This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File:                     F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier:          YCc0g7d5uzBUnD6xa47RKuHhhqrTnTB3UPi+Rbe3Jcc=
Subject key identifier:   D7:89:E1:8C:31:A6:05:21:E3:F8:BF:14:EC:8C:F9:A8:0C:47:30:81
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer:       /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial:       019BF4D01BC4924567BA3A80D76660E62179
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 11:00:37 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:37 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:37 +0000
Files and hashes:         1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: V3c464JfPmSv6X8zslHkG0xbzkTcrlToi/ZRH7czt+M=)
                          2: HNvn93VZrqPUOzKw1H1YD2pyedA.roa (hash: a/aHC9NlvJNBqxvVRL9BkgXA6OzhMYDmNsk13btgq+A=)
                          3: SyWBqT58dPR944ENyBXecfRLiu0.roa (hash: nvOaqw1yMGl0wbibTeGVu/RnctZfAeEqTXJajqdQujk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:1b:c4:92:45:67:ba:3a:80:d7:66:60:e6:21:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
        Validity
            Not Before: Jan 25 11:00:37 2026 GMT
            Not After : Jan 26 11:00:37 2026 GMT
        Subject: CN=d789e18c31a60521e3f8bf14ec8cf9a80c473081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:cd:a3:d3:24:55:d4:f3:14:80:b3:67:de:44:
                    2d:61:6d:b8:ee:dc:94:57:01:e3:84:93:8d:8d:24:
                    f8:b3:fb:9e:80:3e:2c:2f:0f:b2:a2:ea:e4:99:20:
                    98:84:5c:a0:ea:fa:57:4f:e2:2d:aa:0e:cb:b9:be:
                    c8:72:2c:9f:fb:f8:54:9a:19:ba:22:6a:ef:3f:9f:
                    34:f2:2e:f1:04:36:8b:5f:9f:9c:9d:e9:d8:bd:88:
                    8b:99:f9:59:85:3b:5a:35:43:71:ff:c8:4a:f8:d3:
                    38:35:57:ae:01:c4:b6:ef:8c:d0:2b:69:4e:de:c7:
                    ac:ca:ec:62:70:c9:fd:97:37:a4:cc:e3:09:9b:fe:
                    81:45:0e:de:3d:d9:40:cf:46:b2:b1:38:51:05:e7:
                    28:1c:28:50:10:2e:14:d6:33:28:ed:39:f0:75:12:
                    c7:4b:3b:b3:74:21:83:08:e8:67:71:b8:83:d7:ee:
                    5b:8f:34:6a:03:de:7b:80:17:fe:97:b2:9e:30:11:
                    65:27:d5:d0:df:48:72:6c:62:8a:14:16:53:91:4f:
                    01:3b:2a:94:d1:94:2b:00:0c:a8:13:27:80:64:cd:
                    49:0a:a7:8f:31:39:4f:17:7b:53:f3:ff:ac:3a:ad:
                    d2:00:d3:65:f5:24:6b:09:1c:34:10:ce:06:76:0b:
                    87:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:89:E1:8C:31:A6:05:21:E3:F8:BF:14:EC:8C:F9:A8:0C:47:30:81
            X509v3 Authority Key Identifier:
                keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:5b:2a:19:85:95:f2:c0:51:c8:fe:b7:6c:d4:86:a0:1e:e1:
         3d:65:37:d8:28:0a:1b:98:ab:a6:96:04:d3:6b:6e:c9:b3:eb:
         7a:58:85:e1:13:56:dd:d2:0b:0d:d7:00:fa:e6:38:f0:6c:f8:
         32:2a:42:f7:66:b9:93:df:69:34:8f:eb:80:df:dc:ad:8f:d9:
         a9:b7:2e:77:91:f7:42:fd:33:18:15:97:d0:39:cd:eb:2a:5e:
         e1:d2:33:ab:f2:08:4d:89:6c:c2:cc:da:6d:d8:ee:35:83:3e:
         a6:76:a3:0f:3d:34:36:1b:ab:90:6a:e2:ea:e6:55:e8:61:01:
         88:f5:9f:19:07:fa:c0:88:53:35:d7:93:86:85:bc:79:5f:94:
         f4:c5:7f:9e:f4:64:38:cb:9a:86:27:d0:39:36:96:c2:e6:d8:
         36:c3:35:59:3e:c1:b5:08:34:17:25:ea:56:c3:ad:df:e4:08:
         86:fe:ec:36:06:fe:c6:47:c8:21:e6:77:be:b2:7e:1a:5c:d9:
         bd:c2:1e:db:94:e3:75:fa:6b:fb:76:a7:ef:09:65:9f:5e:f0:
         3f:e2:68:d9:eb:78:d0:ef:4b:5e:b7:e2:96:f2:7f:33:d6:e9:
         30:41:3d:ff:9e:f0:d3:ee:d5:3c:87:e5:28:36:a5:38:42:8a:
         6c:9b:a9:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv00BvEkkVnujqA12Zg5iF5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDczN2Q4YTQ4NGQxMjUzNGNhNDBmOGRkODE4YTU4OGMz
YjNkZTIwHhcNMjYwMTI1MTEwMDM3WhcNMjYwMTI2MTEwMDM3WjAzMTEwLwYDVQQD
EyhkNzg5ZTE4YzMxYTYwNTIxZTNmOGJmMTRlYzhjZjlhODBjNDczMDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc2j0yRV1PMUgLNn3kQtYW247tyU
VwHjhJONjST4s/uegD4sLw+yourkmSCYhFyg6vpXT+Itqg7Lub7Iciyf+/hUmhm6
ImrvP5808i7xBDaLX5+cnenYvYiLmflZhTtaNUNx/8hK+NM4NVeuAcS274zQK2lO
3sesyuxicMn9lzekzOMJm/6BRQ7ePdlAz0aysThRBecoHChQEC4U1jMo7TnwdRLH
SzuzdCGDCOhncbiD1+5bjzRqA957gBf+l7KeMBFlJ9XQ30hybGKKFBZTkU8BOyqU
0ZQrAAyoEyeAZM1JCqePMTlPF3tT8/+sOq3SANNl9SRrCRw0EM4GdguH0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeJ4YwxpgUh4/i/FOyM+agMRzCBMB8GA1UdIwQY
MBaAFBdHN9ikhNElNMpA+N2BiliMOz3iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMt
N2I3NDZlYTFhYjgyLzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xOTMyNGEtMDYxNi00NWQ0LTliNTMtN2I3NDZlYTFhYjgy
LzEvRjBjMzJLU0UwU1UweWtENDNZR0tXSXc3UGVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARlsqGYWV
8sBRyP63bNSGoB7hPWU32CgKG5irppYE02tuybPreliF4RNW3dILDdcA+uY48Gz4
MipC92a5k99pNI/rgN/crY/Zqbcud5H3Qv0zGBWX0DnN6ype4dIzq/IITYlswsza
bdjuNYM+pnajDz00NhurkGri6uZV6GEBiPWfGQf6wIhTNdeThoW8eV+U9MV/nvRk
OMuahifQOTaWwubYNsM1WT7BtQg0FyXqVsOt3+QIhv7sNgb+xkfIIeZ3vrJ+GlzZ
vcIe25Tjdfpr+3an7wlln17wP+Jo2et40O9LXrfilvJ/M9bpMEE9/57w0+7VPIfl
KDalOEKKbJupRw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 19:24:38 2026 by rpki-client