This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          r019DeiEH3b/S+ZfRoYTGb6fbo+/u6Ru8yHIZxyQxJI=
Subject key identifier:   0A:98:22:CA:AE:71:D0:EA:D7:48:1C:5E:FA:10:EB:2A:4F:58:DC:89
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       019BFE782114BE5544B8B8B83A145A7A2880
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          17F3
Signing time:             Tue 27 Jan 2026 08:00:44 +0000
Manifest this update:     Tue 27 Jan 2026 08:00:44 +0000
Manifest next update:     Wed 28 Jan 2026 08:00:44 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: khWG29de7HRpKdT5CFhb87qxzsT3KEa17+UOpN/8bTo=)
                          2: 9Q1EhBQJB4WATQm8NcD2FpR4oio.roa (hash: ya2Hoc0i5CUE7q6bBok8w7pRN3nzDu1KdR10C8/ZL2s=)
                          3: DGuA7DOyGXAn98oCAGhbl48323g.roa (hash: KaiwSlSCPAgF52IKRYkPf8oMfbhIntogM/QW0s5kztk=)
                          4: cNdUG1i54zJ-DiyzAbYp5hI1_Yw.roa (hash: Zs9p0r7/OlghiUl1YzqqCjoM6IGWezmYkoL5qYs5XiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 08:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:78:21:14:be:55:44:b8:b8:b8:3a:14:5a:7a:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Jan 27 08:00:44 2026 GMT
            Not After : Jan 28 08:00:44 2026 GMT
        Subject: CN=0a9822caae71d0ead7481c5efa10eb2a4f58dc89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:09:49:e4:75:6c:84:68:ff:0e:b0:a9:69:c5:
                    2b:3a:fa:cd:fd:ec:c1:4d:2d:70:58:34:3f:19:0b:
                    23:2f:98:68:9a:53:07:f1:b9:be:5f:17:51:ac:15:
                    7e:29:93:0c:7a:82:c3:73:c8:7a:5f:34:8e:bd:1c:
                    28:d9:10:f9:2f:02:ab:d1:67:d3:0b:32:0f:36:66:
                    19:75:48:e1:d1:13:a1:42:e4:2a:67:2c:3c:00:bb:
                    cb:00:00:34:10:13:b5:3a:89:50:bb:c8:5f:75:d6:
                    ee:0d:ad:9a:c1:1c:0d:92:7c:93:2b:9b:fb:ca:4a:
                    b6:41:cd:2d:5b:79:45:58:68:e2:91:b8:b3:89:07:
                    cc:dc:21:86:b4:0d:27:64:a6:a8:c7:f8:97:bb:31:
                    64:97:41:48:3d:5d:21:dc:92:93:88:61:d7:df:b9:
                    ab:82:f3:33:08:dd:a4:30:ef:e6:63:56:24:f3:e2:
                    77:82:10:ec:35:ee:ab:9c:14:77:c1:a9:99:dc:94:
                    a6:bd:f3:91:67:df:36:de:53:3e:e2:46:09:7c:ce:
                    c1:5c:f5:b7:f1:cb:73:54:7c:0a:d4:7e:b9:ed:1e:
                    e3:a3:d9:7a:ce:e6:ee:e1:5f:49:8d:45:a9:35:4b:
                    15:e2:a1:33:ab:d4:bf:b7:99:f6:fd:6f:f9:0c:bd:
                    b9:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:98:22:CA:AE:71:D0:EA:D7:48:1C:5E:FA:10:EB:2A:4F:58:DC:89
