This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File:                     rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier:          bkvLHpxJrotdk7TdSEWBjUUFzXGhh6Y1fzqyYOoZL4Y=
Subject key identifier:   06:F0:2F:86:1F:6B:FB:01:F9:01:D4:8C:12:54:07:40:D5:A5:C0:F0
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer:       /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial:       019BF350401464209E51FF5E8A56020AF1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 04:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:21 +0000
Files and hashes:         1: Z12VW2Oj1RQBcgh65gRC_a1KwqE.roa (hash: /a7senBqK2MBRmr1Qn/8yhUtEA4NdcKwqwCyWHEGON0=)
                          2: p4p1Pk1qfU_SW9Ve8k8RIi63JWc.roa (hash: Wra3ytDrU1p2ihMOSoZL7h8AIxob8hYx1NIw6YWVOAs=)
                          3: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: ba0Le07LfDjmJxCrq5o4P619ZOigO5RYW/dY0fmv3Wo=)
                          4: vKrnz1PqS6qb2zcTLwUYNYqlKd4.roa (hash: 1IT80fZU/ax5KvjXCy5/nxPjuHIDLBfsXUQ0YfHBn7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:40:14:64:20:9e:51:ff:5e:8a:56:02:0a:f1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
        Validity
            Not Before: Jan 25 04:01:21 2026 GMT
            Not After : Jan 26 04:01:21 2026 GMT
        Subject: CN=06f02f861f6bfb01f901d48c12540740d5a5c0f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:36:dd:87:5d:11:f8:3e:41:44:b7:bf:c8:07:
                    f6:dd:28:ae:ea:58:71:4b:cb:36:25:7e:16:74:12:
                    ba:fb:c8:4a:8e:57:90:4c:07:cd:39:f8:74:79:cf:
                    8d:d8:3f:b9:84:28:44:76:ce:4f:2b:c3:a9:52:02:
                    66:56:04:ed:b0:33:48:23:f1:0f:12:75:65:76:d3:
                    a8:a5:4e:e0:a4:60:3f:9c:36:29:cd:6d:72:b7:8f:
                    a5:78:ea:07:b4:76:77:3b:8a:80:d5:84:99:f9:82:
                    33:42:e2:80:4a:df:50:e6:dd:a4:37:27:36:3c:05:
                    73:e1:90:b8:1b:ca:e1:b7:85:a1:59:8e:67:cb:ae:
                    fd:39:f0:d5:fb:ae:73:e8:9a:59:c8:15:70:b3:54:
                    ae:2e:12:08:38:e2:69:fa:b4:9f:7d:55:84:a7:01:
                    db:ca:f1:05:c4:be:3b:fa:95:50:4e:42:3c:5b:1e:
                    61:2c:1c:59:71:a8:2f:1d:ff:ff:00:27:84:69:fc:
                    2d:90:b3:28:cf:d8:78:98:b2:60:4a:05:e9:3a:9f:
                    93:a4:54:9e:69:04:a4:af:7c:9d:df:74:15:c5:01:
                    67:e6:3d:ff:3e:f7:ff:57:f6:47:7a:07:ef:09:16:
                    5c:a7:6d:78:c9:d7:62:b3:9f:20:6e:52:3b:9e:d0:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F0:2F:86:1F:6B:FB:01:F9:01:D4:8C:12:54:07:40:D5:A5:C0:F0
            X509v3 Authority Key Identifier:
                keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:66:bd:18:5a:53:3a:d0:27:2e:cd:ac:dc:25:00:4d:fe:95:
         e9:e7:11:2f:48:52:fe:16:12:df:6d:b8:ff:12:b0:e8:9d:f6:
         5d:51:b4:28:16:75:47:ce:96:6a:77:a4:aa:52:9b:08:b7:e8:
         5d:35:60:00:0f:ec:dc:d5:28:0b:69:e4:ad:8f:ab:48:4e:b4:
         e8:4c:d0:9d:2f:ae:55:53:43:68:39:74:c8:17:59:1c:e5:7f:
         cd:7d:f3:96:b9:b5:f0:6c:b2:a1:d1:7b:a6:8f:38:b3:a1:05:
         86:73:6f:ab:e8:16:cd:71:f4:26:c4:e8:eb:41:e2:a2:28:cc:
         a7:d2:64:4d:a0:27:09:0e:8f:a1:84:cf:2d:56:bd:78:6b:e5:
         a9:ae:f8:55:e6:a3:96:b5:b4:c6:cf:ae:e5:df:5a:1e:37:b0:
         dd:7a:c0:23:a2:28:54:a2:f7:65:fe:52:de:4d:9b:ca:b9:02:
         00:f9:ff:d3:af:a9:83:6d:2d:f2:a9:71:20:f5:60:a5:84:60:
         42:0b:dc:50:ec:34:bd:d3:fd:3d:44:d7:ce:85:05:33:fe:62:
         1f:21:57:93:0a:40:7c:39:9a:78:a9:31:44:a8:0e:02:37:ef:
         f3:89:1c:7f:25:b0:ce:73:50:a8:cf:eb:ae:f5:10:5c:aa:34:
         57:02:d1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:24 2026 by rpki-client