This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File:                     fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier:          LAmnx6Qivtnr+756Gpq/ZS4CU7waX9WL4wHWwOUkUfs=
Subject key identifier:   6F:DC:F1:C0:E1:B1:E7:03:CC:07:E4:1D:96:47:FC:01:06:C2:9C:5F
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer:       /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial:       019BF61A2260DB3FAC14416AA26DEAB06650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 17:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:06 +0000
Files and hashes:         1: Cpv7g6rHzUKgueybQcWvoRtVjCs.roa (hash: d2rLyuCnEu9URy6j2Ic8MNgDzmSJl5ABOrOYqoRSP3Y=)
                          2: SEMIltwG2Mp0INuZM2-Rtzcwd0Q.roa (hash: MM7jqLrGrNs0gRxIUqYxEKdS0toE1JlDNhc6tBIS7qg=)
                          3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: WdneEB+ybRnBvnnbWJcBS8mXRlnI6gdXrzSTULs5Cmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:22:60:db:3f:ac:14:41:6a:a2:6d:ea:b0:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
        Validity
            Not Before: Jan 25 17:01:06 2026 GMT
            Not After : Jan 26 17:01:06 2026 GMT
        Subject: CN=6fdcf1c0e1b1e703cc07e41d9647fc0106c29c5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:2a:86:9b:58:3d:42:7b:bf:9c:b1:a8:43:
                    dc:63:5e:04:c8:07:9f:d8:17:53:8f:ea:72:d8:c0:
                    51:81:27:e9:c1:ed:b2:53:6a:90:61:52:7c:f5:b2:
                    83:5a:55:f0:b5:16:3a:d9:77:cc:e0:86:06:ab:eb:
                    6c:3d:1c:88:7d:f2:30:45:0d:e7:13:8f:67:1d:74:
                    4f:f5:46:8d:c1:24:27:98:d6:6b:01:a2:a1:bb:14:
                    f4:f7:fa:9c:b3:51:45:eb:62:13:05:00:c3:1e:67:
                    bf:a9:28:2e:44:15:d8:7d:86:36:4a:78:9b:a2:9a:
                    b6:f0:3d:63:69:a9:e0:d1:1d:34:e1:e7:77:a4:bf:
                    c7:8b:aa:8a:2b:3f:4f:b5:97:22:30:a8:d4:b8:f7:
                    d2:4e:ce:1b:4f:b0:1e:02:c4:a7:e3:7d:8c:b7:a8:
                    1a:7e:cd:d0:61:56:25:e1:c8:0f:13:3f:f4:97:d3:
                    8a:07:37:fd:bd:a9:41:be:0b:c4:d7:59:c5:3d:dd:
                    69:82:c6:b0:ca:84:bb:06:cb:6b:3a:f0:1c:03:f7:
                    70:ca:ba:b3:dc:12:58:ff:b3:8f:2a:5a:41:40:bf:
                    34:0e:15:79:57:dc:67:2e:27:6b:eb:08:d2:a5:ea:
                    fa:52:bd:f4:15:71:b9:60:8e:4b:5a:41:40:fe:6e:
                    67:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:DC:F1:C0:E1:B1:E7:03:CC:07:E4:1D:96:47:FC:01:06:C2:9C:5F
            X509v3 Authority Key Identifier:
                keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0d:64:f5:f1:3f:3c:e6:5d:ec:87:f3:3c:aa:32:88:5a:1b:
         ef:53:fb:e2:db:68:16:15:3a:a4:d0:08:c0:08:e9:96:9e:ea:
         a0:92:7f:92:89:8e:fd:72:98:60:68:13:9e:74:15:10:9b:cc:
         8e:f9:82:d8:79:fa:15:e2:06:ab:5f:cb:5c:ef:02:89:43:b6:
         12:f0:f2:ae:36:2c:a9:38:ed:00:e3:18:3d:75:5d:98:8c:60:
         da:27:80:47:91:b9:e0:64:3d:c0:79:a1:72:8b:c7:0c:79:16:
         f9:07:da:40:08:de:76:dd:1f:d0:4c:b4:62:f0:36:8e:5d:11:
         11:37:ad:1d:61:3c:6c:c9:b9:e1:36:9c:97:83:9f:92:b6:6d:
         ed:93:01:88:31:42:25:04:fd:50:4c:03:7b:60:7a:cc:cb:d0:
         d5:5c:ff:d3:8b:0c:e8:ba:0e:10:b7:26:2f:08:ff:b4:ee:f1:
         85:94:34:19:0e:9c:f7:e8:38:8a:8d:fc:0e:47:d6:ef:79:3d:
         59:12:9e:38:40:ad:32:4f:21:09:13:d1:50:12:6d:78:bb:83:
         8e:3f:53:f7:82:c9:43:92:6a:b4:7e:a0:82:79:91:c3:5b:34:
         d6:69:0d:df:8f:d2:a6:df:36:fc:a0:31:09:0d:d3:06:4e:4c:
         5f:41:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:38:52 2026 by rpki-client