This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
File:                     n_M9TzrAqIeECihM3Bq-t91kLwE.mft (raw, json)
Hash identifier:          pA+rAQrJ2eGlKkAkAXURARHlv+kz1Er/lSxAyQyo3HY=
Subject key identifier:   22:15:5F:42:FC:FF:1D:9C:1A:3E:58:11:86:15:D6:BB:14:83:EA:BB
Authority key identifier: 9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01
Certificate issuer:       /CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
Certificate serial:       019BAE38BA92628C74B91B89714668C0F0BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
Manifest number:          10FE
Signing time:             Sun 11 Jan 2026 18:01:51 +0000
Manifest this update:     Sun 11 Jan 2026 18:01:51 +0000
Manifest next update:     Mon 12 Jan 2026 18:01:51 +0000
Files and hashes:         1: 2gnx3T23gnHyfvabZqmNGBx5Pow.roa (hash: i0LgVwZpQThjIoASyjjPv5gqtQrxp+pQb/U1rW/VoOg=)
                          2: JhHZEdKJAkP34-ikWpJJrLVsEs4.roa (hash: KnIixUB21MIMX8vhmGnPkdfsgJQVtWJkg4ouIc7Q8O8=)
                          3: L6kvFhmw2HRimiOHYbmI9LP_LC8.roa (hash: bz6jH/jd8xJJNx0vVfwgOgrPiMsJ1ZK1zrtVm+WmTlk=)
                          4: n_M9TzrAqIeECihM3Bq-t91kLwE.crl (hash: jH7XoItNDahSBut1DXIPXvg+hHBnA2kTIqFsag4RHGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ae:38:ba:92:62:8c:74:b9:1b:89:71:46:68:c0:f0:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ff33d4f3ac0a887840a284cdc1abeb7dd642f01
        Validity
            Not Before: Jan 11 18:01:51 2026 GMT
            Not After : Jan 12 18:01:51 2026 GMT
        Subject: CN=22155f42fcff1d9c1a3e58118615d6bb1483eabb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:b3:94:83:d1:99:25:d1:d4:48:b1:96:0f:
                    94:ed:dd:f4:df:bf:65:32:20:a3:1d:6e:18:d4:c0:
                    c7:dc:eb:d0:e4:76:d2:4a:63:53:93:bd:81:4a:3b:
                    a1:89:af:13:06:0e:0d:db:8b:10:1b:76:ec:63:aa:
                    67:94:47:24:d0:7e:af:ad:a5:83:79:58:5b:8e:8c:
                    ca:b9:e5:42:68:bd:fe:61:0e:03:89:5f:be:1e:fd:
                    f2:40:fc:e7:8f:93:34:84:f3:c9:6d:93:3a:2a:a3:
                    98:51:b9:65:e6:9d:bf:ac:ce:3d:85:e6:71:95:41:
                    59:ff:30:43:05:80:19:3a:76:e7:17:f5:9a:a9:1f:
                    46:2f:52:c9:7b:f7:85:ed:92:49:06:08:d4:aa:95:
                    2d:61:13:62:48:80:a5:8f:5b:ed:63:b7:a1:04:18:
                    8a:41:08:c3:7f:1f:ce:af:60:a5:a5:e3:21:dc:fd:
                    d2:52:64:33:28:7e:d9:17:02:4c:0c:3d:9b:97:8c:
                    39:32:20:84:e4:40:d5:22:c7:f7:9f:6a:73:ac:cc:
                    0b:bb:c3:a1:d5:5b:93:7a:0b:fd:61:00:94:c2:2e:
                    6e:9d:97:87:62:c9:7b:30:de:76:21:eb:0a:87:c7:
                    b9:b4:67:3d:67:3e:6e:fc:cf:21:81:41:93:05:8b:
                    9e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:15:5F:42:FC:FF:1D:9C:1A:3E:58:11:86:15:D6:BB:14:83:EA:BB
