This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
File:                     se4yDfBGSHfVF0XjFCMbVcg7aEU.mft (raw, json)
Hash identifier:          o6b54iDaS42ydtESb2oaWZdOx2YmZTLXHxiw/hi5HsQ=
Subject key identifier:   3D:44:66:B4:D8:10:9A:A7:81:B6:B4:9B:1B:CE:C2:09:50:9A:44:42
Authority key identifier: B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45
Certificate issuer:       /CN=b1ee320df0464877d51745e314231b55c83b6845
Certificate serial:       019BF6F5637A084DBD5E96F7F3228ED824F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
Manifest number:          177C
Signing time:             Sun 25 Jan 2026 21:00:35 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:35 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:35 +0000
Files and hashes:         1: ZJ6WRtkzwu8v_Ad_XX8o7gcNNmU.roa (hash: H8SukrLououOm9b8DOSj2scPjyGTdIoNUh4OD9s1VW4=)
                          2: se4yDfBGSHfVF0XjFCMbVcg7aEU.crl (hash: bZegdbuIknDQhxkZs7wNI/3bpjjjcdF2/X3dHvWShNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:63:7a:08:4d:bd:5e:96:f7:f3:22:8e:d8:24:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1ee320df0464877d51745e314231b55c83b6845
        Validity
            Not Before: Jan 25 21:00:35 2026 GMT
            Not After : Jan 26 21:00:35 2026 GMT
        Subject: CN=3d4466b4d8109aa781b6b49b1bcec209509a4442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:30:b4:b4:48:d4:cd:3e:f7:39:d6:69:ee:0d:
                    88:b4:78:90:58:da:85:a8:b3:cf:10:bf:a8:9b:0d:
                    23:c4:ac:6d:1b:dd:e2:0e:34:4e:39:81:33:ab:b7:
                    b4:2f:dc:b4:25:6b:f7:c2:16:a8:ff:6f:97:12:ae:
                    72:45:6f:fb:a4:79:0b:19:68:1b:ba:bb:87:09:7e:
                    55:eb:09:94:f3:38:7d:01:04:67:2b:75:78:71:5f:
                    15:9a:32:19:60:7a:d1:b3:58:06:5a:39:ea:58:76:
                    3a:62:e8:8e:dd:91:58:66:00:96:7f:f5:b3:ce:39:
                    b5:18:f3:3b:e7:c2:cd:15:43:da:fa:54:8a:54:d0:
                    69:0f:df:9e:4a:5e:71:5e:25:eb:e3:de:3e:a0:29:
                    96:74:10:86:e3:00:94:63:5b:ee:fc:70:3e:68:77:
                    55:71:21:3d:f3:a5:ab:2b:fe:6b:62:94:d0:8b:98:
                    06:52:dd:df:dc:89:4a:2e:46:0b:9a:cb:13:0e:37:
                    5d:92:37:64:88:4b:87:6b:77:09:e2:b0:ec:7c:69:
                    83:0d:86:0b:30:f6:9d:60:d8:11:53:7a:e7:42:90:
                    09:27:7f:e0:ff:fb:b4:dd:2f:fa:ab:ef:ac:af:e6:
                    8d:ea:41:5c:f2:38:16:7c:96:49:1d:07:78:7f:89:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:66:B4:D8:10:9A:A7:81:B6:B4:9B:1B:CE:C2:09:50:9A:44:42
            X509v3 Authority Key Identifier:
                keyid:B1:EE:32:0D:F0:46:48:77:D5:17:45:E3:14:23:1B:55:C8:3B:68:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/se4yDfBGSHfVF0XjFCMbVcg7aEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/03b404-2f64-4c7c-ac6c-26eb0c6290ba/1/se4yDfBGSHfVF0XjFCMbVcg7aEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ca:a4:84:47:14:63:40:62:1c:7b:80:6a:76:e5:26:20:38:
         29:01:1c:94:a7:ca:46:c9:4d:b2:c6:82:de:6a:ff:fe:dc:d9:
         94:44:e6:de:fd:1a:6f:62:6f:26:b3:3b:6b:37:75:42:0c:0b:
         97:c5:19:1a:e3:80:67:ee:77:bc:c8:3d:5f:e1:01:37:6f:4b:
         70:3f:76:f7:18:f0:ba:ed:ee:29:8c:74:0e:69:9f:9d:d5:28:
         20:74:b8:0b:ae:b7:da:d5:85:85:7a:fc:51:05:d9:0b:9c:f7:
         1f:59:2c:16:b0:b7:18:c1:8b:93:ac:b3:de:f9:b5:bd:5c:4d:
         be:ec:2f:b6:57:88:e2:18:88:0c:1d:c0:8c:6b:22:e1:a8:49:
         c3:d1:9f:cf:49:bb:9a:78:83:3c:0c:c3:a9:13:e3:8d:17:2d:
         c4:92:63:b8:5f:b8:b6:66:d7:10:be:f1:2c:17:74:16:0a:45:
         72:7f:96:e8:c0:db:d6:d8:95:27:1b:bc:07:44:c6:b8:69:67:
         2f:42:07:17:52:a4:58:ad:72:47:b7:99:01:7b:c9:6e:a1:c1:
         ce:fd:46:01:33:1b:4a:71:a5:62:88:33:08:33:6d:6f:eb:40:
         07:a9:79:b8:68:84:d4:75:8c:ad:9f:eb:0a:e7:f6:94:9a:cb:
         e2:19:d7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:36 2026 by rpki-client