This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
File:                     FpfEbq-hDsXZB7sF43EjtpKrSUw.mft (raw, json)
Hash identifier:          qB2tq5QzvnqMJmNusB1ksBb6MKOlvKdKHiipXmaWyF4=
Subject key identifier:   D0:DB:0D:75:D4:86:38:2A:8D:EE:8E:96:34:7C:77:C2:BB:7D:E9:D7
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Certificate issuer:       /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial:       019BF42BB2CDC3A8D8C1764C023FC11DBFB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
Manifest number:          1795
Signing time:             Sun 25 Jan 2026 08:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:02 +0000
Files and hashes:         1: FpfEbq-hDsXZB7sF43EjtpKrSUw.crl (hash: bYAEkdygoCiU95/dpFTeGlhH1dYUROxSuMHonoaaGBU=)
                          2: G3SDoS0e2OU5oxQXeu0DLy_EZLE.roa (hash: vXKq94ATSSy8/tbQ7lA25dfLLdSDmMbCTN+uSyjR298=)
                          3: fdUZglm7qbLpi4z3ml0ClmGLJDE.roa (hash: xhQjxCWPQZFDhPKRIbg1vJLO2EP+X4pmltYxKxqr3pg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:b2:cd:c3:a8:d8:c1:76:4c:02:3f:c1:1d:bf:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
        Validity
            Not Before: Jan 25 08:01:02 2026 GMT
            Not After : Jan 26 08:01:02 2026 GMT
        Subject: CN=d0db0d75d486382a8dee8e96347c77c2bb7de9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:13:30:00:0e:c5:38:11:53:41:e1:71:3c:02:
                    47:de:d9:e9:84:3b:84:70:24:7c:65:f9:9f:17:1e:
                    48:64:e1:7f:04:dd:ec:62:ad:e8:72:b2:8b:f3:36:
                    20:74:f5:ef:72:75:e0:89:89:8d:04:68:6e:f1:1c:
                    54:34:59:fc:8b:8c:31:46:70:12:4b:21:4b:dc:7b:
                    1f:84:25:d2:e2:32:f4:d5:8f:3b:a6:c8:33:04:ab:
                    8f:8b:dc:87:16:89:8c:ba:9a:e6:0f:46:e6:8a:9f:
                    e8:b1:01:aa:38:00:25:20:40:57:f4:1e:d8:d2:de:
                    c1:37:b9:84:1b:88:18:29:b8:39:5c:9f:87:a8:76:
                    1b:e5:4f:41:2e:04:eb:1f:ab:2b:dc:b1:f2:37:66:
                    44:91:df:29:63:2c:8e:15:56:80:ba:a9:ac:0b:43:
                    26:33:32:d3:29:1d:5f:f2:a6:6b:b2:b2:81:8e:6e:
                    7c:00:ab:a7:23:bf:d5:ad:b7:ce:fc:a4:53:aa:15:
                    3d:e1:1f:c1:bb:09:2b:05:b9:9b:b8:b5:60:9c:83:
                    2d:10:8f:04:b4:ce:7c:a0:f8:19:fc:3c:5c:db:d2:
                    e0:bb:0e:8f:76:e8:f7:d6:2c:3d:c0:40:f5:33:b6:
                    a4:48:61:e8:91:05:53:1d:ad:0e:ef:b1:5c:2a:06:
                    f5:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:0D:75:D4:86:38:2A:8D:EE:8E:96:34:7C:77:C2:BB:7D:E9:D7
            X509v3 Authority Key Identifier:
                keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:af:1a:57:cc:d2:ef:f1:36:ea:13:02:f8:ac:90:10:ad:57:
         ff:86:48:af:3e:3b:c0:ea:10:ec:0b:41:1c:5f:de:04:c9:b2:
         90:ac:6b:75:94:4a:b6:dc:c8:42:2b:fe:a9:b0:fa:77:28:7e:
         f6:e9:a0:b7:5d:d6:f8:db:5f:3d:a5:13:88:ef:28:af:06:ea:
         50:f3:3d:87:10:e2:92:8e:7d:22:69:1b:11:94:09:a2:0c:53:
         ab:d2:11:64:1e:b5:41:a8:fd:69:bf:8f:71:f7:8b:be:0f:43:
         56:31:b1:06:d4:7a:e3:84:7e:1f:b9:d5:da:cf:73:79:45:e4:
         b1:b7:f6:00:6c:df:ee:e2:40:97:26:2b:ac:7a:12:81:ba:0a:
         8e:cd:74:4d:35:74:6f:2b:44:52:8d:87:95:27:e2:b5:4e:8c:
         cd:f0:ab:81:85:7e:3b:e2:63:57:e2:d8:e3:be:95:bf:d0:d9:
         7b:06:cc:ec:4f:90:ed:90:77:a0:ce:ae:ba:70:50:9a:65:34:
         5c:f9:b5:3f:66:59:73:01:7b:95:cd:da:31:6b:81:dc:82:5c:
         7f:7e:4c:5e:bf:e3:2d:58:18:49:38:de:18:45:0a:ba:fd:86:
         19:e2:59:22:e3:bb:ce:b8:ee:d8:46:58:f3:22:23:0c:d3:dd:
         99:ca:8b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:37:43 2026 by rpki-client