This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
File:                     98sUpB-NnmKNroj0dSgi_Hff7AI.mft (raw, json)
Hash identifier:          V8sWprw99wFBi6p9qzBm8fC1Kr3ryumACnL8dOIeTYQ=
Subject key identifier:   A0:25:EE:CA:D5:DF:9A:25:B3:43:97:B4:86:4D:BE:A1:D8:51:01:1B
Authority key identifier: F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02
Certificate issuer:       /CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
Certificate serial:       019BF5AC98964818F7F092480EC71470C1BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
Manifest number:          17EF
Signing time:             Sun 25 Jan 2026 15:01:27 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:27 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:27 +0000
Files and hashes:         1: 98sUpB-NnmKNroj0dSgi_Hff7AI.crl (hash: s8gZ4sdqAFrViwRVeyIl7/hfPl861ezjkuznzLn/VoA=)
                          2: ICjxcQK82ea7Xb7en5rLnCcbVD8.roa (hash: zddIqD4bnTjl0bvdvHZDyK9AYwU//2NAO0jrHUcMa98=)
                          3: Nio_RrZ5Nln0tYiAmsafEDW2mdw.roa (hash: vuFJHm7O0bajNnLfbrwtzNdm/nut7vgJNjCbdJojUQg=)
                          4: OwjPnlisGDUZdsOdhkm7WqfS97o.roa (hash: z+3nyFF5ATMpyCfr9E8+TN0uSx1GRXzgvEJpueI61iw=)
                          5: tg8sRY8C-CGe0j2_BQc-V9xv2NM.roa (hash: peV+2Yl1optmH9HpZPRl3Di4cbcQPUbyLxiY8B4DOuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:98:96:48:18:f7:f0:92:48:0e:c7:14:70:c1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7cb14a41f8d9e628dae88f4752822fc77dfec02
        Validity
            Not Before: Jan 25 15:01:27 2026 GMT
            Not After : Jan 26 15:01:27 2026 GMT
        Subject: CN=a025eecad5df9a25b34397b4864dbea1d851011b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7e:f5:27:bf:e6:ab:fb:7e:03:88:80:99:d7:
                    45:c2:40:fb:b1:48:12:10:20:2e:7b:df:17:ef:87:
                    da:13:f5:c0:67:e1:3a:ef:29:a4:b9:58:46:8c:02:
                    c4:39:fe:54:a8:fe:4d:f1:08:e2:92:ea:8f:43:ca:
                    c1:f7:24:a8:fc:a6:e5:51:4a:bf:5a:f1:32:7d:bb:
                    f0:e6:39:73:35:63:7a:cf:ff:14:6c:32:99:c8:a0:
                    14:73:35:b5:21:e9:a2:0c:a1:e3:1b:7b:14:b6:31:
                    42:8e:15:1d:39:1a:e7:6a:78:88:f1:f5:e1:28:b0:
                    66:84:49:d6:fb:e2:d8:09:83:40:ff:51:62:d7:cf:
                    41:22:ee:72:c9:84:9d:2d:93:8c:d6:d5:2c:d4:60:
                    90:28:3e:f4:63:d9:1d:c8:2d:17:64:c0:cb:a4:6d:
                    ef:ff:f3:6f:30:41:06:c0:36:62:cb:25:58:8c:d3:
                    40:c7:87:ba:3d:84:b3:96:c1:8e:ce:8e:ae:19:1e:
                    18:78:0c:94:bb:02:0f:49:54:85:dc:dd:56:9c:ea:
                    1b:4f:56:89:cb:5e:61:cd:e4:02:2d:55:8c:ef:c9:
                    06:30:eb:f4:12:ec:e2:8e:c0:50:80:ea:66:18:73:
                    bf:50:c7:ec:66:ea:95:b2:c5:ab:5f:51:a8:17:71:
                    85:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:25:EE:CA:D5:DF:9A:25:B3:43:97:B4:86:4D:BE:A1:D8:51:01:1B
            X509v3 Authority Key Identifier:
                keyid:F7:CB:14:A4:1F:8D:9E:62:8D:AE:88:F4:75:28:22:FC:77:DF:EC:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98sUpB-NnmKNroj0dSgi_Hff7AI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/890311-48ee-486d-9359-e7ee4e75d3af/1/98sUpB-NnmKNroj0dSgi_Hff7AI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:da:7b:9b:72:49:a0:32:b1:05:7d:5f:d2:49:b0:59:39:cc:
         71:9c:a3:67:f5:a6:9b:ad:c6:5e:47:50:64:a9:88:6b:5d:ee:
         76:82:90:a7:23:b2:05:65:a6:35:1b:8e:84:cb:97:de:ea:28:
         1d:fe:ae:bd:11:51:f5:2d:8f:5e:9d:b6:0b:3b:e9:ec:14:10:
         b3:d7:5d:90:58:e1:51:83:39:0e:ca:3e:7d:e7:97:1b:ea:30:
         e6:3f:92:f3:e0:55:5a:db:90:e4:75:4e:68:06:8c:27:6d:c9:
         1f:1c:99:08:dc:b8:78:4c:6a:dc:d5:7d:a3:db:41:9a:4c:99:
         13:a7:0a:79:c4:c7:49:81:d1:25:1c:a1:dd:5f:18:57:dc:ff:
         52:ab:68:8b:ed:ea:19:bb:43:a8:7c:16:f7:2f:b5:54:61:0f:
         70:eb:ee:c8:2f:b2:71:04:19:6b:40:a2:c7:85:3c:23:73:93:
         9e:90:80:c5:05:13:1a:49:e2:e4:db:13:3c:98:03:c1:c5:ad:
         ab:a1:64:1f:b6:7d:2a:a7:71:9f:aa:7a:45:20:bc:b8:74:7c:
         57:52:8b:99:2a:56:a9:5c:b6:f6:42:da:de:5a:b8:89:1b:a7:
         af:13:27:e7:33:9b:ce:ab:8a:b5:c9:3f:74:d8:20:30:49:42:
         fb:81:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:05:13 2026 by rpki-client