This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
File:                     2amIkW1RQG-aJp8woC0AhrV_TVo.mft (raw, json)
Hash identifier:          K7TkmxzXfHASwAo/5yZm+3vSRV5nkKDpd7v/QPgIbVA=
Subject key identifier:   97:C0:5E:40:68:5A:B6:D7:87:B3:5B:2D:29:D6:21:7F:2D:A2:27:50
Authority key identifier: D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A
Certificate issuer:       /CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
Certificate serial:       019BFB40B4C1A4ADE46BAA39FC4AE5D688FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
Manifest number:          14EA
Signing time:             Mon 26 Jan 2026 17:01:20 +0000
Manifest this update:     Mon 26 Jan 2026 17:01:20 +0000
Manifest next update:     Tue 27 Jan 2026 17:01:20 +0000
Files and hashes:         1: 2amIkW1RQG-aJp8woC0AhrV_TVo.crl (hash: tAepvIv+Yk1xUvgwrD94ZIvmEDf9nT2vf5mfclVC2kA=)
                          2: FZlBOz2gFwzrDKVZ6gMchrb7teE.roa (hash: EuuVBUMpYSozzMT++aJ7DLlwFhh2sATMKgkOl8ndakk=)
                          3: K7KxlLY2WatJsywG92R4ecjbJts.roa (hash: 8xdVDeeroKkICVR29LmlWFlFnGabZ7Twpz4B/6DfSks=)
                          4: NDgqCtDrOUYcmZnr7ZqMrN3yeTM.roa (hash: aFsHKPD3aDqi8AsyYFkl+KwMr/91eKpghE7dmjN+xQ4=)
                          5: Xpg7_54CQOeG7QycRDw4ah5iMNs.roa (hash: dqDW8tmSmWAQ4qkHZYDnkpUDNy/teMQGCc2EetkL07I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:b4:c1:a4:ad:e4:6b:aa:39:fc:4a:e5:d6:88:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a988916d51406f9a269f30a02d0086b57f4d5a
        Validity
            Not Before: Jan 26 17:01:20 2026 GMT
            Not After : Jan 27 17:01:20 2026 GMT
        Subject: CN=97c05e40685ab6d787b35b2d29d6217f2da22750
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:85:f3:eb:e1:83:9c:43:cc:60:34:e5:d2:39:
                    df:86:2d:14:85:3d:c3:d6:05:b5:e4:03:35:3e:5e:
                    af:de:98:92:93:c2:4d:3f:fb:97:b7:73:b1:51:a8:
                    21:82:6e:8f:d5:66:0b:70:79:5a:fb:9e:fb:86:c5:
                    0e:00:35:b5:5c:1d:41:85:4e:f5:ec:bf:3a:1a:a9:
                    45:66:e3:01:44:25:e0:52:64:b2:67:20:6c:31:ff:
                    99:d6:26:04:c2:d9:af:41:d8:f0:6b:b9:65:19:b8:
                    23:0c:68:d0:22:0c:8f:ea:d4:20:cf:a9:af:11:45:
                    5b:c4:58:f9:e5:42:48:3c:61:3c:b3:4c:e5:6d:0f:
                    59:5c:69:f1:74:ae:18:ac:b3:b4:e8:d1:c0:f3:20:
                    e3:5c:7c:7c:04:f2:2c:74:88:9e:ec:99:97:a3:70:
                    7d:b7:1c:b1:7a:39:b1:17:1e:88:1d:7c:7f:9d:6d:
                    bd:82:f2:1f:68:26:0c:e1:70:27:68:dc:d6:92:4b:
                    ad:ee:6d:e2:1d:02:eb:11:81:09:dd:75:aa:8d:42:
                    b3:2b:f8:72:4b:b6:51:3b:bf:ad:91:5d:53:73:50:
                    cf:8b:66:ae:0e:05:74:d2:8b:ae:8f:75:27:29:32:
