This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          CxCfoiwnDCaHYnC2CE2T1EGHuJYQNtQbBVvbDoSf6K0=
Subject key identifier:   BA:06:66:10:33:99:DA:42:50:F3:DA:3B:8C:51:F1:31:EE:1E:D2:12
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       019BF5E2FDA0C73EAF181796C4A5E91C4803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 16:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:52 +0000
Files and hashes:         1: DaMOJU-jBrrr4RoMTTYusmitb4Y.roa (hash: JaWn7XzXCxX7Vb9+fDuk+/iiSPUdUFQByfCjt0a4ezU=)
                          2: Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa (hash: K0PmYBi2jbuDcvq/ABfyge5LDH1NQzitSjirHjoyzGI=)
                          3: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: gdp8ixZ4GRUkhMG/nbKuxV5OFph4CSAqNeYRyMdFAr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e2:fd:a0:c7:3e:af:18:17:96:c4:a5:e9:1c:48:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Jan 25 16:00:52 2026 GMT
            Not After : Jan 26 16:00:52 2026 GMT
        Subject: CN=ba0666103399da4250f3da3b8c51f131ee1ed212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:51:7c:41:22:f9:4a:f4:2c:0b:b4:e6:1b:45:
                    23:bc:70:ed:51:04:83:4f:a1:da:b1:01:d2:8a:b8:
                    dc:62:59:45:bb:49:2e:fa:35:c5:e4:c6:eb:ad:dc:
                    be:76:bb:b6:e6:89:c9:de:a6:43:2e:f3:17:a4:3a:
                    eb:7f:33:1d:65:c2:d9:03:b1:7b:56:35:62:3b:b8:
                    6f:14:f4:70:bc:09:97:93:c5:e1:db:72:51:4d:13:
                    73:c2:bc:53:8b:50:5d:2a:3e:f0:0a:5f:27:42:ee:
                    aa:27:9b:e4:73:d3:d2:c0:c4:81:44:c4:f4:d5:ad:
                    6f:6d:07:a1:c1:21:31:d3:9c:03:e8:ed:ea:99:11:
                    c0:a6:9d:c6:f4:30:d5:28:43:d1:3d:04:99:1d:28:
                    d5:c0:5d:2a:65:30:4e:a2:59:a0:17:a7:6e:ce:ce:
                    51:20:cb:ab:27:2d:13:c1:9f:a2:3a:7e:f6:be:58:
                    99:64:a5:7e:a5:5f:30:1a:6c:e5:82:19:3b:c0:af:
                    b4:47:a2:f7:0e:d2:00:10:34:b3:f6:6b:66:c6:7c:
                    6f:a1:cb:f5:c6:08:be:26:89:07:12:42:ce:2d:d1:
                    10:b3:7b:e1:92:38:7f:09:c4:b9:96:d6:a2:dd:70:
                    89:9b:27:bf:35:3b:84:10:bd:1c:aa:3a:17:92:5b:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:06:66:10:33:99:DA:42:50:F3:DA:3B:8C:51:F1:31:EE:1E:D2:12
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e6:a3:2e:ed:ef:80:99:f2:8a:0c:38:ce:76:3d:ab:7c:b8:eb:
         a9:1a:9f:a3:67:70:ca:d7:fc:16:fe:a2:f6:fe:86:a6:8e:f2:
         bf:8e:2f:2e:40:1c:27:47:e7:a9:00:fd:fd:b7:8a:7f:01:cd:
         ae:14:a7:ee:52:5f:a9:2b:87:d5:62:9e:c7:23:62:18:36:b1:
         68:ff:1c:9e:ea:d7:18:1b:49:d2:46:6e:1b:35:52:8d:b0:6c:
         6b:ee:ee:7c:5f:54:99:7f:43:40:2f:4e:1b:a3:1d:92:06:17:
         2e:9e:df:e8:3f:39:8d:5c:3c:89:ed:99:59:1d:4e:d2:2c:01:
         a7:a6:9d:db:2a:f5:2d:21:b9:58:b4:f5:fd:cb:71:ed:4c:56:
         91:7d:fa:19:39:30:20:aa:48:f4:62:cb:1e:d3:e2:90:6f:c7:
         a8:a0:fa:01:d3:54:ea:95:45:67:61:1a:67:d1:48:81:4a:e4:
         fa:16:14:db:1c:6e:92:1c:a2:09:42:0e:8f:4d:53:2f:32:22:
         40:c4:ca:45:52:3b:58:8c:8e:18:a5:84:f2:84:0d:81:ec:53:
         43:74:8d:bb:ec:84:7a:67:d5:91:47:4a:46:b0:e3:78:4c:b9:
         1b:b3:bd:71:ec:ae:91:75:e7:48:ca:ec:01:0d:c3:55:46:b2:
         4e:4c:1f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:35 2026 by rpki-client