This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File:                     AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier:          U/6CZdIKZlnhIlOcqp7ZZPBaqJ7g4cbH+6DJVNcomms=
Subject key identifier:   71:D1:84:66:D2:36:7F:9C:01:D1:A8:A3:3F:9C:15:F4:A4:11:32:1B
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer:       /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial:       019BF53DE1F8DA1989B62FEA300B728BAE4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 13:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:32 +0000
Files and hashes:         1: 1xeimVDY6yCZMZLaCzfJqK6A_5A.roa (hash: Ww+EuVjawTMRL2AaKzheoe51CQ46uTuW71gYJQcVSj4=)
                          2: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: sFaRq9fREud85gQWR6HKGlhuygpq2lChOhsGRRQhU80=)
                          3: KqW4k975xNj0cUtZycmmIX1XgM4.roa (hash: o6fUVQ6g1g7jq909fubDW5lnQqRTlZGnY1BR5GgXL0k=)
                          4: NurrzfLeVosuCbdskOR80jmR2QQ.roa (hash: xdilmI7CcyDgRIKDOZuWgw8px62zANGWdj5pM/jSenM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3d:e1:f8:da:19:89:b6:2f:ea:30:0b:72:8b:ae:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
        Validity
            Not Before: Jan 25 13:00:32 2026 GMT
            Not After : Jan 26 13:00:32 2026 GMT
        Subject: CN=71d18466d2367f9c01d1a8a33f9c15f4a411321b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:18:5f:f1:3d:cf:da:b7:8b:c6:2c:26:5d:
                    94:3e:0e:11:c7:93:32:e4:27:39:fd:94:c7:6f:76:
                    82:7a:9e:81:a5:d4:32:e4:0b:54:e2:2e:79:4a:b5:
                    6d:cf:0c:c0:fc:29:7b:d6:6a:9e:6f:1c:a7:e7:9f:
                    4d:5b:f4:2f:10:88:51:b2:8b:f0:2a:bf:77:3a:a2:
                    80:8c:31:8a:f1:d9:78:07:90:28:33:20:0c:cc:10:
                    5a:86:c7:9a:b5:0e:fc:45:07:9f:65:76:bb:85:50:
                    e7:52:50:01:0f:df:a4:61:87:b4:72:b0:fa:a2:5c:
                    d0:5d:b6:92:aa:62:a8:54:65:30:c5:10:69:4f:ca:
                    9b:2c:4f:31:83:9a:de:81:bb:cd:f8:e6:e1:f3:97:
                    49:6a:9e:98:eb:47:28:3c:64:14:a2:30:25:50:49:
                    fa:ad:78:03:5c:42:c9:37:3e:56:70:80:35:ac:61:
                    e6:91:c8:fc:6d:c7:70:e1:92:16:c5:eb:55:0b:84:
                    8f:c2:1e:49:a0:2a:b9:30:61:80:1b:5a:65:63:4d:
                    6a:2f:ce:49:0d:1d:1a:7b:b0:64:56:21:ec:18:85:
                    a7:8a:a4:0c:57:0f:e0:e1:c6:86:d0:a6:7a:28:df:
                    bd:39:26:6f:a4:25:4d:f4:db:3c:3d:7b:83:09:9c:
                    dd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D1:84:66:D2:36:7F:9C:01:D1:A8:A3:3F:9C:15:F4:A4:11:32:1B
            X509v3 Authority Key Identifier:
                keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:08:4b:df:6e:cf:30:4c:8a:d0:36:92:ad:1a:4c:d2:84:9a:
         02:d3:d5:36:f6:e6:10:65:e0:66:da:31:5b:97:8b:59:c8:6e:
         d2:87:6a:16:f9:33:9c:89:3b:52:27:01:00:5e:8a:cd:9c:1d:
         da:8b:44:75:f5:d5:1e:5f:27:2b:f3:05:17:7a:ee:63:45:6c:
         13:0b:58:96:97:d5:34:78:84:3e:b7:24:da:75:89:e9:bc:42:
         33:c9:b5:5e:2f:cc:4d:aa:2d:ce:7d:98:18:2d:e8:3e:19:c0:
         81:8d:b0:e2:0e:3c:0c:a8:54:34:78:79:a6:d8:cb:dc:21:82:
         68:7c:37:09:86:1f:db:5d:76:ce:b8:ad:00:20:1c:ca:9b:01:
         a3:fa:b1:7e:20:4f:58:6e:47:5d:c7:a6:8a:60:8b:84:8f:c6:
         14:94:ad:2b:aa:c4:99:bb:58:23:e2:24:4b:d4:2c:c6:fd:05:
         79:4f:1b:eb:0c:bb:0b:a1:29:96:78:68:f6:8f:d3:bc:60:dd:
         eb:83:10:be:40:1c:0b:06:06:a9:b3:97:13:97:cd:c4:88:9b:
         bd:9f:68:40:43:62:a4:e6:85:f3:01:a4:e1:87:b4:b8:a3:f4:
         e2:3c:8d:03:18:e9:cf:05:f5:86:70:e0:13:4a:e2:bd:32:fc:
         ac:92:18:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:22:30 2026 by rpki-client