This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
File:                     7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json)
Hash identifier:          kb/FAqrOVLVg2g9HQFmb43bI6sOFOfLpn7hkMuvQCjo=
Subject key identifier:   EC:83:CB:B5:B0:49:DA:07:39:47:F4:B3:E3:96:A8:92:01:C1:C5:45
Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C
Certificate issuer:       /CN=ed6da9e41686d21c12799c8e84b274aa8241508c
Certificate serial:       019BF687D765835A27ED331C333760B0840F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
Manifest number:          17FD
Signing time:             Sun 25 Jan 2026 19:00:56 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:56 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:56 +0000
Files and hashes:         1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=)
                          2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=)
                          3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: i99f/RduAy4TJQIf5qMWjZ3u+r53jHt8gA7IjSS+UTw=)
                          4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=)
                          5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=)
                          6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=)
                          7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=)
                          8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=)
                          9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=)
                          10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=)
                          11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:d7:65:83:5a:27:ed:33:1c:33:37:60:b0:84:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c
        Validity
            Not Before: Jan 25 19:00:56 2026 GMT
            Not After : Jan 26 19:00:56 2026 GMT
        Subject: CN=ec83cbb5b049da073947f4b3e396a89201c1c545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:61:da:02:52:a2:61:9e:ce:87:cf:8d:55:
                    2a:8e:e1:3d:63:2f:68:4f:72:bd:e0:e2:f6:80:81:
                    7f:e4:06:22:27:8b:da:0c:35:11:c8:a6:e0:bd:94:
                    e9:67:3f:90:cf:c8:fb:98:f5:ad:ef:6b:7e:f6:d8:
                    ab:2a:5b:f0:06:f7:b3:ea:c7:1a:60:4e:1f:2f:43:
                    35:2a:a7:73:58:79:38:8a:e3:f0:7d:39:57:01:05:
                    3f:b7:c9:6e:99:6a:04:79:3e:ee:44:5d:10:4f:f3:
                    37:6c:c1:a0:c4:af:05:d8:00:a3:d7:7c:85:3c:8b:
                    18:c2:ee:42:9a:31:fb:fa:c0:cd:3c:10:4c:b7:09:
                    c9:e3:de:32:53:52:f0:8c:4d:f7:6a:f3:b1:37:27:
                    53:bc:fd:4b:6d:e8:cb:cb:42:42:b4:7c:64:da:7f:
                    56:63:c8:cc:61:02:df:2a:bf:33:0d:92:04:63:1a:
                    21:4c:98:82:e5:7e:9a:e9:a0:c3:fb:59:e1:91:8e:
                    75:09:74:2d:c5:8b:8d:91:39:9e:12:29:cf:61:fb:
                    2a:dd:38:53:33:fc:0a:48:15:ef:e5:11:27:ec:69:
                    0b:2a:c1:19:d7:52:ab:59:78:46:53:49:b3:47:8d:
                    50:43:f9:22:a0:6e:5e:1e:7c:1d:89:04:cb:ee:d1:
                    73:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:83:CB:B5:B0:49:DA:07:39:47:F4:B3:E3:96:A8:92:01:C1:C5:45
            X509v3 Authority Key Identifier:
                keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:bd:b6:0d:02:8d:c7:d4:9e:bc:cd:11:9a:d5:e1:c3:81:5f:
         9f:4e:eb:47:65:46:c7:63:76:cd:17:07:2b:43:d9:af:a4:0f:
         9c:4c:4b:76:75:3c:9b:88:e5:28:40:76:5b:62:10:9e:fd:46:
         86:7a:13:7a:54:ec:dd:5d:93:93:9e:2b:9f:76:ea:2c:9f:fd:
         94:86:e2:c9:ee:05:bc:45:ea:39:d3:9d:bd:ff:1b:26:d4:5e:
         41:74:5f:7d:59:e1:6e:8e:b5:b4:9d:9d:bc:d6:96:36:a1:dd:
         66:3c:a5:7a:cd:e4:00:32:e0:64:a4:e1:31:6c:92:52:68:22:
         2e:48:4b:ef:13:cb:9e:4a:c1:c6:6a:35:22:15:b1:21:a8:2a:
         c1:bc:2e:4c:a1:6f:1c:cf:88:37:05:fe:2f:d8:02:a2:9e:fc:
         da:96:53:12:3b:50:b4:95:c6:78:48:53:9e:ce:8e:47:89:32:
         32:4b:b2:a1:81:99:7c:74:23:45:d7:f9:87:7d:4c:96:22:9c:
         ba:ce:21:8d:f4:6c:70:bd:3f:5f:8f:03:c6:e8:89:0f:99:e5:
         f7:d7:fb:18:1a:f1:b9:2b:c5:11:3d:c3:ad:af:a4:17:b9:c1:
         49:c4:0c:25:c4:3a:14:05:c4:5b:f0:9c:33:d0:a0:12:da:18:
         ba:06:6b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:48 2026 by rpki-client