This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File:                     m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier:          tuvdE2/GHHYRAmAlZ4jIx4NeCfZ4GngyR45L/XbmTts=
Subject key identifier:   CD:6F:B6:64:E7:38:43:47:FC:62:06:B2:47:0A:4C:7F:4C:54:5C:69
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer:       /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial:       019BF5ABF19AAEBD686033D35168606CA9D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 15:00:44 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:44 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:44 +0000
Files and hashes:         1: EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa (hash: 6sbRbAzpkVZnbmwGmFls1zgBgBPqZlTzKVvW2qe/0sQ=)
                          2: Z9JeEfbUacbPejs83feX3rOWWFQ.roa (hash: 95xTXyYYFl8H6HfH94TyCSJzuX0rhB4J8JlbTbJdO0M=)
                          3: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: GelcccacvbBFkdqe5SwdAOEPP34pVNTBVIOsmn0MQFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:f1:9a:ae:bd:68:60:33:d3:51:68:60:6c:a9:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
        Validity
            Not Before: Jan 25 15:00:44 2026 GMT
            Not After : Jan 26 15:00:44 2026 GMT
        Subject: CN=cd6fb664e7384347fc6206b2470a4c7f4c545c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:6f:94:d9:7f:11:3f:e6:8f:b4:f4:b3:5e:
                    41:7a:e1:b6:02:0a:6b:c2:65:6c:de:72:56:15:64:
                    95:c0:c5:54:cf:91:38:26:18:42:a3:7c:87:3a:54:
                    bc:92:4c:e3:56:b0:ae:32:9e:51:35:83:4e:f7:24:
                    6f:2c:8b:15:9f:97:f1:d0:2a:37:e4:c4:b4:04:bd:
                    99:76:5d:0b:f1:a7:c1:a5:dd:ed:7c:19:36:3f:dd:
                    19:b2:4f:25:fb:96:9c:2f:35:ba:ae:16:00:c7:16:
                    3b:b7:bf:28:1f:e3:61:3d:86:70:bc:95:85:9b:40:
                    d2:a4:55:ed:81:e0:e9:57:42:75:f1:26:8a:fc:5c:
                    9b:ce:04:19:5b:84:01:e6:63:b7:02:ac:a3:2c:0d:
                    85:92:85:0d:a0:00:b3:44:c1:0d:7a:be:3e:3c:55:
                    ba:e3:52:f2:cb:1c:4e:a2:aa:9f:7d:4b:6d:2e:22:
                    9e:57:6f:42:69:3d:e6:5e:e5:d5:d6:f9:e3:29:89:
                    bd:2f:e3:b3:5f:17:ba:06:2c:79:65:62:f7:a9:15:
                    c9:f2:4c:37:1f:61:c7:ec:89:ed:9a:4f:a2:cb:ea:
                    d6:8c:ec:a5:87:08:12:41:6b:b7:8d:f7:4b:f3:df:
                    ac:70:53:f5:b2:4e:a9:1d:11:0a:dd:34:23:fb:3e:
                    04:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6F:B6:64:E7:38:43:47:FC:62:06:B2:47:0A:4C:7F:4C:54:5C:69
            X509v3 Authority Key Identifier:
                keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4e:a3:74:ee:11:0b:5d:b2:c9:65:93:d4:ed:42:26:fb:86:
         6d:8d:e1:2c:61:68:46:4e:be:67:50:46:b4:53:0c:4c:b8:c6:
         26:10:63:52:54:e1:5c:64:d4:ae:15:e0:50:40:27:ce:2f:56:
         4d:21:87:ab:4b:ef:40:41:de:09:a2:34:f4:c7:36:eb:54:a7:
         16:72:ea:4e:de:4d:e4:f8:02:6e:c6:70:c3:6e:b0:59:03:95:
         b9:2c:d3:73:b0:c2:e1:4c:b3:d8:59:ef:4c:1c:2d:5a:55:cc:
         91:72:98:b7:92:80:47:40:7f:7c:dc:fa:51:ef:a0:fa:9c:8d:
         c2:88:2b:7e:a4:7f:9e:44:db:9e:f6:b7:23:51:d7:2e:34:20:
         59:e6:9d:49:49:e2:68:a3:1a:4d:2d:46:08:27:c8:5e:77:50:
         58:3e:13:65:0a:84:1a:f4:03:04:e7:ab:8c:7b:09:9a:d9:2c:
         70:92:0b:80:d0:47:2f:47:38:43:0a:37:72:a1:90:57:4a:10:
         94:b9:24:13:75:10:ae:28:f0:9f:5f:cc:79:f7:7e:0f:52:f7:
         4f:9b:fa:53:67:8e:70:bb:6e:50:3f:8a:7a:36:88:3d:9f:85:
         3a:f6:97:bc:24:c0:e5:a9:0d:96:95:88:53:ed:a3:fc:7e:74:
         08:86:31:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:02 2026 by rpki-client