This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
File:                     9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft (raw, json)
Hash identifier:          pWXH3nXsNxHMfeKvHy9dVO/GjVMxFfJZNbxFRlhhyyk=
Subject key identifier:   A2:FC:89:D0:57:7E:82:31:08:51:DA:5C:61:05:8B:7E:6D:50:54:4F
Authority key identifier: F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A
Certificate issuer:       /CN=f6090b4db06a4d65935141bac98098127a8b8f5a
Certificate serial:       019BF53EF7278E3824A6E352CCD36918C518
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 13:01:42 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:42 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:42 +0000
Files and hashes:         1: 9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl (hash: DSs5KuFI+o4sXjT+SvslNXfkj0qyF6JpV2q8BqGld8I=)
                          2: N5fVoCVJatkBr9HD3lEC3qJcVm4.roa (hash: +gtsovlf25wXEpp6+Ig2oa80di25wrgdYStBihsirkQ=)
                          3: OHhiAeYr_lPpJG4ElFSYvT9QaKg.roa (hash: okWIP8UHkkOy4kiOXB5kYOZ+ieyxEU9RuYl0RT/ofhs=)
                          4: dCUiT81Vaet-9SHbpBx8w7tyJ7c.roa (hash: /Xlo9LK8qMOcKnWSF81eE0SjEcTSjPNFikykaWlHLh8=)
                          5: pOIHGUUuOPs9gK6e1Y9l7RwpvMs.roa (hash: SqTKikGbpOYjqCy/UCM9pe/PLZqFgP5MSdKpR876lUg=)
                          6: vMy8_qPow1_oOv83hdNqlP2PfRI.roa (hash: kd+7ZLZl3l6JtCbEUK+6GN4dP0dO+nAVwWVXURI3BzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:f7:27:8e:38:24:a6:e3:52:cc:d3:69:18:c5:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6090b4db06a4d65935141bac98098127a8b8f5a
        Validity
            Not Before: Jan 25 13:01:42 2026 GMT
            Not After : Jan 26 13:01:42 2026 GMT
        Subject: CN=a2fc89d0577e82310851da5c61058b7e6d50544f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:63:9c:d7:95:5b:ec:26:75:fa:2a:6c:74:07:
                    16:9a:f1:3a:f6:e7:f1:0d:c7:1b:9c:e4:0c:5a:0e:
                    56:8d:06:c7:c6:7b:4f:14:5b:43:96:3f:74:4a:16:
                    fc:0a:0b:91:5c:75:a5:d2:45:de:5c:2d:b2:01:93:
                    18:d0:2e:0f:85:46:86:e4:b6:03:4b:23:e5:cd:d2:
                    eb:eb:2b:f9:e9:bf:14:c3:4d:3a:70:cf:d6:2e:8f:
                    7e:7e:40:1b:2f:c1:a6:fc:db:73:d9:9d:38:54:fc:
                    aa:e7:6d:14:28:18:43:46:bc:09:7a:cb:3c:53:d9:
                    8b:f9:36:98:b9:8d:d5:53:23:e6:3f:21:57:11:c3:
                    29:69:d4:cd:1d:c3:86:6f:ab:48:7d:00:cc:75:96:
                    2f:c4:5b:26:33:2e:13:2e:24:de:b4:b4:30:87:73:
                    fd:85:50:c0:25:b4:14:97:33:21:79:94:28:ca:c4:
                    da:e8:21:4e:16:9b:be:53:e2:f1:be:e6:71:55:42:
                    09:de:09:d2:66:13:7e:65:14:d7:38:d9:81:39:87:
                    1d:3b:36:77:ae:17:0b:91:1a:c0:db:13:c0:6a:9e:
                    db:40:a6:13:86:48:ee:f7:b1:1a:56:a6:64:4d:7e:
                    d2:67:2b:ca:d5:9e:0b:7f:6a:47:c8:f0:d5:21:6f:
                    0c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:FC:89:D0:57:7E:82:31:08:51:DA:5C:61:05:8B:7E:6D:50:54:4F
            X509v3 Authority Key Identifier:
                keyid:F6:09:0B:4D:B0:6A:4D:65:93:51:41:BA:C9:80:98:12:7A:8B:8F:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9gkLTbBqTWWTUUG6yYCYEnqLj1o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2dc7af-2c8c-457b-aeb0-4e1dc1505260/1/9gkLTbBqTWWTUUG6yYCYEnqLj1o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:b5:bf:dd:78:99:9b:ba:e6:e8:63:a3:c8:6e:99:fe:ff:
         be:e4:cf:4b:d0:55:d2:dd:2d:59:bb:5f:38:af:22:bc:37:30:
         df:0d:dc:d3:11:6a:db:55:b0:0d:8a:c1:3a:28:7a:4f:11:f9:
         f8:52:bb:61:18:fe:67:3d:a5:64:f8:f0:ef:28:ca:87:87:4a:
         28:f5:03:45:f1:05:53:b0:aa:28:02:c6:82:ba:8f:c4:4f:67:
         1a:d5:5a:11:2b:de:90:8b:18:19:9b:91:10:aa:9c:47:47:44:
         fe:8a:f4:10:04:14:52:68:fc:2b:28:b1:a4:77:aa:a2:4b:4c:
         e7:52:bc:a5:ba:38:5c:5c:da:ee:93:31:f4:a6:78:c0:1d:85:
         64:0b:29:f9:0c:47:6c:9e:9f:b4:14:af:a3:87:2f:54:d8:2a:
         92:06:06:e5:81:5f:41:29:2a:ec:fe:d4:7a:d3:ca:54:95:8e:
         d8:32:80:1c:b3:62:2a:32:ee:e9:a3:8b:cb:bb:9e:11:70:e2:
         8a:dd:d6:29:08:60:fb:28:13:1e:8d:d1:24:46:8d:4d:3f:1a:
         11:05:63:00:c8:e5:fb:31:7f:8b:fd:ce:0b:96:f9:35:a1:63:
         87:d6:9a:d9:82:d7:e5:02:ed:1c:91:89:3b:c7:25:78:70:ac:
         ef:91:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:16 2026 by rpki-client