This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
File:                     27ZTu9FwTEe62mKrbONQIwfyRLY.mft (raw, json)
Hash identifier:          RzINZ2h24y/R0swdnS4qYVjygq+FdgIpzUq+kOPjdK4=
Subject key identifier:   68:83:AB:38:DC:6F:EE:37:44:D5:F7:77:64:08:C0:4C:71:4A:FC:F1
Authority key identifier: DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6
Certificate issuer:       /CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
Certificate serial:       019BF876A515D952DF49070A4948F690A99A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 04:01:23 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:23 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:23 +0000
Files and hashes:         1: 27ZTu9FwTEe62mKrbONQIwfyRLY.crl (hash: Wb6ppTP8DbCo3lO5FdwaHy+Jfi5/8KeqC+lkZ12SFq8=)
                          2: YKIZEXPg8oheZp7WpP7OU246ru8.roa (hash: Q2zcLyXdsWeX4PkdcMwGBRDhiV4NlfFDZoV6YyWN27s=)
                          3: ryr3m4Zwdzrwhy1VJMY9q7Nd274.roa (hash: GE/9jCmc5lF87tDmPaGk9SCOllCN178iR70DGke83Xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:a5:15:d9:52:df:49:07:0a:49:48:f6:90:a9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbb653bbd1704c47bada62ab6ce3502307f244b6
        Validity
            Not Before: Jan 26 04:01:23 2026 GMT
            Not After : Jan 27 04:01:23 2026 GMT
        Subject: CN=6883ab38dc6fee3744d5f7776408c04c714afcf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:f7:35:5e:b9:c4:a4:22:93:f1:f0:83:cc:
                    ab:8a:3a:47:f7:01:9e:b7:92:7a:9a:f4:00:17:8e:
                    af:a3:30:51:dd:bb:42:d8:7f:28:0d:0c:91:47:2e:
                    ad:bd:94:f4:eb:f9:c5:92:a8:5f:8b:97:27:aa:ff:
                    af:a8:ee:73:ad:0a:90:84:6b:47:9f:5e:66:61:9c:
                    45:95:62:5a:d6:8f:17:a2:68:bc:9a:45:c2:d4:1d:
                    e8:c4:e5:be:b9:0c:9a:94:8f:b7:7d:9f:b1:57:cb:
                    0c:02:83:87:e5:98:88:94:2e:2b:38:08:bd:2c:d9:
                    86:19:88:fe:86:db:82:45:b9:8f:a4:97:86:c2:bc:
                    aa:70:b6:db:77:5b:61:ef:53:f8:17:96:76:fe:d5:
                    16:c4:97:b9:57:08:da:5f:46:5a:43:39:41:bc:db:
                    5f:a9:5a:9e:6d:91:2d:84:75:8c:72:f8:f9:ef:4a:
                    c5:2e:6a:85:6f:9a:74:3c:1e:7e:a4:1c:31:c8:88:
                    7a:94:ec:a7:ea:ad:78:86:df:65:71:c0:cc:bb:24:
                    99:ae:a6:ce:b2:2a:7e:86:02:c5:e3:5c:53:da:85:
                    26:2b:f2:6c:31:f2:5d:bf:71:bd:77:af:14:45:52:
                    16:98:3e:55:be:54:10:cf:7d:19:9d:64:ed:cc:8a:
                    ca:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:83:AB:38:DC:6F:EE:37:44:D5:F7:77:64:08:C0:4C:71:4A:FC:F1
            X509v3 Authority Key Identifier:
                keyid:DB:B6:53:BB:D1:70:4C:47:BA:DA:62:AB:6C:E3:50:23:07:F2:44:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/27ZTu9FwTEe62mKrbONQIwfyRLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/8060df-a6f7-4166-a929-a980bed33ab0/1/27ZTu9FwTEe62mKrbONQIwfyRLY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:23:96:4e:ec:d4:b9:d5:38:e9:bf:e9:c0:a0:be:56:b6:9a:
         a4:29:27:93:b2:76:9f:cd:17:ca:02:e9:63:c6:1c:c0:33:39:
         4e:0a:fd:b4:24:23:15:47:f3:9d:c5:92:89:ad:a1:69:98:7b:
         fe:60:07:a4:77:6d:db:2e:c2:a7:22:19:57:02:c0:ad:e6:d1:
         7d:5e:12:f7:4b:5d:1c:02:ee:e4:11:c0:e1:bb:ac:31:94:0b:
         be:a1:c4:52:a0:e1:e9:6d:8b:03:92:ab:ba:c3:9f:68:57:0c:
         1f:43:51:6f:ec:ae:52:4d:45:a9:e2:b9:3e:a0:45:e2:9a:e5:
         b7:a7:0b:be:f1:be:ca:13:08:53:44:8b:99:f8:95:bc:e7:d8:
         e7:9b:9a:b0:19:5e:77:f9:23:d3:1d:f7:22:35:4c:9e:43:f3:
         50:82:5e:2a:d1:56:7d:19:1e:99:8c:70:8e:42:4c:f9:74:c2:
         de:32:78:e4:97:e3:65:58:eb:6b:17:2f:e8:20:5d:0c:9e:f5:
         c4:65:20:88:22:44:67:d2:49:b8:ac:9d:aa:8f:c1:0c:61:31:
         a6:c2:4a:66:a4:be:be:60:db:2b:b4:92:34:3c:17:e6:f7:27:
         68:7f:1b:b4:55:3e:97:45:e0:d0:6b:5a:47:c2:12:a3:9d:41:
         85:90:17:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:05:26 2026 by rpki-client