This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
File:                     362LFgmdbN-MOoEcpYYN8Pa69t4.mft (raw, json)
Hash identifier:          2ylstIU0FDaC0gxdpOLTQHNYx19UNWTv6sAmp+rjWMk=
Subject key identifier:   DA:93:DA:89:C5:23:F9:D9:8E:2E:62:FD:C5:7C:80:3E:98:F6:B0:AF
Authority key identifier: DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE
Certificate issuer:       /CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
Certificate serial:       019BF79AF4206DE6EAD7967C4CB03E966089
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 00:01:25 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:25 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:25 +0000
Files and hashes:         1: 362LFgmdbN-MOoEcpYYN8Pa69t4.crl (hash: SH+/8IvCAzuJO0Axwp+dEStVYziH59eLUMmnOtMfkyw=)
                          2: 7c62Dyrz3RaJzfk_-Ma-zaftthU.roa (hash: 5w8HqttxdVYBqrIS/AtjxBDT7h9Q7oeMmHiR82+Pkxk=)
                          3: PZ3ccJJpmnY8ezggBns_pU2Y2oU.roa (hash: E33KozuSZQaAjnSuCott9QPTJ4e9ZQFOqJ78WHk5jew=)
                          4: rYNk5M1jOrRrGvLBvLntaHwWlhM.roa (hash: RlamOrUS9qC+/UKfMqeVdUehNtOg9iOWWGlF3b1jCi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:f4:20:6d:e6:ea:d7:96:7c:4c:b0:3e:96:60:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfad8b16099d6cdf8c3a811ca5860df0f6baf6de
        Validity
            Not Before: Jan 26 00:01:25 2026 GMT
            Not After : Jan 27 00:01:25 2026 GMT
        Subject: CN=da93da89c523f9d98e2e62fdc57c803e98f6b0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6f:06:0d:6d:5c:0d:1d:43:bd:50:10:72:fb:
                    b9:70:a1:12:7d:59:0c:d4:b9:d3:80:be:48:16:f3:
                    4b:fb:0d:3f:3a:49:36:8f:3f:49:2a:06:de:3d:03:
                    13:aa:f8:f2:cd:f8:89:8a:f2:4d:38:eb:2d:6b:c5:
                    4d:24:0c:c7:4a:70:d6:8d:8e:8a:70:b8:94:32:12:
                    94:01:53:02:2d:1e:45:e8:72:0f:76:e6:90:47:7f:
                    0c:db:47:74:57:5a:76:d4:d8:4e:bc:1c:3b:c5:c4:
                    fe:a1:c0:b2:46:62:17:a0:0a:d0:50:9c:9b:d6:f8:
                    bb:96:38:78:09:23:a2:49:c8:a6:29:21:55:fb:eb:
                    eb:fb:cb:d3:df:ac:40:8f:28:41:be:da:4f:ae:5d:
                    40:4e:fd:63:e4:07:82:dd:a8:c9:65:c5:81:48:7c:
                    6d:ca:83:e1:7e:66:6f:6b:01:09:48:83:c9:23:ee:
                    c0:7b:ff:eb:9f:ed:01:20:9e:1e:2a:5f:87:1a:94:
                    17:26:aa:a0:c3:36:43:b4:2a:e4:2b:3e:47:06:89:
                    15:bd:5e:cc:0f:2b:06:7c:01:a0:0d:96:2a:d6:04:
                    1c:b3:87:55:32:49:a1:ba:4d:19:8a:cf:59:ed:45:
                    c9:c4:51:8a:9a:d7:f3:a3:5c:cd:7e:94:9b:5c:ab:
                    8d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:93:DA:89:C5:23:F9:D9:8E:2E:62:FD:C5:7C:80:3E:98:F6:B0:AF
            X509v3 Authority Key Identifier:
                keyid:DF:AD:8B:16:09:9D:6C:DF:8C:3A:81:1C:A5:86:0D:F0:F6:BA:F6:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/362LFgmdbN-MOoEcpYYN8Pa69t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3f543-74cb-4298-82e1-8bca27cb30c0/1/362LFgmdbN-MOoEcpYYN8Pa69t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:5d:66:d3:7d:c9:1a:06:2f:34:07:cd:d2:d8:37:3c:22:2c:
         e2:a8:8a:c4:34:44:8a:fc:0d:e1:b7:ba:74:ff:ec:b4:58:c1:
         50:30:2e:09:b6:29:58:b9:08:d9:a5:3f:d8:2a:7f:f2:d4:03:
         c5:c7:98:de:ee:a1:e2:d6:c9:c3:d1:b3:ac:4c:c6:e1:13:d1:
         a5:72:9e:af:e4:ee:d9:e4:35:ab:53:c8:e6:14:70:dd:6c:06:
         eb:33:b5:b1:7e:f3:17:2a:53:21:9f:9c:a9:83:2d:01:de:ce:
         a5:9e:11:a6:20:a3:59:e4:84:89:1f:c9:26:d8:79:f5:fa:7a:
         e3:ae:3f:d0:ec:2b:6c:a0:2e:0f:8b:9f:1a:3f:00:aa:67:c7:
         23:81:01:e8:04:73:6d:bf:07:df:f3:6f:3c:12:14:cf:12:fe:
         e5:f8:fb:3f:2f:66:e3:d6:e1:6f:1d:80:d7:ae:b0:34:a7:a3:
         e0:1e:7f:62:6b:cf:aa:6d:67:7c:52:3b:1e:12:fd:f2:96:14:
         24:d3:5d:f8:9e:e5:7e:7f:72:8b:3e:8e:b9:56:ec:d5:79:e4:
         8d:3d:7e:ae:fa:2b:02:a2:ca:a6:77:f1:57:99:49:c2:8d:63:
         8d:d5:3d:60:4b:34:45:e3:9e:e9:ca:d7:f3:30:db:00:38:b9:
         52:a5:a0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:57:05 2026 by rpki-client