This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File:                     fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier:          pn9vTYOSiHomLKMeT+F5i34WNq6yauhd8omGEfLxIXE=
Subject key identifier:   D6:08:F6:47:51:EE:0A:DC:7B:E1:79:DA:CB:6F:1C:84:28:86:38:CD
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer:       /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial:       019BF79B03188697C2D2A6FD8E2B8AF544BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number:          F0
Signing time:             Mon 26 Jan 2026 00:01:29 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:29 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:29 +0000
Files and hashes:         1: EpAV40Ub4Qhm2LrtJvF107eivE0.roa (hash: yMZ2WZA3sacKoy7tu2K5tKAGLGICOq7tZTEgNmenhaU=)
                          2: az7D72m3aRzcMGuqVgsus2HYPJI.asa (hash: UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=)
                          3: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: QZRnRlxVqn1JEff1Ve6guokGe4+BTQ3CXR+15WHjq1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9b:03:18:86:97:c2:d2:a6:fd:8e:2b:8a:f5:44:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
        Validity
            Not Before: Jan 26 00:01:29 2026 GMT
            Not After : Jan 27 00:01:29 2026 GMT
        Subject: CN=d608f64751ee0adc7be179dacb6f1c84288638cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:08:c8:81:d4:6d:b7:d5:79:9c:27:78:2f:88:
                    39:51:e8:73:bc:66:b0:fa:68:78:78:d0:b6:45:7e:
                    fb:3a:a1:80:5f:68:ea:a7:ff:d5:b6:0d:e4:e8:02:
                    ba:52:8f:62:89:5c:8d:69:54:43:7b:68:26:e0:e4:
                    f4:a9:c3:88:01:ae:b6:01:1b:5e:4e:a7:27:a8:01:
                    bf:08:33:f5:bd:49:c7:e8:f4:02:a8:9a:c8:6e:80:
                    b5:11:da:6f:c1:56:1d:42:9e:ad:00:4b:26:55:4b:
                    c5:75:31:2d:83:1b:df:a5:2e:dc:65:af:4e:02:4f:
                    92:64:92:e2:af:f2:9a:e0:ca:12:0a:e3:15:2c:db:
                    b4:fa:4e:0e:30:07:87:16:7c:06:8d:b3:5c:da:a2:
                    31:d4:b5:d1:00:44:69:71:f6:d0:e7:a6:93:ca:02:
                    12:27:c5:47:e1:ed:22:30:90:1a:14:dd:d3:28:aa:
                    e6:bc:c9:fa:df:6d:f0:ab:e4:30:84:8b:be:35:2e:
                    cb:fa:3b:d2:b4:08:68:90:6f:88:72:82:ff:fe:f2:
                    62:66:1f:30:55:ad:f2:ff:59:72:cd:fd:6b:c2:d7:
                    1d:6b:03:0c:55:d9:38:6b:22:4d:cc:eb:80:a6:f5:
                    c9:96:56:b7:92:a8:14:8a:42:77:7d:c1:af:ee:26:
                    4c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:08:F6:47:51:EE:0A:DC:7B:E1:79:DA:CB:6F:1C:84:28:86:38:CD
            X509v3 Authority Key Identifier:
                keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:01:2e:59:3e:19:73:6e:06:fc:71:74:e0:2a:a9:e0:27:30:
         19:31:7e:d1:92:ca:5b:72:d1:ef:1d:29:b4:cc:04:6a:94:83:
         7a:35:a4:9b:d7:a4:eb:aa:73:94:0e:ac:f2:50:4f:f9:41:b5:
         37:ab:70:f8:15:7e:c9:3b:a8:56:71:42:66:a4:cd:8e:fb:c8:
         df:f5:d6:38:6b:c6:ca:57:e1:01:f0:ca:95:f2:2f:58:42:c8:
         b0:c2:d0:38:13:04:2e:2a:bc:d4:f8:b5:43:1d:9d:ad:ab:b0:
         e4:0c:5d:cf:f6:ea:28:77:96:e9:7c:74:a6:fc:30:9b:b1:f5:
         e2:df:32:32:d8:3e:86:9d:85:d9:a9:73:d4:15:51:a3:c9:70:
         2d:e9:d0:be:b2:83:03:05:e8:e1:99:d8:e9:25:17:2b:90:8e:
         08:74:bf:2f:fe:a6:8b:e3:92:fa:4b:3d:e6:70:f8:6f:21:be:
         f8:88:f2:13:01:4c:d2:c0:62:8e:dc:5f:84:4e:3d:2e:49:8c:
         84:a8:5d:d8:f0:a8:b9:9e:4f:e3:a1:6e:2f:cc:8b:83:53:1c:
         fc:21:0b:a4:e7:04:96:e3:75:5a:36:5a:b3:4a:16:2b:ec:26:
         09:43:43:97:b6:3a:42:02:a9:4a:0c:53:d4:ac:e1:01:1f:d0:
         a1:3b:af:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:22 2026 by rpki-client