This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
File:                     d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json)
Hash identifier:          sbJq1MVOaoOhDsR1v6KgBj9osek6+abDMdb43yvaD8g=
Subject key identifier:   5D:54:FA:47:3B:29:3E:C1:15:10:D1:1E:86:C1:4A:62:CC:D0:FD:87
Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC
Certificate issuer:       /CN=776405e0283743cf52180d5b13812dfba3ded7fc
Certificate serial:       019BF4D08124E4A47C4397C5BFA2FC7AB244
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 11:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:03 +0000
Files and hashes:         1: 8q11ZXlsuNY-5BnKL-DZjg8yXCc.roa (hash: ouWFvShqIiSVhc7XwLMg1RvjjhIXPIC2TEXQAFnoIdY=)
                          2: NWmG-3ib3K9ny2X2v2uTxM0DQqA.roa (hash: CGIiGH/Yy5fY3u/pl6DzCecfrnnhokhuxjI5pup6gIw=)
                          3: W0KBm5HEcFXtVXifacsZfmIqvhY.roa (hash: W8Izm3ucgflTtw/kXP/v/wyRWH1PXzlBhUPfbe4tfxo=)
                          4: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: MHTbuDUjlFA5RYX83onXmgKZkc/NdNwesMYYxlCxzk4=)
                          5: hFwOd0_YEOVcJRwShM4Rz_JX8w4.roa (hash: 2ZVK7MUTm4O+cKvEyp+XBJuaZn8IX75XJYPFZQbyyqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:81:24:e4:a4:7c:43:97:c5:bf:a2:fc:7a:b2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc
        Validity
            Not Before: Jan 25 11:01:03 2026 GMT
            Not After : Jan 26 11:01:03 2026 GMT
        Subject: CN=5d54fa473b293ec11510d11e86c14a62ccd0fd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:77:8a:8f:da:c6:b2:1d:c7:dd:89:51:fe:
                    ee:37:76:17:06:c1:6a:81:be:41:05:5a:f4:26:42:
                    32:9a:55:9d:08:ca:47:e4:0d:94:6d:b8:cd:ec:d7:
                    d5:10:97:df:0d:5f:e3:09:fb:f9:2e:f4:21:44:d5:
                    e6:63:a4:c9:aa:46:bb:49:29:4e:50:6d:5e:cf:e9:
                    54:70:08:b1:9d:a9:76:0e:d9:79:b9:a8:e4:2c:c0:
                    97:99:4a:20:2c:aa:5c:ea:22:a6:2f:cf:2b:bb:4b:
                    cc:9d:aa:52:01:51:73:fc:d9:60:0e:6c:70:cb:da:
                    5a:a1:71:c1:2c:83:02:48:65:a7:3b:e7:18:b3:55:
                    1f:36:f9:f6:f7:24:1f:45:c4:07:bb:6b:ac:f5:b1:
                    40:ef:92:25:b4:a8:04:ff:c5:2c:25:93:b2:4b:4b:
                    d3:32:75:b1:10:99:5a:9e:bd:aa:c4:83:82:f8:33:
                    ec:f1:42:32:54:b8:62:87:d7:fb:31:df:1a:14:52:
                    82:01:81:d9:43:95:56:df:42:79:2d:ab:4a:b7:63:
                    a2:3f:d7:d2:90:47:8e:a7:31:80:f6:c0:81:4d:a6:
                    41:de:2b:52:4d:0c:2d:84:14:da:bb:46:32:f9:00:
                    35:1f:e1:45:f6:ec:86:1c:11:90:65:5f:20:43:f5:
                    c0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:54:FA:47:3B:29:3E:C1:15:10:D1:1E:86:C1:4A:62:CC:D0:FD:87
            X509v3 Authority Key Identifier:
                keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:32:1c:bf:f1:b3:10:ef:85:2c:e7:65:5b:c8:01:ba:40:70:
         90:76:32:11:96:d8:88:5d:69:61:2b:e0:cc:2b:6e:a2:5a:07:
         c8:81:2f:0d:4e:f4:fa:c1:72:6c:6f:23:a2:f3:49:65:0f:c2:
         99:ae:35:85:9d:99:3d:56:53:2a:0a:a6:bf:a0:0e:e5:1a:40:
         c4:c1:8c:f2:e7:ad:6b:92:2b:de:7d:01:f2:4c:62:00:42:7a:
         48:a4:ed:d9:51:cc:07:45:c3:ee:cf:16:2f:8e:6d:ce:6e:42:
         8f:58:8a:a0:98:80:d6:e0:57:56:e4:16:01:8d:71:9c:0d:92:
         f6:1d:9e:0f:84:20:5f:97:54:90:0c:0c:d8:ba:f6:d5:e9:b2:
         33:c9:ba:a9:be:82:e2:0c:4f:31:f6:d1:68:d7:d7:fa:8a:43:
         57:4d:fd:34:7b:3c:db:d8:98:8f:1d:46:bb:45:dc:c4:10:ab:
         37:c2:a6:87:02:6f:f6:de:c5:4d:c2:5e:2b:f5:3b:75:97:0c:
         0a:bc:c4:9f:69:8e:2b:b0:25:69:78:c9:b2:45:57:40:c6:18:
         ca:86:ec:dc:56:a5:50:51:de:69:62:8a:21:49:09:33:99:44:
         af:91:38:c6:ac:cd:70:1b:4a:92:25:5d:c7:ba:20:89:95:76:
         b4:ca:1b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:32:59 2026 by rpki-client