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5d:a4:39:2e:fb:b6:df:78:62:fd:c3:25:e8:66:ed:53:ed:
         15:eb:55:6c:fe:19:e4:3e:c5:77:12:a9:f1:2b:bb:87:37:e1:
         ee:da:f9:06:c1:83:8f:1f:a5:2e:54:34:50:fc:7b:10:03:0d:
         b0:0f:8c:84:2e:e6:bb:93:ae:41:78:26:e3:e1:83:a5:9c:9f:
         12:73:52:0d:00:8d:15:f0:37:71:5b:c1:e5:7a:2a:bb:7b:dd:
         f6:5a:35:df:24:44:4a:2a:2e:7b:ba:76:8e:1a:43:8a:94:8f:
         69:98:bd:56:d8:0c:4a:05:0f:ca:89:0a:d9:1a:5d:58:3b:6d:
         9e:fa:31:27:5a:9e:fb:ca:0d:ba:22:fe:f8:12:70:2f:30:3f:
         cc:bc:81:e7:18:dc:c9:e4:05:0e:09:ac:93:f9:af:b3:32:19:
         68:94:dc:73:5b:a3:9e:b0:26:e8:a2:01:ac:10:81:6f:af:14:
         43:89:03:2c:32:95:b0:28:58:21:60:80:34:a6:b4:15:14:14:
         f1:38:e7:13:8d:14:27:53:ff:47:12:cc:44:4b:95:81:29:16:
         a1:bc:d2:ec:21:48:62:08:65:d2:58:90:96:2a:0e:97:db:3f:
         45:dd:41:d0:c3:7b:e0:46:d8:c2:e2:39:7d:cf:e4:04:47:71:
         f5:c6:fd:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+eCEUvlVEuLi4OhRaeiiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiNjQxZmM5MDNkNWI0Y2M5NzE2NDkzMjRhNGIzNGU0Zjgy
NDIyYzUwHhcNMjYwMTI3MDgwMDQ0WhcNMjYwMTI4MDgwMDQ0WjAzMTEwLwYDVQQD
EygwYTk4MjJjYWFlNzFkMGVhZDc0ODFjNWVmYTEwZWIyYTRmNThkYzg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAlJ5HVshGj/DrCpacUrOvrN/ezB
TS1wWDQ/GQsjL5homlMH8bm+XxdRrBV+KZMMeoLDc8h6XzSOvRwo2RD5LwKr0WfT
CzIPNmYZdUjh0ROhQuQqZyw8ALvLAAA0EBO1OolQu8hfddbuDa2awRwNknyTK5v7
ykq2Qc0tW3lFWGjikbiziQfM3CGGtA0nZKaox/iXuzFkl0FIPV0h3JKTiGHX37mr
gvMzCN2kMO/mY1Yk8+J3ghDsNe6rnBR3wamZ3JSmvfORZ9823lM+4kYJfM7BXPW3
8ctzVHwK1H657R7jo9l6zubu4V9JjUWpNUsV4qEzq9S/t5n2/W/5DL25bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqYIsqucdDq10gcXvoQ6ypPWNyJMB8GA1UdIwQY
MBaAFNtkH8kD1bTMlxZJMkpLNOT4JCLFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzkt
N2ZlZTU5MWEyMDljLzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMDA5NWYtZmQzNS00YTA2LThmMzktN2ZlZTU5MWEyMDlj
LzEvMjJRZnlRUFZ0TXlYRmtreVNrczA1UGdrSXNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf12kOS77
tt94Yv3DJehm7VPtFetVbP4Z5D7FdxKp8Su7hzfh7tr5BsGDjx+lLlQ0UPx7EAMN
sA+MhC7mu5OuQXgm4+GDpZyfEnNSDQCNFfA3cVvB5Xoqu3vd9lo13yRESioue7p2
jhpDipSPaZi9VtgMSgUPyokK2RpdWDttnvoxJ1qe+8oNuiL++BJwLzA/zLyB5xjc
yeQFDgmsk/mvszIZaJTcc1ujnrAm6KIBrBCBb68UQ4kDLDKVsChYIWCANKa0FRQU
8TjnE40UJ1P/RxLMREuVgSkWobzS7CFIYghl0liQlioOl9s/Rd1B0MN74EbYwuI5
fc/kBEdx9cb9Ug==
-----END CERTIFICATE-----
Generated at Tue Jan 27 16:30:26 2026 by rpki-client