This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File:                     xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier:          WWL3PnUWRvkJl9jevtyuATSTKTtw/kEUrTAhwgxF11Q=
Subject key identifier:   7F:B9:D4:32:18:E2:56:1D:43:A5:52:AC:68:E6:AB:6A:A1:83:A5:87
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer:       /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial:       019BFA9C2950857A21FFF4BADE1649847783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number:          14F2
Signing time:             Mon 26 Jan 2026 14:01:36 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:36 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:36 +0000
Files and hashes:         1: Vu85Nu-HoLeRv_52CEznI8bQbss.roa (hash: c6ty/wCdDrBOcI9jUvVNl5APK8YZjil4x8ZlNRshHvo=)
                          2: hwEYkWKezFU1S6DS8A0TF6JXUos.roa (hash: dJKRSf7F67Dm6ZGKlb7G6KP8NQfxdE863RZT2JIwE9k=)
                          3: lo3R5w_kTel81Z1irkIbzAD6F8Q.roa (hash: PuU1Xdn3kY1LjMwZS3Qaqe5MniakxiQ+Y+f6yTPGRCQ=)
                          4: nb0hXlBPQhPWTuMEqZzkSxkwpXI.roa (hash: 55gzjqx5n4gyySLdEurC8vvFbXFEosab3sYhqOZ+WA8=)
                          5: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: susny/QsmJi3AKsxEEb0sP29GtSLZTWldj19mHWfjxA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:29:50:85:7a:21:ff:f4:ba:de:16:49:84:77:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
        Validity
            Not Before: Jan 26 14:01:36 2026 GMT
            Not After : Jan 27 14:01:36 2026 GMT
        Subject: CN=7fb9d43218e2561d43a552ac68e6ab6aa183a587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:c6:4d:88:01:2f:7d:a9:5c:16:46:70:db:
                    ce:cb:45:61:1c:dc:bc:8d:33:c2:2f:2d:7b:bd:01:
                    7d:f6:93:c2:2b:e1:2f:1e:70:d8:8e:9c:fe:19:b0:
                    6d:75:a2:51:6c:87:03:a5:f4:5e:19:fa:c6:61:ac:
                    14:fe:f8:4c:83:2d:df:6a:08:24:44:83:ec:ab:d2:
                    23:79:f5:26:48:2b:28:47:41:ce:08:87:10:d6:84:
                    a0:4e:f0:11:78:33:c1:a9:88:66:f8:ed:40:a4:ed:
                    dd:23:5c:fe:95:06:d8:8e:31:d2:8d:74:6e:42:e2:
                    33:c0:83:91:45:90:8c:b2:3d:e1:f5:a0:2a:06:44:
                    27:5d:c3:7d:69:71:c1:ee:bb:70:9e:37:97:d2:84:
                    a7:b2:01:13:92:d4:bf:a9:b5:03:cd:33:48:af:37:
                    7b:d2:84:52:ab:38:0e:ab:2e:5f:60:20:7d:61:f9:
                    61:56:2a:5c:cb:51:7a:c2:3d:86:7d:0d:f8:2c:84:
                    49:c8:27:25:3c:6a:0f:1a:2e:c1:09:d3:ec:b8:c1:
                    af:d6:af:24:30:81:11:45:02:20:94:38:03:ea:d0:
                    61:58:2f:6d:be:85:d7:dc:02:18:65:c3:74:b6:11:
