This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
File:                     _SYdRTGeg3UYdDbaRL9bmtsESn8.mft (raw, json)
Hash identifier:          S/Mp9bX/pfJWkU61CS8zx93tpCdLMzJh1l/+Ny+fJbg=
Subject key identifier:   A6:22:D5:2F:2B:96:3F:70:75:96:44:A4:5A:96:6C:62:34:2A:7A:E9
Authority key identifier: FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F
Certificate issuer:       /CN=fd261d45319e8375187436da44bf5b9adb044a7f
Certificate serial:       019BFB40A9B0178079087AF1FCD418A6ED7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 17:01:17 +0000
Manifest this update:     Mon 26 Jan 2026 17:01:17 +0000
Manifest next update:     Tue 27 Jan 2026 17:01:17 +0000
Files and hashes:         1: JiEsZ1zOe46gzADySdG16eZ5Sjo.roa (hash: 0bq0qa1f8p4Ial4yz+WAIFxn5n2T06ajuz5dHOKo9Bg=)
                          2: ZmDQJclFbfRowgpnHRptrYIeIug.roa (hash: H/7KqBnapWq4unhs3UjmS/EFy+upD+qehXGAkF2UTwA=)
                          3: _SYdRTGeg3UYdDbaRL9bmtsESn8.crl (hash: 0jI5cGbGKdvmWgLaEsohqNtgR/9o91UQlIJx9Z9/ezk=)
                          4: gX_bo7WycAyP4eHEuchQhpnD15s.roa (hash: 4TJL/ac+L1uxUdH7FW4vMCHyhAZJAL3RXJ9Pg1etDtA=)
                          5: yNoIji7kPj6SkrPhrYc1VI7PgwE.roa (hash: y0iJCdo0OgTZ1Mu1ZduXdjf6TefpBi+JC2BMHyoKy/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:a9:b0:17:80:79:08:7a:f1:fc:d4:18:a6:ed:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd261d45319e8375187436da44bf5b9adb044a7f
        Validity
            Not Before: Jan 26 17:01:17 2026 GMT
            Not After : Jan 27 17:01:17 2026 GMT
        Subject: CN=a622d52f2b963f70759644a45a966c62342a7ae9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:f4:96:54:15:e2:0c:b2:50:de:56:f7:1d:
                    8a:0a:81:48:05:ff:10:30:1b:b5:4f:09:1c:d1:2c:
                    58:2b:f1:cf:2d:95:d8:b0:eb:65:f0:97:03:e1:3e:
                    dd:e2:c6:bc:74:a6:e6:c1:b3:88:f7:b5:e3:5f:fb:
                    1c:75:7d:a6:92:98:92:8e:be:d6:77:39:d6:09:75:
                    b6:2c:45:37:7e:45:42:3a:4c:4d:e7:af:a3:8f:53:
                    9d:21:c1:23:89:bb:cc:d9:ce:7c:28:b0:40:a6:f9:
                    ba:61:85:ae:1b:49:af:33:06:0f:eb:cb:9f:c8:74:
                    dc:01:de:98:09:ea:55:d5:6a:da:d5:80:ad:48:c7:
                    a1:33:e1:34:da:64:db:9b:7a:4b:a5:48:be:b9:4e:
                    d7:3c:42:a9:98:52:97:7e:a5:c0:16:9c:bc:6f:de:
                    f5:06:72:ff:ae:55:ed:02:54:21:20:d9:87:d6:63:
                    85:77:52:09:4a:f5:cb:1b:04:d5:b3:65:a9:38:37:
                    04:09:16:1f:a7:ff:14:81:cf:2b:85:59:35:3b:c6:
                    ba:9f:ec:ff:20:75:fc:8b:2c:7c:1a:78:4d:0c:c5:
                    bb:19:7c:10:1e:14:6e:44:d0:ef:39:17:34:ae:cf:
                    c1:bf:48:92:14:47:56:a1:31:cc:60:94:43:56:65:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:22:D5:2F:2B:96:3F:70:75:96:44:A4:5A:96:6C:62:34:2A:7A:E9
            X509v3 Authority Key Identifier:
                keyid:FD:26:1D:45:31:9E:83:75:18:74:36:DA:44:BF:5B:9A:DB:04:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SYdRTGeg3UYdDbaRL9bmtsESn8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/582b17-f46f-41eb-8fd4-eb5093b231c1/1/_SYdRTGeg3UYdDbaRL9bmtsESn8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:76:bf:93:d4:26:1a:1a:92:97:34:f7:b7:53:bb:d8:71:38:
         ae:5f:bf:9c:cc:b2:75:97:70:3f:d3:9a:f1:d3:7a:8a:33:5e:
         dc:70:c1:40:f0:8f:b7:01:5a:c4:a5:36:f7:cb:e3:bc:b1:90:
         a8:e6:d0:e1:d2:5b:13:2b:e3:55:0d:91:22:15:f2:b5:f8:80:
         0d:0b:7b:85:b3:a5:15:8c:a1:f5:45:12:6a:30:0b:5a:7b:b5:
         80:f5:1f:c2:24:b4:23:07:d5:04:63:80:87:32:6b:25:54:7e:
         1a:84:04:1e:52:72:a9:7c:a9:56:90:4f:9a:c1:34:56:e5:3f:
         17:d0:a9:9e:92:e9:b6:e2:45:1f:43:c1:dc:9d:27:88:4b:58:
         64:a7:cd:6b:47:30:62:80:47:d0:dd:57:55:9b:27:9b:67:74:
         9a:0f:a9:45:4a:76:bf:61:89:2a:5c:5c:63:33:41:43:7e:58:
         0e:4d:6e:1a:b0:63:22:69:c6:5c:09:22:62:0d:3f:7f:25:e1:
         4f:4a:07:df:86:7d:92:85:51:a8:ed:b7:9c:d4:82:46:2c:d4:
         a9:89:eb:5e:24:93:d1:06:e7:e1:17:44:24:17:63:ab:16:fb:
         0a:b9:2a:a0:72:f4:4f:f9:8c:e3:9d:51:d1:ca:30:97:d7:55:
         19:51:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:11:42 2026 by rpki-client