This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File:                     1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier:          Y/34noh/hHkfBDxnvsiZa69THoVS8/h6ornoIp4/5D4=
Subject key identifier:   24:41:7F:43:61:98:74:48:DF:5F:1F:CD:1D:21:D3:76:C5:5F:50:AD
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer:       /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial:       019BF53E20AE722F687EE5E2D688BF9A9E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 13:00:47 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:47 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:47 +0000
Files and hashes:         1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: dTwLbN/HiDG3lKmXQZUbit2DuODUGJQ3CogPHPBEMYY=)
                          2: NtOmLk3Ecthj6nPCs4zxh7SF6Mg.roa (hash: KP/kZ3LXZb2b6XuZM5JQejaPc2eczkoswDhOOh49koo=)
                          3: PrDxqBSRwkPqnVSks9jL5Ew1nxs.roa (hash: yNka9qwEcezZYyApHWafWMkS2uCoJYAg/hb1N/oKUG4=)
                          4: cpzictopgP_W9ifWySv9e6ehOOc.roa (hash: 5rHP/vfqqkxl9562AQVwm1f2nGTx9rXW1y4VWn7ksEw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:20:ae:72:2f:68:7e:e5:e2:d6:88:bf:9a:9e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
        Validity
            Not Before: Jan 25 13:00:47 2026 GMT
            Not After : Jan 26 13:00:47 2026 GMT
        Subject: CN=24417f4361987448df5f1fcd1d21d376c55f50ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:74:24:49:eb:e3:16:d7:95:b3:71:35:cd:59:
                    28:75:7d:59:e2:be:c3:67:2b:03:2e:53:9d:72:df:
                    2d:cd:49:1a:94:39:4b:60:1b:c8:1f:39:4e:25:ad:
                    d1:85:d1:a8:2c:01:0e:b9:11:29:a4:19:ee:1c:e6:
                    34:11:2f:ec:35:c2:a8:a4:9a:da:a1:72:67:07:89:
                    05:b0:c4:28:e3:d1:14:60:3c:53:e7:12:b5:fe:ee:
                    85:9f:41:e6:0a:2e:12:50:d8:51:6b:a5:22:38:0a:
                    68:0a:1a:c5:0e:97:de:b5:42:bf:b1:37:02:6c:b5:
                    3f:05:3c:83:b6:8f:71:8e:53:27:ec:b8:27:35:d3:
                    8e:07:ed:84:e3:ac:f7:1e:8b:9b:54:d3:84:4f:32:
                    73:0c:f8:60:2a:c6:39:30:da:d2:64:5f:99:75:92:
                    ac:de:5f:54:17:f2:ec:64:24:81:17:a9:bd:c5:aa:
                    a7:35:3f:05:9c:88:b3:00:80:f3:e7:f0:91:aa:45:
                    00:7b:5b:f6:b7:91:2d:a0:6e:00:e7:a1:b7:16:fc:
                    3a:17:ec:9c:59:28:4c:10:81:90:93:64:8b:0b:83:
                    aa:58:74:55:30:b9:ab:f6:c1:5c:b2:f6:55:0c:86:
                    50:0d:f5:1f:13:1f:fc:17:7b:1f:97:29:d3:60:9a:
                    14:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:41:7F:43:61:98:74:48:DF:5F:1F:CD:1D:21:D3:76:C5:5F:50:AD
            X509v3 Authority Key Identifier:
                keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:67:00:08:14:0e:fa:f0:a4:64:86:71:ed:bf:a1:16:be:c4:
         b2:56:18:dc:dd:9a:3a:78:2b:f9:35:bb:b6:99:4d:38:9e:1b:
         e7:7e:86:97:2f:89:fb:b7:31:31:8d:1e:72:ee:33:43:d7:29:
         d1:89:d3:a4:80:bf:9b:39:26:ef:a4:72:82:98:dc:dc:28:70:
         bb:a7:12:21:0f:3b:1e:69:1b:8f:dd:e8:4f:4b:41:be:fc:b8:
         48:32:77:62:c3:72:cf:cf:0f:64:7d:2e:3a:d6:5f:e2:11:7c:
         80:9b:98:a0:3a:fa:93:74:eb:ee:3e:78:73:3d:27:54:24:30:
         2c:1a:95:47:10:8f:43:d5:e4:62:80:47:bf:2c:ca:91:c5:74:
         12:39:b2:ba:07:d7:0c:f2:bb:f4:49:83:eb:76:8e:b7:ee:23:
         3f:1d:d7:17:5d:e1:d3:98:4d:91:34:05:ce:81:f5:3e:00:45:
         2f:85:df:e2:5d:0f:0b:0f:9d:57:36:e6:d2:ef:45:da:91:16:
         8e:21:24:b0:9c:f5:e8:de:ed:2a:e9:fb:1a:c2:60:cb:f4:6b:
         c2:ef:4f:4e:96:23:bb:2f:25:eb:72:78:7f:da:4e:53:82:d3:
         81:52:15:b7:92:bf:59:a5:56:b7:20:3c:de:e6:0e:60:be:1f:
         f3:fb:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:24 2026 by rpki-client