This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File:                     4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier:          f5s1sGLln/jGUqj9aZNS2+j+d7zlumviwCUQayPCIBU=
Subject key identifier:   E0:23:7F:62:70:C6:33:1D:C9:F0:2E:77:AA:C4:2E:72:D1:FB:78:F7
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer:       /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial:       019BF72C8B0519809791453642FE396D7ED7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 22:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:50 +0000
Files and hashes:         1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: V2zJc9ccjqWRoZLMX/iXD+f5N1Lp9ouyLcn7WoBIwEs=)
                          2: YaozTdvah4PyD6CuJmnyOrAMFLM.roa (hash: TPg/XsH5Y8UGf7ia69jAJB3rN1a2sdNkkH/G/KTnbJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:8b:05:19:80:97:91:45:36:42:fe:39:6d:7e:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
        Validity
            Not Before: Jan 25 22:00:50 2026 GMT
            Not After : Jan 26 22:00:50 2026 GMT
        Subject: CN=e0237f6270c6331dc9f02e77aac42e72d1fb78f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:25:7c:fc:d6:e9:08:ad:fa:df:e5:77:93:7e:
                    71:bb:31:32:05:09:8a:2b:fd:9a:54:58:b9:c9:97:
                    d0:8e:37:a2:cf:12:c1:31:74:3d:46:b8:0f:8a:99:
                    25:43:66:93:73:49:d8:e6:9f:27:e9:88:7e:83:b5:
                    e3:8b:6c:98:2b:97:16:98:9f:64:53:4e:6c:67:bd:
                    24:2e:b1:7f:5f:37:16:c1:50:43:a1:b0:7c:3f:9a:
                    97:1e:de:9a:7f:69:c5:14:fa:bb:34:86:30:6b:99:
                    19:b0:d8:ed:2a:bb:c7:00:65:eb:61:e5:20:e4:01:
                    91:a5:ba:fd:99:7d:91:cb:f8:b2:cb:9e:08:71:00:
                    cd:67:83:47:81:f5:6f:6f:49:59:1d:96:39:93:50:
                    2d:7b:31:be:55:cf:12:a7:36:41:54:4f:89:f5:90:
                    db:3f:a7:d0:ef:40:70:41:7c:e6:46:6a:e7:55:67:
                    df:6c:0b:a5:27:24:23:4d:e6:0b:58:35:85:bb:d6:
                    cb:a0:71:ef:70:35:cf:f9:5b:c9:67:df:ca:fe:ca:
                    9e:b1:4e:e2:92:e3:5a:05:aa:11:ed:e3:a8:d1:07:
                    53:66:1a:91:8d:09:a0:c2:64:26:b5:06:81:f7:52:
                    c1:9d:a5:0d:1c:f6:72:00:7c:d8:f9:28:12:52:8a:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:23:7F:62:70:C6:33:1D:C9:F0:2E:77:AA:C4:2E:72:D1:FB:78:F7
            X509v3 Authority Key Identifier:
                keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:07:e6:f3:91:a2:b0:fb:74:ee:53:51:3c:b6:38:95:55:8f:
         26:ee:fb:e4:d3:56:a0:b1:9b:91:b1:92:9f:45:98:e7:dd:9a:
         f6:8e:4b:f2:7b:9b:2e:20:b4:dc:ab:6e:1e:0c:1b:7c:65:35:
         bf:89:86:4a:cb:2c:9b:38:3a:3c:45:6d:7b:ba:52:cf:82:2a:
         38:e8:c8:a9:58:37:ed:a5:b4:f2:12:23:eb:4e:2c:d6:1e:65:
         e4:29:02:2b:5e:a8:d4:74:63:02:d8:06:a2:b4:5d:a0:b0:88:
         03:c5:f0:71:c4:48:71:2a:17:4c:89:28:fd:41:00:20:92:fa:
         6a:d3:e5:e6:bd:dd:65:aa:8a:18:68:ea:d7:16:49:4c:6b:c5:
         e0:ea:b7:b9:b0:33:75:3b:06:d8:6d:9f:d1:09:08:e4:e9:b3:
         a7:da:1e:54:b8:2d:03:a2:5b:e0:30:0f:7f:36:58:3b:6d:b3:
         9e:32:68:6c:ae:a1:08:1d:b5:6d:6b:52:bb:e0:ea:a2:db:d6:
         eb:9f:39:a5:9b:7c:8a:d2:cc:c5:71:71:da:30:e7:b7:d5:28:
         60:0d:4b:13:15:a8:30:20:15:7d:58:4c:34:c9:51:0d:f7:2c:
         4b:36:f3:a5:c1:fd:1a:91:05:0d:b7:0e:d5:84:7a:eb:8e:68:
         ca:e2:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:18:14 2026 by rpki-client