This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
File:                     cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft (raw, json)
Hash identifier:          EmqMKQ77gr32Lq/kHtCzpslr7fitgimYoD3/PEjWuYM=
Subject key identifier:   4F:5B:AD:68:DE:95:6F:41:55:1B:30:DD:38:72:B3:27:B8:A9:70:F9
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Certificate issuer:       /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial:       019BF808320E288D43B7ECF7C1581B4A5746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
Manifest number:          17F5
Signing time:             Mon 26 Jan 2026 02:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:45 +0000
Files and hashes:         1: 8X1225-qrYaCRSnh7mmRzgHfQF8.roa (hash: INaosQfuVcg12zG5pp0XJSH17V0rkeHtVSpqdJnqrZ0=)
                          2: YQyno2lKbE7U5BS3xEbq3yXKIm0.roa (hash: jna4Y3wHaJJscui1Bqpz3qs+hJypi2Zl9JxVd4/tujw=)
                          3: cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl (hash: qyhrJX5Ye7FBMlei7PrNYW7hXyCFS2Jz29wCFjLIEJ4=)
                          4: xofP0vR2GRdVVsSvPDa0VtVkEXQ.roa (hash: /8DfX5cmYB17XvXmzLIRZPN74OLUvtImYga9Uzx5tUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:32:0e:28:8d:43:b7:ec:f7:c1:58:1b:4a:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
        Validity
            Not Before: Jan 26 02:00:45 2026 GMT
            Not After : Jan 27 02:00:45 2026 GMT
        Subject: CN=4f5bad68de956f41551b30dd3872b327b8a970f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5f:ae:79:78:6a:02:03:4b:20:78:81:83:05:
                    a4:cf:9b:1b:be:f6:13:42:cc:04:48:5b:65:5e:fa:
                    fc:fb:27:78:e5:77:4b:9f:68:49:da:df:61:d3:fb:
                    c0:d7:18:9e:0b:9c:d0:b5:b9:c9:ea:7b:50:2d:89:
                    32:c1:22:8d:60:f0:53:38:8d:ee:34:2a:55:96:86:
                    34:99:51:71:e9:44:88:6e:ea:6d:47:bd:0a:1e:25:
                    81:41:9a:f4:69:dd:0c:1d:83:43:51:20:28:3f:ec:
                    d1:c1:2e:b1:41:d6:72:57:04:22:0b:fc:77:8c:55:
                    fb:81:8d:62:0c:f0:26:4c:c9:1c:d2:98:d2:f6:51:
                    6c:06:ae:71:d9:19:80:3f:c1:a3:44:cd:e3:ac:32:
                    11:39:1b:6d:0f:91:41:38:e4:f4:68:d3:43:04:74:
                    6a:8c:2e:61:bc:06:03:8a:4e:3e:53:0a:0b:88:b7:
                    87:22:a6:49:ec:d1:ce:01:0d:b8:a0:06:01:b7:24:
                    2b:50:51:51:97:e4:ac:b1:8a:80:95:db:0a:6d:3f:
                    10:3a:18:58:cf:8a:5c:f9:b5:51:3b:d8:a7:d6:05:
                    67:46:4a:1b:c5:60:25:54:b6:43:51:3f:cd:b0:bc:
                    39:67:d1:50:62:1a:53:c6:20:a3:44:48:13:35:ea:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5B:AD:68:DE:95:6F:41:55:1B:30:DD:38:72:B3:27:B8:A9:70:F9
            X509v3 Authority Key Identifier:
                keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:5a:ab:ee:5b:39:8e:0d:3a:cb:d6:fa:b0:24:0b:57:49:b1:
         7f:46:df:e7:6d:a4:54:6f:11:28:41:6d:a6:b1:06:94:12:6a:
         e2:16:0f:2d:46:c7:fc:bf:92:bd:71:44:47:8a:31:ca:8e:ec:
         72:3e:ef:7a:a9:34:af:8e:34:90:18:f7:47:9e:8d:df:72:6b:
         61:01:13:7c:e3:eb:68:35:cc:4f:13:19:fd:7d:8a:c1:27:c7:
         2b:0c:db:52:7d:15:80:c4:03:39:f5:45:58:dd:8b:0e:54:7b:
         88:f8:e1:dd:0b:05:70:06:6c:09:bf:0f:8d:a3:f3:4f:86:b9:
         e4:c6:b0:3c:05:a5:98:1f:56:43:b3:fc:5d:be:b7:1b:24:19:
         81:f7:cc:7f:12:31:f0:d3:d1:31:62:4b:68:46:ee:b9:5d:b8:
         fa:ea:57:f2:c6:b5:c4:41:e6:98:89:77:6b:78:1f:90:73:79:
         8e:55:55:62:e8:6b:e9:d1:fe:a7:2d:6f:e3:1d:2c:16:07:a0:
         8e:64:6b:b4:17:02:59:23:8d:52:13:c7:ca:11:6d:81:1f:0f:
         e3:8e:c6:db:18:f7:f3:fe:9b:69:ce:f4:43:74:b5:54:94:50:
         c1:bb:a0:27:c4:a1:24:dc:86:c1:4f:0e:c9:d4:14:b9:dd:77:
         6c:c7:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:21 2026 by rpki-client