This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          26QR+TqmTLBnsDPuD8Av0w8dgo4csUkXnbxwhQeoJ2Q=
Subject key identifier:   36:BB:6A:7B:82:35:11:C7:3E:27:98:70:89:75:B7:91:CE:30:BA:01
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019BF8ADBF140A850FAFA6378222D67C9C23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          1759
Signing time:             Mon 26 Jan 2026 05:01:34 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:34 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:34 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: OxLA8mxrjD5cP5IZT9duof3rgeho4g9EKiOwz/CLUxI=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:bf:14:0a:85:0f:af:a6:37:82:22:d6:7c:9c:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Jan 26 05:01:34 2026 GMT
            Not After : Jan 27 05:01:34 2026 GMT
        Subject: CN=36bb6a7b823511c73e2798708975b791ce30ba01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:d3:90:e4:76:8f:48:85:9f:77:37:08:22:
                    65:5f:9c:6a:2e:b0:44:2a:bd:1a:d9:bf:e7:90:fa:
                    7e:ff:a7:64:e3:4f:de:0b:ef:93:8e:7d:2d:00:ce:
                    21:11:0a:d5:ca:a2:ba:a8:b6:c5:a8:bd:a6:c0:0c:
                    7e:91:a8:fb:22:6e:72:a5:df:29:d7:79:98:9e:0d:
                    60:2a:0a:76:81:a8:d8:a6:a5:ef:c2:7a:2e:88:5b:
                    aa:b2:6b:62:71:3f:bf:7f:b6:55:8d:86:60:ab:8c:
                    a6:80:94:f7:07:5e:88:3c:68:aa:0a:49:fe:dc:d7:
                    aa:08:0f:ca:1b:08:ce:a4:c6:32:9a:f1:19:01:0f:
                    04:c2:6b:f5:7c:77:9d:02:0b:a6:8b:e8:1a:88:66:
                    bb:e9:fd:20:8f:38:3b:2c:1e:ac:61:6f:df:0a:aa:
                    43:54:30:f2:80:db:ab:b6:cf:90:e3:42:8b:38:0f:
                    2f:3c:8b:87:a9:2c:ec:2b:e5:e4:7a:f1:87:ed:f6:
                    0e:ac:44:22:9b:b9:41:92:71:5a:1e:36:a0:b0:9a:
                    ab:a1:6d:c8:41:8c:e8:61:d4:42:c5:8e:84:e9:68:
                    92:76:46:2f:02:3b:e9:51:d8:a6:66:91:b2:87:f6:
                    77:63:f8:68:9e:6f:7f:a5:c6:8f:c6:f5:0c:a2:b4:
                    1c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BB:6A:7B:82:35:11:C7:3E:27:98:70:89:75:B7:91:CE:30:BA:01
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:01:38:52:68:11:30:6b:7f:52:ec:cf:7a:0e:93:5c:4d:15:
         b5:29:1a:f3:30:36:a9:a6:08:ef:f0:9b:ac:cc:47:9e:c2:10:
         e2:fd:8f:b3:8b:23:11:91:3e:ee:eb:a2:2c:57:b2:a0:4b:61:
         20:68:e6:6d:7b:52:26:f8:50:91:6a:1c:44:d4:5b:37:53:09:
         28:22:d6:7e:ca:df:80:56:bb:d8:c6:86:55:f4:f8:90:7e:47:
         89:92:51:41:81:55:80:d3:fd:e5:36:35:a1:ee:e1:5a:74:f4:
         22:8e:8e:c5:16:55:22:ef:ca:7f:fb:2b:06:07:b9:03:5f:7a:
         03:bf:71:2f:b9:9a:85:22:9e:c1:6a:1b:45:08:aa:f3:3d:7e:
         5f:04:6a:60:c7:74:96:f8:74:fa:26:b8:8d:1b:9a:d5:3e:27:
         0f:96:c2:c3:2b:fa:8c:3a:5d:86:b4:c2:d2:7b:51:61:89:50:
         d3:f8:bf:c8:a9:bc:a8:9c:ba:f2:6b:72:59:12:3b:fc:fd:c2:
         e4:c1:ab:7b:17:13:07:e1:ac:3e:8a:45:cd:0b:b1:b5:b6:97:
         d7:9f:a7:18:c1:65:c3:c8:e5:c9:0a:bd:9a:3f:9d:49:98:8b:
         f6:56:57:eb:40:d6:e4:a1:da:9a:86:dd:1f:67:0e:2c:94:d8:
         98:31:e8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:58 2026 by rpki-client