            X509v3 Authority Key Identifier:
                keyid:9F:F3:3D:4F:3A:C0:A8:87:84:0A:28:4C:DC:1A:BE:B7:DD:64:2F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_M9TzrAqIeECihM3Bq-t91kLwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/127684-5afe-4f18-b95d-3072503d8607/1/n_M9TzrAqIeECihM3Bq-t91kLwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:15:62:a9:a7:7d:27:ff:0f:c4:9e:37:4d:21:3e:d9:d2:e4:
         a9:f5:2b:01:c8:9c:b8:31:9a:14:8a:95:d8:6f:fe:71:00:3b:
         74:2e:15:af:a1:91:57:2a:25:f0:db:b0:41:a7:c0:ad:57:83:
         04:45:d0:5a:26:9a:b3:f4:60:64:5b:20:fb:26:f5:15:23:c3:
         2a:75:8d:b0:98:90:f9:50:4a:aa:b4:5b:ae:1c:61:da:20:9c:
         41:45:8d:47:52:f7:f5:6d:b1:d2:a1:fc:4f:7b:33:dd:fa:da:
         4f:14:51:6a:76:f4:26:65:6e:f0:4d:42:c3:15:de:71:c0:66:
         69:78:0c:a5:67:12:3f:5e:11:59:90:ff:92:ea:0a:d4:24:9d:
         5c:ad:02:a8:64:f7:f5:08:02:b0:f4:24:6a:3e:81:45:82:74:
         96:85:f2:70:82:8b:0f:d7:b7:e5:61:a3:cd:b9:89:68:5e:5b:
         50:fa:51:19:d3:f6:13:b5:6e:98:db:29:77:d3:2b:00:e0:63:
         75:97:b2:65:e6:69:8b:42:df:72:95:cc:03:54:71:1b:dc:73:
         a1:ae:4b:59:dc:d4:eb:8f:af:15:83:5b:52:a8:6b:a5:ae:d4:
         3a:e9:0f:40:1f:43:a0:ca:ab:e8:3b:8b:b3:06:4f:0f:63:a8:
         5c:50:f2:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuuOLqSYox0uRuJcUZowPC7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjMzZDRmM2FjMGE4ODc4NDBhMjg0Y2RjMWFiZWI3ZGQ2
NDJmMDEwHhcNMjYwMTExMTgwMTUxWhcNMjYwMTEyMTgwMTUxWjAzMTEwLwYDVQQD
EygyMjE1NWY0MmZjZmYxZDljMWEzZTU4MTE4NjE1ZDZiYjE0ODNlYWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXCzlIPRmSXR1Eixlg+U7d30379l
MiCjHW4Y1MDH3OvQ5HbSSmNTk72BSjuhia8TBg4N24sQG3bsY6pnlEck0H6vraWD
eVhbjozKueVCaL3+YQ4DiV++Hv3yQPznj5M0hPPJbZM6KqOYUbll5p2/rM49heZx
lUFZ/zBDBYAZOnbnF/WaqR9GL1LJe/eF7ZJJBgjUqpUtYRNiSIClj1vtY7ehBBiK
QQjDfx/Or2ClpeMh3P3SUmQzKH7ZFwJMDD2bl4w5MiCE5EDVIsf3n2pzrMwLu8Oh
1VuTegv9YQCUwi5unZeHYsl7MN52IesKh8e5tGc9Zz5u/M8hgUGTBYueKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIVX0L8/x2cGj5YEYYV1rsUg+q7MB8GA1UdIwQY
MBaAFJ/zPU86wKiHhAooTNwavrfdZC8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQt
MzA3MjUwM2Q4NjA3LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8xMjc2ODQtNWFmZS00ZjE4LWI5NWQtMzA3MjUwM2Q4NjA3
LzEvbl9NOVR6ckFxSWVFQ2loTTNCcS10OTFrTHdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGRViqad9
J/8PxJ43TSE+2dLkqfUrAcicuDGaFIqV2G/+cQA7dC4Vr6GRVyol8NuwQafArVeD
BEXQWiaas/RgZFsg+yb1FSPDKnWNsJiQ+VBKqrRbrhxh2iCcQUWNR1L39W2x0qH8
T3sz3fraTxRRanb0JmVu8E1CwxXeccBmaXgMpWcSP14RWZD/kuoK1CSdXK0CqGT3
9QgCsPQkaj6BRYJ0loXycIKLD9e35WGjzbmJaF5bUPpRGdP2E7VumNspd9MrAOBj
dZeyZeZpi0LfcpXMA1RxG9xzoa5LWdzU64+vFYNbUqhrpa7UOukPQB9DoMqr6DuL
swZPD2OoXFDy7Q==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:22:12 2026 by rpki-client