This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
File:                     aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft (raw, json)
Hash identifier:          5wxFPG+sZthK/ifYqBxQYeppvWbiqExa2OWts87Mers=
Subject key identifier:   27:9A:4A:7A:4B:C0:E9:A0:A1:92:2B:68:08:75:76:A3:0A:C2:39:0F
Authority key identifier: 68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14
Certificate issuer:       /CN=6810aa89239242dacc9d03e3af22d4e87a783414
Certificate serial:       019BF72CDA9064B03EBF6823EEF79F07CE1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
Manifest number:          17F6
Signing time:             Sun 25 Jan 2026 22:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:10 +0000
Files and hashes:         1: 2HO1B3cqChy0lUy13_3eiaaOjKM.roa (hash: sT83X6MdLHSVmAwErarq+oTjKlq0n9DkDOqaOUwsh6E=)
                          2: MmpupjL6-9W8vuY4zo9Q3tDq3h0.roa (hash: Gp09DHYtUEXqlrazWWuduVblpwpQzAgZjFy3uZZQXYw=)
                          3: YpGTo60NWnpgdlG7w4tgcECBdPE.roa (hash: LBHrRnZ9fBq8b4XBwaEXwXJ7Lftr/08mjC4QqEFM79U=)
                          4: aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl (hash: 5jGxNkTwqqedSdgd+YDWEjPygjc0hBy1VZ3y69Gjvxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:da:90:64:b0:3e:bf:68:23:ee:f7:9f:07:ce:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6810aa89239242dacc9d03e3af22d4e87a783414
        Validity
            Not Before: Jan 25 22:01:10 2026 GMT
            Not After : Jan 26 22:01:10 2026 GMT
        Subject: CN=279a4a7a4bc0e9a0a1922b68087576a30ac2390f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:39:6d:57:f7:1d:04:38:02:87:80:f2:25:98:
                    92:64:bc:df:3c:8c:c3:eb:88:23:60:2d:75:9f:34:
                    84:11:ba:c0:be:6f:8f:04:a0:85:e8:1b:3e:a6:66:
                    cc:e6:58:66:b4:10:e9:3a:2d:ba:d6:b6:8a:8e:07:
                    cc:3a:a6:7d:d2:dd:31:da:e7:e5:2d:a4:2d:d5:07:
                    ce:1d:79:e3:a3:84:a3:59:c3:13:b4:a9:5b:0a:5b:
                    c5:2b:b4:f3:4b:f8:6a:13:36:0e:30:e9:ca:a5:fc:
                    3c:d7:64:e6:b8:cd:bc:94:0c:66:f7:e9:b3:dd:bc:
                    36:07:11:ca:f3:b2:b0:8b:7c:1d:de:02:5a:85:32:
                    31:0d:0d:cb:c0:46:8a:cd:b4:95:71:26:86:60:7c:
                    eb:ae:a1:47:70:42:20:b4:9f:21:d8:88:15:0e:06:
                    dd:1b:51:b4:1e:3a:cf:97:07:43:13:c6:a7:bb:0f:
                    70:09:84:96:ca:bc:1d:e3:47:8a:57:1e:fc:33:7c:
                    d1:67:93:32:f4:d1:66:21:38:2a:48:9b:6c:5e:eb:
                    bb:3e:f2:89:79:49:00:9f:b8:f3:c6:3d:30:c2:e7:
                    48:01:c1:10:81:2c:95:2a:e3:29:ff:c2:e1:1c:1d:
                    e4:d2:53:11:7d:31:d8:8a:9f:96:a0:5d:4c:41:ce:
                    58:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:4A:7A:4B:C0:E9:A0:A1:92:2B:68:08:75:76:A3:0A:C2:39:0F
            X509v3 Authority Key Identifier:
                keyid:68:10:AA:89:23:92:42:DA:CC:9D:03:E3:AF:22:D4:E8:7A:78:34:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0244e4-73e3-449d-a06a-1f689935b90f/1/aBCqiSOSQtrMnQPjryLU6Hp4NBQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a8:74:c6:c6:d7:19:6c:13:ef:e4:c8:f8:3b:70:7b:2e:a3:
         85:ba:4e:d4:7c:16:1c:5d:8c:01:5f:a9:da:73:21:c5:a5:1d:
         8c:64:f1:2b:ce:c7:34:3b:04:1f:e5:c7:d8:6e:f7:1f:33:15:
         c9:bb:7e:d2:cb:f0:83:37:65:b5:a0:a4:58:f0:95:2e:5e:4b:
         fd:1e:52:d8:ea:19:6f:5f:63:e9:f6:00:f2:80:5a:e3:c7:31:
         04:1f:fd:7f:1f:ed:b7:f5:57:49:cb:77:fe:53:67:2c:86:ea:
         c8:07:f9:aa:06:10:eb:b0:cb:40:54:9f:27:3c:f7:30:05:19:
         41:60:55:12:23:3c:19:05:01:9c:40:9a:cf:1c:33:1e:e0:e5:
         12:df:0a:a4:c9:13:a2:fa:6f:d5:dc:6e:04:a9:95:50:ee:ea:
         c0:d6:51:ce:24:27:13:55:2f:f4:d8:e3:57:46:73:58:f7:fb:
         05:21:b2:a0:d4:0a:05:c1:3f:8b:2c:a8:3f:bf:75:53:dd:4d:
         8c:f4:7e:cf:e7:39:8a:86:f5:f0:c3:c3:d9:ef:99:dc:d9:95:
         45:b8:37:f5:6e:ce:9f:1d:de:24:79:35:58:57:d0:09:56:1f:
         e1:1b:47:d6:50:dd:48:d8:f6:4a:df:57:e4:1e:79:34:0b:24:
         46:d4:b9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:53 2026 by rpki-client