This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
File:                     7uQWWQWFpdNR27yh8LPKn2KreF0.mft (raw, json)
Hash identifier:          cRAPhaU14PEFQhcaVFgH+7SYwSWRcZMHPLSiihhjAkM=
Subject key identifier:   E3:59:2D:2D:54:A5:DC:28:0A:DE:52:C1:5E:CE:D9:F2:09:4B:4A:7A
Authority key identifier: EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D
Certificate issuer:       /CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
Certificate serial:       019BF3F49EE5AFDE40AD389D5B5F75B41C70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
Manifest number:          1741
Signing time:             Sun 25 Jan 2026 07:00:53 +0000
Manifest this update:     Sun 25 Jan 2026 07:00:53 +0000
Manifest next update:     Mon 26 Jan 2026 07:00:53 +0000
Files and hashes:         1: 5lUGS6oPTLGoWnxgew7D5MIxWOg.roa (hash: qhuiBd586lNm93JRE/rEDVYPTPi0gDSSOqw/SZXIEjw=)
                          2: 7uQWWQWFpdNR27yh8LPKn2KreF0.crl (hash: EAVFfFGCzah80sc+drPSl4KxU4WGeMgkLi0YtHVOkZs=)
                          3: cnwLlloknS4NzO_cT5MY_Xg6hzg.roa (hash: jwOUCHm51TjA2Yun8ez24YjXUJl7V7kT6HkgsG1J4L0=)
                          4: inAZqVvbiAHgmsVOQao9R4JbZso.roa (hash: zU0uu0t4HLwKrI9w1yyx4XrHakdpeUbRFtc2CbGyHCM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:9e:e5:af:de:40:ad:38:9d:5b:5f:75:b4:1c:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee416590585a5d351dbbca1f0b3ca9f62ab785d
        Validity
            Not Before: Jan 25 07:00:53 2026 GMT
            Not After : Jan 26 07:00:53 2026 GMT
        Subject: CN=e3592d2d54a5dc280ade52c15eced9f2094b4a7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:28:4d:93:92:52:da:ef:f7:13:df:43:0e:dd:
                    b6:cc:f1:f1:7b:36:f7:16:a4:ae:f0:61:66:b7:1e:
                    32:ce:6f:49:a4:41:6b:fa:00:ff:49:69:d2:ca:2f:
                    02:c2:f2:7b:61:d5:dc:be:b3:bf:58:c2:14:59:3e:
                    09:e7:f1:de:95:7d:0b:8d:ed:3e:40:ee:ed:4a:0c:
                    c6:48:6d:ae:01:20:6d:f4:f6:e9:8c:46:03:68:80:
                    69:c3:43:90:a1:61:df:78:19:43:b9:41:50:c8:0b:
                    e3:10:38:57:c2:31:98:e3:96:b6:23:ed:22:3d:a7:
                    b7:52:35:3a:bb:4b:1e:29:e2:ca:75:46:60:ac:c9:
                    7b:7a:78:2b:e9:d3:3f:36:0a:17:7e:82:62:4b:cf:
                    dc:7b:95:6d:af:e7:50:8a:c3:00:9b:2d:2f:df:10:
                    16:5a:ab:6b:85:5e:d6:91:e6:76:d0:a9:44:fc:fe:
                    8d:b6:7b:cc:e1:df:01:39:a5:f2:07:07:41:e2:3c:
                    a6:96:be:b9:3e:99:64:81:ef:27:9a:ca:a9:30:e4:
                    23:a8:2c:26:b7:ad:73:ef:d5:62:d2:e5:e5:c5:31:
                    b9:e6:21:da:b9:6a:f0:5b:6f:a9:fa:01:b5:68:c1:
                    8c:ad:be:0f:b2:9d:88:50:9e:51:6d:9b:48:9a:f1:
                    d5:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:59:2D:2D:54:A5:DC:28:0A:DE:52:C1:5E:CE:D9:F2:09:4B:4A:7A
            X509v3 Authority Key Identifier:
                keyid:EE:E4:16:59:05:85:A5:D3:51:DB:BC:A1:F0:B3:CA:9F:62:AB:78:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uQWWQWFpdNR27yh8LPKn2KreF0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c6ab94-65b3-471c-b08c-076a750b8541/1/7uQWWQWFpdNR27yh8LPKn2KreF0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:64:d0:b8:55:63:97:53:5b:f6:f8:ce:17:b7:fc:dd:3b:23:
         80:d2:a6:76:d8:7f:6a:25:78:26:70:e6:7f:d1:4a:65:81:96:
         81:40:47:43:5d:80:5d:d8:ee:33:ce:d1:dd:f1:b2:b6:75:2c:
         bf:93:c7:50:e7:04:71:e8:d4:1e:2a:11:b1:f3:d2:4e:4b:4c:
         c6:9d:4f:42:41:cc:8c:c6:76:b7:6c:47:a5:e4:29:c5:80:5a:
         2e:35:8c:36:be:2c:f9:f6:8a:4d:8d:7f:a8:73:9d:db:b8:6e:
         fc:eb:43:0f:c2:7a:c0:9c:be:f0:ba:08:6b:31:b9:5f:1b:b2:
         f9:b0:60:0a:68:cd:a9:0a:11:ac:04:b8:cf:a1:e4:11:ff:24:
         4b:42:cf:39:3b:f9:2f:4b:cc:ac:4a:4e:e8:f1:f3:12:c7:f1:
         f9:f7:84:7f:2f:63:e9:19:65:68:d2:9b:aa:83:a0:47:80:1c:
         30:e8:64:7c:4e:64:ba:6f:0f:1e:37:6e:6f:16:d1:8d:8a:e2:
         92:26:f4:eb:f5:99:ca:83:5a:30:2e:19:c6:b3:1c:12:74:7d:
         1d:a9:67:a4:43:1d:07:19:a2:e2:a9:9d:79:45:48:22:71:70:
         3f:66:4d:ac:d7:57:5d:f9:cc:fe:e0:7e:ca:02:20:64:62:e1:
         b4:b1:e2:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:31:43 2026 by rpki-client