This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File:                     DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier:          Lgv/WQo6et4aTxl5sbzoCY2d7vKhkBqLFiE9lV4n4as=
Subject key identifier:   7F:DF:4D:E0:E2:D4:14:92:E6:24:A5:33:B6:3B:10:F4:36:AA:B8:A3
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer:       /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial:       019BF4D055DAEFC137D0ACDF08B0070C7B63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 11:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:52 +0000
Files and hashes:         1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: 7qHOyTGDVoglq8HtR0kenXI0/4CQWqhJbQg4OZOUx9g=)
                          2: X2dW8Ddau0oR-gekYObrhkFfF_g.roa (hash: CXklzZ2YRKZLcPWGGWuQjQMp/BVjdo/rLeJlfyEGzHE=)
                          3: vEA8ukjZ43YZlzw8CBVOqmyggo8.roa (hash: tuYAox2HkNBn4tSAkZLkz/3INYGpptZYZBvxGb9Ksys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:55:da:ef:c1:37:d0:ac:df:08:b0:07:0c:7b:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
        Validity
            Not Before: Jan 25 11:00:52 2026 GMT
            Not After : Jan 26 11:00:52 2026 GMT
        Subject: CN=7fdf4de0e2d41492e624a533b63b10f436aab8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:bf:53:d1:86:93:c5:e4:38:1f:62:4c:cb:
                    34:62:72:40:76:c4:32:e5:05:03:5f:91:6e:85:dd:
                    a7:a3:ec:95:7d:10:f1:4f:77:4e:34:84:5b:65:24:
                    78:cf:3b:dd:2d:c2:d3:54:6e:91:cf:ee:57:ea:57:
                    2c:fe:99:5b:76:85:96:5d:ef:ca:de:c4:59:5c:7f:
                    ea:ce:1f:76:a1:36:dc:6e:02:f4:65:b7:4f:dc:aa:
                    3e:2f:7a:db:dd:f3:d6:79:51:8a:00:2a:ff:3d:95:
                    3e:78:0f:e5:30:c2:5b:4f:98:7f:25:ae:b0:2b:f8:
                    d1:ea:da:d9:24:e9:f6:92:bb:56:1e:18:ad:02:ba:
                    6d:ea:f9:3e:08:7c:14:12:86:cb:7c:4f:d0:a1:c3:
                    10:b6:f7:bc:0c:ee:3a:4b:d5:a5:1b:6e:12:1e:46:
                    d3:99:fc:44:37:45:77:d3:37:4b:68:c5:3d:10:5a:
                    95:20:45:61:d5:b9:ac:59:27:75:c7:f3:3c:0b:6f:
                    21:bc:f8:05:28:5d:f3:0d:df:f9:88:d5:93:ba:33:
                    13:3c:2c:99:e8:aa:4d:fa:7e:c9:24:6e:5c:38:fe:
                    31:0c:48:1d:b1:11:4d:88:8b:e7:59:5b:51:ff:39:
                    88:a0:6c:7d:24:e6:f0:3b:71:4e:69:48:6f:63:e9:
                    87:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:DF:4D:E0:E2:D4:14:92:E6:24:A5:33:B6:3B:10:F4:36:AA:B8:A3
            X509v3 Authority Key Identifier:
                keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:6c:8a:d8:3b:eb:0c:0d:ee:e2:bf:3e:31:40:13:d6:ed:
         c8:27:10:a6:f6:e6:8c:1a:1a:51:c0:11:e9:85:b6:29:33:21:
         dd:f9:6d:ea:5d:05:5b:53:a1:b3:21:3a:ae:cf:2e:b0:c8:39:
         ad:7a:aa:55:1b:8e:8d:e6:fc:05:07:c9:35:0b:92:c0:8b:04:
         6f:29:ea:ef:8c:f9:ca:1a:40:a1:94:d0:e7:ed:ac:15:a0:99:
         5e:f8:91:15:4f:a2:8b:ec:de:8b:97:46:63:9d:90:39:a9:57:
         e0:e4:b4:ac:f3:08:d5:a3:db:86:cf:47:4e:df:2d:0b:3c:48:
         2a:9e:3e:ae:cd:33:d3:0a:e2:e9:30:b3:29:26:f7:7b:ed:0f:
         61:96:5f:88:d9:6c:a8:08:43:db:61:37:61:d6:5f:ed:49:0c:
         50:50:6e:3f:0c:b4:90:42:d6:03:fe:07:97:4e:e3:94:d7:c8:
         e7:cd:f6:94:a5:83:84:a5:31:e9:c9:bb:38:e3:91:65:c4:3a:
         04:37:b1:5d:c9:38:ef:30:09:df:05:d6:00:9d:7f:74:f6:99:
         7c:b2:40:c3:19:ae:51:e2:38:36:20:8c:dc:1b:3a:11:62:f5:
         4c:7b:b6:b0:e0:b8:73:83:66:7e:4c:bc:10:7f:c1:f8:b5:bb:
         a8:6d:e1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:23:50 2026 by rpki-client