This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File:                     1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier:          e6zoMhQMjKxF8CAHcma2o+y9gFbmIELvxiVYI/mCXO0=
Subject key identifier:   1B:1B:96:74:CE:B7:50:22:CF:F6:D5:48:F9:06:0A:D3:41:F0:73:25
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer:       /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial:       019BF6BF151028DFBB8E2B5A87BE926ACDB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number:          17EF
Signing time:             Sun 25 Jan 2026 20:01:16 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:16 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:16 +0000
Files and hashes:         1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: fJNG8bJBYAERjgoipeGc5U9aPDXbdrdsFIy5jGi0w6U=)
                          2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=)
                          3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=)
                          4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=)
                          5: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=)
                          6: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=)
                          7: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=)
                          8: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=)
                          9: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=)
                          10: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:15:10:28:df:bb:8e:2b:5a:87:be:92:6a:cd:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
        Validity
            Not Before: Jan 25 20:01:16 2026 GMT
            Not After : Jan 26 20:01:16 2026 GMT
        Subject: CN=1b1b9674ceb75022cff6d548f9060ad341f07325
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9c:7d:00:e9:2d:52:2e:8c:a5:7d:92:5e:a7:
                    c2:72:b3:91:05:d8:63:80:05:6e:63:bf:76:85:de:
                    29:93:0f:f2:b1:27:4a:9b:26:b4:ed:d4:f5:11:cb:
                    e2:36:7c:c2:8c:41:64:7d:f3:ce:94:34:15:77:46:
                    20:1a:01:4f:3f:f7:c3:31:e5:71:e1:f3:0f:e4:3d:
                    41:7e:36:0a:24:fc:f2:8a:18:ff:42:6b:77:49:75:
                    32:7a:c8:f1:d6:48:c4:cf:ad:24:17:ae:36:6d:8e:
                    25:18:41:e9:d7:56:2f:56:aa:47:f6:1e:46:1c:e1:
                    8b:da:89:56:f8:6f:28:9a:2d:01:2c:c6:1a:c2:9f:
                    67:f3:8b:5e:c7:cb:02:d9:15:f7:d3:8e:d0:b2:49:
                    e3:c8:b3:45:7a:d6:63:9f:52:e4:4a:0b:19:38:d6:
                    26:07:59:e5:9b:56:b3:61:11:08:58:be:91:6b:9c:
                    f7:38:96:3e:7b:24:a4:27:60:b6:a2:16:9c:f6:6c:
                    94:87:ff:5f:55:ee:65:7b:8a:9a:df:08:fa:0c:cd:
                    70:8c:21:5b:03:13:9f:0b:8d:e6:43:6a:33:f9:d5:
                    3a:8b:e4:90:bc:0f:2b:a5:48:20:aa:15:15:a2:64:
                    8a:a8:85:31:a6:03:4f:20:d9:c2:55:b9:85:d0:8d:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:96:74:CE:B7:50:22:CF:F6:D5:48:F9:06:0A:D3:41:F0:73:25
            X509v3 Authority Key Identifier:
                keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:15:30:8f:28:f8:06:49:e8:07:ba:b1:42:35:e1:55:63:11:
         3e:49:8b:64:dc:6b:bc:50:8d:5e:a4:f1:5d:68:72:8d:da:bd:
         90:ac:8a:38:0b:a5:10:fb:6f:23:f2:f6:54:5a:75:c9:26:3f:
         33:24:55:c6:14:d5:25:62:9f:15:ff:73:26:7f:86:76:ab:70:
         dd:a8:0c:5e:e2:39:c1:52:4e:3d:fb:e4:f3:44:f8:bf:e9:0e:
         42:65:af:ed:68:96:52:20:9e:b7:f0:84:d8:4a:34:34:bc:4b:
         86:1d:6a:9c:ec:17:f0:11:d1:98:2f:50:14:8f:f0:b9:c5:04:
         9b:3c:54:41:16:72:b2:e9:e5:0c:6d:2a:42:64:f3:ba:72:85:
         44:4f:26:86:be:95:8e:4d:a9:99:9d:0f:c9:b9:50:60:14:d7:
         31:73:d6:42:f4:c2:eb:fa:46:96:26:d9:19:c3:64:fb:10:6c:
         cf:8b:1f:3f:d9:00:22:9a:58:18:01:b7:b9:ee:36:fb:e2:ef:
         80:dc:d8:65:90:27:11:a4:b7:a5:47:bf:c9:58:ea:12:6f:ed:
         66:c9:c3:39:a8:c7:29:95:bb:e2:c1:d5:19:a9:36:2c:df:d0:
         88:71:dd:5e:eb:43:fe:03:22:a8:8b:35:81:cf:6d:57:ca:0c:
         ba:94:62:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:46:19 2026 by rpki-client