This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File:                     sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier:          wg3ADojJNa7YKNW7GZwUEeQHFkAeUgrUMSgLtwIndck=
Subject key identifier:   10:8A:27:C3:2B:CD:FF:71:E2:32:A2:7F:7A:BA:31:47:25:F9:17:74
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer:       /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial:       019BF83F8482E05A633AAF65BC802887E368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 03:01:10 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:10 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:10 +0000
Files and hashes:         1: QvWAgIyFSp81QP1TU8EGOihTFps.roa (hash: 0pRqWv7OjhSbMQbgWqXrmBArFyxBxLPUemQb9GCiO7A=)
                          2: TQm8goqjLVI6iJwXimERg01NkD8.roa (hash: Yb9LvZhPI+JqfVckpy3u12GtucpcmDjrrqhMvFWHU9U=)
                          3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: cu6VL9qxdiJNiYbN3MohIoxiEVQnmeOc+K9b3RFZuDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 03:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:84:82:e0:5a:63:3a:af:65:bc:80:28:87:e3:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
        Validity
            Not Before: Jan 26 03:01:10 2026 GMT
            Not After : Jan 27 03:01:10 2026 GMT
        Subject: CN=108a27c32bcdff71e232a27f7aba314725f91774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:08:92:d5:2b:74:a3:97:42:05:14:74:ad:3f:
                    2d:79:89:a5:6f:4c:b8:08:3a:88:80:00:a2:eb:69:
                    d8:5b:f2:9a:1b:e7:88:95:18:1b:1a:6b:a6:a3:0f:
                    a6:1e:69:54:a2:3c:dc:ce:c2:18:9f:1a:5b:9c:17:
                    1c:3c:57:61:0b:38:89:2e:e2:a4:3f:53:c8:b9:4b:
                    2c:5e:d2:a7:0a:d2:36:2b:3e:13:13:97:18:7a:b6:
                    69:e7:d3:72:19:66:16:62:d0:f9:fd:bb:20:c8:a0:
                    47:7d:07:31:8c:94:80:26:7c:2b:ef:a1:a2:da:1e:
                    0d:20:fc:af:a4:9d:66:2a:01:1f:d4:4e:9d:98:78:
                    d3:a6:d4:82:ea:65:5d:48:11:8d:d0:d9:4f:0b:0b:
                    f2:c7:00:3b:e9:a3:3a:8b:17:89:8e:90:e4:ce:9e:
                    16:1b:b8:e6:c7:69:75:c0:7d:73:7e:09:2d:77:59:
                    c5:88:65:41:ad:a8:4e:f3:ed:30:43:49:ff:e0:dc:
                    41:b5:b0:a4:3d:6a:8d:9f:c8:03:de:3d:1d:97:c1:
                    fd:ba:af:c2:c4:3e:e9:eb:39:f4:0d:e2:db:53:6d:
                    9b:bc:30:0a:93:ac:be:1f:2e:cb:01:f7:98:e9:47:
                    23:38:7d:1e:a1:6b:41:fa:41:85:e1:bc:c8:95:26:
                    0d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:8A:27:C3:2B:CD:FF:71:E2:32:A2:7F:7A:BA:31:47:25:F9:17:74
            X509v3 Authority Key Identifier:
                keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:56:ee:da:89:b7:80:e6:17:c7:38:25:db:05:6a:e8:66:e5:
         b0:52:2c:22:ec:65:20:d2:24:d3:84:43:3a:5d:4b:ed:60:45:
         c8:e4:59:6c:7f:38:e1:9e:57:2b:df:e9:fb:c5:33:4e:7b:e8:
         4a:da:85:f1:ab:06:05:a6:9b:d0:a9:7a:a7:13:b7:1f:62:9a:
         02:c2:75:56:84:fd:d5:cb:ee:40:0a:4c:13:df:a0:f2:df:54:
         4b:96:8d:e7:32:3e:5b:5f:bd:2b:43:22:a5:72:ed:99:45:62:
         a8:6b:fe:e9:84:e7:cf:6b:d7:5e:4b:b1:16:b5:e5:b4:da:00:
         05:cd:0f:95:7b:2a:70:c2:f2:d3:5e:d1:fc:5b:bf:e6:33:b8:
         18:22:50:33:b5:3b:00:58:94:08:66:36:18:60:4d:11:e1:ac:
         22:6d:dc:3e:c1:12:42:63:3d:4e:03:29:97:ca:33:63:b4:db:
         de:f0:e2:f7:ee:f2:fb:11:a2:cd:55:9a:58:41:da:c0:33:1f:
         5d:0b:cc:a6:c6:ab:77:ea:89:42:35:88:14:7e:db:bb:c2:7b:
         79:d3:ed:19:48:0f:a6:3f:dc:27:79:ad:d4:a6:ef:e3:9a:27:
         00:97:5e:68:99:77:20:98:d1:a0:ad:a4:0d:64:e2:95:f7:51:
         c9:f2:32:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:46:47 2026 by rpki-client