This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File:                     73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier:          j3bZSKNRI7pJ4I5FSpOqztMlW7m2RMXAlDsUP0/82Ps=
Subject key identifier:   D5:91:08:76:18:91:DD:88:D0:F1:31:71:8C:3A:FC:57:18:98:09:94
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer:       /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial:       019BF23D96DD66534437D4E7D0FC217D3B64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number:          17E8
Signing time:             Sat 24 Jan 2026 23:01:20 +0000
Manifest this update:     Sat 24 Jan 2026 23:01:20 +0000
Manifest next update:     Sun 25 Jan 2026 23:01:20 +0000
Files and hashes:         1: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: 7nl5XxIP8RR1DJhsrSDYj2+n1a8fPIs/d76Urr9IyTk=)
                          2: CXyMI2l8iEL8L83sjM9bkDZ8hS4.roa (hash: j/IQcIj8RO7TPRLNA/hKS2090AInnEPNtfaLrldabW0=)
                          3: VoUC5dLmrwvo5IVIUQ9reyXsBQk.roa (hash: qRjYhRjtRMqcpSCBbiNCNUBeAUXt7NZHib1uEHQNNXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:3d:96:dd:66:53:44:37:d4:e7:d0:fc:21:7d:3b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
        Validity
            Not Before: Jan 24 23:01:20 2026 GMT
            Not After : Jan 25 23:01:20 2026 GMT
        Subject: CN=d59108761891dd88d0f131718c3afc5718980994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:54:4f:9d:6b:8d:c4:da:a9:f0:dd:20:a3:07:
                    85:5c:bb:1e:27:20:8e:fc:13:7a:e6:85:7d:a7:69:
                    24:bb:ac:06:c8:6b:78:23:2a:54:51:b0:b4:40:47:
                    68:b2:a0:db:64:16:4c:43:a2:8f:85:bd:45:fc:68:
                    70:8b:44:c7:55:9a:3f:fe:51:75:12:9c:ff:8d:fb:
                    45:07:28:44:52:e4:ad:2c:f0:dd:7a:f9:90:7b:b5:
                    b8:cc:0b:6e:0e:11:8b:c0:a5:39:c0:0c:b2:63:75:
                    a6:ea:6e:68:5c:c1:5a:0f:84:2c:69:f3:1a:15:48:
                    63:c0:e2:bb:d3:b8:5c:f8:4f:c3:f2:af:fb:38:78:
                    63:3a:52:83:9c:6b:18:c0:52:b1:33:20:a3:5e:c0:
                    0e:ff:6e:b1:d8:3e:80:98:98:0a:b4:fc:e4:80:f4:
                    f4:4f:ba:2d:ae:b9:54:0c:0e:bd:b2:27:4f:af:bc:
                    3a:03:cb:03:c5:13:1b:e7:cc:f3:33:8b:8b:19:61:
                    27:01:66:46:70:9f:c2:ee:d1:96:a9:cd:d9:79:c2:
                    33:fa:c9:d5:ae:ec:e9:18:24:1b:51:02:a8:7d:a0:
                    b6:aa:26:8d:ad:0e:e4:45:ec:54:04:39:0d:ee:a8:
                    2f:65:00:54:1f:28:86:6e:10:d2:c6:ff:d7:9a:c4:
                    4a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:91:08:76:18:91:DD:88:D0:F1:31:71:8C:3A:FC:57:18:98:09:94
            X509v3 Authority Key Identifier:
                keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:3d:78:29:fe:27:fc:d4:df:36:96:56:cd:04:a9:91:ff:1b:
         eb:ef:eb:e2:40:bf:7f:38:06:48:19:44:93:44:31:02:cc:c8:
         f3:25:6e:48:61:90:77:35:e5:29:6c:9d:37:f5:0e:39:c4:d7:
         45:31:61:2f:1e:8e:da:b7:b6:ee:d8:38:c9:fb:fa:fa:7a:d2:
         2f:d4:c6:5a:b7:cf:99:97:23:81:c9:90:c2:ac:60:1c:0e:16:
         cd:fb:6f:f9:01:f0:ad:90:2b:b3:47:ca:0b:cc:6d:63:e7:2f:
         9f:25:08:33:c6:3e:ca:c8:5c:92:f0:54:87:c7:05:b0:af:6a:
         80:e1:a1:02:22:ff:18:3d:bf:52:81:12:f3:7d:ad:7c:e0:33:
         ba:3a:02:17:83:7d:29:63:ae:01:20:23:2d:ea:19:1c:6d:77:
         f9:e6:01:00:f0:57:a9:0a:53:07:d4:2a:50:7c:0a:a8:c2:1f:
         42:25:01:5d:02:38:1d:74:c0:9b:da:1f:48:13:0d:30:3d:fb:
         f0:21:4f:9a:4f:ef:76:79:4a:58:64:af:fd:2f:dc:8e:0e:3c:
         55:41:b9:7e:25:03:d1:76:4b:c4:4d:82:0d:97:28:e8:c2:98:
         44:fe:63:1c:bf:a6:72:b1:f9:d9:c4:3b:b4:b8:27:eb:13:0f:
         d7:23:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:32 2026 by rpki-client