This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
File:                     t9yTan9rpQeCJPgBc2_esNroqfs.mft (raw, json)
Hash identifier:          PJGr99DvWBlzKNmHJ6DuS37URVX0HpGTzjbX7v0zOAs=
Subject key identifier:   E8:3E:7F:E3:08:03:41:F8:ED:AC:E3:8A:F1:39:7F:6D:6F:C0:E4:F1
Authority key identifier: B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB
Certificate issuer:       /CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
Certificate serial:       019BA2A230D7C73FB3D9E7AB4537767C891E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
Manifest number:          17BF
Signing time:             Fri 09 Jan 2026 12:01:36 +0000
Manifest this update:     Fri 09 Jan 2026 12:01:36 +0000
Manifest next update:     Sat 10 Jan 2026 12:01:36 +0000
Files and hashes:         1: E5S268Ffch1NsUXm5XeEp1Xy-Jw.roa (hash: uZyNbiAwY6QAC7VVWqEYh3JF/qKdTnkMJgQyPmYloS4=)
                          2: H_uDKBlLLYWjSkRrdAcK39eeDV0.roa (hash: sLa+J14Ys0E4r0lAG5B4hthFqhO6LkphRctxzt1Vj/U=)
                          3: t9yTan9rpQeCJPgBc2_esNroqfs.crl (hash: qzT2ATXgM4I6e2j9Lmc/UtsuCWMhyhYAdObHgPPGeRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 12:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a2:a2:30:d7:c7:3f:b3:d9:e7:ab:45:37:76:7c:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7dc936a7f6ba5078224f801736fdeb0dae8a9fb
        Validity
            Not Before: Jan  9 12:01:36 2026 GMT
            Not After : Jan 10 12:01:36 2026 GMT
        Subject: CN=e83e7fe3080341f8edace38af1397f6d6fc0e4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1a:cc:56:6b:e6:37:9b:eb:ac:dd:17:bf:4d:
                    37:4e:b6:37:dc:34:8c:70:4c:43:ca:bd:1e:ec:1c:
                    f1:dd:0f:1c:7f:b0:65:17:45:1b:84:fc:a0:1a:ee:
                    fe:c1:07:33:d1:a2:11:6a:f1:58:4a:a7:16:3d:17:
                    87:ef:a1:f1:e7:ac:44:81:68:03:27:f5:2b:17:73:
                    89:77:f0:c4:76:83:dd:79:c1:ca:3d:68:82:1a:e7:
                    8e:e7:21:5d:f5:3a:be:51:5a:e5:dd:3a:c1:9e:c2:
                    3d:9f:59:a7:98:db:05:e4:41:e9:9c:56:f9:9c:7d:
                    a2:df:fa:33:9b:f1:1a:83:1c:84:ea:cd:dd:91:9e:
                    d0:3a:ca:96:ef:6a:37:d1:a6:b3:72:76:1f:7b:93:
                    be:ca:6c:b8:61:fa:06:88:99:fb:90:93:ff:e0:0c:
                    35:97:20:49:15:6d:21:23:77:d9:3c:01:d6:43:af:
                    1e:44:e9:b6:ea:b9:e2:36:e2:06:06:d1:57:80:ff:
                    12:d2:ae:5f:ec:0d:98:14:0a:cb:c6:f9:9b:1d:d0:
                    43:ec:00:74:bc:f8:0e:9f:5e:a6:21:07:b1:95:72:
                    62:a2:3c:04:c9:93:bd:38:a2:55:40:75:55:6f:5d:
                    62:0b:db:8c:23:6f:6c:4e:c2:59:78:ec:00:4f:a3:
                    5e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3E:7F:E3:08:03:41:F8:ED:AC:E3:8A:F1:39:7F:6D:6F:C0:E4:F1
