This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          vm6cBJC93CV8Hecd+8bXmFuCxc3rxtT4fq21PEuKqZA=
Subject key identifier:   1B:0D:8E:29:7A:DC:14:09:71:09:E3:A9:9E:42:AB:64:54:7A:BB:AB
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       019BF6F5915C4F36953004394CDEA45CC342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 21:00:47 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:47 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:47 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: Q6MTfR3CSTz+vNcbGFZbKZWxxVsxJFABRs2RFORcg5k=)
                          2: DoWhtMhiJd62u67yTypXkNyKc54.roa (hash: rOFqk1lXAk5Zo2qrvR0lJblhfPY81qij2Skbo2/XBYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:91:5c:4f:36:95:30:04:39:4c:de:a4:5c:c3:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Jan 25 21:00:47 2026 GMT
            Not After : Jan 26 21:00:47 2026 GMT
        Subject: CN=1b0d8e297adc14097109e3a99e42ab64547abbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:96:a0:00:47:68:c2:70:5b:e4:fe:f5:72:
                    a9:ef:07:1a:80:56:8e:aa:6c:bc:de:3c:c1:b7:72:
                    5c:b4:83:71:38:7b:39:be:cb:fd:90:5f:70:6e:15:
                    e4:a3:b5:b1:22:31:2c:47:28:16:77:20:6b:fc:5d:
                    e2:9c:91:77:d6:2f:4c:7a:18:2d:40:0e:b1:d1:97:
                    87:35:18:3b:11:68:58:c8:c9:49:10:32:42:a7:6d:
                    e9:34:5e:46:2b:a5:ae:0f:6b:51:b3:c7:a0:8f:cc:
                    e3:a7:ac:15:61:ba:cb:71:85:a1:60:e9:5b:d6:73:
                    d7:7a:be:3f:4e:ed:a4:cd:cb:a8:a1:67:45:5c:0d:
                    7c:93:a4:17:88:b5:c2:8f:b3:99:54:62:e2:70:f5:
                    0f:c5:e5:0a:ef:03:1a:bf:c0:0c:df:bd:7f:6e:97:
                    f1:6f:2d:36:5f:cb:63:53:b8:fc:b6:63:de:76:f2:
                    74:c3:b5:83:49:e7:3a:34:ef:c6:57:47:74:c2:89:
                    27:2c:8e:68:28:6f:53:be:f9:38:41:d9:c3:b6:00:
                    19:32:56:66:12:88:8c:4f:f9:6a:d1:81:bb:6b:34:
                    0b:ac:df:7f:70:8d:8a:bc:c8:d7:17:9d:80:e6:24:
                    5a:20:ab:3c:65:6b:8b:70:71:22:c5:dd:6b:09:f2:
                    a5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0D:8E:29:7A:DC:14:09:71:09:E3:A9:9E:42:AB:64:54:7A:BB:AB
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:8a:e8:86:63:21:de:27:1a:93:ef:2b:fd:89:23:3f:38:88:
         e8:f9:06:20:b6:5c:70:45:a3:17:ef:67:34:60:74:2a:98:d8:
         a9:2c:2e:35:bc:27:46:57:69:d1:72:fa:d2:28:d6:b6:b6:13:
         93:01:df:16:68:26:a8:f7:84:ad:12:5d:21:b9:f0:59:1a:0b:
         dc:64:20:aa:c4:a2:c5:42:57:12:a4:1d:2d:e2:23:3b:d9:54:
         fe:47:a3:a1:f2:90:d5:69:ee:e7:62:7a:48:26:80:db:1a:1a:
         53:00:be:26:40:9f:9f:56:8d:3f:ba:80:4d:10:b9:b3:34:de:
         e3:d2:51:70:0c:99:0b:1b:86:4e:2c:30:18:b1:23:93:38:ff:
         ee:8a:20:c1:22:bc:51:c3:72:18:a5:36:47:e6:fb:a9:0a:2b:
         fc:7a:67:1d:71:c3:93:15:6f:d0:27:e9:79:13:6f:74:17:63:
         b6:f1:51:6b:16:99:31:77:ec:39:ba:b1:73:6e:15:ff:6f:77:
         ae:b9:87:5c:34:51:f1:8a:b0:95:0a:8e:4e:79:bd:b2:26:20:
         0c:27:fd:df:f8:a4:4c:3c:8a:10:b5:8c:b3:8b:77:e3:29:7a:
         3f:af:b8:23:4e:36:e8:92:b4:fb:4d:36:6c:25:46:63:56:4f:
         5b:e7:2c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:08 2026 by rpki-client