This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
File:                     x1eZ_0M1t7GucYjt-lP9fiE-shY.mft (raw, json)
Hash identifier:          WJWetCUUHYMsKJU1cqNcCFIa0ThFDVUAXk8wFc8a9/0=
Subject key identifier:   48:CE:56:63:A1:32:CA:EC:69:EB:EC:CD:75:C3:BD:0C:B8:41:D0:25
Authority key identifier: C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16
Certificate issuer:       /CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
Certificate serial:       019BAE388145B8D581971C382793015BE01A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
Manifest number:          1746
Signing time:             Sun 11 Jan 2026 18:01:37 +0000
Manifest this update:     Sun 11 Jan 2026 18:01:37 +0000
Manifest next update:     Mon 12 Jan 2026 18:01:37 +0000
Files and hashes:         1: 7wQkjJzOFmhj4SlVLo-x26w_WTc.roa (hash: uBOYkM28EcQ5gB0Rh8GkUGQb+Ga2UZ8JgAHYGzfSXXI=)
                          2: uabo7ndnRWzy9MUqP3Ih5P2gxe8.roa (hash: j629zk7F2qIP3WUGuPA4LCpVgjs/1/AZWtVe090YvCY=)
                          3: x1eZ_0M1t7GucYjt-lP9fiE-shY.crl (hash: oerlqYuu9VV+xbn3DsXf7bdTKzSaI3yaCi+WSbRgKgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ae:38:81:45:b8:d5:81:97:1c:38:27:93:01:5b:e0:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75799ff4335b7b1ae7188edfa53fd7e213eb216
        Validity
            Not Before: Jan 11 18:01:37 2026 GMT
            Not After : Jan 12 18:01:37 2026 GMT
        Subject: CN=48ce5663a132caec69ebeccd75c3bd0cb841d025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:eb:df:b2:df:88:b4:50:0e:4c:da:ec:f3:f4:
                    06:63:e1:5f:9a:5f:02:9c:b6:4f:76:d6:e1:69:a6:
                    47:0d:32:60:84:4f:41:56:b8:11:0a:4d:63:b2:3c:
                    53:6e:b0:1b:66:00:08:dc:37:a7:a9:8a:86:e5:76:
                    52:6d:4e:b3:2c:c0:c0:46:55:dc:16:e1:91:8b:89:
                    03:58:7e:63:c2:16:61:30:3e:80:05:8f:90:4d:2b:
                    9e:3d:8e:42:58:83:9e:99:85:f8:45:65:09:e0:d9:
                    85:87:9b:72:36:dd:df:09:7b:4f:df:5f:a2:3f:ba:
                    48:33:59:44:e6:a7:27:4e:25:ae:11:84:3c:8b:91:
                    29:71:34:37:9e:f4:96:6f:f6:02:fc:f3:4d:28:41:
                    2c:86:e6:0f:76:87:e1:a6:21:21:e4:5e:9d:ab:9e:
                    63:da:1a:cc:b6:f1:f2:22:53:0b:cb:46:11:bf:67:
                    00:cf:83:20:2b:5b:8f:0c:3a:49:1f:e8:a7:f6:ba:
                    6a:fa:a9:a1:39:fb:b0:07:b2:c8:f2:62:92:a6:6b:
                    19:83:e7:6c:0a:24:68:47:32:c6:92:08:52:ed:25:
                    5d:00:ea:de:fe:48:2e:e9:5f:5e:48:ac:b7:7c:83:
                    d4:98:f4:e8:04:e0:31:bd:f9:35:0c:df:33:b0:75:
                    0a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:56:63:A1:32:CA:EC:69:EB:EC:CD:75:C3:BD:0C:B8:41:D0:25
