This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File:                     75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier:          pca1WY8zn1j6hoGgj+eiY3HdNrH2t0hYgqBUoarQWv4=
Subject key identifier:   F6:BE:1B:A0:8B:2C:CB:D8:65:78:CA:8A:C6:B2:A9:6D:19:24:61:B4
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer:       /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial:       019BF6515B0D2A40ACD1EE6A27E9130264E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number:          09AA
Signing time:             Sun 25 Jan 2026 18:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:25 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:25 +0000
Files and hashes:         1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: hZrtrLqoNpQ0owsa9Sdr3PZURNXon6cY8H1fDmJqqKY=)
                          2: DGYXYWLKOeu5jzMoeESZW6Y77nY.roa (hash: NEwVDGeOxuD3CwmTZN1xHgpekj6E23kVoku+iTke+5k=)
                          3: h1r4ZumAOZuwV9fE7OfAlVgJv4A.roa (hash: boWg3/ilHJUif1jBV2hi//oKfIFrSzEio17woe1bvV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:5b:0d:2a:40:ac:d1:ee:6a:27:e9:13:02:64:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
        Validity
            Not Before: Jan 25 18:01:25 2026 GMT
            Not After : Jan 26 18:01:25 2026 GMT
        Subject: CN=f6be1ba08b2ccbd86578ca8ac6b2a96d192461b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:8a:e8:61:33:cb:ba:89:f2:98:04:3b:44:
                    da:6d:84:4d:39:42:36:23:6b:b7:14:13:fc:8a:98:
                    39:3e:32:c4:82:7c:7a:b8:eb:32:71:49:27:a0:85:
                    33:6b:ae:72:97:5a:32:f3:92:b6:0c:c7:d0:f5:73:
                    1c:2f:bb:6c:88:fc:b7:2e:f1:93:41:32:50:c0:14:
                    c1:d2:7b:31:82:a7:c6:13:9f:79:95:bf:66:82:9e:
                    d1:23:16:1e:db:f3:39:2e:88:42:58:57:62:d3:25:
                    25:12:70:d8:ae:da:4c:67:37:44:e0:08:ba:ce:34:
                    6b:76:f6:9a:a3:6a:cc:65:03:a2:86:9e:b8:a9:8e:
                    81:1d:f3:e1:a2:16:14:74:64:f6:fe:34:03:71:1c:
                    89:fd:19:02:42:86:bd:48:42:40:40:49:d0:b7:d3:
                    bb:cf:53:77:c0:78:1e:cd:f7:20:55:3b:8e:9d:e4:
                    46:9e:98:63:57:15:25:78:5b:8c:ed:23:9a:de:40:
                    11:c6:75:cc:e6:68:9c:7b:7d:b3:3a:00:01:7f:fa:
                    31:ba:67:e2:4b:e9:b3:17:d1:0b:1a:95:49:17:82:
                    8d:ab:f7:0f:5b:92:d0:85:5f:42:e5:7c:01:2a:97:
                    61:7b:61:e9:0d:46:9d:a1:ec:45:7c:f1:87:ff:09:
                    b3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BE:1B:A0:8B:2C:CB:D8:65:78:CA:8A:C6:B2:A9:6D:19:24:61:B4
            X509v3 Authority Key Identifier:
                keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:4e:b0:e9:cc:7a:bb:de:d7:6f:a8:dc:19:7a:09:72:d6:
         29:b8:c9:31:08:0a:7b:be:30:54:39:20:83:92:06:07:aa:60:
         c9:7c:66:c6:6d:d1:34:65:a6:da:39:b1:c1:e8:4a:c8:e3:af:
         9a:98:5a:b2:f7:7f:3d:a3:1e:34:4f:fe:90:35:14:6c:ec:02:
         b5:f8:d2:08:ca:c0:f3:17:2b:82:6c:9e:f0:03:c1:df:61:74:
         d5:c9:43:8a:a1:f0:3f:8d:ea:51:26:51:e7:a8:59:80:37:62:
         2f:11:34:29:62:7f:fa:64:24:06:0c:74:86:cb:39:b0:00:2a:
         d3:65:36:94:d3:f1:88:7e:39:cd:07:3e:a9:79:5e:25:b1:0c:
         c6:a9:d9:e9:1e:d7:b0:a8:ee:3f:7f:ad:ad:78:a2:6e:90:76:
         4b:14:7e:1b:2a:32:62:76:9b:a6:b9:bc:a5:e7:8f:5b:d4:9f:
         c2:25:cb:35:b2:b1:02:b8:08:92:c8:bf:0d:85:1b:6f:30:9b:
         86:30:96:44:3a:6f:bf:a2:fc:16:66:66:47:1e:c6:37:a7:9a:
         4a:68:23:32:54:c5:36:ea:65:db:9a:b9:db:72:ba:fb:22:d7:
         87:c4:33:25:64:07:bc:ea:3c:c4:85:1e:07:53:23:7a:3b:61:
         99:2a:1f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:44 2026 by rpki-client