This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          VQRjHJtCD2BVGKHrzgYK6E0+QE4qgEnLls/Vo+1bL3I=
Subject key identifier:   CD:D3:2E:27:F7:25:7C:76:6A:B3:FA:19:F6:54:7D:80:DF:83:FC:61
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       019BFEE669D88D5984F283EB7DCD5BA2582D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          17F4
Signing time:             Tue 27 Jan 2026 10:01:11 +0000
Manifest this update:     Tue 27 Jan 2026 10:01:11 +0000
Manifest next update:     Wed 28 Jan 2026 10:01:11 +0000
Files and hashes:         1: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
                          2: YoLNLyuosFKuT_-ema2hiJHs0ZY.roa (hash: hWuyH98+DzBIQmHmAmY9RDKZV1I45ddKJD4en0HvYcI=)
                          3: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: gVVOX0AFA3uBz5OAQAXVW1BwClRPJL2OLn6HoACxwEc=)
                          4: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
                          5: poLUczAkpZ-X35ck8qyvSthMHVI.roa (hash: 0jkj8MirRFlW0k6UiG4ranSvkFvq8sDiHxNpMa/cyFY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:e6:69:d8:8d:59:84:f2:83:eb:7d:cd:5b:a2:58:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Jan 27 10:01:11 2026 GMT
            Not After : Jan 28 10:01:11 2026 GMT
        Subject: CN=cdd32e27f7257c766ab3fa19f6547d80df83fc61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:29:dd:2b:a3:49:80:ed:52:92:4f:a6:84:
                    99:cd:88:3b:fc:6b:f7:92:ce:3a:4c:8d:f9:ed:24:
                    a4:9a:77:4a:55:4a:68:c7:65:de:b8:2f:e4:e0:90:
                    89:f3:f4:fe:0d:e8:d4:40:4c:b6:01:b7:95:d6:ed:
                    c8:24:b4:a2:7c:39:2d:4d:c4:26:18:f1:df:3a:d5:
                    b1:4b:eb:0a:9d:20:d7:c8:d9:27:aa:e3:27:f8:30:
                    b3:45:66:25:5e:ca:b5:57:25:bc:79:b6:a5:d5:aa:
                    ac:e9:76:38:00:37:2e:c2:d5:f0:99:3c:56:03:94:
                    ec:ef:79:63:9c:a5:f0:69:93:c6:e3:42:fe:70:d5:
                    cf:fd:5f:88:54:7d:64:b4:29:c4:cc:ea:a0:fb:23:
                    ed:4e:9b:25:9c:dc:d6:28:34:39:cb:48:c5:59:f5:
                    f0:92:c8:15:27:a2:a1:e1:59:f6:59:40:c3:05:46:
                    92:b3:ca:91:49:bf:a5:b4:a5:63:4d:3d:be:a9:37:
                    50:b3:83:1c:c4:f7:ef:7b:31:85:26:44:10:6c:50:
                    4b:88:df:ac:fd:98:e5:2c:1f:a8:14:5c:f8:64:57:
                    72:1c:24:da:42:23:6b:3d:a4:e2:83:1e:93:5a:6c:
                    f7:a8:30:8b:cf:e5:06:96:fd:e8:ac:a0:d8:56:04:
                    b2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D3:2E:27:F7:25:7C:76:6A:B3:FA:19:F6:54:7D:80:DF:83:FC:61
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:31:e0:46:06:4a:47:76:38:69:c9:9a:cf:e9:29:1f:62:9f:
         12:13:55:e9:1f:ec:04:35:ce:2e:ba:4e:f2:0f:e5:28:a8:a8:
         37:94:7c:7d:7f:55:be:64:63:bc:55:fe:50:06:1f:8e:e6:43:
         9e:4f:1e:9d:4d:5c:68:3a:ed:0c:cf:f9:10:45:c0:9b:f0:f9:
         6d:0a:af:60:23:af:6c:90:43:1c:24:8a:7a:47:44:a7:99:f2:
         7f:57:4f:21:e9:59:25:df:62:9f:f7:6a:6a:27:44:9a:4d:ef:
         01:cf:81:8b:67:db:e8:0c:47:bc:0e:51:20:fd:e1:e8:02:f5:
         67:bc:e6:d8:3c:73:25:3c:1c:4d:8d:cb:c4:38:5b:cc:8d:d4:
         be:80:3e:b7:50:23:d3:d1:f1:bb:ef:9d:c7:8c:d8:45:4f:91:
         a7:88:49:6c:44:63:f1:b6:f7:f6:a1:f8:00:76:12:32:cc:b2:
         60:a8:8d:78:73:76:1b:cf:f5:62:95:f7:52:be:08:79:b9:d6:
         bc:d5:7d:37:f6:f8:b3:db:59:f7:40:ba:9d:1a:8e:5b:6d:81:
         68:e8:94:d1:f4:5e:29:b8:f9:88:fa:27:27:74:7d:4d:df:1c:
         b6:fa:59:3a:5e:c0:7f:f4:21:89:13:c1:f4:08:7e:c8:09:38:
         00:02:fb:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv+5mnYjVmE8oPrfc1bolgtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw
YjY4NmEwHhcNMjYwMTI3MTAwMTExWhcNMjYwMTI4MTAwMTExWjAzMTEwLwYDVQQD
EyhjZGQzMmUyN2Y3MjU3Yzc2NmFiM2ZhMTlmNjU0N2Q4MGRmODNmYzYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJAp3SujSYDtUpJPpoSZzYg7/Gv3
ks46TI357SSkmndKVUpox2XeuC/k4JCJ8/T+DejUQEy2AbeV1u3IJLSifDktTcQm
GPHfOtWxS+sKnSDXyNknquMn+DCzRWYlXsq1VyW8ebal1aqs6XY4ADcuwtXwmTxW
A5Ts73ljnKXwaZPG40L+cNXP/V+IVH1ktCnEzOqg+yPtTpslnNzWKDQ5y0jFWfXw
ksgVJ6Kh4Vn2WUDDBUaSs8qRSb+ltKVjTT2+qTdQs4McxPfvezGFJkQQbFBLiN+s
/ZjlLB+oFFz4ZFdyHCTaQiNrPaTigx6TWmz3qDCLz+UGlv3orKDYVgSyrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3TLif3JXx2arP6GfZUfYDfg/xhMB8GA1UdIwQY
MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt
ZTVkNTA3YTgyNmJmLzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm
LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzHgRgZK
R3Y4acmaz+kpH2KfEhNV6R/sBDXOLrpO8g/lKKioN5R8fX9VvmRjvFX+UAYfjuZD
nk8enU1caDrtDM/5EEXAm/D5bQqvYCOvbJBDHCSKekdEp5nyf1dPIelZJd9in/dq
aidEmk3vAc+Bi2fb6AxHvA5RIP3h6AL1Z7zm2DxzJTwcTY3LxDhbzI3UvoA+t1Aj
09Hxu++dx4zYRU+Rp4hJbERj8bb39qH4AHYSMsyyYKiNeHN2G8/1YpX3Ur4IebnW
vNV9N/b4s9tZ90C6nRqOW22BaOiU0fReKbj5iPonJ3R9Td8ctvpZOl7Af/QhiRPB
9Ah+yAk4AAL7SA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 13:20:49 2026 by rpki-client