This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File:                     AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier:          ea0ied8bwrM+6Hi9hpmhW4YwhHPjst12N7KanpVR7wI=
Subject key identifier:   ED:BF:4C:29:A3:AB:8A:99:90:45:F7:3E:1B:92:5F:87:3A:2F:37:63
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer:       /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial:       019B804C7591A6DBDA21F3C06CC3ED6013C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number:          113E
Signing time:             Fri 02 Jan 2026 20:00:52 +0000
Manifest this update:     Fri 02 Jan 2026 20:00:52 +0000
Manifest next update:     Sat 03 Jan 2026 20:00:52 +0000
Files and hashes:         1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: JHiOpCq1JEz30xOu+g8TrYWRWOeTpNCi6olwRcU/2q8=)
                          2: xGSQtxBpS573s4zPyTFpERUQH7o.roa (hash: 0qhIt2oCl1BBlwABDamfzBFWIJOyQt4+H4muS8E2+74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 19:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:80:4c:75:91:a6:db:da:21:f3:c0:6c:c3:ed:60:13:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
        Validity
            Not Before: Jan  2 20:00:52 2026 GMT
            Not After : Jan  3 20:00:52 2026 GMT
        Subject: CN=edbf4c29a3ab8a999045f73e1b925f873a2f3763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:ee:8a:8f:aa:59:29:d1:b1:c8:ba:7e:a0:
                    89:61:3c:76:ec:dd:bf:1b:91:11:4c:2a:2c:3d:9c:
                    db:f6:11:13:bb:eb:ea:25:c3:72:22:45:25:a4:93:
                    81:24:a7:53:22:b7:a8:95:3b:22:48:86:77:4f:56:
                    5d:54:5e:9d:41:85:63:17:eb:ef:8d:2b:cf:8d:d5:
                    a3:be:a7:86:0c:8c:b8:06:74:8b:8a:82:e0:ba:e7:
                    e9:ec:33:d8:d0:33:6c:59:c2:f1:a9:f1:ea:f8:05:
                    25:2b:5f:8f:f2:a9:55:46:da:39:32:37:38:19:99:
                    8f:4d:b3:88:3a:23:16:b4:ae:c5:49:35:55:3e:fe:
                    0d:62:c8:62:aa:6d:09:a3:72:1b:bb:68:d5:d3:f3:
                    b1:58:48:09:37:0c:cb:6a:a7:72:fb:e8:da:d5:76:
                    d8:7d:9a:7c:cf:ea:f5:32:c6:c4:24:28:63:4c:79:
                    1d:57:73:77:46:f9:e0:d3:1e:ce:f6:60:67:1a:d1:
                    3f:3b:cd:d0:7f:81:7c:fa:1c:8a:e9:b3:a6:fa:79:
                    6a:3c:ed:1c:04:6d:bb:86:f1:b6:4b:98:ea:d8:c0:
                    86:fc:a3:35:eb:85:20:70:bb:19:6a:70:8f:59:04:
                    14:ae:91:9d:de:ce:a1:86:2a:d9:6e:0c:36:81:fa:
                    f2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BF:4C:29:A3:AB:8A:99:90:45:F7:3E:1B:92:5F:87:3A:2F:37:63
            X509v3 Authority Key Identifier:
                keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:18:2f:ca:a0:2b:04:b5:0d:5b:e8:4b:c8:e1:45:f6:ed:c7:
         77:c5:eb:e4:56:4d:c9:57:f4:41:5a:a5:9c:37:8d:8f:92:68:
         02:7a:bd:32:56:17:f9:e9:d3:e8:55:63:31:6c:d2:71:6c:cb:
         4f:43:0c:36:7b:c5:73:25:77:50:da:1f:94:d9:13:af:73:18:
         35:8f:53:33:e6:64:f5:c4:dd:28:9f:f3:4b:68:40:c0:44:8c:
         e6:6b:f5:38:15:a5:97:13:af:d7:a5:32:d3:14:5e:e0:3d:d5:
         f6:bb:1c:bb:92:e9:70:55:b0:03:5d:dd:50:65:f2:78:0d:95:
         67:e8:94:b2:f3:c4:3f:f8:97:5f:9b:eb:47:45:81:08:30:f6:
         72:50:87:e4:ca:36:19:7e:82:a0:26:b5:e3:ef:ae:43:0d:c1:
         62:23:fd:bb:37:84:6e:47:0b:0f:1b:f9:c3:2a:07:16:dc:ee:
         bd:8e:cb:4e:ad:4b:48:7c:f5:18:c3:09:b7:c7:6c:31:26:9f:
         f5:de:82:21:0f:1a:cb:ee:a3:85:39:27:80:6e:00:46:5e:41:
         6e:66:b4:4e:a1:d9:1b:71:f4:1f:8d:05:8e:2c:fb:2c:22:3a:
         67:fe:ce:4d:ae:57:b3:f6:b2:f5:8f:f8:68:46:ac:7a:65:62:
         0c:e1:8c:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuATHWRptvaIfPAbMPtYBPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxYzM1MjExOGZkNWY3NTQ1NGNmYzYxYmU2MWE0MmFiZWY0
ZGM0ZjgwHhcNMjYwMTAyMjAwMDUyWhcNMjYwMTAzMjAwMDUyWjAzMTEwLwYDVQQD
EyhlZGJmNGMyOWEzYWI4YTk5OTA0NWY3M2UxYjkyNWY4NzNhMmYzNzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kzuio+qWSnRsci6fqCJYTx27N2/
G5ERTCosPZzb9hETu+vqJcNyIkUlpJOBJKdTIreolTsiSIZ3T1ZdVF6dQYVjF+vv
jSvPjdWjvqeGDIy4BnSLioLguufp7DPY0DNsWcLxqfHq+AUlK1+P8qlVRto5Mjc4
GZmPTbOIOiMWtK7FSTVVPv4NYshiqm0Jo3Ibu2jV0/OxWEgJNwzLaqdy++ja1XbY
fZp8z+r1MsbEJChjTHkdV3N3Rvng0x7O9mBnGtE/O83Qf4F8+hyK6bOm+nlqPO0c
BG27hvG2S5jq2MCG/KM164UgcLsZanCPWQQUrpGd3s6hhirZbgw2gfryOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2/TCmjq4qZkEX3PhuSX4c6LzdjMB8GA1UdIwQY
MBaAFAHDUhGP1fdUVM/GG+YaQqvvTcT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEt
ZWYwMWUxZGM3ZGFjLzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi81ZThhMmEtNDU3My00MzZiLTkwMmEtZWYwMWUxZGM3ZGFj
LzEvQWNOU0VZX1Y5MVJVejhZYjVocENxLTlOeFBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhgvyqAr
BLUNW+hLyOFF9u3Hd8Xr5FZNyVf0QVqlnDeNj5JoAnq9MlYX+enT6FVjMWzScWzL
T0MMNnvFcyV3UNoflNkTr3MYNY9TM+Zk9cTdKJ/zS2hAwESM5mv1OBWllxOv16Uy
0xRe4D3V9rscu5LpcFWwA13dUGXyeA2VZ+iUsvPEP/iXX5vrR0WBCDD2clCH5Mo2
GX6CoCa14++uQw3BYiP9uzeEbkcLDxv5wyoHFtzuvY7LTq1LSHz1GMMJt8dsMSaf
9d6CIQ8ay+6jhTkngG4ARl5Bbma0TqHZG3H0H40Fjiz7LCI6Z/7OTa5Xs/ay9Y/4
aEasemViDOGMaA==
-----END CERTIFICATE-----
Generated at Fri Jan 2 23:23:15 2026 by rpki-client