            X509v3 Authority Key Identifier:
                keyid:B7:DC:93:6A:7F:6B:A5:07:82:24:F8:01:73:6F:DE:B0:DA:E8:A9:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t9yTan9rpQeCJPgBc2_esNroqfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8b162c-4e35-4061-81be-79d42882c8c0/1/t9yTan9rpQeCJPgBc2_esNroqfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:28:23:c4:1b:b5:23:81:e4:99:69:59:fb:84:7f:1d:32:a7:
         86:79:fa:06:59:6b:53:c1:37:dc:be:82:98:62:da:2f:63:47:
         a4:98:f7:20:f8:3d:42:93:46:bc:09:66:14:e4:91:aa:57:9d:
         3d:4a:50:70:82:a0:f7:82:a8:8b:9d:74:aa:ab:2a:c9:2f:77:
         17:6c:36:d9:5f:5a:c5:b1:38:4b:6d:c7:6e:ad:a6:7d:ce:78:
         00:cd:f2:ef:4a:6c:e1:14:96:35:56:82:64:2c:52:48:d0:e2:
         bb:b4:fe:42:cc:d0:ab:e7:fc:5e:aa:6c:01:6f:d9:ca:9b:6a:
         08:ef:23:a6:9b:1d:c5:a4:82:87:7a:ff:5b:aa:b4:15:b5:c1:
         26:80:52:2b:e0:c7:9a:8f:4e:64:2a:3f:0d:17:ff:18:77:ad:
         5e:20:23:0f:56:2d:17:f0:74:f9:4c:c3:b9:5a:38:a0:5f:f4:
         06:d2:92:65:dd:dd:37:5b:2e:33:d8:21:8d:a7:17:d7:42:29:
         be:fb:a3:0c:82:79:b5:7c:50:b3:2f:37:28:de:b0:aa:3b:de:
         06:ac:aa:6c:15:7e:64:8d:ae:55:a0:f9:93:84:88:d0:a1:98:
         d5:a4:a2:49:0d:28:af:0a:a1:a4:5f:ed:6f:9b:c9:9b:3d:82:
         76:f8:9a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuiojDXxz+z2eerRTd2fIkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ZGM5MzZhN2Y2YmE1MDc4MjI0ZjgwMTczNmZkZWIwZGFl
OGE5ZmIwHhcNMjYwMTA5MTIwMTM2WhcNMjYwMTEwMTIwMTM2WjAzMTEwLwYDVQQD
EyhlODNlN2ZlMzA4MDM0MWY4ZWRhY2UzOGFmMTM5N2Y2ZDZmYzBlNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xrMVmvmN5vrrN0Xv003TrY33DSM
cExDyr0e7Bzx3Q8cf7BlF0UbhPygGu7+wQcz0aIRavFYSqcWPReH76Hx56xEgWgD
J/UrF3OJd/DEdoPdecHKPWiCGueO5yFd9Tq+UVrl3TrBnsI9n1mnmNsF5EHpnFb5
nH2i3/ozm/EagxyE6s3dkZ7QOsqW72o30aazcnYfe5O+ymy4YfoGiJn7kJP/4Aw1
lyBJFW0hI3fZPAHWQ68eROm26rniNuIGBtFXgP8S0q5f7A2YFArLxvmbHdBD7AB0
vPgOn16mIQexlXJiojwEyZO9OKJVQHVVb11iC9uMI29sTsJZeOwAT6NesQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg+f+MIA0H47azjivE5f21vwOTxMB8GA1UdIwQY
MBaAFLfck2p/a6UHgiT4AXNv3rDa6Kn7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUt
NzlkNDI4ODJjOGMwLzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84YjE2MmMtNGUzNS00MDYxLTgxYmUtNzlkNDI4ODJjOGMw
LzEvdDl5VGFuOXJwUWVDSlBnQmMyX2VzTnJvcWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSgjxBu1
I4HkmWlZ+4R/HTKnhnn6BllrU8E33L6CmGLaL2NHpJj3IPg9QpNGvAlmFOSRqled
PUpQcIKg94Koi510qqsqyS93F2w22V9axbE4S23Hbq2mfc54AM3y70ps4RSWNVaC
ZCxSSNDiu7T+QszQq+f8XqpsAW/ZyptqCO8jppsdxaSCh3r/W6q0FbXBJoBSK+DH
mo9OZCo/DRf/GHetXiAjD1YtF/B0+UzDuVo4oF/0BtKSZd3dN1suM9ghjacX10Ip
vvujDIJ5tXxQsy83KN6wqjveBqyqbBV+ZI2uVaD5k4SI0KGY1aSiSQ0orwqhpF/t
b5vJmz2CdviaPA==
-----END CERTIFICATE-----
Generated at Fri Jan 9 16:00:29 2026 by rpki-client