This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
File:                     o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft (raw, json)
Hash identifier:          FBtRIP2TLF4lcoLSWa7FgKNabtBKYm0sqaVZvmE6uzw=
Subject key identifier:   9F:99:19:D7:53:B3:B8:F9:D7:00:F9:65:D6:B3:09:D8:9A:86:25:EA
Authority key identifier: A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59
Certificate issuer:       /CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
Certificate serial:       019BB2B9846C9387BBDAA278728077252B2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
Manifest number:          17C6
Signing time:             Mon 12 Jan 2026 15:01:01 +0000
Manifest this update:     Mon 12 Jan 2026 15:01:01 +0000
Manifest next update:     Tue 13 Jan 2026 15:01:01 +0000
Files and hashes:         1: 6LQC_WZqbsxqpCNxITLwNmSvDPk.roa (hash: 2jpqjh4IYhaGl+W39lws2/CQFWFrqFjpyZKUsxZ8H+0=)
                          2: CO_VzBu4gFZGQo6TZVLREcCwUwY.roa (hash: LG1jfCe3GnKEfOBNBBGC9FiXFKQ/e+HVoB0Wq69YJpQ=)
                          3: o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl (hash: ujYsIJ8I7SS21xo9IGtyhUuc4j75Gh59gE9CzbGlGCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Jan 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:b2:b9:84:6c:93:87:bb:da:a2:78:72:80:77:25:2b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3aa8dd118766aed3b09ed69f2e47dc1d2c16159
        Validity
            Not Before: Jan 12 15:01:01 2026 GMT
            Not After : Jan 13 15:01:01 2026 GMT
        Subject: CN=9f9919d753b3b8f9d700f965d6b309d89a8625ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:35:ab:5f:19:59:f2:9f:9d:38:68:cc:00:
                    00:34:6b:f3:e4:b9:c1:fb:4c:e9:0e:42:04:ea:b8:
                    3a:67:8d:34:4e:76:59:66:87:f5:c1:e3:12:3f:0a:
                    67:78:36:f2:47:61:ff:12:99:62:c2:72:c0:58:e2:
                    2a:04:a9:cb:1b:ba:05:6f:7f:c8:f6:05:5a:ce:d5:
                    85:10:49:35:ed:64:99:04:0d:2c:b0:ff:91:35:b9:
                    eb:de:96:1a:5d:f1:15:e8:30:f6:4b:f2:bd:bb:f9:
                    a3:0b:21:d5:54:f7:07:53:e9:9f:bb:4b:c2:33:c8:
                    e5:a1:ea:f0:88:77:11:07:4f:09:5b:67:74:dd:aa:
                    86:6f:cc:dc:8e:00:e1:c0:8a:7b:93:e1:58:51:f1:
                    56:5c:56:de:95:b8:b5:17:98:e6:2d:e9:5c:6b:c5:
                    8b:c8:ec:db:21:16:84:cb:3d:cb:7a:b3:a8:aa:1d:
                    85:4a:70:dc:56:60:17:0a:16:4e:3e:7c:63:dc:5b:
                    58:ff:17:67:68:aa:5e:83:cb:15:ce:b0:73:79:e1:
                    39:36:ee:3d:10:7d:7c:1d:ce:a3:60:25:82:16:c3:
                    28:3b:64:32:66:ee:b5:c2:2f:85:ef:0f:33:ae:03:
                    d6:bc:68:74:8a:79:e8:e8:5a:5a:0a:f8:72:e4:e4:
                    43:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:99:19:D7:53:B3:B8:F9:D7:00:F9:65:D6:B3:09:D8:9A:86:25:EA
