This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          Ptqn4fCyrKA+gBpzYdCkv+G9m2/fJgVHlD+RvcO47tI=
Subject key identifier:   68:69:30:F4:39:DC:50:F5:AF:02:7E:97:1A:5E:BA:96:D8:9C:F0:F8
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       019BF4D0E2B7948D4916642F186FEC80D96D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          17FD
Signing time:             Sun 25 Jan 2026 11:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:28 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:28 +0000
Files and hashes:         1: 1-m6k8GA9p4ZvRRt_IEBX1hvXSqw.roa (hash: ampjSRymUyQsDP6vuBsTUVzHhqhSNIFHHc8gno3VuVk=)
                          2: 1-vjFWmfG0701a1RWTVQR-wPwzPM.roa (hash: 7mCdtNCbIcMrpoX0PSQXD/jut52p6bBvzWyqRVVXaOs=)
                          3: FGWSmCiFor0nTfWbxjmzYP_XTWE.roa (hash: SoNbcAzZOAbsaX1DWlnc7rcsM5HKeRW27Hbeu6b+U0I=)
                          4: U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa (hash: MKGyp4HJxPM8RFddtv+Sf1HDZ8q6UPmk/UuasqpHff0=)
                          5: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: va5nQVYNfx2IFp7nlzCbxIY2tFh8UHHwHx71/CQWRkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:e2:b7:94:8d:49:16:64:2f:18:6f:ec:80:d9:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Jan 25 11:01:28 2026 GMT
            Not After : Jan 26 11:01:28 2026 GMT
        Subject: CN=686930f439dc50f5af027e971a5eba96d89cf0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:61:22:5d:ae:4c:7b:aa:ce:c5:95:83:ac:b2:
                    bb:31:89:f5:94:50:6c:1d:d3:8c:27:c4:65:09:d0:
                    e5:e6:11:f4:cb:fa:bf:28:95:f1:35:bb:48:b2:a8:
                    e4:5a:ba:06:16:72:ee:d5:87:7d:11:ae:5f:93:6b:
                    a1:4a:9a:20:9d:05:ad:d3:43:0c:cc:ed:03:bc:b3:
                    51:ee:a9:2e:df:32:2a:f7:8b:84:b9:91:5c:d7:33:
                    90:7f:01:ce:59:d4:26:e6:c5:84:dd:ef:e9:9d:ee:
                    9c:67:a0:00:db:39:6e:00:54:e3:58:75:06:36:fc:
                    5b:28:38:d0:ea:ba:14:0f:6e:b2:2a:32:5b:d7:81:
                    5f:5e:e2:3d:e7:66:c2:0d:63:50:19:b6:9f:32:5a:
                    ce:9e:bb:9b:da:34:05:ee:36:0f:40:c5:5e:2a:be:
                    a3:93:91:f4:6b:1a:b8:c7:b9:2c:be:a3:fd:a9:96:
                    30:7f:de:d9:0f:39:dd:82:5a:56:8c:ab:57:2b:99:
                    5d:e2:8f:cf:5e:a2:62:cc:dd:b5:fd:fd:28:91:81:
                    59:75:a3:de:5a:df:39:ce:51:3f:72:25:f6:03:6b:
                    32:a6:46:48:1d:24:1d:95:fb:1d:bc:fe:77:ca:4f:
                    92:e8:3e:76:97:b1:cf:7f:23:bb:b3:18:ae:bf:89:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:69:30:F4:39:DC:50:F5:AF:02:7E:97:1A:5E:BA:96:D8:9C:F0:F8
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:e3:4f:60:b2:0c:72:2f:03:e6:c2:ea:c6:14:50:21:59:
         d4:28:3c:69:9d:1d:25:b5:5f:c8:2c:64:98:d7:19:a5:7d:5a:
         75:53:89:ef:82:1e:fc:ce:d2:4e:2b:b5:90:9d:d5:a4:1e:5f:
         bb:a3:0b:76:10:66:c9:26:ef:a2:5c:71:15:9f:73:c5:6d:e8:
         01:26:73:11:e6:74:ba:f4:10:a0:0a:13:e5:07:7c:4c:b7:a8:
         13:1f:8e:10:79:9f:eb:51:91:10:15:58:a9:9c:3e:0e:bd:1f:
         9e:19:e6:30:91:f5:57:65:95:6c:0b:9c:b6:08:d5:2d:80:01:
         76:23:18:be:71:4a:de:bd:18:14:ed:f7:76:b5:18:2d:21:85:
         9b:b8:be:0b:69:66:a4:dc:10:9f:54:98:cb:8a:e7:e9:ef:4a:
         2b:2b:ea:fb:17:15:a4:d5:72:2c:72:c0:5f:e6:1e:0e:02:9c:
         34:02:c7:cc:38:f5:5b:7e:90:ce:52:80:0c:e6:a4:6b:f1:b9:
         96:39:df:21:99:d5:c0:16:15:fa:d5:26:e6:df:3c:d5:f6:b5:
         da:40:2d:d0:6a:77:e2:4a:8f:59:d5:e2:dd:4c:b5:33:e0:2c:
         75:bd:6a:fe:5f:1e:71:51:58:24:56:9c:09:46:3e:e3:77:c3:
         2c:d1:76:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:44:38 2026 by rpki-client