This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
File:                     _1l7QMbURp-bkUp43I7EOTI7D7g.mft (raw, json)
Hash identifier:          3nYEFoiG3IEqiSf5PilRIdg/KXuOftnY/M12BR/ITn8=
Subject key identifier:   A4:0E:0D:F4:F0:E8:5E:21:B4:B1:BE:75:B2:BB:A5:8F:B9:99:00:19
Authority key identifier: FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8
Certificate issuer:       /CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
Certificate serial:       019BF6F5F3A9B4563690B9E5C74D821875FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
Manifest number:          118C
Signing time:             Sun 25 Jan 2026 21:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:12 +0000
Files and hashes:         1: _1l7QMbURp-bkUp43I7EOTI7D7g.crl (hash: NlaPE5R3FxRrfrZNqXe35/6KxzAy4O3skyfhDfkUlt0=)
                          2: aIdT9TU8Mchvi1KT8xDqqF_aYww.roa (hash: L0SKCt/IF1f3xCcEQuDLjZD6COmk+1+SlyBXGktU14Q=)
                          3: qfbmdAxrKJhL7MuKfw49467oMe0.roa (hash: tAJCqrPUfCnpIMZF6i2OOK4HRvotFOEnPGbHmvdQqEg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:f3:a9:b4:56:36:90:b9:e5:c7:4d:82:18:75:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff597b40c6d4469f9b914a78dc8ec439323b0fb8
        Validity
            Not Before: Jan 25 21:01:12 2026 GMT
            Not After : Jan 26 21:01:12 2026 GMT
        Subject: CN=a40e0df4f0e85e21b4b1be75b2bba58fb9990019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:68:3f:a5:d1:11:f9:12:b1:8c:b4:d0:4c:97:
                    46:58:9e:9e:c2:f1:59:e1:b1:ac:1e:2f:28:9b:c8:
                    db:f9:1a:7b:50:54:29:42:29:a7:d1:4f:16:07:b8:
                    0e:2f:e4:1a:60:46:44:b1:ac:7f:7a:9f:1d:bf:7c:
                    7f:01:4a:47:e8:89:0a:98:f7:77:d6:a3:be:00:12:
                    bb:05:e5:a9:93:8e:cd:9d:98:d6:1b:4e:61:63:75:
                    f6:2e:99:4a:93:c2:2b:d5:fa:c4:fc:a2:a7:67:5a:
                    04:5e:38:8a:89:4c:71:c3:4e:09:f4:e4:6d:a7:de:
                    3f:6d:06:92:d7:06:24:4e:c2:67:75:83:68:bd:84:
                    e4:a9:97:3c:c1:0b:bf:65:0e:97:61:8d:fc:55:ae:
                    3e:80:75:e0:5d:2f:f2:11:0f:85:47:3c:5d:e8:70:
                    fe:c0:3b:d6:f9:07:50:97:8c:8f:14:89:8f:2f:19:
                    63:89:81:1d:4e:f8:fa:18:6e:ea:a1:1b:70:a3:49:
                    e2:2b:b2:d9:cb:ee:54:2b:54:fc:fe:29:ca:1a:af:
                    f1:8c:9a:ec:09:99:47:c2:ce:90:5c:f6:e4:01:e2:
                    83:9b:3d:b0:f8:12:b1:f8:9f:f7:0d:7f:8c:92:e6:
                    36:fd:ac:85:9d:04:ed:f3:4a:c3:1f:fe:f2:b0:d4:
                    25:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:0E:0D:F4:F0:E8:5E:21:B4:B1:BE:75:B2:BB:A5:8F:B9:99:00:19
            X509v3 Authority Key Identifier:
                keyid:FF:59:7B:40:C6:D4:46:9F:9B:91:4A:78:DC:8E:C4:39:32:3B:0F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1l7QMbURp-bkUp43I7EOTI7D7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/bfb27a-f005-48cb-9473-ffb2ef4bfe25/1/_1l7QMbURp-bkUp43I7EOTI7D7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:97:b7:d2:dc:85:ba:7e:35:be:43:ed:34:8d:95:53:9a:
         e8:4c:46:3a:7a:3c:f4:0f:65:ca:7d:c5:57:bf:52:8e:b7:13:
         4d:25:9a:10:e9:82:82:df:74:0c:52:ef:ba:f3:3c:26:d3:0b:
         bd:18:3a:d7:4b:ac:fd:98:00:a2:c8:28:7d:dc:5b:07:1f:83:
         a9:8a:58:51:29:d3:f5:f4:81:1c:21:1f:45:d2:a3:46:e9:0c:
         a9:5c:47:16:a6:b5:2f:de:3a:d0:65:73:84:fe:d8:6a:07:93:
         a9:8e:69:b7:e2:52:d1:ff:e0:79:8d:e0:f8:b3:10:d9:8f:c9:
         f5:77:c8:94:86:7e:b9:6d:9a:da:06:84:24:b9:a7:c2:a1:c4:
         e4:4b:78:91:5f:f7:c0:21:02:91:2f:1b:a7:8e:dc:b7:6c:98:
         5f:4f:26:c0:65:ea:f4:3f:47:34:98:a9:36:18:cd:3b:86:7f:
         65:ba:35:74:5e:81:ba:c5:8f:f8:d9:b0:1a:6c:35:d5:b7:6f:
         04:3f:e2:a9:cd:2f:9d:42:0d:cf:68:f3:38:b5:cd:93:21:e9:
         90:89:85:f2:f8:61:7d:17:f6:2e:81:0d:a2:9a:8e:e7:37:80:
         b5:d9:a4:df:b4:f7:4b:2b:60:1a:e3:a0:83:3f:88:17:05:eb:
         7c:0e:ca:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:28 2026 by rpki-client