This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File:                     c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier:          WhjcDcuK/vV+rDKAOCuhInB6C96DwM8TNwVwG7UoK6s=
Subject key identifier:   8E:09:88:B3:7C:D9:7E:4E:04:07:04:04:68:7C:25:1A:71:FD:57:F7
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer:       /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial:       019BF2AB8B351D242E50B08AB639177EF05E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number:          17F0
Signing time:             Sun 25 Jan 2026 01:01:27 +0000
Manifest this update:     Sun 25 Jan 2026 01:01:27 +0000
Manifest next update:     Mon 26 Jan 2026 01:01:27 +0000
Files and hashes:         1: IwITwGp3B4_pSMBNtVpyOQEaMCE.roa (hash: DL9ccQKNzsDchyhG4KBBhWIj3j9jhXmlBTwSGH+MLOI=)
                          2: aX67thVuhkTa2S1WbEsDaaxyx_U.roa (hash: e6/sW4ioMZgIWgsgRys4jC3T5C0ZPSKh0y+ZX7aZe5E=)
                          3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: yFdPR7zH5w7mtHc8rTxQ5edmFJ6mcFPvFehGR5nIpzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:ab:8b:35:1d:24:2e:50:b0:8a:b6:39:17:7e:f0:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
        Validity
            Not Before: Jan 25 01:01:27 2026 GMT
            Not After : Jan 26 01:01:27 2026 GMT
        Subject: CN=8e0988b37cd97e4e04070404687c251a71fd57f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0d:92:0b:fe:63:37:c3:83:08:12:84:a4:e6:
                    c1:d4:a3:a4:3c:c7:f9:cf:75:ef:2c:20:30:1c:2d:
                    52:ad:07:84:ad:47:fd:d2:80:85:9e:5b:75:b6:c3:
                    5f:d2:72:f6:11:a7:8c:9a:5f:fb:a4:e2:8c:7f:1c:
                    9d:39:8b:e4:1b:45:e0:dc:f1:1b:c2:9f:58:8a:3e:
                    b2:a3:c2:7d:bb:fc:21:0b:22:6d:da:84:6d:21:c3:
                    47:a9:52:cc:3e:79:4d:1e:c0:8b:c9:8f:fd:f4:48:
                    7e:79:41:80:ab:fe:42:fe:fa:38:9e:b4:be:6f:ee:
                    82:8d:32:50:f6:fe:0d:48:20:bd:b2:60:a8:2e:66:
                    cd:35:14:30:26:bd:4a:66:8a:f5:73:7f:51:c7:45:
                    3d:c4:d4:ee:e5:66:96:45:ce:9b:1c:86:d3:1a:0f:
                    28:37:e6:42:1e:d5:eb:0d:87:e1:85:72:46:67:e2:
                    20:76:9b:d2:81:14:d2:aa:e8:8a:5b:d3:cc:d9:ca:
                    00:54:f1:44:11:56:bf:07:0e:eb:a3:1c:7e:e1:9b:
                    4f:35:41:89:d2:f7:7a:e0:aa:ad:7d:cd:09:11:8a:
                    6d:10:01:5f:61:d6:56:d5:c0:f9:88:f4:b1:57:cc:
                    3a:93:57:ee:f8:e5:c8:3f:45:df:8e:2c:ed:13:b0:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:88:B3:7C:D9:7E:4E:04:07:04:04:68:7C:25:1A:71:FD:57:F7
            X509v3 Authority Key Identifier:
                keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:f8:84:b4:ce:fc:66:94:02:0b:23:29:72:83:e7:e8:fe:
         22:51:0c:ba:d8:2c:8e:c0:b6:5f:e1:b6:9c:ca:8f:14:01:f9:
         e3:ea:40:e2:f6:c1:10:c3:3a:72:f6:e1:28:cf:fe:2d:de:ec:
         2d:de:da:38:57:39:b5:25:fd:e8:f6:93:3a:7d:47:f2:8b:6b:
         1c:61:64:7c:4c:09:d0:ab:88:d8:dd:f7:34:31:ae:7b:fb:47:
         c9:07:3a:c9:9c:48:21:1d:63:9a:35:2f:d0:24:fe:c9:35:9e:
         66:11:65:fb:dc:a2:8f:0f:51:3a:7e:86:9a:91:b0:8e:d1:b8:
         04:28:b0:c5:fb:d1:db:66:08:bb:d4:33:ca:42:3f:64:28:66:
         1a:2b:e2:a1:eb:26:f6:48:54:f1:11:2c:34:ca:65:68:e2:c5:
         f3:e1:36:aa:5e:a9:c8:16:f2:47:15:b3:57:85:86:fa:9b:c6:
         e6:47:f2:da:ba:2b:db:9b:14:0f:92:10:55:29:4d:97:75:66:
         a5:d0:c3:f5:88:e8:be:7e:37:56:a5:72:2a:cb:9e:ab:6f:3d:
         40:c8:a0:b8:70:05:57:cf:5f:29:51:45:4a:2e:19:19:a3:df:
         77:20:77:e2:36:e4:dc:24:1a:4a:f3:f4:79:e7:83:91:a3:33:
         fb:b3:00:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:07:06 2026 by rpki-client