This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
File:                     _MymLL50MyhVVIOoV-Uhhj-VO0E.mft (raw, json)
Hash identifier:          C3Y/LC5acD0NcJufY1zqfG3i1Q66VBxb+L8U//Zr8ag=
Subject key identifier:   69:65:52:06:DF:41:72:7B:A5:9E:15:17:30:B2:94:98:F2:78:2E:E0
Authority key identifier: FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41
Certificate issuer:       /CN=fccca62cbe743328555483a857e521863f953b41
Certificate serial:       019BFAD2A5B4752D376F1F3E8D9E30B909CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
Manifest number:          17F1
Signing time:             Mon 26 Jan 2026 15:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 15:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 15:01:07 +0000
Files and hashes:         1: 0e9iOLuY-VIVNiIfK5_3Cw3JxK0.roa (hash: eUFnT476Jfsu0/FY9gXV5DmKWzCX73qwAb1b7nuk3JU=)
                          2: _MymLL50MyhVVIOoV-Uhhj-VO0E.crl (hash: yxCLL6E5QJxqQPotrP4CMAqjxZ/06uujWHbGWTybjnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:d2:a5:b4:75:2d:37:6f:1f:3e:8d:9e:30:b9:09:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccca62cbe743328555483a857e521863f953b41
        Validity
            Not Before: Jan 26 15:01:07 2026 GMT
            Not After : Jan 27 15:01:07 2026 GMT
        Subject: CN=69655206df41727ba59e151730b29498f2782ee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e2:0f:cd:1b:c4:eb:ce:cc:fb:1c:6f:d5:ac:
                    1a:96:1b:af:7c:e2:26:db:43:ff:41:aa:17:18:97:
                    f1:ec:b4:59:c8:f6:13:15:d2:6b:5e:34:82:4c:ec:
                    99:b1:04:07:9a:bb:7e:f2:d3:5d:60:97:e6:e6:0a:
                    02:bc:c7:51:39:bd:5f:d3:df:15:97:16:86:eb:84:
                    18:3d:d8:42:87:9b:bc:e6:c8:8b:65:08:ee:f2:f2:
                    8f:1f:87:8f:65:a1:91:fb:26:be:df:aa:fd:5c:9b:
                    64:79:d2:c3:3e:63:26:9a:b1:95:ba:24:f7:d3:1c:
                    ed:90:98:4c:6f:e3:ec:51:7b:d7:ad:9f:77:69:3f:
                    61:b3:fa:66:81:42:f1:c5:a0:6b:95:56:31:7b:5d:
                    dc:84:80:24:68:18:c8:a3:89:7a:bb:da:61:84:ce:
                    2e:80:d5:0e:6b:f2:2f:f4:bb:99:df:76:ed:ac:67:
                    5d:69:31:ac:5d:db:36:07:e5:57:26:cc:30:85:bc:
                    50:70:66:df:c3:8f:ce:59:59:af:c0:c1:38:5a:ca:
                    d3:56:18:e6:47:2c:b3:b7:01:09:6c:a9:b5:7f:78:
                    15:3b:5c:8b:d1:b5:b8:1f:7d:d5:f2:67:42:2e:d5:
                    d1:44:7d:f1:f0:9c:94:30:f9:83:0c:b3:d3:ef:e6:
                    5f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:65:52:06:DF:41:72:7B:A5:9E:15:17:30:B2:94:98:F2:78:2E:E0
            X509v3 Authority Key Identifier:
                keyid:FC:CC:A6:2C:BE:74:33:28:55:54:83:A8:57:E5:21:86:3F:95:3B:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MymLL50MyhVVIOoV-Uhhj-VO0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d2e43d-1faa-40b3-b012-ee64c6e71bfb/1/_MymLL50MyhVVIOoV-Uhhj-VO0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ce:e2:ac:44:6f:44:4a:57:b8:a5:97:e5:84:a7:a4:fb:bf:
         3c:9b:a2:16:15:28:06:47:3a:c4:6b:30:7c:7c:99:43:28:c4:
         6f:92:57:cd:c0:fc:e5:89:29:92:d4:f3:c2:02:60:fd:80:e4:
         7b:ad:91:51:07:5d:eb:ac:68:79:a9:18:2c:33:8c:dc:bf:83:
         bd:71:db:81:f1:52:b6:d2:0a:74:8f:51:76:c1:29:eb:f8:47:
         d9:55:ce:a4:40:c8:e8:a8:ea:d1:67:6f:b1:8a:22:5c:a5:91:
         71:e1:66:93:d4:47:43:7c:e3:6e:bb:49:0c:c1:21:54:bf:57:
         66:61:8a:04:13:32:41:19:49:cd:1d:23:e2:95:0f:78:79:3a:
         f3:12:12:d9:f5:76:fe:2e:d4:9c:93:37:51:75:b5:7e:ab:c4:
         e5:73:74:30:2b:0b:6c:1c:f7:86:fc:03:93:72:a5:d3:3d:d9:
         5a:e5:2d:19:c4:b9:62:6e:8d:a4:06:b4:df:d9:29:02:bd:2d:
         be:d0:9f:17:63:e0:9f:f3:06:b4:34:45:e5:dd:35:a4:9e:42:
         42:f2:69:c6:32:31:66:2c:42:34:97:9c:bd:d5:6c:6a:11:3e:
         ae:b4:0d:ac:28:fb:c8:dc:c7:b8:5b:86:33:c7:e4:8d:9c:85:
         c0:2b:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:14:46 2026 by rpki-client