This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File:                     ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier:          mihkC4kItb1E28Pad4VRheQ5p6jq3o0vTFy0B9tSGCk=
Subject key identifier:   FD:12:9D:C6:01:C2:4D:0A:8E:A2:43:CD:1F:98:2F:17:70:C1:C3:47
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer:       /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial:       019BF53E9C96A92F6FBCEB21A3D8552A5D4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number:          1295
Signing time:             Sun 25 Jan 2026 13:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:19 +0000
Files and hashes:         1: NlBBiPNjXDRFtCk_AZIxS1Dx7J0.roa (hash: bjhWsZ/wa6AH82ETFpbDw+CIP4gJfBrDvOOjz717MoY=)
                          2: ib1U59acFH1rVvjGognT3q6id90.crl (hash: A/Tl5QeRoGsfwn4nFmVezLBV2lp2oOKaQAnLrJiBRB4=)
                          3: xe3xZx3T1nKXLVrwCoQvj5FQuOs.roa (hash: Oh3fgAVKVsH+R7XbFy5HM0U29rpdkHugOvIbh7/mWJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:9c:96:a9:2f:6f:bc:eb:21:a3:d8:55:2a:5d:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
        Validity
            Not Before: Jan 25 13:01:19 2026 GMT
            Not After : Jan 26 13:01:19 2026 GMT
        Subject: CN=fd129dc601c24d0a8ea243cd1f982f1770c1c347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:5f:cf:14:d8:3f:7f:5b:e3:27:37:4f:ea:
                    b5:3c:46:c1:8d:c1:fd:81:d6:bd:b9:33:16:5a:8e:
                    2a:04:a0:11:97:c0:11:7c:08:c6:92:13:7c:d7:04:
                    7f:f7:1e:06:88:25:50:58:1f:58:91:a3:21:3e:b3:
                    08:6e:20:47:be:c5:01:b0:72:ca:e6:e1:63:cd:f9:
                    ab:8f:d6:52:b1:87:05:b6:e2:94:ce:bb:78:7d:d8:
                    76:9f:ab:33:51:34:67:c9:19:ce:c3:93:43:26:4b:
                    b4:a7:83:5f:13:d7:08:58:33:e3:47:dc:d0:9b:28:
                    04:2f:ee:a8:0a:82:7a:6a:14:d8:e1:3d:54:9f:e0:
                    f0:76:45:72:40:7f:0a:67:c6:23:16:b9:d3:4b:07:
                    2a:18:d1:2e:5f:a9:7f:0d:9b:0a:85:3f:ee:b8:f2:
                    7d:78:ce:66:13:de:45:ad:27:ca:19:0a:76:f5:b3:
                    2c:53:03:fa:bc:bd:f0:1f:19:52:75:52:f7:ec:20:
                    3a:7a:ab:2d:46:47:18:5e:a5:d6:d0:86:c3:77:7f:
                    90:29:c6:5c:24:89:5e:64:08:5f:9f:d9:a1:3d:5d:
                    1d:96:87:2e:80:4f:ac:75:03:39:5b:6f:98:eb:85:
                    e2:32:5b:55:98:98:f4:cc:31:f1:c1:6f:31:c8:19:
                    91:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:12:9D:C6:01:C2:4D:0A:8E:A2:43:CD:1F:98:2F:17:70:C1:C3:47
            X509v3 Authority Key Identifier:
                keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e4:f0:92:2f:33:83:8c:83:72:58:4e:de:b8:40:aa:1b:f2:9b:
         ac:45:1c:d6:dd:77:d7:dc:3b:a2:20:46:34:f9:1b:a0:c0:53:
         37:f2:d3:ac:38:cf:ea:8e:0f:4b:e8:3f:11:0d:7b:cc:c2:b9:
         65:15:84:0b:8d:c3:65:e7:0d:95:50:e9:63:2f:1d:9c:ab:1f:
         0e:18:c7:54:87:43:99:ad:80:7f:67:e7:93:75:02:2e:cc:29:
         41:96:95:bf:77:53:bb:c2:d3:6b:28:7e:c0:cd:21:50:00:57:
         e3:26:a4:b0:f4:ce:89:23:93:6a:b8:45:15:53:8f:09:9b:11:
         08:8b:94:b3:60:3b:b7:a7:88:96:74:e8:1a:62:78:26:4e:b6:
         3a:db:8c:3a:3c:6c:fb:13:8c:17:ed:a5:35:fa:59:82:9e:f8:
         e9:27:f6:1f:e8:b0:8a:54:fa:5c:72:36:2d:80:91:27:c0:0a:
         29:d1:e1:d2:cd:b0:79:45:99:5c:f7:81:3a:61:e9:97:d0:a7:
         ae:5f:43:a9:92:77:05:fc:55:a0:4b:b8:04:b7:7b:44:d4:8e:
         8b:a3:0f:fa:45:cd:07:8b:cb:32:b5:80:53:eb:a6:d1:22:84:
         0a:b9:b1:40:e1:8f:ea:75:33:c4:03:27:7d:a5:b3:8f:01:07:
         a5:ba:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:05:08 2026 by rpki-client