This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
File:                     iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft (raw, json)
Hash identifier:          E/Byjx6vBias1TP09f5NIfrmITg0hqhAOd79YFLkHJQ=
Subject key identifier:   61:ED:17:87:F8:37:FB:ED:D6:A0:A9:5B:E7:71:C0:33:D2:12:93:1B
Authority key identifier: 89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57
Certificate issuer:       /CN=892d21566ccfc3bb079ec5854b044ab809804157
Certificate serial:       019BFA2EA63373A3BA9E44E6528ADB2B8284
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 12:01:59 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:59 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:59 +0000
Files and hashes:         1: WJZilYaZAHsOAmj637C-MdulMxc.roa (hash: wLuopCEozLlg7zWAHBk3a03yzRSeylXpXNn0hBm9JS0=)
                          2: iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl (hash: VztHwxMHV0VKBtq2JitxmnDOMy5WbE5EgyCwfGmk/cw=)
                          3: xLQnpa48oKWxD9K2HQGCUx5nny4.roa (hash: kd5ch0DHjDYuKsI2CZ8kmx/a6Kg1r4mH4pB1J7u5AVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:a6:33:73:a3:ba:9e:44:e6:52:8a:db:2b:82:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892d21566ccfc3bb079ec5854b044ab809804157
        Validity
            Not Before: Jan 26 12:01:59 2026 GMT
            Not After : Jan 27 12:01:59 2026 GMT
        Subject: CN=61ed1787f837fbedd6a0a95be771c033d212931b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:63:09:26:16:7d:a5:11:62:77:f9:46:54:
                    05:63:7c:79:29:04:37:a0:8b:06:3f:b4:64:28:03:
                    11:66:89:26:26:b6:86:e6:ae:d2:a4:96:a1:ba:78:
                    6b:51:ce:c5:7e:e6:18:d9:42:20:38:f4:9b:11:b1:
                    2d:ac:03:f3:a8:a3:c8:75:27:42:d7:bc:54:af:dc:
                    da:eb:32:4c:99:92:5a:4f:b9:9d:56:85:be:fa:5b:
                    61:ea:20:48:86:07:be:72:95:e4:8e:4b:4a:f7:a7:
                    e7:cf:1a:49:3a:6c:3b:3b:eb:59:72:94:51:24:41:
                    c0:d0:45:a2:68:45:f3:bd:ba:67:33:51:de:db:3b:
                    56:b1:79:1b:23:dd:30:4d:96:06:f3:de:76:a3:a7:
                    33:b5:dc:a7:f9:ab:21:25:d8:d9:02:60:e8:41:ce:
                    a1:35:f0:d7:08:5b:81:5d:81:88:0a:52:91:b8:ea:
                    65:16:b1:9d:de:7d:6a:93:37:4a:65:cd:df:97:ea:
                    06:6e:60:6a:25:a2:65:e9:b4:9a:33:f4:16:0b:a6:
                    7c:f0:0d:a7:95:9b:8d:66:75:14:cd:a1:ab:8d:73:
                    ee:ce:41:2e:2a:36:13:ac:dc:75:04:85:92:20:4d:
                    69:b6:5e:02:ca:f9:ac:ae:1a:47:cf:8e:25:96:25:
                    c3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:17:87:F8:37:FB:ED:D6:A0:A9:5B:E7:71:C0:33:D2:12:93:1B
            X509v3 Authority Key Identifier:
                keyid:89:2D:21:56:6C:CF:C3:BB:07:9E:C5:85:4B:04:4A:B8:09:80:41:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iS0hVmzPw7sHnsWFSwRKuAmAQVc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d597b0-6425-425f-b723-4eb8b0b49c4a/1/iS0hVmzPw7sHnsWFSwRKuAmAQVc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:a0:cd:ec:9c:4a:fe:c8:db:15:81:2c:89:9c:fe:4b:ac:38:
         b9:37:c4:a0:fd:8e:5f:36:05:0d:47:38:da:8a:6f:54:51:97:
         af:02:4c:63:91:a5:27:36:89:f0:2e:78:2e:d2:11:55:dc:e1:
         7f:25:ae:ab:a2:72:a0:2d:5e:51:bc:c2:28:28:55:f7:a5:a5:
         c4:15:3f:db:24:2c:38:93:03:d4:66:85:d8:82:5d:6e:7c:1c:
         c3:21:63:54:85:af:25:7e:ce:b8:8a:e2:2f:63:b9:67:5a:1d:
         66:e5:f3:22:f8:a1:f1:ba:f9:0f:01:d6:e0:ac:97:f7:35:81:
         9f:ce:f4:de:cc:e5:32:58:8f:31:0d:60:b7:80:58:6f:99:ba:
         36:ca:bb:da:73:33:05:53:6d:c7:0a:ea:1e:e0:63:14:b8:d1:
         8f:d5:96:b0:cd:b3:32:90:12:d9:95:df:4b:c0:62:93:cb:ad:
         2c:5a:5d:53:f8:d2:5c:1d:95:6c:fd:bf:6b:71:14:ea:7b:4c:
         36:d8:09:5f:d2:55:6e:4a:69:6e:cd:67:e9:a0:51:e5:9f:7d:
         1b:6e:36:83:f3:2c:72:2e:75:d2:f8:07:26:fa:b2:63:45:59:
         f6:70:31:33:5b:26:9b:ab:d4:e9:0c:81:65:6e:12:48:d9:6d:
         2c:1f:cc:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:26:23 2026 by rpki-client