This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
File:                     Ruvdrmp6zug6MioOdDpnWdhTZfI.mft (raw, json)
Hash identifier:          P0/zv6uwYaHBKuvq5FcST9qQD6r35EbY5cxVGMYljkU=
Subject key identifier:   25:AE:71:D4:86:65:6F:13:0A:59:74:95:D6:61:44:31:5A:6B:FF:99
Authority key identifier: 46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2
Certificate issuer:       /CN=46ebddae6a7acee83a322a0e743a6759d85365f2
Certificate serial:       019BF79AAD0246B45F17D3403FA32BC69C58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
Manifest number:          17E9
Signing time:             Mon 26 Jan 2026 00:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:07 +0000
Files and hashes:         1: 0bon_9lO1_1S4Y0uUolP8XU5FaI.roa (hash: FJ2QehHtFtcd71ZjMQZfutk+NRAwO7uiNlxtBcCUL2k=)
                          2: M5KrEv-LXY9aqDpf0oBaroxnaNM.roa (hash: ODb7IQwgK6VivONUorfGDOs27Z/Iob0YPAAPCKFTYtA=)
                          3: Ruvdrmp6zug6MioOdDpnWdhTZfI.crl (hash: msGLuRJ1bsRnMEdml5Gc/v9YUtxQn7bOy4DjpyDYLL8=)
                          4: X2nbl9YTm7FxIB6Rb3FUGGo7Nik.roa (hash: kl4ZxjvBckT5S60Wg8CYwH2W75wDsDdQoiDGr/t5yxQ=)
                          5: uC-qKkxICY7vZwEQrGmhDJDMiDU.roa (hash: YuDasb2hKsUu4M7RFAlrFvessaLsAmNOCaH9378WVUk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:ad:02:46:b4:5f:17:d3:40:3f:a3:2b:c6:9c:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ebddae6a7acee83a322a0e743a6759d85365f2
        Validity
            Not Before: Jan 26 00:01:07 2026 GMT
            Not After : Jan 27 00:01:07 2026 GMT
        Subject: CN=25ae71d486656f130a597495d66144315a6bff99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:34:7f:7d:e5:58:89:97:5b:91:f4:3f:e6:
                    15:99:f9:4c:2f:a3:0a:8e:86:c3:98:23:c8:61:70:
                    13:49:a8:95:70:d0:8b:6c:b3:9b:16:a7:ed:a0:11:
                    d2:b5:4c:39:ff:8c:a3:93:7b:db:65:d6:cc:9b:3e:
                    3b:b0:2b:a8:a6:b3:04:3a:40:ef:70:c1:cf:6b:33:
                    c5:06:5f:af:8e:fe:25:24:fc:da:a7:9a:fa:20:a2:
                    e6:74:02:27:b9:e9:65:11:a9:b8:45:c0:02:68:43:
                    6a:e4:9c:c0:03:b4:2c:f0:ec:3a:f0:00:d4:3b:dc:
                    42:01:2b:c6:0c:57:57:cc:8f:a5:b9:7a:8f:f3:a1:
                    3f:2c:cb:2f:02:d5:50:bd:2e:df:25:d6:a2:43:20:
                    d4:5e:f0:f2:4e:35:69:56:1e:be:a8:6f:7e:6d:ff:
                    71:a3:64:55:74:13:17:47:bb:28:2d:0e:d2:fd:0a:
                    de:09:3e:9f:f1:09:22:75:dc:27:0d:41:4e:ec:01:
                    46:72:e5:55:6e:b2:61:24:b6:e3:ed:bc:c4:6c:9a:
                    de:a3:aa:0e:fe:d1:11:6e:09:a8:5e:de:95:60:72:
                    a2:e5:0e:09:c7:e8:ea:c7:b6:4d:e4:d7:f1:a1:b4:
                    36:bc:6e:2b:e8:b3:d5:f1:00:68:e1:66:81:17:bd:
                    74:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:71:D4:86:65:6F:13:0A:59:74:95:D6:61:44:31:5A:6B:FF:99
            X509v3 Authority Key Identifier:
                keyid:46:EB:DD:AE:6A:7A:CE:E8:3A:32:2A:0E:74:3A:67:59:D8:53:65:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ruvdrmp6zug6MioOdDpnWdhTZfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/5c65af-b3f9-4bb3-a702-2bc90794d38d/1/Ruvdrmp6zug6MioOdDpnWdhTZfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:75:51:b1:a0:d3:44:52:e1:db:3d:af:f5:d2:92:75:23:c0:
         e4:23:16:10:07:1f:24:f8:e1:20:d8:81:81:5c:73:d2:02:1d:
         8a:61:e3:77:46:c0:f4:5f:ac:a8:1f:27:4f:d6:42:d9:fe:c6:
         12:d7:f7:4e:57:bc:7c:be:51:71:a1:52:fd:08:52:d1:e4:71:
         b6:87:fc:6d:84:5b:8f:b9:ea:7d:be:d2:0f:22:18:a4:42:3d:
         75:26:bb:77:ff:95:ae:2c:2e:03:78:c4:5c:05:1e:1d:c0:d7:
         97:16:b1:99:0e:1c:c5:7f:f8:c4:42:b9:13:92:75:70:db:0e:
         81:3c:5a:80:d4:a1:b6:97:fc:85:a0:e8:a9:dc:85:54:a1:88:
         1a:01:d0:9f:fa:42:ef:fe:7f:7d:7c:e8:c6:06:7c:6e:4a:a3:
         b7:d9:2b:d1:54:ea:ab:32:bc:cf:94:bf:2a:f1:56:97:9a:36:
         85:37:29:18:58:26:9a:9a:a0:55:7e:48:1b:e9:1b:c0:32:a2:
         f1:9c:c7:b3:32:14:81:87:9e:bb:28:a5:c6:c9:db:11:e3:8f:
         c2:4f:64:a5:af:9b:dd:d1:97:89:1f:16:7d:70:ae:3f:37:cc:
         c0:f0:2f:ad:ee:77:72:a9:e7:3a:7a:2e:04:f9:08:be:dc:25:
         62:3f:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:53 2026 by rpki-client