This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
File:                     58NBW98cAUrhwY58_TPFbwGP7ug.mft (raw, json)
Hash identifier:          Kb2DumUZg0r6c4/WWM/77m9S522Ps6sE7WwgsRfQR2w=
Subject key identifier:   27:52:AB:B6:47:E1:A0:5E:0C:69:93:C3:28:D2:54:82:53:AA:70:C1
Authority key identifier: E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8
Certificate issuer:       /CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
Certificate serial:       019BF5E4180C3885F7EF61A6026303F2CC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
Manifest number:          177D
Signing time:             Sun 25 Jan 2026 16:02:04 +0000
Manifest this update:     Sun 25 Jan 2026 16:02:04 +0000
Manifest next update:     Mon 26 Jan 2026 16:02:04 +0000
Files and hashes:         1: 58NBW98cAUrhwY58_TPFbwGP7ug.crl (hash: qwU3/J+Daf05W1bm344US+OPKlJwrJs1IgKpLzT1PFA=)
                          2: gSOpCTMsxm1sebqZJUK3o9Zr9Zs.roa (hash: 9TkioDxaCkLwzYPNkh8yoUAHXHZVA478tyWocCq/RYY=)
                          3: rY66itDDLvcle-1MpYTgXG_M4zo.roa (hash: knoTBDvlJ1a2MSnUjOh4TAK/Rthq7es3OkAljnFYzRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e4:18:0c:38:85:f7:ef:61:a6:02:63:03:f2:cc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7c3415bdf1c014ae1c18e7cfd33c56f018feee8
        Validity
            Not Before: Jan 25 16:02:04 2026 GMT
            Not After : Jan 26 16:02:04 2026 GMT
        Subject: CN=2752abb647e1a05e0c6993c328d2548253aa70c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:01:9d:a9:70:35:cc:57:dd:d2:6f:44:e1:
                    73:3b:a2:fc:5c:7a:61:06:f7:56:83:c5:dc:72:da:
                    5c:3e:31:ee:91:a1:26:8a:d7:6c:2c:46:cb:fc:52:
                    81:55:2d:b9:de:48:51:9a:c9:d1:1c:37:ee:2f:86:
                    6f:b3:93:8e:d0:35:1b:46:91:46:4a:8b:0e:e0:88:
                    d7:bd:91:e7:99:49:27:2f:1a:2f:03:dd:31:22:d1:
                    b6:3a:1c:25:c6:2a:34:6e:6c:88:1f:27:53:42:81:
                    d3:bf:0f:22:e0:1a:75:71:f8:70:d9:2b:3d:17:7b:
                    47:b2:70:02:7d:f5:1f:ec:b8:20:0d:a9:c9:33:17:
                    67:43:34:c4:ce:60:77:8f:0d:87:f4:8b:99:6b:40:
                    08:55:4d:9e:3c:fa:7d:8e:a0:c6:7c:b9:c7:55:0e:
                    0b:6a:06:69:9c:b0:c7:b7:25:12:3a:14:a1:0a:c7:
                    06:d7:4e:f3:90:86:cf:cf:90:5d:b0:e3:b7:38:34:
                    cc:8c:bc:ff:ee:97:ce:56:f5:31:30:e3:d6:d9:98:
                    78:3a:c9:68:bc:2d:cc:01:27:4f:c4:9f:72:18:cc:
                    e7:b0:06:8d:7e:fa:67:5e:be:08:73:52:99:73:3a:
                    cc:bf:ca:df:17:a8:ae:80:83:73:48:0f:df:de:63:
                    fd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:52:AB:B6:47:E1:A0:5E:0C:69:93:C3:28:D2:54:82:53:AA:70:C1
            X509v3 Authority Key Identifier:
                keyid:E7:C3:41:5B:DF:1C:01:4A:E1:C1:8E:7C:FD:33:C5:6F:01:8F:EE:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/58NBW98cAUrhwY58_TPFbwGP7ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/ccb56f-dd05-4616-a5f1-56324668a964/1/58NBW98cAUrhwY58_TPFbwGP7ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:36:f5:0f:f8:12:51:f0:bf:2b:fa:72:c9:72:e7:dd:c2:ac:
         39:ea:f9:99:07:80:24:1f:04:b5:3c:af:c1:f6:93:68:53:ed:
         c1:3c:b6:d7:da:b1:b1:67:e5:9c:df:ab:2d:ff:d9:7d:4a:01:
         94:e4:86:6d:3e:78:8d:02:1d:3c:a9:bd:fe:36:2f:ec:65:24:
         d9:46:6d:2e:30:d8:77:8a:06:42:af:15:48:4f:b8:7c:27:03:
         7d:d8:99:f9:b0:8f:c6:f7:a6:20:8c:db:3b:41:b2:d6:e7:f8:
         58:9d:23:7a:2c:5f:d2:fc:80:ce:c8:21:b9:a0:4c:88:c0:b3:
         b8:b5:9f:47:b7:d5:e4:0c:6c:4b:87:37:df:9e:b6:37:b7:50:
         ed:b1:2b:92:f6:ec:6f:c9:83:4a:57:87:9a:c0:b4:32:b6:ca:
         84:1e:6b:c6:84:75:04:8d:bf:a0:68:bf:17:10:92:5a:e9:02:
         d9:1b:a0:db:26:3c:24:b2:b8:d7:2d:a1:31:25:34:b2:a7:ba:
         dd:b9:c7:2c:83:96:e6:8b:3d:b5:d0:80:53:28:21:84:fe:13:
         85:43:26:1a:4b:b6:49:2c:b6:86:4d:9c:4d:75:20:0e:34:1b:
         db:5d:ed:46:e2:1b:5e:15:be:bc:fd:f6:48:2c:e8:f1:7b:a1:
         f5:64:a5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:13 2026 by rpki-client