                    44:75:70:02:d6:a3:f1:71:ec:e9:19:c7:90:f9:50:
                    3a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:B9:D4:32:18:E2:56:1D:43:A5:52:AC:68:E6:AB:6A:A1:83:A5:87
            X509v3 Authority Key Identifier:
                keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:db:26:e8:04:da:2a:f6:2d:37:6b:fa:0c:b2:dc:6b:fc:1b:
         9c:35:15:5a:36:c1:52:ad:c8:40:2d:26:08:26:71:8b:3e:a3:
         cf:3f:d2:d1:f2:e8:e0:6d:6f:55:c3:83:8a:84:75:d4:e3:da:
         2b:2a:d7:f8:fa:db:96:7b:28:46:3f:84:9b:1c:02:54:09:0d:
         f1:66:f9:31:da:16:e7:d0:fb:89:13:59:ea:f7:7f:02:4f:65:
         5e:8f:75:dd:5f:29:ed:5b:8a:f2:ef:1c:80:94:32:30:54:b1:
         ee:db:72:d0:84:77:6d:fb:a6:60:a3:80:68:3b:71:52:a6:99:
         0b:83:c0:ce:2d:ea:52:26:24:0a:e1:7a:9f:9f:4b:d2:c1:f8:
         de:e2:f4:5b:02:6b:0d:31:e2:1a:46:b8:72:42:0c:ba:fe:9f:
         ca:02:52:b2:a3:00:6b:1a:17:03:b9:4f:ad:92:d8:bf:9c:38:
         8d:e7:07:a4:a0:92:74:01:6e:25:bc:67:41:4d:ec:2a:57:62:
         d4:69:b9:cb:6d:58:35:83:e0:45:80:18:0f:47:e1:e1:71:b3:
         47:bc:13:f6:69:ee:13:e8:c1:00:c5:6a:3d:50:dc:ad:8a:3e:
         d8:a8:cc:26:23:b2:63:01:7d:72:9f:4e:98:2c:51:d7:bd:05:
         2f:60:bc:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv6nClQhXoh//S63hZJhHeDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjFiNDU4YWJmNzk3ZGVkY2M2NjFlNTRhNjg1ZjY1MTgz
NGI1ZDEwHhcNMjYwMTI2MTQwMTM2WhcNMjYwMTI3MTQwMTM2WjAzMTEwLwYDVQQD
Eyg3ZmI5ZDQzMjE4ZTI1NjFkNDNhNTUyYWM2OGU2YWI2YWExODNhNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF3GTYgBL32pXBZGcNvOy0VhHNy8
jTPCLy17vQF99pPCK+EvHnDYjpz+GbBtdaJRbIcDpfReGfrGYawU/vhMgy3faggk
RIPsq9IjefUmSCsoR0HOCIcQ1oSgTvAReDPBqYhm+O1ApO3dI1z+lQbYjjHSjXRu
QuIzwIORRZCMsj3h9aAqBkQnXcN9aXHB7rtwnjeX0oSnsgETktS/qbUDzTNIrzd7
0oRSqzgOqy5fYCB9YflhVipcy1F6wj2GfQ34LIRJyCclPGoPGi7BCdPsuMGv1q8k
MIERRQIglDgD6tBhWC9tvoXX3AIYZcN0thFEdXAC1qPxcezpGceQ+VA6pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH+51DIY4lYdQ6VSrGjmq2qhg6WHMB8GA1UdIwQY
MBaAFMSxtFir95fe3MZh5UpoX2UYNLXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2Yt
ZWM1OGEzMTI1ZWU1LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8yNjBlMjQtMjA0MC00YTVjLTkyY2YtZWM1OGEzMTI1ZWU1
LzEveExHMFdLdjNsOTdjeG1IbFNtaGZaUmcwdGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAotsm6ATa
KvYtN2v6DLLca/wbnDUVWjbBUq3IQC0mCCZxiz6jzz/S0fLo4G1vVcODioR11OPa
KyrX+PrblnsoRj+EmxwCVAkN8Wb5MdoW59D7iRNZ6vd/Ak9lXo913V8p7VuK8u8c
gJQyMFSx7tty0IR3bfumYKOAaDtxUqaZC4PAzi3qUiYkCuF6n59L0sH43uL0WwJr
DTHiGka4ckIMuv6fygJSsqMAaxoXA7lPrZLYv5w4jecHpKCSdAFuJbxnQU3sKldi
1Gm5y21YNYPgRYAYD0fh4XGzR7wT9mnuE+jBAMVqPVDcrYo+2KjMJiOyYwF9cp9O
mCxR170FL2C8rQ==
-----END CERTIFICATE-----
Generated at Mon Jan 26 19:10:54 2026 by rpki-client