This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
File:                     XOGq4Mk60EtymAgraL9qVPpovPA.mft (raw, json)
Hash identifier:          1xvU1T6GPB1c6z+LaB9xN4Yw5GzldjtEuVof2Amqj08=
Subject key identifier:   47:11:D5:67:50:A4:FD:B1:B2:D6:21:E6:3C:3F:A1:AC:3E:81:DA:CD
Authority key identifier: 5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0
Certificate issuer:       /CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
Certificate serial:       019BF7D1D778AC98DD6EDBEC16112A6559CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 01:01:23 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:23 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:23 +0000
Files and hashes:         1: 0Sfi1GQLepJdH6-nAUQ0Hu0ZdhY.roa (hash: +q6McyBv6XD45sefW820BUSULPS6zrmqGUIvxYOPOus=)
                          2: OADJfv4sJk1hBJpusL11pl6fFtI.roa (hash: CYKU8NdxaFNmdeaAWm70OIx6aPv3u8b/dlSWiMUH5iU=)
                          3: XOGq4Mk60EtymAgraL9qVPpovPA.crl (hash: BuI9egiL2nZiJy22AJE1iT1ZWTpFvUmikSL/c8COwDw=)
                          4: l0x0gNUieNkYXNEIZ0HnbvxPCtI.roa (hash: LOiTnDzO1qKX4OsX911ZfvLi+m4Ieb87SaoClzu9V+A=)
                          5: x8LHw7zDa42zMdIg9zthvEzV2kE.roa (hash: 4t3LBnliu+TFNqK0uHC8bitBdGAkSxERgzaOQAy67TM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:d7:78:ac:98:dd:6e:db:ec:16:11:2a:65:59:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ce1aae0c93ad04b7298082b68bf6a54fa68bcf0
        Validity
            Not Before: Jan 26 01:01:23 2026 GMT
            Not After : Jan 27 01:01:23 2026 GMT
        Subject: CN=4711d56750a4fdb1b2d621e63c3fa1ac3e81dacd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:95:01:00:f5:d1:98:9e:2b:a2:62:f9:3b:
                    7b:9c:c6:ae:5b:3a:cb:e6:9b:1d:c5:b6:8b:31:90:
                    35:40:e5:83:fe:1c:13:74:5a:93:dc:47:3d:e3:36:
                    09:3d:a1:15:44:c2:39:38:67:75:ff:33:24:65:9f:
                    05:a9:03:e0:79:e7:43:17:57:49:4c:f9:91:a1:93:
                    cf:5d:bf:d2:f5:d8:f2:01:26:74:bc:b6:d6:a9:ae:
                    21:e8:e8:c2:78:cc:55:33:c4:a8:b2:1e:71:3b:12:
                    08:20:fa:b4:4a:88:47:63:87:f7:f7:30:60:63:a5:
                    16:2b:2c:ec:03:29:57:77:93:23:5f:32:94:01:39:
                    75:08:ac:32:5b:11:ba:2d:1b:2b:8c:8e:27:03:0a:
                    75:37:08:3c:e7:0c:57:f5:a5:3d:39:0e:42:09:df:
                    95:cb:95:55:24:92:a3:76:c6:2b:2e:19:15:d0:c5:
                    fc:0d:94:74:af:97:97:5e:68:37:a9:65:80:08:cf:
                    c2:d0:ec:0a:d7:3f:9a:51:ea:ce:5c:2b:db:8e:6b:
                    b3:ac:6c:2f:13:9b:1b:54:14:da:31:f8:da:73:f4:
                    cc:dc:1e:60:56:fb:50:36:c8:fe:2b:07:89:31:50:
                    1b:56:b0:84:42:fb:65:94:36:4e:4b:27:56:af:91:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:11:D5:67:50:A4:FD:B1:B2:D6:21:E6:3C:3F:A1:AC:3E:81:DA:CD
            X509v3 Authority Key Identifier:
                keyid:5C:E1:AA:E0:C9:3A:D0:4B:72:98:08:2B:68:BF:6A:54:FA:68:BC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XOGq4Mk60EtymAgraL9qVPpovPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff3618-7032-4143-9374-ba1418d22087/1/XOGq4Mk60EtymAgraL9qVPpovPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:06:5e:94:2d:8d:6f:09:0b:60:e1:7a:ea:f4:38:00:e8:02:
         b9:66:35:38:70:cc:3b:0a:ff:79:fa:1c:59:f8:b6:b9:a7:72:
         04:39:c4:09:25:7a:91:4e:98:6c:06:39:18:ca:00:5c:b8:ab:
         be:6d:19:eb:9c:19:50:5a:98:39:2d:4c:3f:eb:c0:4f:1b:17:
         2f:63:17:fe:69:d4:1c:b6:4b:25:f9:36:0f:a6:be:da:d8:df:
         29:32:1c:49:e8:30:9e:4f:7d:1c:0b:dd:4d:e1:fd:d8:3c:fe:
         96:a6:68:46:a5:f7:6d:05:34:12:38:e8:e0:14:c2:0b:07:00:
         cd:21:cf:6e:53:46:7e:91:f5:f3:1b:1d:c1:cc:94:f3:3c:46:
         01:32:53:a9:a2:32:cd:80:e5:1d:52:d7:c6:0d:da:98:78:13:
         67:e0:46:e9:cc:53:66:10:f1:e1:4b:62:93:a4:90:45:2a:40:
         eb:68:c8:c1:09:ce:09:6e:42:61:c4:7c:3d:07:4b:85:22:71:
         a1:9b:30:46:ed:82:c2:e3:a4:11:64:b9:34:f1:2d:52:98:9e:
         7c:df:5f:c5:a3:c1:f4:20:27:ff:89:b7:10:02:6f:c4:4b:a4:
         da:90:ad:c1:e0:2c:83:51:0f:c1:71:0f:c2:2f:58:24:3f:19:
         44:98:94:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:35:24 2026 by rpki-client