            X509v3 Authority Key Identifier:
                keyid:C7:57:99:FF:43:35:B7:B1:AE:71:88:ED:FA:53:FD:7E:21:3E:B2:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x1eZ_0M1t7GucYjt-lP9fiE-shY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1e4c03-f619-47a3-81bd-36ef7aeebe3b/1/x1eZ_0M1t7GucYjt-lP9fiE-shY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b7:eb:03:2f:b5:47:3a:40:90:b3:ce:7a:69:cf:b8:63:04:
         21:a0:e7:dd:ec:c0:41:29:33:54:bf:72:61:e0:9d:18:98:81:
         40:02:22:5c:2b:c3:ac:75:29:e5:0b:28:ec:44:5b:ca:ba:a3:
         e3:ca:a6:5f:21:06:da:bf:81:0f:13:6f:a3:28:a9:66:fc:38:
         ae:42:3c:9e:e8:7b:65:bf:fb:f2:49:35:5f:5f:9c:9a:93:13:
         b2:b9:b6:2c:bc:7b:7c:a1:f6:0f:dd:a3:b9:ac:a6:e8:71:2c:
         72:c0:d4:a5:a9:e6:19:9d:7a:ba:00:c0:18:c9:ff:01:a0:a5:
         11:8a:e1:eb:de:2a:f7:ed:a1:a2:92:8a:22:73:81:33:9a:53:
         f6:60:b7:10:17:0e:95:e1:a1:f7:ed:42:0a:38:cb:78:6b:23:
         ee:cb:3c:e9:4e:9f:cc:d1:ea:1f:a5:b2:41:a1:37:37:c8:6e:
         2a:ce:33:d8:f7:26:5e:58:1f:74:6d:ea:b9:5f:eb:05:47:6e:
         03:b1:b0:9b:0c:fc:4e:b0:91:5b:24:54:3e:44:b5:8c:5d:f7:
         71:30:8d:c7:df:94:bf:ce:34:45:78:53:f3:81:ed:3e:f9:ad:
         e0:b4:f4:fb:fb:8d:f5:4c:99:97:6c:fe:e9:18:ab:ad:7a:72:
         fb:85:cf:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuuOIFFuNWBlxw4J5MBW+AaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NTc5OWZmNDMzNWI3YjFhZTcxODhlZGZhNTNmZDdlMjEz
ZWIyMTYwHhcNMjYwMTExMTgwMTM3WhcNMjYwMTEyMTgwMTM3WjAzMTEwLwYDVQQD
Eyg0OGNlNTY2M2ExMzJjYWVjNjllYmVjY2Q3NWMzYmQwY2I4NDFkMDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+vfst+ItFAOTNrs8/QGY+Ffml8C
nLZPdtbhaaZHDTJghE9BVrgRCk1jsjxTbrAbZgAI3DenqYqG5XZSbU6zLMDARlXc
FuGRi4kDWH5jwhZhMD6ABY+QTSuePY5CWIOemYX4RWUJ4NmFh5tyNt3fCXtP31+i
P7pIM1lE5qcnTiWuEYQ8i5EpcTQ3nvSWb/YC/PNNKEEshuYPdofhpiEh5F6dq55j
2hrMtvHyIlMLy0YRv2cAz4MgK1uPDDpJH+in9rpq+qmhOfuwB7LI8mKSpmsZg+ds
CiRoRzLGkghS7SVdAOre/kgu6V9eSKy3fIPUmPToBOAxvfk1DN8zsHUKnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjOVmOhMsrsaevszXXDvQy4QdAlMB8GA1UdIwQY
MBaAFMdXmf9DNbexrnGI7fpT/X4hPrIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQt
MzZlZjdhZWViZTNiLzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xZTRjMDMtZjYxOS00N2EzLTgxYmQtMzZlZjdhZWViZTNi
LzEveDFlWl8wTTF0N0d1Y1lqdC1sUDlmaUUtc2hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrfrAy+1
RzpAkLPOemnPuGMEIaDn3ezAQSkzVL9yYeCdGJiBQAIiXCvDrHUp5Qso7ERbyrqj
48qmXyEG2r+BDxNvoyipZvw4rkI8nuh7Zb/78kk1X1+cmpMTsrm2LLx7fKH2D92j
uaym6HEscsDUpanmGZ16ugDAGMn/AaClEYrh694q9+2hopKKInOBM5pT9mC3EBcO
leGh9+1CCjjLeGsj7ss86U6fzNHqH6WyQaE3N8huKs4z2PcmXlgfdG3quV/rBUdu
A7Gwmwz8TrCRWyRUPkS1jF33cTCNx9+Uv840RXhT84HtPvmt4LT0+/uN9UyZl2z+
6RirrXpy+4XP2Q==
-----END CERTIFICATE-----
Generated at Sun Jan 11 20:08:22 2026 by rpki-client