This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File:                     I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier:          gWzGVwWpcHPr5xxD3+JEw2aU0z6gnqFTVdxTTuHyRds=
Subject key identifier:   C4:57:B0:92:5D:BB:65:A9:86:2B:30:02:E7:41:1A:74:FB:D7:79:D9
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer:       /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial:       019BF876835E7F9E83517E3F61773C98DA34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number:          02C0
Signing time:             Mon 26 Jan 2026 04:01:14 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:14 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:14 +0000
Files and hashes:         1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
                          2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: NhCJtCmZ9+4R3Omcl6iis3ZN+tHLJHNbnw5Sn5Fk9eg=)
                          3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:83:5e:7f:9e:83:51:7e:3f:61:77:3c:98:da:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
        Validity
            Not Before: Jan 26 04:01:14 2026 GMT
            Not After : Jan 27 04:01:14 2026 GMT
        Subject: CN=c457b0925dbb65a9862b3002e7411a74fbd779d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:dd:d3:ce:27:97:58:82:4f:3f:7d:03:8f:19:
                    36:04:73:78:f4:8e:65:3b:f2:81:d1:5d:20:4d:17:
                    c8:a8:09:8a:33:d9:2c:cd:96:2e:f1:90:8c:5c:e0:
                    af:98:2d:fd:58:83:2b:f7:82:01:bd:b9:d1:c2:69:
                    71:6f:37:3f:b1:9a:f2:d0:23:51:f2:64:d5:95:ac:
                    0d:8a:41:9e:68:55:fd:7b:d4:04:60:b8:26:e4:5b:
                    9e:43:77:54:ac:2b:cf:cd:d6:51:04:6b:89:e8:0e:
                    41:02:20:40:df:ab:20:fb:b7:a0:5e:2f:aa:a8:e5:
                    b7:7c:bc:1a:63:3c:1a:40:c3:fa:78:93:5f:e2:8e:
                    e2:52:d7:b6:21:75:c4:d5:ea:79:c3:71:ae:51:d4:
                    35:0c:2c:cf:a5:c5:9d:fa:d6:fe:7e:5c:b4:40:6c:
                    a7:e3:c8:7c:30:33:68:55:3d:3e:4a:fd:98:9c:90:
                    10:1a:ce:90:c4:8e:4c:61:37:a5:a4:13:da:9c:18:
                    46:2f:1d:da:69:7b:01:82:7a:11:d9:37:4a:c9:26:
                    b4:ec:5b:e5:00:71:4f:38:b4:9f:31:4a:4b:7b:01:
                    9f:c2:52:ac:54:97:2b:cb:f2:fa:dd:4e:b3:64:fb:
                    1a:53:6b:df:de:c2:7e:be:22:d5:b5:23:57:63:5e:
                    f3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:57:B0:92:5D:BB:65:A9:86:2B:30:02:E7:41:1A:74:FB:D7:79:D9
            X509v3 Authority Key Identifier:
                keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:31:1b:63:82:ea:e8:5c:ae:e4:78:ae:41:d6:a8:ed:69:35:
         1b:3a:49:bf:c8:4a:fd:26:4b:65:10:54:66:f9:3a:d9:97:1a:
         fc:8e:c3:18:40:32:1d:11:ea:f3:6f:7a:3f:17:b8:5d:fb:9b:
         f4:b8:1f:11:45:14:f9:24:24:bd:48:a3:dc:ff:a8:33:9b:1a:
         97:4b:22:2d:3a:5b:e4:0c:ef:96:2b:61:b4:db:fc:79:e6:c1:
         5e:81:a1:ae:1a:3b:af:1e:c4:df:fc:da:e7:2d:4d:24:61:22:
         33:c3:dc:75:fb:10:24:ef:67:82:6f:40:29:93:3b:20:45:e8:
         9c:c5:08:45:80:91:cc:4b:b5:e3:8e:a3:4c:7c:a0:f8:83:6a:
         b9:44:ee:27:48:f9:d6:07:9e:af:ce:f3:1f:28:3f:68:9d:40:
         28:f3:47:34:be:4a:69:5a:bf:97:93:92:96:f1:08:8a:ec:ab:
         79:62:ce:c5:3e:23:c1:f3:69:ab:a9:fc:08:9d:e7:d3:ca:46:
         ab:7f:ff:e6:b5:75:cc:23:99:11:8a:98:3a:54:f2:27:7f:89:
         99:4b:d2:3d:37:cc:28:66:4c:53:1b:4d:f1:e3:eb:cf:91:e5:
         64:8c:51:bf:a2:f8:ed:3e:33:a7:c3:51:be:4f:f0:6f:1f:b8:
         d9:84:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:01:20 2026 by rpki-client