This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File:                     1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier:          wrkfNkn8nzfPKzLWTvFKsR2aZwNmmajJy0LinTp2Ha0=
Subject key identifier:   E4:64:BC:02:6E:8E:CA:A2:E2:2E:81:6C:9E:41:66:87:83:4A:3A:4A
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer:       /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial:       019B7FA747FAEC39A6602D2C8E5AD0575217
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number:          17AB
Signing time:             Fri 02 Jan 2026 17:00:27 +0000
Manifest this update:     Fri 02 Jan 2026 17:00:27 +0000
Manifest next update:     Sat 03 Jan 2026 17:00:27 +0000
Files and hashes:         1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: KsiOXbx0iYdzLQrDU7g+YJR/DFbESgLlJXJVmrIpLB4=)
                          2: XTIB3wAu-H5jaJDXDYV1NuX8wKg.roa (hash: XT8YNrFmajQC+0dTcA0EhEoUbR7GPWJZO+G57x2fMrQ=)
                          3: npLxbCkBfsvzh12Sr2_JC_OdCbc.roa (hash: F8mcnlSRs2fM48WMAEjA+peBFWEIlebDFAmNFUnpLxw=)
                          4: wFYmGE5l1chJ5-wTECpTY_pMIXM.roa (hash: hK07/sPk/5vCM2raR2H19xhYBW6r/31Luy7kDtFVbII=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7f:a7:47:fa:ec:39:a6:60:2d:2c:8e:5a:d0:57:52:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
        Validity
            Not Before: Jan  2 17:00:27 2026 GMT
            Not After : Jan  3 17:00:27 2026 GMT
        Subject: CN=e464bc026e8ecaa2e22e816c9e416687834a3a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2c:8c:8c:f1:9f:f8:2d:e6:73:d0:51:51:8a:
                    1f:c2:53:b6:02:6f:d9:6b:a3:34:32:88:7e:e9:db:
                    2a:b0:28:95:04:22:ce:d7:33:17:d7:f1:f6:a9:74:
                    34:6c:75:47:50:b8:c4:23:44:c2:62:c3:3d:83:b5:
                    61:fe:dd:f0:ff:a6:fd:d6:82:11:1a:59:e6:5a:cf:
                    cc:3b:6d:2d:8f:7d:2e:a6:1a:2d:01:92:6b:1f:04:
                    ad:54:77:fe:5d:08:42:f2:a2:22:e8:fc:8e:2d:88:
                    e1:03:26:26:55:b0:1d:92:c4:7b:23:49:44:b1:4a:
                    77:7f:77:f3:0d:e8:aa:9e:01:d1:4e:6d:19:6a:17:
                    5c:80:fd:07:f9:7e:8f:d6:82:69:18:8f:ae:ae:24:
                    34:de:26:0d:62:4a:49:74:ea:4a:42:09:0c:fe:af:
                    90:28:5a:13:e8:af:71:8c:cf:76:2c:8b:96:19:c6:
                    0b:96:bd:4d:f4:92:ee:ce:ee:83:a6:97:5c:17:7c:
                    f5:8d:4c:21:f1:e2:12:eb:8c:d7:aa:c2:bb:91:35:
                    19:34:31:bc:07:46:10:86:9b:7b:ae:82:e3:ef:f4:
                    79:43:04:ee:3c:34:65:e5:8e:e4:fb:02:eb:a9:c1:
                    bb:fe:db:1b:44:f9:0d:8d:b2:34:23:03:c7:36:33:
                    55:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:64:BC:02:6E:8E:CA:A2:E2:2E:81:6C:9E:41:66:87:83:4A:3A:4A
            X509v3 Authority Key Identifier:
                keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:18:d2:c8:33:2b:87:6b:11:1f:46:d3:fc:33:98:6f:ef:ad:
         39:27:46:6b:0c:45:36:e8:d5:b3:37:f0:52:e0:1e:81:4d:11:
         6c:50:82:8e:ec:b3:03:8e:fe:94:bc:4a:11:0d:d9:7a:2d:cf:
         ae:49:92:d0:e2:2b:42:e9:1e:ac:03:e8:a3:5a:22:16:6e:e1:
         7e:b5:84:7c:1d:fb:c8:fc:1c:16:a0:ca:81:a8:65:5c:94:ab:
         9a:f1:13:df:58:d3:b2:2e:fe:6a:88:6d:a8:21:f0:ce:a7:79:
         86:bc:90:2b:c1:b4:36:16:58:12:93:57:6c:3a:de:8f:70:cb:
         19:21:91:ce:ae:13:88:8d:05:29:9f:37:ef:1a:66:85:49:68:
         00:3a:95:a2:47:50:f3:76:d4:88:11:1f:e3:eb:6f:ee:74:d0:
         30:0c:58:69:1c:98:d2:23:aa:c5:2e:90:5d:fa:8c:43:62:7e:
         86:26:11:fd:76:6c:50:5d:1d:0b:40:dd:bc:1b:d0:a4:87:d1:
         f8:39:fc:d6:bd:cc:8d:ae:ca:b8:4a:12:9b:af:30:c7:f8:69:
         81:4b:84:0d:ea:0c:6e:62:0b:a5:fa:d0:b2:ed:97:91:4b:1a:
         4a:b5:c9:c2:0c:b2:38:c2:97:9d:0c:50:50:07:1d:bd:80:05:
         7b:93:d1:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt/p0f67DmmYC0sjlrQV1IXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZGJhYTFiNTJmM2E3MzI4OWZmNzY4YWNiN2JhYTdmMzg3
Zjk1NWYwHhcNMjYwMTAyMTcwMDI3WhcNMjYwMTAzMTcwMDI3WjAzMTEwLwYDVQQD
EyhlNDY0YmMwMjZlOGVjYWEyZTIyZTgxNmM5ZTQxNjY4NzgzNGEzYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SyMjPGf+C3mc9BRUYofwlO2Am/Z
a6M0Moh+6dsqsCiVBCLO1zMX1/H2qXQ0bHVHULjEI0TCYsM9g7Vh/t3w/6b91oIR
GlnmWs/MO20tj30uphotAZJrHwStVHf+XQhC8qIi6PyOLYjhAyYmVbAdksR7I0lE
sUp3f3fzDeiqngHRTm0ZahdcgP0H+X6P1oJpGI+uriQ03iYNYkpJdOpKQgkM/q+Q
KFoT6K9xjM92LIuWGcYLlr1N9JLuzu6DppdcF3z1jUwh8eIS64zXqsK7kTUZNDG8
B0YQhpt7roLj7/R5QwTuPDRl5Y7k+wLrqcG7/tsbRPkNjbI0IwPHNjNV6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORkvAJujsqi4i6BbJ5BZoeDSjpKMB8GA1UdIwQY
MBaAFNbbqhtS86cyif92ist7qn84f5VfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQt
ZmFiODNkNDAzNTU4LzEvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iMGI2ZTctM2UyMy00NDI2LThjODQtZmFiODNkNDAzNTU4
LzEvMXR1cUcxTHpwektKXzNhS3kzdXFmemhfbFY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmRjSyDMr
h2sRH0bT/DOYb++tOSdGawxFNujVszfwUuAegU0RbFCCjuyzA47+lLxKEQ3Zei3P
rkmS0OIrQukerAPoo1oiFm7hfrWEfB37yPwcFqDKgahlXJSrmvET31jTsi7+aoht
qCHwzqd5hryQK8G0NhZYEpNXbDrej3DLGSGRzq4TiI0FKZ837xpmhUloADqVokdQ
83bUiBEf4+tv7nTQMAxYaRyY0iOqxS6QXfqMQ2J+hiYR/XZsUF0dC0DdvBvQpIfR
+Dn81r3Mja7KuEoSm68wx/hpgUuEDeoMbmILpfrQsu2XkUsaSrXJwgyyOMKXnQxQ
UAcdvYAFe5PRYg==
-----END CERTIFICATE-----
Generated at Fri Jan 2 23:52:26 2026 by rpki-client