This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File:                     AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier:          iGVpBElbnix/u3vhi+ztFIYheUNgZikglgqwYdC40mY=
Subject key identifier:   14:D6:60:79:86:B9:FF:89:FF:DA:59:55:59:FC:CB:26:1E:FB:5A:FB
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       019BF6516D4504AA94AC1767144BB1CF6933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number:          116A
Signing time:             Sun 25 Jan 2026 18:01:30 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:30 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:30 +0000
Files and hashes:         1: 1zy72V2wriaSR0HKRS6NKVr6ReM.roa (hash: 2UDDjiSozqkjCpyeYUYKzzS2k3igXU0suU9TIqRl8BM=)
                          2: 2A0tOUxx1jRAdQbbBEQYCyO6q2A.roa (hash: /b2wneTZen/fW0tEw9EyQoVhwLVdm5eunsXsaX5W9vg=)
                          3: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: vKByr4GipoP4FdCj9Ci8tcFJkzemp21Hli+e9aVrAKs=)
                          4: wC7Btg2M06QDjiihU8mKSzWp5h8.roa (hash: kuu4Nks2Rjh8eFlTc82CmwEI6yyNJcnC/Z9zLfsyT1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:6d:45:04:aa:94:ac:17:67:14:4b:b1:cf:69:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: Jan 25 18:01:30 2026 GMT
            Not After : Jan 26 18:01:30 2026 GMT
        Subject: CN=14d6607986b9ff89ffda595559fccb261efb5afb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:1c:0f:72:2b:29:02:9b:e8:c4:bf:a4:f2:
                    8a:4f:c9:04:6f:a5:79:9e:10:51:33:de:5c:bd:13:
                    0b:5b:58:2a:a4:e1:79:2c:3f:da:b1:92:8c:7d:5c:
                    47:f8:5d:90:49:c7:ca:4b:44:ca:29:00:14:86:77:
                    38:dc:0d:fb:7c:dc:a9:9a:6e:89:31:97:60:e6:50:
                    82:86:7e:cd:2e:45:f8:06:cf:a9:c4:7c:a6:83:74:
                    f4:99:21:cd:c1:9c:54:66:74:e7:50:22:27:33:f6:
                    2e:f6:a7:3d:10:82:90:d6:8c:f2:d6:4f:f7:a0:cf:
                    dc:95:7a:d8:59:8a:7f:7c:af:74:e9:43:de:58:5a:
                    bf:2e:fd:6c:d8:39:03:3b:bc:fe:d3:3d:54:41:6a:
                    23:3e:46:9e:6c:26:b8:fd:a6:94:fb:cd:bf:b4:b8:
                    fc:38:c3:62:b1:31:ae:d1:ed:7f:94:b5:5f:93:fe:
                    db:30:13:f9:54:58:b9:ad:ab:50:6d:90:62:90:0b:
                    45:ec:fb:c1:7f:b5:11:a3:10:76:ae:4b:f7:b0:a6:
                    14:e1:bc:1b:e1:97:b0:f1:08:17:df:6e:df:3f:be:
                    0e:01:6a:5a:58:59:09:a5:c6:fd:83:25:69:a6:2f:
                    53:17:21:95:c2:16:a9:d1:c9:ab:35:94:9f:7f:05:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:D6:60:79:86:B9:FF:89:FF:DA:59:55:59:FC:CB:26:1E:FB:5A:FB
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:85:14:a2:da:73:80:59:6c:41:81:fd:f7:c4:33:bd:a9:6c:
         e3:75:3c:7e:c2:dd:6f:b6:6e:99:54:d8:d7:92:18:dc:79:c6:
         c1:9c:86:40:34:a6:de:dc:1a:1a:fc:63:42:28:e1:a6:86:83:
         a3:f9:09:5a:ba:25:d8:4f:ea:10:dc:fe:d9:6e:72:35:ed:88:
         21:aa:7b:db:5d:37:eb:c8:e7:6d:1c:27:d6:af:68:58:37:6b:
         8d:e6:ce:36:52:d5:b8:c8:49:c7:94:b3:76:12:89:e6:14:db:
         47:11:c3:cd:be:ba:9f:5a:d5:8d:a3:fe:01:db:04:a4:1a:86:
         ab:3f:4f:4f:37:eb:54:dc:85:69:df:a9:01:f8:11:b1:98:35:
         69:2b:b4:1a:c4:f5:55:00:c8:38:59:06:70:85:bb:a1:4d:4e:
         cb:99:15:a1:c1:2b:ff:51:03:9d:a3:70:05:4a:c8:d0:6b:4c:
         d4:ff:ad:e5:44:cb:9a:a0:c4:f8:8e:52:68:b6:7c:88:ef:7c:
         24:eb:ae:89:04:fa:4e:40:2c:bf:e8:1e:71:6a:27:31:8b:c7:
         d8:d8:8d:9f:af:de:68:39:5a:e5:4c:4f:8b:5f:7e:4c:d1:61:
         99:a8:fc:b6:9b:d7:f1:17:cb:a0:cc:dd:00:f2:f9:1f:fc:68:
         23:78:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:20 2026 by rpki-client