This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
File:                     j16oN5vKRPT2p_S2mGTNmwKiexI.mft (raw, json)
Hash identifier:          M8FQ1KR1WKmVrYzy8UPTLy0taHn4Fn6nZ8HS2cQn8T8=
Subject key identifier:   CF:17:58:C0:92:6F:89:3D:ED:CE:C3:90:2B:A4:41:59:D8:B5:18:97
Authority key identifier: 8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12
Certificate issuer:       /CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
Certificate serial:       019BF7D19677FF32FD15147C6C0B45957D76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 01:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:06 +0000
Files and hashes:         1: Wup1Q1uFK5aAm0q7_cAA8x0spSY.roa (hash: d/XhcWFuK+yDoXR1POg4vJ7o5/6q+n/d2c4kmBYqIpk=)
                          2: j16oN5vKRPT2p_S2mGTNmwKiexI.crl (hash: 2/x5AGGCcVgqfRhT9rmSupFyCs+wHIstj7PPC10P2V4=)
                          3: ocDruih2yibbf6CAeSAG3oeE1I4.roa (hash: OFqknVm6G0kk+aIE7XbTQXvAldWSJ1pjOrT88QpbMe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:96:77:ff:32:fd:15:14:7c:6c:0b:45:95:7d:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5ea8379bca44f4f6a7f4b69864cd9b02a27b12
        Validity
            Not Before: Jan 26 01:01:06 2026 GMT
            Not After : Jan 27 01:01:06 2026 GMT
        Subject: CN=cf1758c0926f893dedcec3902ba44159d8b51897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:a8:c2:3a:f2:01:a5:5a:fb:69:5b:8b:9f:
                    6c:c1:af:07:af:a1:d1:90:a5:76:03:80:49:36:a7:
                    41:4d:58:7f:42:57:17:60:49:c3:9d:03:f1:83:38:
                    9d:d5:ed:e2:e9:a3:32:76:c5:59:b1:c5:f9:7d:aa:
                    c4:f8:ae:99:e5:db:d8:46:24:af:dc:6f:f2:23:01:
                    1f:93:40:52:e0:57:28:63:3c:7c:ea:cc:6c:b0:a7:
                    05:d2:fa:98:c9:56:8b:93:8b:25:c3:6c:c6:6b:7b:
                    cd:9c:da:8f:e5:ed:b6:92:b1:86:6a:ba:1b:aa:4d:
                    50:3d:b4:c4:c6:de:13:80:a6:68:7b:04:83:25:0d:
                    5f:be:00:0d:70:b5:ac:84:93:10:be:72:c0:79:0d:
                    22:ac:bc:81:f4:bb:8f:20:4b:90:7d:40:1f:4c:69:
                    40:6c:6f:88:85:34:8d:0f:f5:31:61:b2:77:71:a9:
                    ed:3c:ea:d9:9a:b9:7c:38:ea:27:ff:eb:de:11:22:
                    3d:e5:bc:9b:95:36:6c:ee:3b:79:e4:45:4f:15:e1:
                    1f:b1:83:31:5c:19:19:67:1a:6c:8e:b8:2f:c2:76:
                    d7:85:c1:5f:e8:b2:1d:57:f5:6e:dd:d5:c5:37:3c:
                    30:64:55:29:9f:ff:9e:f0:ce:35:e4:99:24:f3:3f:
                    b4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:17:58:C0:92:6F:89:3D:ED:CE:C3:90:2B:A4:41:59:D8:B5:18:97
            X509v3 Authority Key Identifier:
                keyid:8F:5E:A8:37:9B:CA:44:F4:F6:A7:F4:B6:98:64:CD:9B:02:A2:7B:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16oN5vKRPT2p_S2mGTNmwKiexI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/402d43-e99c-4112-a038-ecbb9442f589/1/j16oN5vKRPT2p_S2mGTNmwKiexI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:8e:6e:27:7e:0f:5e:69:bf:5f:c3:bb:b1:c6:e0:76:43:
         9d:13:57:b0:18:dd:57:b0:21:d0:e1:c4:49:20:0f:7f:ab:7b:
         df:5f:93:43:3b:79:85:86:17:df:6f:19:2c:2e:06:87:8e:52:
         3e:df:47:36:c2:b5:95:b0:b6:fe:85:fe:7d:e9:1c:b0:e9:4b:
         01:fe:24:31:25:b8:42:54:ba:be:3e:5d:0f:aa:ef:36:e5:bc:
         cb:8b:f6:5b:37:8b:79:7b:8c:43:fc:1a:05:26:19:d0:06:98:
         ca:92:c2:9d:c9:aa:9e:50:3a:a9:d0:55:3f:8c:85:9f:5d:4a:
         a1:c5:33:b1:a7:84:f3:65:5c:33:95:c5:fc:f8:a1:5f:1c:d8:
         4a:c4:61:e0:dc:bc:cc:6b:ab:cb:20:1c:ed:02:d2:70:3a:4b:
         79:3c:b0:a5:10:62:4f:0a:7d:43:6f:98:90:24:d9:89:ee:44:
         6a:b5:58:d1:75:30:f9:a3:60:43:53:fb:64:8c:5f:bf:2a:66:
         59:33:1e:e4:85:8e:dc:66:f5:0f:47:d3:a4:ab:d3:05:9d:0a:
         44:6d:86:91:0d:04:54:0d:e7:42:ff:cc:c3:16:5a:4b:59:e7:
         94:a1:09:9f:be:61:b8:23:70:81:09:9c:b1:32:ea:88:11:0c:
         fa:22:ea:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:38:40 2026 by rpki-client