This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File:                     7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier:          CMBHN7nUcRuv/++qrqYFjHX/vrujQUljJmKLp+tJcIk=
Subject key identifier:   8D:46:8E:B6:31:79:0A:3E:F1:FD:4D:FF:3A:7F:48:05:D9:6E:6D:56
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer:       /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial:       019BF499A2BEFF9EC1BBCEF7E779366A2CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 10:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:07 +0000
Files and hashes:         1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
                          2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: PsWBmn3tqCc98wXz7c9vIbhQ+yYuxjth/TLaDUMOkn8=)
                          3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:a2:be:ff:9e:c1:bb:ce:f7:e7:79:36:6a:2c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
        Validity
            Not Before: Jan 25 10:01:07 2026 GMT
            Not After : Jan 26 10:01:07 2026 GMT
        Subject: CN=8d468eb631790a3ef1fd4dff3a7f4805d96e6d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9c:6e:a4:0c:bd:0e:6d:9e:44:9e:ae:7c:ab:
                    dc:2c:f3:ee:4b:67:c8:bc:bf:49:84:0f:f5:27:ab:
                    2b:a6:43:a4:cc:28:67:5e:d2:49:7a:f7:79:9e:30:
                    54:85:9b:0e:4f:91:6c:b3:58:b6:c1:98:b7:98:14:
                    b0:f7:63:c9:dc:af:3b:4f:c2:91:b2:71:5e:d5:b0:
                    10:c5:4b:91:8b:5f:26:9c:7c:fc:40:47:6a:95:38:
                    97:28:1c:09:0f:90:6e:7f:ed:38:c9:b1:bb:8c:ed:
                    47:c5:6e:82:93:ad:47:e0:df:e0:0f:25:88:da:e5:
                    b9:83:3e:a9:d4:02:b6:2f:33:ff:40:e2:13:b4:b6:
                    10:67:ff:d7:d0:4b:de:57:8f:06:65:70:77:7b:b6:
                    22:e4:b9:2b:9d:8a:fe:31:d6:8a:a1:22:2f:8d:f9:
                    57:b4:0d:ee:39:48:ce:b1:92:cf:41:ae:3c:e9:7a:
                    99:c5:bd:88:33:5d:bf:f8:46:92:8e:70:50:69:bb:
                    91:78:2d:d0:d6:70:da:05:56:cc:34:d4:41:15:66:
                    38:35:44:df:74:ec:4e:9e:50:b0:bc:7f:df:f9:4a:
                    db:02:0b:5c:45:89:05:bf:41:f4:4d:d6:f7:03:5e:
                    28:7c:c7:c5:5e:a7:95:89:45:53:87:21:de:27:9d:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:46:8E:B6:31:79:0A:3E:F1:FD:4D:FF:3A:7F:48:05:D9:6E:6D:56
            X509v3 Authority Key Identifier:
                keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:c0:c3:c3:d0:4e:9e:6d:ae:19:7c:5c:48:d6:43:ff:6d:35:
         3b:1c:1d:be:e1:88:1e:b2:3d:15:6d:00:06:85:e0:5f:6f:53:
         19:06:44:43:45:2b:d4:0b:92:00:b2:06:57:e0:b4:5f:57:97:
         24:45:49:13:f8:c0:0e:14:d0:fc:72:b9:76:0e:5c:c7:57:94:
         d4:8d:de:b0:24:d9:02:d4:4a:bc:91:86:f8:b3:bd:09:57:8f:
         8a:1e:50:66:06:f3:1d:4a:f1:fa:cd:98:c3:be:e5:a3:1c:a7:
         bb:02:e8:86:18:af:45:9e:bc:ef:93:ed:7f:1d:3f:2f:6d:5a:
         91:1d:6c:9d:6f:70:d4:61:9d:66:65:68:28:98:19:49:11:a0:
         0f:85:48:22:72:48:98:fd:60:8b:f4:07:70:1a:83:3f:55:2e:
         5f:98:03:f0:99:04:7a:69:c5:70:0b:e5:f8:7e:63:ed:7b:19:
         aa:73:36:4a:b3:52:49:43:92:96:7f:a2:9d:05:52:f2:bb:7a:
         11:08:6f:04:71:1e:1a:b5:3b:3d:30:d0:f2:a4:c8:a5:d2:1f:
         d8:77:79:cd:d6:81:fd:8b:95:88:68:02:33:3f:1d:d5:51:dd:
         d1:47:33:ea:28:94:d1:9c:a0:6a:3c:05:6d:2a:7e:05:c1:68:
         25:b7:f4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:26:57 2026 by rpki-client