This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          CgDqZfhvv5Fl/7b2jLlSDTqW3itu2nJtHJ5BQycXz/A=
Subject key identifier:   8B:1C:DC:B8:DA:6B:C7:10:82:1C:99:E7:22:0F:17:A8:0E:EB:75:E5
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019BF6BECDE379D2153D26FF1DE8122FFC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          1758
Signing time:             Sun 25 Jan 2026 20:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:58 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: otsesHx1+1WVKL0s4itaj1Fi5ZI902Sf9xjZbHyYBKw=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:cd:e3:79:d2:15:3d:26:ff:1d:e8:12:2f:fc:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Jan 25 20:00:58 2026 GMT
            Not After : Jan 26 20:00:58 2026 GMT
        Subject: CN=8b1cdcb8da6bc710821c99e7220f17a80eeb75e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:56:01:f8:3f:27:6d:4e:9a:cd:d8:99:8d:
                    af:34:ce:91:24:d5:af:46:be:de:7e:e7:35:95:47:
                    f0:45:2e:27:14:d5:7b:92:ed:7b:57:10:78:69:ee:
                    2c:33:56:c6:20:1c:4c:a9:5d:9d:08:04:58:0f:75:
                    20:91:da:10:d4:d2:64:f1:fc:00:04:5d:1c:d2:e9:
                    01:78:cf:48:be:a3:02:03:03:a4:61:2a:aa:b6:30:
                    c4:cf:f7:5e:73:1a:cc:48:e2:19:8e:7b:c0:88:09:
                    80:90:23:c0:14:61:14:df:b1:6f:73:77:70:62:f7:
                    a7:1b:d8:9c:66:17:11:b8:75:4d:65:e4:49:02:d0:
                    a1:d6:c3:18:67:96:b6:cc:39:91:c5:84:bf:e4:d6:
                    e9:59:13:ef:b8:6a:1c:88:3e:30:4d:29:9c:3a:af:
                    9e:e3:be:0d:e0:ea:ed:12:40:84:34:35:08:35:c5:
                    75:f5:fb:d9:73:d2:05:fa:42:02:71:1a:8f:38:d5:
                    29:ad:48:06:5a:37:8e:66:55:e2:b6:8f:13:d1:bc:
                    4c:da:eb:78:aa:00:b1:4a:84:0a:db:04:1f:33:c0:
                    8d:e1:66:99:20:c9:0b:c9:bb:49:ad:4e:d5:82:7b:
                    60:7b:63:4f:47:fd:e1:75:6d:80:74:f5:76:39:99:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1C:DC:B8:DA:6B:C7:10:82:1C:99:E7:22:0F:17:A8:0E:EB:75:E5
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:19:9e:c2:ca:48:cf:41:ee:d8:2d:14:2f:1b:10:b3:13:
         d6:c7:1b:ed:4f:ea:72:7b:ed:28:6c:2b:ce:49:62:ae:1e:85:
         eb:01:40:a0:37:c5:b3:84:cb:23:98:fc:ea:b8:29:ad:41:c0:
         de:63:bf:26:33:9d:92:b7:b7:1d:f7:48:33:1e:0e:a5:8c:85:
         20:20:6a:5a:74:e0:15:c3:ff:ff:67:1d:5d:1a:c5:80:d8:d2:
         5d:a4:4e:71:ab:0e:1a:e5:74:25:ee:0f:dc:29:ff:37:c8:0d:
         1c:8f:51:49:71:27:1b:84:d4:ec:36:87:76:3f:ec:84:87:8e:
         7a:b3:dd:73:81:38:16:9e:f4:20:84:a3:d1:c8:19:85:39:23:
         50:2a:33:34:92:1a:7d:18:c0:1c:f1:17:2c:cf:d5:3f:84:46:
         e4:c3:34:5b:03:a8:0c:04:d8:42:b1:20:28:76:e2:42:49:9e:
         b5:13:be:63:37:89:64:bb:56:5d:b4:e2:a3:1c:30:0f:0c:0d:
         03:a5:15:6a:2b:2e:42:e7:28:a3:a6:ff:86:cb:62:f7:8f:01:
         eb:39:85:a9:7d:47:18:1c:14:12:1f:68:20:7b:fd:20:5c:8b:
         33:91:5b:38:75:69:cc:ea:bb:35:d8:b4:8c:15:bb:45:f0:0c:
         f1:20:2b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:52:29 2026 by rpki-client