This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File:                     7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier:          uGTv8YrVh+yO8/H02dNHpwFvBIcfDWzMPhG5zGjlIi4=
Subject key identifier:   DB:F8:AD:6B:48:F4:8B:A5:47:85:0B:1F:C2:7A:D7:A6:3F:55:26:97
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer:       /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial:       019BFA2D9C6B96CC04C20DD42ABD4F0E5FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number:          17F5
Signing time:             Mon 26 Jan 2026 12:00:51 +0000
Manifest this update:     Mon 26 Jan 2026 12:00:51 +0000
Manifest next update:     Tue 27 Jan 2026 12:00:51 +0000
Files and hashes:         1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: 9RWEaoABYbcEOW1OiJpflhcz7nWc54cLiDcYsevrtDQ=)
                          2: XHVi61WiazNgcFLfPPLSGooyVY0.roa (hash: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA=)
                          3: mYTd35kRkIBF88OmyEhVri7c_EM.roa (hash: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:9c:6b:96:cc:04:c2:0d:d4:2a:bd:4f:0e:5f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
        Validity
            Not Before: Jan 26 12:00:51 2026 GMT
            Not After : Jan 27 12:00:51 2026 GMT
        Subject: CN=dbf8ad6b48f48ba547850b1fc27ad7a63f552697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:96:f4:69:5d:3c:d6:1c:f2:97:8c:7e:aa:04:
                    13:b7:bb:21:5c:02:5a:1c:64:71:af:e3:16:6e:b2:
                    97:67:bd:39:7d:8c:5f:2f:9e:90:ed:35:a3:24:b7:
                    bc:83:8f:3e:84:29:48:44:87:ed:0e:8e:bf:2b:7a:
                    f5:10:10:22:c9:f4:50:7c:5b:d5:95:8f:b9:ad:33:
                    5f:d4:17:43:2d:3e:0c:d5:17:de:d1:9b:a3:ce:5d:
                    08:52:27:37:c1:b3:c7:f1:f3:f0:ce:83:20:2e:0d:
                    ab:f6:4b:bf:c5:0c:6c:39:18:8b:19:32:2e:47:5f:
                    e9:08:43:b9:05:31:01:58:c7:3d:3f:c1:b8:71:1c:
                    7d:e2:92:c8:bb:7a:32:4c:80:98:a4:d4:22:c3:c5:
                    d2:e0:42:ee:84:b2:7d:1f:fa:fc:55:bb:4b:93:60:
                    d1:04:cb:bf:a9:14:2a:68:7b:59:08:23:9d:2c:06:
                    d1:8b:a3:8e:40:22:db:76:23:87:07:b2:3c:95:20:
                    d3:84:14:22:6c:6f:69:84:fd:dc:69:4d:79:8c:8d:
                    e8:02:14:1f:af:86:5a:d5:0b:90:a0:40:d2:3f:d9:
                    fa:9e:d4:87:4a:3c:d0:b4:97:8f:e8:23:5c:85:96:
                    5f:b9:d7:cc:f6:a7:0a:c3:41:37:37:9e:b3:f3:d8:
                    0c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F8:AD:6B:48:F4:8B:A5:47:85:0B:1F:C2:7A:D7:A6:3F:55:26:97
            X509v3 Authority Key Identifier:
                keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:b2:ac:54:ff:e6:25:b0:bc:5a:ae:33:61:7b:5d:9b:df:b4:
         3e:5d:12:79:ef:74:98:53:5a:42:25:24:7f:37:6d:14:1d:e4:
         38:dc:e7:08:21:69:fa:ed:a1:bb:e3:c5:e3:62:be:8b:00:b0:
         10:aa:6b:ba:40:ab:5b:0e:57:ca:88:1a:6c:ba:14:76:c0:ef:
         68:48:9e:52:c8:96:da:e3:52:56:01:8c:a0:a8:28:f6:80:ea:
         f7:7a:48:7c:b6:63:77:8e:7b:21:ca:75:6c:61:e8:21:4b:3d:
         d8:58:87:91:f3:27:42:fc:35:97:69:bc:7c:c4:e2:99:59:1f:
         9f:99:a7:d0:47:70:4d:5d:a8:b1:24:00:79:d1:5a:66:79:bd:
         3e:47:f5:1d:e2:2b:87:26:f4:b1:bb:a4:b9:19:5e:b6:88:d7:
         31:ba:8c:08:74:aa:cb:da:d2:6a:94:7f:a1:f0:59:81:f0:7f:
         e3:01:1e:1e:d7:49:d8:dd:b0:83:a8:b9:32:dd:48:3e:24:1e:
         cb:10:e6:43:ba:7e:4b:c6:75:a7:37:8d:ed:cd:0b:b8:02:dd:
         14:03:23:51:66:39:fe:0b:7c:fe:d0:18:08:59:c6:2e:4b:b4:
         a9:2a:2b:62:19:43:5f:b7:f6:f0:b6:ba:54:64:ec:e7:b1:54:
         db:67:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:19 2026 by rpki-client