This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File:                     _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier:          NpqRkU3u3siqPF+8xxUUg2hUQf+LTsuYlR9YOD+fAjk=
Subject key identifier:   54:8E:D5:44:AD:4A:B4:B7:76:6C:8A:77:54:9D:C1:D2:1A:E5:B4:59
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer:       /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial:       019BF6BF203A5306BE2B884857849D5BC6B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number:          13E7
Signing time:             Sun 25 Jan 2026 20:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:19 +0000
Files and hashes:         1: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: qrEULq6uwv9UC1DJlWmiiuSBvewo4geoOyaApBeenMs=)
                          2: pAESyPqHIlN4NTJAugrXcjke2nM.roa (hash: eftVyacucHA1lYWjx3ZzoQjWGGcLhPcyZlIC+dbOdko=)
                          3: pYGDQP7z4knn6-l2OGShS12r9vg.roa (hash: OTzBNhKlo1pe/s0so9dkt15EFzXNXt7pIqKb4IqGORk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:20:3a:53:06:be:2b:88:48:57:84:9d:5b:c6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
        Validity
            Not Before: Jan 25 20:01:19 2026 GMT
            Not After : Jan 26 20:01:19 2026 GMT
        Subject: CN=548ed544ad4ab4b7766c8a77549dc1d21ae5b459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:b6:15:91:3b:67:28:5e:13:23:9d:cc:2c:
                    fc:ae:e6:e7:1b:91:d3:92:39:f3:df:02:94:c6:99:
                    08:2c:d5:4b:19:11:90:6d:63:41:a9:ba:af:5f:f7:
                    db:7e:14:d2:ed:f7:69:8c:03:bf:9d:98:de:ed:61:
                    ab:a8:83:5c:1e:50:68:81:35:b1:e6:79:10:62:ce:
                    28:b5:d1:e2:ad:6b:ee:11:ab:56:cd:a1:e2:06:8a:
                    11:95:05:20:c4:fd:ec:de:3f:fa:f2:b4:f5:25:ea:
                    50:b9:68:fe:72:70:72:54:d7:12:7a:d5:32:2f:99:
                    c6:d9:44:f2:86:57:38:42:7f:c1:42:cf:6f:15:63:
                    d6:ad:01:cb:5c:e0:2b:a7:7e:55:f1:e9:5b:e5:ea:
                    43:d6:31:ca:6b:ba:e8:55:76:6a:70:c0:10:8f:1e:
                    8a:82:00:e6:fa:bd:bd:68:86:a0:37:7f:1e:f6:47:
                    c1:3a:a9:08:50:d8:ef:50:43:8a:27:c0:48:5d:80:
                    f1:83:ab:5e:fd:a8:a0:84:90:5d:1f:0c:b0:16:4c:
                    1e:30:d8:e8:15:75:5b:bf:15:a7:92:e7:f6:6f:ad:
                    05:2d:08:9e:29:60:1d:0a:40:0a:3c:36:3d:ea:e4:
                    ee:7e:a8:14:a2:e9:80:e7:46:e3:7d:46:3a:67:e8:
                    73:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8E:D5:44:AD:4A:B4:B7:76:6C:8A:77:54:9D:C1:D2:1A:E5:B4:59
            X509v3 Authority Key Identifier:
                keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:15:d2:15:f1:7e:4d:72:f5:0e:ce:c4:a1:82:b3:5c:cc:b5:
         55:80:4d:fc:ed:87:7d:a6:84:97:a6:ce:f3:b5:f6:8f:5c:77:
         e0:a5:5b:bd:66:fc:44:6b:2d:6a:ea:2b:4f:89:96:fe:0d:00:
         87:cd:a9:df:89:81:63:4c:3f:94:87:9d:54:d5:46:35:f5:56:
         0a:c5:f0:90:d7:72:01:2d:17:8f:84:00:dc:82:65:ae:f5:58:
         18:54:3f:9f:40:8e:a7:87:b1:c6:b6:0f:21:a3:f4:c0:77:32:
         84:25:9f:23:9d:ad:fb:5f:7c:c2:01:30:4a:6e:d8:36:31:37:
         c3:85:0b:64:e7:13:8a:a7:dc:4d:e3:7b:b4:9f:0c:89:35:a8:
         e8:39:4b:56:20:0f:97:e0:fd:a6:15:f3:88:34:7b:0c:10:12:
         4d:61:c6:81:c5:c5:0e:51:d3:4c:e9:af:93:fc:fc:43:15:0d:
         13:4e:5d:e1:60:be:fb:2b:70:3a:d0:df:66:4a:b2:78:0a:e2:
         0e:7a:94:c8:61:71:17:88:ca:e6:f2:18:b9:99:e7:e0:d8:7e:
         e7:13:98:88:17:59:39:b5:4c:99:8c:6d:ba:a0:38:93:6d:a8:
         cd:2f:93:d6:f6:66:26:d3:d7:4f:2d:cc:b9:30:60:42:39:77:
         f9:ff:02:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:53 2026 by rpki-client