This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          TnpAcrfR/psnlE48XUSLEg4ihkCW6/s8siBjS+EhQjg=
Subject key identifier:   B9:6F:31:39:33:D2:B3:E6:6F:4A:FE:4B:31:32:92:9D:6E:26:B6:FD
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019BF619F6266240762942309EAF54D8E9A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 17:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:55 +0000
Files and hashes:         1: Ds_F00ohq3nXWLzRmi9aEPr67nU.roa (hash: 1EvXZP4sj8Rg0yDZm/YIiaxWg+BbA76mSJSuIRiuH9c=)
                          2: P12XKmajnQzt4TT10Louk6Kjyco.roa (hash: KqnQ+RYQfRbLN2Brq+Uz+gVyYb0l27obpG7KQSdsmEk=)
                          3: fePx0kRYwwPcb_zt9-rrwAjmN1w.roa (hash: 4KZtW3GQm6K/quUvrFVgvmKhOxzcCLWTN+/j8SN4EQI=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: AKmnY84RAJzE55vitVUWVOJQ8ngEvcyXBPtTaow38fE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:f6:26:62:40:76:29:42:30:9e:af:54:d8:e9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Jan 25 17:00:55 2026 GMT
            Not After : Jan 26 17:00:55 2026 GMT
        Subject: CN=b96f313933d2b3e66f4afe4b3132929d6e26b6fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:f9:31:ca:1b:88:5f:8e:c2:23:fd:e2:8e:
                    23:47:34:43:32:bd:7d:cb:85:de:27:5f:8c:b0:90:
                    83:3c:9b:7c:a1:87:74:39:99:08:fa:bc:3f:26:b8:
                    d1:b1:85:9d:91:9c:84:6f:1f:95:be:8a:42:f3:47:
                    c6:24:25:6e:5f:68:da:6c:8d:82:68:3b:e6:e4:33:
                    28:bf:d8:1e:a4:bf:d8:32:7b:0d:fc:8f:e8:c8:5a:
                    15:23:22:a0:88:3d:6e:21:72:5c:e7:9b:ea:fd:80:
                    3d:c3:ae:57:3f:a6:17:a2:b4:33:8a:f1:9c:d2:0c:
                    c5:63:2c:c3:f3:e6:b2:16:03:9b:79:d9:65:8a:f5:
                    85:6a:b5:84:f4:fb:3d:f2:11:d3:9c:75:22:29:e9:
                    08:b1:76:d4:4d:f1:72:50:88:80:6f:d2:fe:3b:d5:
                    9e:0e:fa:0f:21:dc:13:a2:20:f6:96:28:f5:46:8e:
                    67:12:2f:04:a0:f5:5f:2c:95:22:98:98:c5:31:59:
                    93:20:93:69:42:6c:95:fe:72:e2:72:57:a1:59:28:
                    4b:9a:8a:21:c9:17:d1:bb:b7:9e:65:7a:f5:7a:15:
                    6b:77:a5:20:f1:5e:02:d9:db:36:7d:07:a3:c7:bc:
                    8b:c6:55:64:9b:83:53:8b:dd:89:68:c7:b9:a4:c6:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6F:31:39:33:D2:B3:E6:6F:4A:FE:4B:31:32:92:9D:6E:26:B6:FD
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:10:be:e6:07:8c:89:e4:da:23:08:bb:32:dd:a4:8f:75:a7:
         cd:d2:2d:5d:77:b0:18:17:85:1d:75:bb:eb:53:9c:02:a6:38:
         64:a0:82:c4:f0:5c:ce:df:78:7b:6a:69:b0:07:05:15:fb:f7:
         1e:43:e5:91:1e:ec:75:cc:e9:f9:bb:27:d8:09:be:d5:86:af:
         d7:dd:9a:f3:50:93:12:50:16:54:45:55:50:14:eb:9b:91:b6:
         e5:9b:49:8f:2e:b8:01:7d:bf:f0:38:5c:31:fe:1a:5e:7a:8c:
         58:b8:d5:1e:a8:b1:3a:62:be:ed:4e:14:b9:c1:38:64:a0:86:
         9e:6e:10:0f:d7:be:c0:c3:da:9a:29:94:b8:a8:5d:72:6e:fb:
         ba:5e:68:4f:e3:c7:63:4d:b4:89:20:31:ea:9f:a4:bf:a8:65:
         17:65:af:89:ca:33:b3:64:8e:87:79:a2:4c:70:fa:73:7b:3b:
         57:b0:7f:fd:d2:ce:d8:7b:5e:03:49:c9:15:f2:c7:fe:92:71:
         5c:b1:4e:6c:3c:66:9b:ce:d5:78:ac:79:84:b1:a6:81:2a:f3:
         60:a8:19:55:20:dd:d8:de:2b:a9:d2:13:2b:34:31:4b:f6:f7:
         b0:44:a0:95:79:42:3a:d0:73:87:ad:51:8e:39:92:fb:48:b2:
         77:bb:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:42 2026 by rpki-client