78:ed:43:a2:0b:
                    82:6b:aa:1e:5b:18:f8:d6:07:91:d4:79:1a:69:db:
                    ec:33:5a:90:97:2e:33:3b:a4:05:cf:65:30:8c:b2:
                    f8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:D0:7F:DD:3F:B8:9C:1A:01:D1:72:3E:A7:F8:1E:E8:AB:4D:A3:73
            X509v3 Authority Key Identifier:
                keyid:B3:C5:1B:0C:06:3C:FC:16:94:3F:C9:A4:7E:2C:80:59:90:F6:EA:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8UbDAY8_BaUP8mkfiyAWZD26q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/587792-bae9-4183-a4b1-ff5f1ad69266/1/s8UbDAY8_BaUP8mkfiyAWZD26q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:29:6c:74:c7:d9:6d:44:fb:f1:56:c0:b0:d1:ec:0d:61:80:
         3c:8e:cd:67:17:e5:7c:29:85:45:d5:65:a4:69:16:2b:bc:41:
         7b:5f:f1:70:07:5c:ff:e1:3c:ad:5a:cc:f9:4a:62:d2:09:18:
         98:97:d4:2b:c3:1a:6f:f5:1d:7a:2d:32:97:ae:30:97:38:b7:
         b6:ac:6d:29:54:ba:2b:b2:c7:00:7d:27:96:9f:4f:2b:ce:d5:
         31:97:40:f1:bf:93:5e:c7:f7:34:03:f4:ef:91:a7:76:f9:95:
         78:58:87:76:08:99:a2:1e:54:ed:a4:11:81:ed:bb:8c:33:1f:
         73:d8:09:8e:6d:88:97:dd:5f:a7:70:4d:bc:3a:0f:70:be:81:
         c6:4a:3b:9a:a2:43:05:de:15:7d:5a:9f:78:b7:1f:43:2e:1a:
         ee:6d:40:70:48:db:15:cb:ac:e2:06:ef:7b:7f:e3:1b:a7:4e:
         cb:60:5c:7a:6e:63:84:24:20:a1:01:52:bd:d7:94:ea:ac:4d:
         14:27:e9:ac:03:85:9b:25:30:cd:74:cb:52:30:e2:0a:fd:58:
         51:f8:ec:13:88:36:9d:22:1c:2c:c3:2e:b8:2a:cc:b4:92:8d:
         83:13:4c:f8:02:dc:8c:f5:d6:83:53:80:7e:50:9f:79:dc:44:
         4b:7a:f2:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6LlKSPB1PfZR3gs9E49YLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzYzUxYjBjMDYzY2ZjMTY5NDNmYzlhNDdlMmM4MDU5OTBm
NmVhYWUwHhcNMjYwMTI2MTIwMTM4WhcNMjYwMTI3MTIwMTM4WjAzMTEwLwYDVQQD
EyhkNmQwN2ZkZDNmYjg5YzFhMDFkMTcyM2VhN2Y4MWVlOGFiNGRhMzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApF1MY8rdEU7fMklFa+2BXdnGWyEw
Lm4qaFnoD1SrSD6JzN/gYfGsux/UWujz5XQArmkeZPSKn7JHZ+PY4nyW5fvXpQK+
TAlWJbD0JHbobA+mrXJsSPMVqt9qzRzaWW3q/dCnF16r04EcHpFqIInwWUwSsMmU
Cd2lGBADTQezNwleQjt5dZSHcNIqCNH6sW1XYl2/v0T4YHhhHcjzwOXw2s4MTjf3
SYN12V6i0vgw6VbOffkSRD5Z+kJHOKLUUxMb7m7l2pe+xuQPRHM75sb7Z490n72X
3kEQZrKMeO1DoguCa6oeWxj41geR1HkaadvsM1qQly4zO6QFz2UwjLL4PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbQf90/uJwaAdFyPqf4HuirTaNzMB8GA1UdIwQY
MBaAFLPFGwwGPPwWlD/JpH4sgFmQ9uquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEt
ZmY1ZjFhZDY5MjY2LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81ODc3OTItYmFlOS00MTgzLWE0YjEtZmY1ZjFhZDY5MjY2
LzEvczhVYkRBWThfQmFVUDhta2ZpeUFXWkQyNnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFylsdMfZ
bUT78VbAsNHsDWGAPI7NZxflfCmFRdVlpGkWK7xBe1/xcAdc/+E8rVrM+Upi0gkY
mJfUK8Mab/Udei0yl64wlzi3tqxtKVS6K7LHAH0nlp9PK87VMZdA8b+TXsf3NAP0
75GndvmVeFiHdgiZoh5U7aQRge27jDMfc9gJjm2Il91fp3BNvDoPcL6Bxko7mqJD
Bd4VfVqfeLcfQy4a7m1AcEjbFcus4gbve3/jG6dOy2Bcem5jhCQgoQFSvdeU6qxN
FCfprAOFmyUwzXTLUjDiCv1YUfjsE4g2nSIcLMMuuCrMtJKNgxNM+ALcjPXWg1OA
flCfedxES3ry4A==
-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:08 2026 by rpki-client