This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File:                     7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier:          llVnSL4C5CKAXbBohNM1Vc3YJsVAI3S6A96yTyiE2Eo=
Subject key identifier:   C3:67:A7:49:86:A9:95:C6:D2:9A:FE:9A:33:CA:55:39:C6:EE:44:18
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer:       /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial:       019BF6F5ADFE2C1ECFD22043E05D7B920A3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 21:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:54 +0000
Files and hashes:         1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: q8mzI7MSODUONNlaWTfloF9E0nsMVnhaBqgxE9EsmsM=)
                          2: _fXKYqOoOeAsBe3wfvstIhc1KgU.roa (hash: 6aMvK6MOhdOCbYvLk+UnSkhnsNfdyPHzti08/1dj5Nc=)
                          3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:ad:fe:2c:1e:cf:d2:20:43:e0:5d:7b:92:0a:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
        Validity
            Not Before: Jan 25 21:00:54 2026 GMT
            Not After : Jan 26 21:00:54 2026 GMT
        Subject: CN=c367a74986a995c6d29afe9a33ca5539c6ee4418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:67:5f:c6:2d:62:25:ab:7c:9c:af:35:21:cc:
                    38:1e:db:45:6d:fb:fe:ab:13:a5:31:30:26:7a:b0:
                    8e:a0:08:42:a8:16:2e:9d:9d:01:0b:13:8b:ca:cd:
                    cc:ea:f4:4b:21:3c:05:77:ab:70:5d:97:b6:c9:57:
                    e8:a3:1f:48:24:27:bc:19:51:4c:82:f2:df:0d:08:
                    ba:8b:2e:7e:53:93:ac:5a:35:4c:7d:b5:da:7c:96:
                    6f:be:8f:82:db:65:cd:f7:b3:07:c3:8a:a1:49:0f:
                    73:07:53:f1:6c:2f:64:6c:ce:c2:be:1e:dd:2a:c1:
                    20:6c:d3:8e:5c:50:56:d4:0e:a7:f2:2a:97:e5:1e:
                    bb:da:c8:b0:d2:81:18:b0:6e:dc:ca:b8:93:09:f3:
                    56:b7:d1:58:f4:55:f4:07:72:6e:1e:0a:6f:eb:79:
                    72:9e:e2:c4:31:21:4c:b9:b2:80:d6:b8:51:5a:bc:
                    62:8b:82:85:cf:c5:2c:7b:f2:74:9c:93:04:73:63:
                    d7:ad:ab:60:4a:34:b5:83:48:8a:ef:be:3f:9e:e5:
                    f9:dd:93:a8:87:22:28:a6:87:c3:f2:a5:34:7f:8e:
                    61:5e:7e:8e:68:09:39:0f:3d:6d:6a:17:f0:73:11:
                    80:34:0b:1e:c1:6a:21:3e:d2:ca:e6:1a:9f:0f:46:
                    e3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:67:A7:49:86:A9:95:C6:D2:9A:FE:9A:33:CA:55:39:C6:EE:44:18
            X509v3 Authority Key Identifier:
                keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:f0:28:2d:90:4d:5a:da:e1:14:3a:80:95:ef:18:d3:d9:
         df:6d:2e:26:58:5c:25:fe:84:ee:1b:f5:30:cc:61:bb:f6:e0:
         d3:74:2c:07:85:ea:3b:c9:b3:df:01:9d:c6:70:94:35:66:78:
         22:af:71:4f:30:53:20:4e:40:72:d9:7a:32:89:6f:80:b6:d2:
         75:0d:08:68:50:27:0a:62:8d:fc:15:1b:b2:38:5a:f6:0e:50:
         17:8d:8d:b5:da:ee:00:69:ac:61:d9:79:ad:a4:7b:49:1f:3a:
         80:f2:d2:27:8e:46:c5:ba:d3:48:dc:49:97:d6:14:b4:7e:19:
         7a:03:92:19:d7:fe:c9:16:f8:8d:8d:92:e8:70:0c:b0:86:30:
         b9:1d:d2:74:18:ac:bc:7f:42:76:05:01:b4:c5:fb:86:91:fe:
         f4:f5:5c:41:f5:15:e7:54:35:04:e0:f5:c9:38:46:7b:5c:b1:
         ac:06:f7:9a:68:d5:cd:29:8f:9e:3b:34:25:bf:86:d0:16:cb:
         3d:49:6d:08:c1:f3:03:ac:df:25:90:3a:ba:3a:fd:8e:41:c0:
         9e:b0:7d:2d:eb:f4:7b:eb:40:e8:c9:85:fe:27:4e:e8:5a:cb:
         d7:fc:b7:f8:f5:87:18:ef:cb:57:8a:58:16:d3:b7:4a:54:6a:
         60:e4:8c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:21:05 2026 by rpki-client