This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
File:                     f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft (raw, json)
Hash identifier:          qQthVuEM40XH3TdCgIG0WDn4+kiyaYtSar7KF4VEIZ8=
Subject key identifier:   D3:2E:8A:51:85:D6:46:60:F9:84:FD:C4:2F:A8:5B:EA:A1:D9:2A:43
Authority key identifier: 7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00
Certificate issuer:       /CN=7fe0e759354e83cc19320381109de22da0f1a700
Certificate serial:       019BF79AD282D78A183E1C7EFC4DEF3A93EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
Manifest number:          17EF
Signing time:             Mon 26 Jan 2026 00:01:17 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:17 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:17 +0000
Files and hashes:         1: J5kWKaTeftcxN3T6_7jKcPf3Q4g.roa (hash: ZKoxCa2uj0cYbH0WJu6XJV9TAVwhK/nXaOs/emSjvm4=)
                          2: f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl (hash: 9mwGXxAZ+XaPBrLaaCBzp4tNGoCO1GMGws2J4QWsznA=)
                          3: gmSsfOKXQkDDy4ovXXqyVsXoK10.roa (hash: Fo+hT/a1FZatdtcuWByXNim69uyN5v6qXMsqXNhOVFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:d2:82:d7:8a:18:3e:1c:7e:fc:4d:ef:3a:93:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe0e759354e83cc19320381109de22da0f1a700
        Validity
            Not Before: Jan 26 00:01:17 2026 GMT
            Not After : Jan 27 00:01:17 2026 GMT
        Subject: CN=d32e8a5185d64660f984fdc42fa85beaa1d92a43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:f2:b6:d8:94:92:51:39:60:80:27:4c:b5:
                    41:98:e8:7f:93:61:d2:05:7b:94:d2:9f:7d:7b:e4:
                    55:88:bf:2e:7f:e8:c3:83:30:b3:82:06:bb:26:88:
                    a1:5c:22:fb:9e:24:74:85:8a:ef:dc:72:c3:ef:ad:
                    26:8e:84:a4:6b:81:4f:39:99:07:97:71:9b:84:25:
                    2a:9d:77:01:0b:33:81:16:27:d6:a8:a8:f4:d9:42:
                    1c:41:ba:43:57:31:e0:07:ab:ed:99:ad:27:d1:d9:
                    5f:be:34:01:be:2a:e8:e6:eb:46:86:93:bf:ec:1c:
                    ee:64:0d:f0:b7:e5:5d:a7:2e:0e:6d:56:a2:08:fc:
                    7d:e6:00:52:f9:2e:a8:84:d6:f5:46:99:ff:64:74:
                    76:45:75:78:68:85:7b:11:cc:d5:85:22:9f:d3:dc:
                    82:f9:89:2b:29:21:49:7c:5c:05:3f:59:4b:52:e2:
                    8d:a3:a2:23:09:a9:c5:a7:83:a0:ff:6c:3f:74:df:
                    3e:73:e2:ab:1c:f3:07:6f:53:ee:11:27:fb:5c:96:
                    cc:a1:4f:fc:43:11:54:3f:19:cd:8c:ef:b8:85:21:
                    81:b6:51:33:dc:ce:6d:c2:42:92:67:24:53:ce:7b:
                    19:40:3b:ac:66:4e:88:0a:db:93:2d:4a:b0:8c:df:
                    89:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:2E:8A:51:85:D6:46:60:F9:84:FD:C4:2F:A8:5B:EA:A1:D9:2A:43
            X509v3 Authority Key Identifier:
                keyid:7F:E0:E7:59:35:4E:83:CC:19:32:03:81:10:9D:E2:2D:A0:F1:A7:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/0c7243-1ffb-49d2-b5c1-b402e8a1d934/1/f-DnWTVOg8wZMgOBEJ3iLaDxpwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:f7:fc:51:35:98:2c:8c:0b:94:b8:7e:3c:88:39:aa:d9:
         ed:6c:a0:91:0f:de:df:65:60:7e:c3:94:d7:3e:c8:38:18:d5:
         ae:62:4c:84:74:4e:31:b8:74:60:64:d9:32:89:84:33:db:02:
         5f:c1:da:4d:71:10:8e:e6:b7:d1:9d:9c:6c:a6:aa:1a:0a:21:
         cf:40:61:15:1b:5b:3b:dd:6b:33:56:42:e1:59:5c:76:57:92:
         d6:01:86:d1:8d:f4:68:b4:48:8e:1f:72:65:a8:36:d2:d9:7f:
         dc:59:f3:3a:ef:8f:78:31:48:73:bd:9e:62:2a:00:48:4c:cc:
         15:75:f0:7c:7f:4c:28:e0:68:50:5c:4b:e4:42:1a:e9:3e:c1:
         ce:89:7d:a3:26:77:25:9b:34:84:16:16:6b:7a:84:90:17:b4:
         e7:b8:96:00:ca:26:51:68:50:b0:42:7a:15:de:6d:f5:74:89:
         9f:92:d2:43:bf:fd:d6:26:d0:a2:eb:5b:0c:6c:a6:07:29:a1:
         5a:39:13:5e:61:eb:f9:b8:09:8f:8c:60:ed:b6:9f:28:4f:87:
         f0:05:ea:22:2f:dd:9f:86:d5:b0:37:56:0e:e5:3c:2b:b2:61:
         20:de:12:7e:a8:b2:ed:ca:e6:c8:e8:e0:42:21:e5:db:f5:d5:
         41:66:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:18:37 2026 by rpki-client