This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
File:                     1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft (raw, json)
Hash identifier:          yCOokOQMnOU7FTGVbASX7fstby8hXiAlFW5Uu4jwjsI=
Subject key identifier:   94:40:B5:B2:35:08:4D:CB:44:57:70:0D:C5:60:C5:E1:3F:4F:BF:63
Authority key identifier: F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79
Certificate issuer:       /CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
Certificate serial:       019BF61A16A6A12D9ADAF3C1025578C17719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
Manifest number:          0ECE
Signing time:             Sun 25 Jan 2026 17:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:03 +0000
Files and hashes:         1: 1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl (hash: R20HryZXlHGxeUDokCq0PJj/FDM7FhRueGiC9soFPZ0=)
                          2: wJNpYH3x8JuRQe7NN2ZCV_XQmRM.roa (hash: bnv6CBVN0TxP3itZ4ZFUesEngt/ft27+17IUFJfqBMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:16:a6:a1:2d:9a:da:f3:c1:02:55:78:c1:77:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f918a5f8b9515017c8d6488a9a947d4820b6fb79
        Validity
            Not Before: Jan 25 17:01:03 2026 GMT
            Not After : Jan 26 17:01:03 2026 GMT
        Subject: CN=9440b5b235084dcb4457700dc560c5e13f4fbf63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9b:18:d1:ad:11:96:60:c2:91:a6:3a:94:b0:
                    80:a4:c9:90:db:48:81:f8:b8:aa:e4:dc:37:8a:79:
                    b6:51:3f:73:36:ee:98:86:1a:df:96:ed:b7:d0:eb:
                    63:17:c5:0c:be:9f:d6:82:20:9c:e4:57:c7:b3:bf:
                    2e:54:80:2d:07:36:7d:22:57:ce:1f:11:3f:1d:9b:
                    cf:07:cb:63:73:46:30:df:fa:b9:4e:22:19:35:e7:
                    77:43:e4:94:49:bc:6d:6f:b6:42:a4:83:cc:6d:ca:
                    18:dd:aa:c3:3f:c5:ec:23:59:63:8e:9c:01:af:0c:
                    73:58:1c:73:26:3f:ab:18:25:6d:23:5a:78:f5:3e:
                    53:f4:ff:32:85:a1:4a:9d:0b:e9:1e:4d:bb:af:eb:
                    8a:09:e7:5d:2e:f4:fd:69:8c:ed:01:33:e0:c3:70:
                    6e:87:fa:ec:52:fe:59:3d:ca:65:13:b0:46:0b:87:
                    58:94:71:9f:1b:4c:c5:4c:d9:5c:98:76:14:6b:19:
                    2e:5d:0e:94:08:12:9b:b5:ce:12:76:ce:2e:40:96:
                    d4:7d:cc:4d:46:de:41:ff:73:5e:7b:ed:23:e5:42:
                    6f:64:19:c0:54:0f:03:de:56:55:1e:3d:21:0c:33:
                    95:8a:9b:09:ec:e4:af:48:1c:5c:1e:60:35:19:28:
                    c0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:40:B5:B2:35:08:4D:CB:44:57:70:0D:C5:60:C5:E1:3F:4F:BF:63
            X509v3 Authority Key Identifier:
                keyid:F9:18:A5:F8:B9:51:50:17:C8:D6:48:8A:9A:94:7D:48:20:B6:FB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/b22d6e-4c4f-459d-a048-dd347537683e/1/1-Ril-LlRUBfI1kiKmpR9SCC2-3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:04:57:4e:17:c1:45:1c:54:af:50:f6:16:da:16:5f:94:fb:
         75:18:8b:f4:87:f2:b4:2d:a2:c7:50:f6:ce:ca:3d:cd:51:03:
         e6:5c:78:42:8e:7f:18:85:87:94:22:ed:f5:0b:d4:91:60:39:
         28:84:5b:ac:77:6a:37:ce:f3:a4:16:1e:ea:f5:25:12:ff:6a:
         ad:93:9c:ea:c5:a0:ad:81:26:88:39:bf:fc:41:03:09:08:da:
         08:0b:0e:48:41:31:2f:91:6e:28:f6:62:14:f7:49:10:cd:a9:
         5e:25:16:d5:df:9e:ce:7a:8c:e0:c7:ac:f1:0a:e9:c2:7a:62:
         07:5f:36:ab:03:43:59:1f:53:86:d6:b5:ce:52:63:73:b1:de:
         75:fc:e9:2c:5c:79:3a:51:29:f3:e0:dd:d5:0c:23:c4:cc:ba:
         e0:2d:f5:eb:98:a1:b1:de:78:e9:da:fa:04:9c:5d:29:1c:84:
         46:8c:e0:2a:09:ff:fc:f2:c0:df:c8:26:64:a0:53:d1:de:85:
         85:d7:c0:71:62:e5:9b:01:a2:7f:3b:36:7c:1d:a7:11:99:35:
         37:9e:a3:ff:73:35:e1:60:60:36:5c:95:a4:57:08:9c:68:0d:
         4d:0b:c7:f1:86:52:d0:56:a6:6d:c4:c2:d1:0f:80:9d:40:1b:
         7a:1e:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:34:50 2026 by rpki-client