This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
File:                     ADssOHEGkAKtCy9CsMv16S475LM.mft (raw, json)
Hash identifier:          tXwTNciBXfbm3Rjeg5BwCi2JWX+VNvX6vdgpfHjzQT4=
Subject key identifier:   40:3D:D5:38:CB:BF:96:1D:3C:F9:37:33:B0:6B:7B:7A:F3:8E:37:8A
Authority key identifier: 00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3
Certificate issuer:       /CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
Certificate serial:       019BF53E90757BB0A84D716DC81652D8C8A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
Manifest number:          17F5
Signing time:             Sun 25 Jan 2026 13:01:16 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:16 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:16 +0000
Files and hashes:         1: 2c0jqBuEH1mHawmDju5SJrb9XO4.roa (hash: 4iGaC+nsr7eIRDAsx1YlRBvu72t0bZzh6T9oxMZT12o=)
                          2: 49mG2LIAGgPUY2ZzmJGz3IeznXI.roa (hash: 7aWoWG5rNXduvslZ3E4HwcG2X6Htck+37nEJTi56c7o=)
                          3: ADssOHEGkAKtCy9CsMv16S475LM.crl (hash: Q9U3Mj7TOsA1SqOoyci5Zp5J+MzlGmHjKT1B7ygpTpY=)
                          4: YAGdK9NgvIyiz7MwVPSphsKwcHE.roa (hash: YoeO10+z7W0nmsVjlcs0IP7RbonSryjBMwi0I/lLnms=)
                          5: dECFcKuPIDtaKYfkBtHP9FzNkPY.roa (hash: nfxA7gIFHYR0X3UKRvPVNyH71Z4WvtDgdmK9W79oICs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:90:75:7b:b0:a8:4d:71:6d:c8:16:52:d8:c8:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=003b2c3871069002ad0b2f42b0cbf5e92e3be4b3
        Validity
            Not Before: Jan 25 13:01:16 2026 GMT
            Not After : Jan 26 13:01:16 2026 GMT
        Subject: CN=403dd538cbbf961d3cf93733b06b7b7af38e378a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:34:f3:ee:9f:41:11:20:54:a9:38:e2:86:09:
                    71:45:e5:a7:94:59:14:00:27:e6:15:89:2a:e1:0e:
                    38:f2:46:a9:0c:d7:b5:8c:40:fe:dc:c1:17:0c:05:
                    de:f6:7f:59:f9:11:79:c6:6c:f7:41:be:a7:43:ee:
                    bf:3a:c2:32:9a:06:2a:8c:6e:9b:d4:bf:94:06:f5:
                    0f:f6:ee:db:22:b6:d6:06:af:03:d7:6b:70:d1:78:
                    68:6c:8c:54:8e:91:d7:e2:12:ac:89:69:ef:8b:6f:
                    a0:90:5e:da:f0:e0:8d:f8:b1:00:bd:83:85:a3:1f:
                    b8:cc:3b:a8:a9:7f:30:e0:8c:4e:2c:a2:b0:ff:8e:
                    e4:31:a3:63:8c:30:10:c8:79:98:cf:22:88:7b:db:
                    c4:45:b1:1b:ea:37:44:e7:e6:ba:ba:7c:ef:ce:ac:
                    70:96:47:c7:76:e5:72:d2:5e:2d:0a:db:d3:1d:9f:
                    fe:27:68:0a:28:64:ea:c4:78:d4:bc:0f:fe:59:7d:
                    77:2a:04:cd:54:cc:f7:1b:cd:40:05:c0:ce:2d:92:
                    ba:40:c2:2a:c0:6a:3a:aa:b5:2d:67:58:ec:a6:b2:
                    fe:0e:5a:11:b2:b4:68:8b:ad:47:ce:50:56:53:42:
                    56:b9:19:24:fa:a2:1e:55:b8:d8:28:5c:16:dd:cb:
                    d9:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:3D:D5:38:CB:BF:96:1D:3C:F9:37:33:B0:6B:7B:7A:F3:8E:37:8A
            X509v3 Authority Key Identifier:
                keyid:00:3B:2C:38:71:06:90:02:AD:0B:2F:42:B0:CB:F5:E9:2E:3B:E4:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ADssOHEGkAKtCy9CsMv16S475LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d96688-2d98-4634-86db-b35a0a1453fb/1/ADssOHEGkAKtCy9CsMv16S475LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b9:44:7a:1a:07:c7:e2:b6:53:6a:11:89:14:56:0f:17:57:
         1e:25:82:34:18:fd:12:cb:48:7b:0f:f5:6e:23:79:92:7d:71:
         46:9a:ad:f8:f6:5f:bf:3f:41:60:6f:69:8c:b5:1d:36:fe:41:
         5d:a0:34:96:18:7f:18:24:34:c7:cf:5f:55:93:07:8e:cc:a0:
         fb:36:bc:ac:d6:e4:20:ff:64:75:67:3b:bd:ca:c3:6d:fb:8a:
         9f:38:3e:92:2c:c7:ae:f7:b8:3e:e9:d2:31:fa:bc:ef:26:69:
         8b:29:44:95:0c:2d:4f:d2:2e:c1:df:bb:2e:8d:08:18:1a:fd:
         fc:46:d5:fc:fe:43:7b:f8:6f:ef:78:47:5b:43:f8:5e:e4:e9:
         fc:0d:c6:19:f8:75:28:2e:0c:d2:93:0b:a9:a8:0d:47:30:7d:
         9b:00:32:8a:d2:6b:02:dd:2f:22:3d:41:62:82:8a:c0:4e:7e:
         5f:8f:e7:05:ff:98:87:5c:d6:8a:bb:7b:7c:1e:69:54:e0:3d:
         e4:b9:49:8d:80:56:1e:50:17:e9:b7:98:e7:df:58:15:f2:00:
         22:71:f9:fc:87:d3:08:17:df:9c:ae:57:9a:bc:74:76:9f:fb:
         ab:5e:b0:a8:32:9e:a9:47:1c:e3:30:17:8d:73:a0:65:81:4e:
         da:e4:83:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:51 2026 by rpki-client