            X509v3 Authority Key Identifier:
                keyid:A3:AA:8D:D1:18:76:6A:ED:3B:09:ED:69:F2:E4:7D:C1:D2:C1:61:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6qN0Rh2au07Ce1p8uR9wdLBYVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/391e54-c21a-405a-88aa-6079789100ca/1/o6qN0Rh2au07Ce1p8uR9wdLBYVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:02:4f:ad:a3:92:22:98:8a:b6:8c:8c:1c:37:83:96:38:eb:
         22:d4:40:41:88:7d:60:e5:d7:c7:5a:6f:68:ac:4f:ac:61:d5:
         fc:ec:f3:2b:bd:fd:21:e8:95:f8:a4:b6:b7:55:9d:d7:9a:74:
         75:ab:4a:b0:5c:97:75:bb:af:87:b9:4a:35:fc:65:bd:13:94:
         83:1d:65:c1:f2:87:42:a3:26:c8:98:69:77:df:0e:68:2e:d0:
         ac:82:89:8f:16:2d:6e:60:33:3a:c8:2d:0b:75:13:ef:0f:d7:
         91:4d:7c:88:72:aa:39:58:6d:a4:c2:e9:07:79:05:e3:a5:5e:
         fc:38:a6:86:ea:67:cc:6b:5c:7a:6f:15:5c:d9:d6:56:32:c1:
         cd:3a:cd:d9:65:88:9c:67:58:b7:1c:5b:97:35:41:da:6e:21:
         ac:d0:4e:56:17:5e:84:d5:7d:57:e0:6b:41:19:cd:15:41:86:
         69:98:24:10:e7:21:da:b6:f1:6d:62:6d:4f:38:d0:15:76:54:
         7b:28:c1:54:32:53:c8:35:be:62:e0:99:c0:90:a3:ea:25:c5:
         f3:00:72:d4:7c:35:2e:54:df:aa:81:f2:0e:8a:08:0b:af:3e:
         9f:ba:bd:3b:76:0d:c7:cd:40:f1:90:f2:f9:71:b6:9b:ca:4d:
         8c:1b:c9:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZuyuYRsk4e72qJ4coB3JSsvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYWE4ZGQxMTg3NjZhZWQzYjA5ZWQ2OWYyZTQ3ZGMxZDJj
MTYxNTkwHhcNMjYwMTEyMTUwMTAxWhcNMjYwMTEzMTUwMTAxWjAzMTEwLwYDVQQD
Eyg5Zjk5MTlkNzUzYjNiOGY5ZDcwMGY5NjVkNmIzMDlkODlhODYyNWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUM1q18ZWfKfnThozAAANGvz5LnB
+0zpDkIE6rg6Z400TnZZZof1weMSPwpneDbyR2H/EpliwnLAWOIqBKnLG7oFb3/I
9gVaztWFEEk17WSZBA0ssP+RNbnr3pYaXfEV6DD2S/K9u/mjCyHVVPcHU+mfu0vC
M8jloerwiHcRB08JW2d03aqGb8zcjgDhwIp7k+FYUfFWXFbelbi1F5jmLelca8WL
yOzbIRaEyz3LerOoqh2FSnDcVmAXChZOPnxj3FtY/xdnaKpeg8sVzrBzeeE5Nu49
EH18Hc6jYCWCFsMoO2QyZu61wi+F7w8zrgPWvGh0inno6FpaCvhy5ORDhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ+ZGddTs7j51wD5ZdazCdiahiXqMB8GA1UdIwQY
MBaAFKOqjdEYdmrtOwntafLkfcHSwWFZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEt
NjA3OTc4OTEwMGNhLzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8zOTFlNTQtYzIxYS00MDVhLTg4YWEtNjA3OTc4OTEwMGNh
LzEvbzZxTjBSaDJhdTA3Q2UxcDh1Ujl3ZExCWVZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgJPraOS
IpiKtoyMHDeDljjrItRAQYh9YOXXx1pvaKxPrGHV/OzzK739IeiV+KS2t1Wd15p0
datKsFyXdbuvh7lKNfxlvROUgx1lwfKHQqMmyJhpd98OaC7QrIKJjxYtbmAzOsgt
C3UT7w/XkU18iHKqOVhtpMLpB3kF46Ve/DimhupnzGtcem8VXNnWVjLBzTrN2WWI
nGdYtxxblzVB2m4hrNBOVhdehNV9V+BrQRnNFUGGaZgkEOch2rbxbWJtTzjQFXZU
eyjBVDJTyDW+YuCZwJCj6iXF8wBy1Hw1LlTfqoHyDooIC68+n7q9O3YNx81A8ZDy
+XG2m8pNjBvJUA==
-----END CERTIFICATE-----
Generated at Mon Jan 12 22:31:27 2026 by rpki-client