This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
File:                     PnXUne0gVmynRcKPgM_ZqS9LfUc.mft (raw, json)
Hash identifier:          LjSJJPl0jihQ48piOcBe6Ynm1+dzcU7Tt75EubcotGU=
Subject key identifier:   F9:3F:87:B8:84:4D:BD:BC:78:E8:0D:05:EB:14:E5:B7:2B:67:DE:17
Authority key identifier: 3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47
Certificate issuer:       /CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
Certificate serial:       019BF7D180D8A43C3BD62E08DDD3FEA38298
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 01:01:00 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:00 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:00 +0000
Files and hashes:         1: DaMOJU-jBrrr4RoMTTYusmitb4Y.roa (hash: JaWn7XzXCxX7Vb9+fDuk+/iiSPUdUFQByfCjt0a4ezU=)
                          2: Gzc5BxD8yLe_aSYEhdH7qxC53Bk.roa (hash: K0PmYBi2jbuDcvq/ABfyge5LDH1NQzitSjirHjoyzGI=)
                          3: PnXUne0gVmynRcKPgM_ZqS9LfUc.crl (hash: Uj0IISMNi915zFgn+pOLFwpr48ogW7jvPUZ3KKwonhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:80:d8:a4:3c:3b:d6:2e:08:dd:d3:fe:a3:82:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e75d49ded20566ca745c28f80cfd9a92f4b7d47
        Validity
            Not Before: Jan 26 01:01:00 2026 GMT
            Not After : Jan 27 01:01:00 2026 GMT
        Subject: CN=f93f87b8844dbdbc78e80d05eb14e5b72b67de17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:79:0d:d2:b6:6e:33:f3:c2:bb:ee:5f:73:cd:
                    5a:02:11:95:aa:82:c7:d1:53:97:6d:5c:b9:55:10:
                    b5:65:6d:8f:6f:6f:e2:35:0e:84:58:68:c7:61:f9:
                    5f:b3:0b:2c:3d:ba:7d:5c:7b:7a:61:78:2a:70:f9:
                    52:1a:3f:cb:ad:04:df:e2:23:74:05:68:89:df:2b:
                    49:c9:f3:b9:b6:bd:4c:c3:d7:8d:4e:5e:e2:a1:56:
                    47:02:27:f8:19:b1:75:82:3e:ad:07:29:af:f7:48:
                    03:c8:8c:cc:e0:3a:d5:00:c3:77:da:83:f5:56:1d:
                    24:48:e1:5f:75:a6:c7:42:36:b8:c5:4e:18:48:fb:
                    53:6e:ab:cc:84:88:46:11:ec:48:b0:10:3d:67:f7:
                    ab:72:f5:a5:b3:f2:17:b0:1c:00:6e:7c:df:34:fe:
                    51:da:48:36:df:9a:bb:98:e2:e4:c0:6e:a3:ea:2a:
                    f5:1e:bd:f2:ea:99:6a:ff:07:49:69:02:51:df:68:
                    51:df:60:fb:66:38:b8:70:9d:cc:ed:63:c4:ee:ff:
                    90:a2:a7:3a:70:32:de:0f:8c:b4:b4:5e:e4:45:3e:
                    30:4b:7c:b8:3c:86:80:57:0d:57:bd:10:fc:47:61:
                    f4:bc:67:84:e0:e4:36:bf:7a:a6:94:b0:02:3a:46:
                    54:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3F:87:B8:84:4D:BD:BC:78:E8:0D:05:EB:14:E5:B7:2B:67:DE:17
            X509v3 Authority Key Identifier:
                keyid:3E:75:D4:9D:ED:20:56:6C:A7:45:C2:8F:80:CF:D9:A9:2F:4B:7D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PnXUne0gVmynRcKPgM_ZqS9LfUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/1c15a2-d0ec-4c3a-86cd-83638475d8ab/1/PnXUne0gVmynRcKPgM_ZqS9LfUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:f9:83:9a:94:f6:65:4f:b8:d9:a8:a0:cb:17:65:d6:72:f1:
         95:1b:fa:6b:92:72:b5:25:47:8d:d3:4d:fa:92:a5:a6:d8:12:
         d0:ef:fa:b6:3d:15:57:d4:3c:1d:8d:c9:39:72:96:ff:02:69:
         e1:19:ee:f6:4b:a3:ad:2b:53:c6:c0:26:5f:33:a2:ee:7e:4b:
         73:71:b1:b8:ec:2e:85:9a:86:43:b2:67:52:94:7d:15:f7:c9:
         f4:1a:4e:93:54:36:b5:39:e7:f8:46:87:a3:0e:af:36:9b:18:
         7f:9d:08:cf:cb:e4:eb:3c:f6:2d:b7:0b:ea:12:c7:ec:c5:14:
         39:41:81:dd:fa:4c:ee:d6:36:77:39:3e:1a:70:8c:27:21:63:
         b1:7d:38:63:5b:97:08:ca:22:a6:e2:4c:0f:24:7e:ed:df:cc:
         e4:e4:4e:e0:dc:f9:85:99:34:e3:66:bd:c9:dd:a1:10:80:98:
         b9:7d:6d:e0:1a:6e:6b:7e:3e:b8:5f:a8:c1:f5:b3:ce:d4:d0:
         1f:e9:0f:c4:97:4d:d3:84:e8:63:38:f3:73:27:fc:b9:d9:86:
         a8:1e:8c:0b:6e:c8:4f:73:13:33:0b:da:43:66:3f:fc:9e:87:
         dd:09:de:a5:7f:b9:95:7d:53:2d:d3:24:24:09:92:4f:ef:c9:
         06:a3:14:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:10 2026 by rpki-client