This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
File:                     d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft (raw, json)
Hash identifier:          Ji4BRXcu/CVzn6WGrHMmGcJQ/1dAeMdRSf3JWKuqgSc=
Subject key identifier:   B5:EF:71:89:11:A5:A9:96:AB:E8:62:49:BD:52:29:D2:59:2E:23:4A
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Certificate issuer:       /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial:       019BF3BDA895F31440B7EE7A899A97CFA06F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
Manifest number:          17F2
Signing time:             Sun 25 Jan 2026 06:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:51 +0000
Files and hashes:         1: 0EYCl_u7AU56YlSvHpYQis-MWnk.roa (hash: lcxZZ3W8GXhqGxMNgdkpvNjJpkamu9CsXtsLtPwfuzQ=)
                          2: EwMyyaVQJ8rfKy51J3WKCF1FKfI.roa (hash: QENrigtaKjh6uAPaS8VxygrnvDaJ27VvotLU3ph+Xl8=)
                          3: d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl (hash: p3JFTRecWHtorP8eQJmpNAhwrP6ip8zX+XCh1YPWu6E=)
                          4: pp7zPOmyknFg8d0Gr5g-I2wOEDQ.roa (hash: 2LjSnEN+hHc9XuvzHuSzawxoX9WgA8pySl8rAgAIPKk=)
                          5: tLsw2QWW_xQ7Cz00zASgxGHLsoU.roa (hash: vD9kNf/vheI2GM5aVVh5mwV/7+iU7IQ4nb0hyznixXs=)
                          6: zvW2BXG_KR2tH5wPFjzByZu5Wic.roa (hash: aJKDQB0eC1MIkoZBUkIu5PMs0EeE5CsftG39rD94VMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:a8:95:f3:14:40:b7:ee:7a:89:9a:97:cf:a0:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
        Validity
            Not Before: Jan 25 06:00:51 2026 GMT
            Not After : Jan 26 06:00:51 2026 GMT
        Subject: CN=b5ef718911a5a996abe86249bd5229d2592e234a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:26:dd:33:70:d1:e5:88:6e:2a:6e:56:66:a2:
                    ac:7e:3d:98:ad:1e:01:70:fa:9c:39:45:a6:ef:ee:
                    90:bc:f8:d4:48:40:a6:eb:be:12:8e:72:ba:e4:48:
                    65:5d:90:61:4a:8d:14:0c:11:4d:3f:61:32:38:87:
                    7d:b4:98:7c:30:34:ec:88:9c:b4:a2:b5:73:ed:c7:
                    85:a2:ea:5e:0c:30:f9:10:2d:7b:e9:86:57:28:83:
                    bc:3d:0b:a9:49:e7:98:c0:0d:87:43:30:29:0d:0f:
                    51:7c:1e:ae:ec:cd:a6:01:7e:2b:7a:10:1f:78:01:
                    97:73:87:6a:bc:84:53:fb:96:7c:60:0a:5d:33:5a:
                    05:8d:c2:8c:ef:6a:a3:88:16:0e:c5:01:ee:2b:de:
                    31:36:6a:3b:5f:0b:cd:e0:37:d2:86:82:97:62:74:
                    32:52:f2:1f:5d:7c:2b:79:de:07:f7:0c:6f:9c:f3:
                    f4:bd:58:ef:7b:f7:45:0d:8e:b7:11:20:f3:b2:84:
                    ff:f8:28:4a:6d:a5:c1:f7:9d:00:9d:d2:57:52:2e:
                    6a:f4:81:0f:d5:04:06:0c:73:0c:4d:5d:e7:0c:37:
                    e3:84:a2:f7:51:3a:23:ff:72:d6:7c:67:0d:22:c7:
                    35:e6:85:f7:49:a6:14:20:6f:ad:5b:8a:3c:86:4a:
                    29:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:EF:71:89:11:A5:A9:96:AB:E8:62:49:BD:52:29:D2:59:2E:23:4A
            X509v3 Authority Key Identifier:
                keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:ab:22:f0:ca:e0:b5:dd:98:c2:7e:7d:02:1f:10:53:ad:12:
         9a:69:4f:8b:91:a2:12:8a:e1:2b:c7:f5:b8:d3:57:eb:15:c9:
         37:37:c3:01:6a:3f:62:12:97:c9:79:7e:16:e0:30:75:f7:f1:
         4a:ec:2f:da:c1:2f:88:f6:09:77:c8:21:26:6a:06:73:74:5f:
         3d:cc:27:d9:85:cc:6f:b8:d0:c6:b6:67:ef:4a:39:f0:79:d1:
         ea:80:51:e6:96:d4:5f:5e:8a:62:50:ca:c8:94:07:dd:65:4b:
         dd:a1:3e:71:fe:41:4e:5e:dc:8b:6e:12:72:91:5c:8c:8c:3b:
         e2:62:8f:c7:28:ef:88:36:a9:00:8d:b7:e3:5b:fc:87:05:d8:
         42:17:90:95:5e:19:99:0f:1f:d2:a8:da:69:e4:36:4c:1f:d2:
         fd:79:0c:20:08:ea:b0:f9:08:9e:c0:1d:b9:00:57:f2:f3:74:
         97:74:54:e3:ad:7f:a8:23:84:10:58:ab:da:1e:50:be:00:c7:
         80:6d:53:cc:41:71:4a:8f:8d:bd:4f:7f:e3:db:f4:82:4f:8f:
         95:55:38:32:b1:27:96:42:a1:87:db:d4:00:df:eb:2b:01:8c:
         c8:c8:a6:cf:0f:82:17:79:ac:26:b5:41:0c:2e:8a:35:2f:30:
         e8:66:3f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:53 2026 by rpki-client