                    8a:11:38:5c:fc:bd:af:40:1f:39:a4:99:e1:1f:98:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C0:5E:40:68:5A:B6:D7:87:B3:5B:2D:29:D6:21:7F:2D:A2:27:50
            X509v3 Authority Key Identifier:
                keyid:D9:A9:88:91:6D:51:40:6F:9A:26:9F:30:A0:2D:00:86:B5:7F:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2amIkW1RQG-aJp8woC0AhrV_TVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/962b3f-fc26-4549-ae02-4d049a1eaf2f/1/2amIkW1RQG-aJp8woC0AhrV_TVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:ee:87:8c:be:bb:d2:0a:fd:fa:d4:46:b9:27:be:9b:e8:b9:
         62:00:7d:6a:ec:44:fc:bd:58:f3:8f:8f:6d:27:b4:ef:0c:af:
         c8:0e:71:40:6f:20:8a:70:18:39:0e:58:46:88:d4:bb:a4:81:
         3a:79:67:64:b0:14:f9:7d:a7:05:4f:19:86:7b:5a:41:4c:64:
         07:30:8e:e8:51:52:97:fb:4d:f1:fe:19:70:0b:92:c3:45:d8:
         d2:8b:16:70:6f:69:e1:27:cd:fe:21:44:42:6d:3e:cc:0f:6c:
         c2:66:35:bd:3c:98:51:08:0d:b5:58:7c:55:90:5d:ec:b9:6e:
         6f:6f:2d:3c:3f:d7:0d:7a:7d:98:95:3e:82:06:fc:b0:d4:ee:
         a3:ee:a9:46:43:36:32:23:8e:6c:96:cc:dc:4c:66:06:bb:ba:
         fa:31:8d:d9:d8:9b:c6:09:24:de:a7:f6:f8:3d:55:62:52:e0:
         ed:d7:20:4a:97:c1:a4:09:d3:2d:24:10:78:6c:58:b3:d9:32:
         e4:d0:0a:6a:86:00:ac:4a:af:70:b9:2f:a9:80:2b:fd:08:6e:
         1a:d3:52:53:e4:b7:57:25:0d:11:a8:ef:39:df:cf:09:56:26:
         eb:0e:85:39:52:4d:05:e7:bb:23:81:f8:14:fa:6d:3c:8e:4c:
         c9:ce:68:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7QLTBpK3ka6o5/Erl1oj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5YTk4ODkxNmQ1MTQwNmY5YTI2OWYzMGEwMmQwMDg2YjU3
ZjRkNWEwHhcNMjYwMTI2MTcwMTIwWhcNMjYwMTI3MTcwMTIwWjAzMTEwLwYDVQQD
Eyg5N2MwNWU0MDY4NWFiNmQ3ODdiMzViMmQyOWQ2MjE3ZjJkYTIyNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIXz6+GDnEPMYDTl0jnfhi0UhT3D
1gW15AM1Pl6v3piSk8JNP/uXt3OxUaghgm6P1WYLcHla+577hsUOADW1XB1BhU71
7L86GqlFZuMBRCXgUmSyZyBsMf+Z1iYEwtmvQdjwa7llGbgjDGjQIgyP6tQgz6mv
EUVbxFj55UJIPGE8s0zlbQ9ZXGnxdK4YrLO06NHA8yDjXHx8BPIsdIie7JmXo3B9
txyxejmxFx6IHXx/nW29gvIfaCYM4XAnaNzWkkut7m3iHQLrEYEJ3XWqjUKzK/hy
S7ZRO7+tkV1Tc1DPi2auDgV00ouuj3UnKTKKEThc/L2vQB85pJnhH5isCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJfAXkBoWrbXh7NbLSnWIX8toidQMB8GA1UdIwQY
MBaAFNmpiJFtUUBvmiafMKAtAIa1f01aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDIt
NGQwNDlhMWVhZjJmLzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85NjJiM2YtZmMyNi00NTQ5LWFlMDItNGQwNDlhMWVhZjJm
LzEvMmFtSWtXMVJRRy1hSnA4d29DMEFoclZfVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHu6HjL67
0gr9+tRGuSe+m+i5YgB9auxE/L1Y84+PbSe07wyvyA5xQG8ginAYOQ5YRojUu6SB
OnlnZLAU+X2nBU8ZhntaQUxkBzCO6FFSl/tN8f4ZcAuSw0XY0osWcG9p4SfN/iFE
Qm0+zA9swmY1vTyYUQgNtVh8VZBd7Llub28tPD/XDXp9mJU+ggb8sNTuo+6pRkM2
MiOObJbM3ExmBru6+jGN2dibxgkk3qf2+D1VYlLg7dcgSpfBpAnTLSQQeGxYs9ky
5NAKaoYArEqvcLkvqYAr/QhuGtNSU+S3VyUNEajvOd/PCVYm6w6FOVJNBee7I4H4
FPptPI5Myc5ofA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:47 2026 by rpki-client