This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File:                     1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier:          H9Xa2Pb6prWq00noXILA11OUzGMYld2ZVrMV1YugNtI=
Subject key identifier:   8A:BB:22:45:B7:A3:66:D6:AF:46:D3:70:1B:DD:13:BE:B6:1F:D2:CA
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       019BF61A37963327CC8E56E0E29E93A1A4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number:          17FE
Signing time:             Sun 25 Jan 2026 17:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:11 +0000
Files and hashes:         1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: aZwtlpSBaZh0wCi2gprH/dgXDBF8n4qf0p/lMtMkbZg=)
                          2: a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa (hash: HfOJoJtir41J/f+2Eh1+jNbOpl4HZb7UfJBs0/Ovz88=)
                          3: cVHvV_AfygNUxK1wLw3TaNGFbjc.roa (hash: aLS2Onqdh8tUWZKfNWq/5VUb/NC+ZJDVJlHb2Z6u8NU=)
                          4: wQxI0N6wQyPtnD-0275R19YpjGg.roa (hash: sn5K7ssLl2Ssv/wbg1cIpo1dVgEp9s7k3bxB61yjjzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:37:96:33:27:cc:8e:56:e0:e2:9e:93:a1:a4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Jan 25 17:01:11 2026 GMT
            Not After : Jan 26 17:01:11 2026 GMT
        Subject: CN=8abb2245b7a366d6af46d3701bdd13beb61fd2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:13:10:b8:1c:3f:90:6f:00:33:e1:87:19:95:
                    65:b8:45:bd:40:2a:f9:22:a2:65:a9:66:9f:21:73:
                    2f:6f:59:c9:9b:ac:4e:95:84:99:a2:13:cb:bf:19:
                    47:2b:9d:9a:02:2f:6a:fa:18:49:68:5a:82:42:c5:
                    92:f3:30:05:18:53:f2:82:e9:fa:25:06:45:c5:d8:
                    15:03:24:63:c0:cc:2c:03:4f:8e:62:cf:64:17:3e:
                    0c:ba:73:52:a0:b4:06:ac:8c:95:87:84:19:bc:ca:
                    4a:18:d8:4c:30:68:49:c6:5f:10:5e:59:3e:b0:6a:
                    b4:62:f9:16:81:dd:b1:5c:89:5e:71:5b:88:76:c7:
                    09:4d:c3:77:c0:21:93:38:7b:7e:c0:3c:50:23:3c:
                    94:69:90:98:db:8a:b6:58:7b:67:1d:73:cb:74:9b:
                    71:1c:66:61:0a:c0:48:20:dc:0e:bf:16:ff:1d:45:
                    4b:62:59:27:c1:7e:e0:32:5c:eb:df:15:37:8b:23:
                    c4:9f:fe:b6:32:29:6e:4d:67:f7:79:29:93:fb:aa:
                    1a:94:ae:84:00:c5:b6:c7:95:33:54:2e:8e:2b:ee:
                    e5:49:f4:73:16:ef:90:73:fe:53:4b:49:f1:ae:67:
                    71:48:a5:1a:f0:9f:09:aa:21:0c:a1:91:e2:34:4d:
                    01:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BB:22:45:B7:A3:66:D6:AF:46:D3:70:1B:DD:13:BE:B6:1F:D2:CA
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:8a:d9:19:65:57:b9:b5:b1:71:bd:98:f1:57:d9:16:0c:79:
         0a:86:88:e3:66:27:3c:9f:3d:b8:c1:b5:32:ae:8e:42:3e:94:
         6b:be:0d:12:67:53:8a:29:36:bf:ae:a6:42:26:d4:76:6a:98:
         8e:5a:49:48:6b:37:45:fe:3d:26:6f:37:73:0c:7d:63:86:ec:
         9b:23:61:4f:86:46:1c:5c:ac:95:c4:55:ac:ba:18:47:ea:a9:
         1c:fc:c5:58:66:f0:d2:ce:23:c8:30:89:16:31:e3:61:76:c1:
         cd:f2:d0:90:9d:03:4e:63:05:7b:34:bc:90:8c:45:f5:33:4a:
         20:18:fc:3b:9b:bc:3e:fb:75:b4:ba:c1:7e:3c:d1:d1:e2:a0:
         f3:95:79:cd:d0:50:72:70:1c:87:d9:13:94:f8:46:3e:67:c3:
         93:14:69:2f:14:e1:7e:b9:b2:4c:cd:b4:f8:60:da:4e:17:f3:
         65:74:22:cb:03:85:d4:9a:24:29:dd:07:12:d2:58:3d:36:76:
         10:47:d6:12:8a:b0:76:ec:9b:d4:b6:63:37:d3:7d:d6:1f:5a:
         c7:22:2d:ee:39:24:fb:17:f3:ae:58:23:f8:d6:b7:e5:ca:f8:
         00:e3:29:57:7d:86:cb:fe:06:c2:98:a3:df:43:a4:e5:4b:fc:
         df:e6:01:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:52:51 2026 by rpki-client