This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File:                     9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier:          04eXqlQrrtabzyjmDQeDCwesgubFZnkR9wEGDsHC/IU=
Subject key identifier:   45:2A:EA:B3:12:CF:7C:B4:33:8C:CB:FC:C0:D6:50:84:26:84:78:34
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer:       /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial:       019BF5E369629935140EA58916C6DBAE68CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 16:01:20 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:20 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:20 +0000
Files and hashes:         1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: cUtBCmEClyGTDwqVGT8wYPJUfDAHjceJI2qzrG8Opu8=)
                          2: b5rSVSE86TGLka-C9Y6AISDjJwY.roa (hash: 0t2RVqp+17d/DpuBSPwdIacfG2COXwMxK/FmGDoAc0c=)
                          3: ta-CNtfidcX1EjmoTR6fl18hgE0.roa (hash: q55VmsTObI5y8vc6bmzOo3ADkQ630TErDSQUk8EgGVc=)
                          4: yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa (hash: v8TlzmItyWM72tUXJ5LijiOK5kdxTCw7SZEC3tomivk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:69:62:99:35:14:0e:a5:89:16:c6:db:ae:68:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
        Validity
            Not Before: Jan 25 16:01:20 2026 GMT
            Not After : Jan 26 16:01:20 2026 GMT
        Subject: CN=452aeab312cf7cb4338ccbfcc0d6508426847834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ce:ab:bf:fa:42:9d:87:8d:74:db:45:4c:ec:
                    24:5b:f9:8e:54:0c:a0:41:28:83:ed:1c:f7:b7:23:
                    c0:15:6e:d1:5f:05:5e:d6:31:8b:bc:c9:01:78:98:
                    fd:9e:54:40:90:de:4b:13:7b:a2:fe:0f:04:0f:86:
                    b2:a3:f1:ca:b4:b1:84:01:57:ad:e5:80:eb:14:86:
                    b5:21:a3:fc:65:c5:8c:cf:66:88:92:da:46:8b:64:
                    09:c7:17:fe:7f:77:11:5a:db:2e:58:54:b2:83:68:
                    9a:84:6d:10:9d:62:c0:28:4c:cd:10:7f:10:14:3a:
                    15:a9:de:5a:59:c0:54:14:ba:43:29:65:be:72:e8:
                    fc:18:49:f0:3e:6c:15:e2:cc:19:04:be:c5:ac:68:
                    26:45:72:e4:e6:5b:5c:0e:05:ea:37:1e:9e:dd:d3:
                    a5:45:87:0b:86:b6:73:c2:0d:5b:3b:4d:27:6c:ff:
                    cc:bd:25:e3:b2:3d:af:67:b0:73:08:a1:cf:b7:8d:
                    70:5a:6d:13:4a:85:e6:97:59:19:6c:cc:bf:50:09:
                    57:af:4a:7b:da:34:35:dd:06:bf:c9:c3:a2:ba:f6:
                    02:75:d3:31:14:65:d6:80:e2:37:81:39:95:9d:b0:
                    0e:2f:09:0c:50:80:4f:09:d9:9b:76:ed:7b:ab:90:
                    82:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:2A:EA:B3:12:CF:7C:B4:33:8C:CB:FC:C0:D6:50:84:26:84:78:34
            X509v3 Authority Key Identifier:
                keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:ac:8d:c1:a0:1f:f1:dd:76:79:19:cd:f7:06:2c:3c:da:c7:
         6e:41:3d:c6:3c:3b:57:c0:fb:29:63:45:95:bb:c5:72:a2:7e:
         cb:ac:f3:36:d6:50:51:d8:e7:fe:47:07:83:95:a1:bb:44:75:
         e5:43:b9:1b:ca:51:f5:97:29:c7:f3:67:64:0c:d5:de:c5:45:
         6c:90:02:42:f6:44:39:44:ed:66:d3:65:bc:16:26:11:45:30:
         22:b8:7f:43:0b:9e:c8:ea:7a:6c:27:6a:27:53:01:a6:fc:ee:
         39:54:73:f9:44:3d:44:74:18:5b:c2:57:66:81:e3:c7:71:c4:
         f7:cd:50:38:6e:2c:2e:7e:d4:57:54:25:be:55:b7:43:fe:4b:
         67:2c:93:53:42:f8:f3:fa:dc:16:2c:5e:21:35:4b:64:1c:a4:
         94:21:ce:76:8f:57:49:b2:38:84:2f:16:6d:a1:a0:f9:8b:4f:
         30:92:f3:2f:2b:8b:dd:81:eb:d4:f3:bd:fb:55:65:29:b4:22:
         57:cc:26:ab:a5:49:d4:1e:88:54:1f:91:e2:0c:09:39:c2:76:
         ac:ef:56:42:fe:89:27:8d:51:da:ec:d9:f5:d4:18:ec:17:7a:
         9a:37:95:63:2b:72:70:45:9e:cd:f4:ff:cf:f9:e4:eb:50:26:
         f8:0a:0a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:02 2026 by rpki-client