This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
File:                     F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft (raw, json)
Hash identifier:          7GP4wwhVEkJkjrand6sIuZXestYnkEyDrgi13enR7yg=
Subject key identifier:   92:4D:CD:66:F9:6A:14:D8:CD:AC:6D:EC:29:3C:9C:DD:C2:F3:FF:DB
Authority key identifier: 17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99
Certificate issuer:       /CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
Certificate serial:       019BF72DA16FF0737507707CE48849783417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
Manifest number:          1328
Signing time:             Sun 25 Jan 2026 22:02:01 +0000
Manifest this update:     Sun 25 Jan 2026 22:02:01 +0000
Manifest next update:     Mon 26 Jan 2026 22:02:01 +0000
Files and hashes:         1: 7LMaVQHIURLIHhJQQlzIccTVpOE.roa (hash: 5km+tw1h03H4l3wkZKI+O7HJSeNoMxRPhDOUY2h8vd4=)
                          2: F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl (hash: o8Z5PwTzK9/BREDQwsIBOxV3ZqQzMZ76P1IkBPrnoOc=)
                          3: LI9K_zdJnsTE9lvQTqFYKf6AYsU.roa (hash: pcuAI5XjcKbL6fmMT5QI/ixfEpBYRotLo9ai79rRnLo=)
                          4: NwknT9I6GyPv-_RTZeqZ4JTQzrc.roa (hash: x5vufpHlYAUdkIPewVIu2Kz4yUhsko+l9KK+oarRKKQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:a1:6f:f0:73:75:07:70:7c:e4:88:49:78:34:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=178c8f20c939aaa9c80cce6a0d1567183ca1c599
        Validity
            Not Before: Jan 25 22:02:01 2026 GMT
            Not After : Jan 26 22:02:01 2026 GMT
        Subject: CN=924dcd66f96a14d8cdac6dec293c9cddc2f3ffdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:13:a9:57:1e:1b:a8:31:60:9a:e9:f7:23:e1:
                    c9:a8:70:52:b8:41:a8:5e:26:b2:53:4f:51:5a:02:
                    ce:c1:af:0f:fc:ba:d4:49:d9:96:22:4e:b1:ff:f3:
                    d8:8d:5d:ad:b9:2c:fb:92:44:d0:06:56:f6:d3:ec:
                    c6:91:0a:7b:a1:98:b5:e9:b5:64:55:3c:59:93:2c:
                    2a:80:a6:1a:0b:34:9a:da:fe:cd:ff:db:f4:32:5b:
                    50:00:59:c6:25:a6:0d:8a:7c:76:2c:02:d4:68:ce:
                    cb:51:d7:f8:99:d5:20:e2:a9:2d:f9:c6:45:49:da:
                    35:96:15:65:af:6f:db:6a:af:a4:f5:d2:4b:82:a9:
                    18:43:77:07:e7:34:b3:a5:bf:5b:53:f3:92:71:69:
                    6d:2e:13:e7:71:2b:36:0d:44:38:d6:ef:69:96:7f:
                    75:91:d4:c0:78:5f:91:cf:1f:33:6a:e1:58:e2:e9:
                    5c:95:ea:7b:3c:d9:3b:16:6a:ca:f8:4a:5b:57:70:
                    55:b2:e1:97:f3:dd:2b:b7:c5:67:b6:e4:b6:64:72:
                    50:b4:92:fc:c2:bd:41:17:93:39:73:b4:1f:1a:46:
                    b7:d2:ab:be:5e:48:e7:85:54:10:9a:39:46:da:31:
                    81:5e:82:b6:d5:5d:31:68:ed:c9:dc:ef:c0:48:00:
                    ea:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4D:CD:66:F9:6A:14:D8:CD:AC:6D:EC:29:3C:9C:DD:C2:F3:FF:DB
            X509v3 Authority Key Identifier:
                keyid:17:8C:8F:20:C9:39:AA:A9:C8:0C:CE:6A:0D:15:67:18:3C:A1:C5:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F4yPIMk5qqnIDM5qDRVnGDyhxZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/7edd9a-fb72-43d7-b252-4cd11e8b7497/1/F4yPIMk5qqnIDM5qDRVnGDyhxZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:f0:45:98:40:b3:85:c2:77:6a:cd:41:a6:62:ec:2a:ac:f8:
         41:4b:d1:64:37:54:3b:60:f7:a0:25:0a:d5:50:d9:12:5b:a0:
         ab:75:f4:18:11:af:ee:94:f9:d8:5b:7b:61:17:04:45:44:92:
         2e:aa:bc:db:7f:f0:c6:23:fb:fc:54:c3:30:26:d1:21:c6:7c:
         3a:58:2c:81:e7:ae:e0:85:ec:18:3d:53:e3:c5:cc:09:97:e8:
         67:72:68:ff:c8:8e:d9:0e:ed:95:79:df:70:a7:d7:bd:49:79:
         a8:96:f1:11:bc:14:e2:f8:ed:3b:c8:a7:fb:39:ca:aa:c7:41:
         7f:1c:0e:db:3e:61:9d:5b:a3:7b:a4:54:92:43:85:45:d0:16:
         5b:fa:4a:ac:5e:1b:fd:34:c8:81:a9:f2:9c:2e:7b:11:89:4d:
         3e:c9:c2:c8:c5:98:b8:51:e2:3c:68:3c:6a:2f:b4:6a:68:6d:
         9c:47:63:a2:92:ed:0c:4e:82:49:45:b9:45:dd:58:69:1a:0d:
         cc:c2:8b:82:9e:4d:99:2f:05:2c:9c:99:c1:2e:30:8e:1f:73:
         4e:1c:76:6a:bb:38:ed:9b:bc:e2:8b:18:df:72:f8:c7:a3:c3:
         8a:8f:fd:fe:7a:2b:b5:e8:74:08:af:cc:88:fd:f4:9c:91:a4:
         7c:66:7b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:54:33 2026 by rpki-client