This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          LwsrnCwUU8NLLyoMnGQ0wby7q6ywMTQlv3Mt9O6N3W8=
Subject key identifier:   32:71:BE:84:99:53:F2:35:65:F3:E2:40:29:82:A0:C0:19:4E:7C:7A
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       019BF72C83EFD23F5E6D9AA215EABD5FC9D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          17F7
Signing time:             Sun 25 Jan 2026 22:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:48 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: 8rJGU8NLBErgKO38bMAC0nuWyMwsocDLT51JO0tOqhU=)
                          2: R3vUElIMqfT3vzJXMUzIubVzmLQ.roa (hash: 44Gpc3/VsnWSrTFrLhn2IhmQD8M15ksHH0oPjm/pzxE=)
                          3: U1oh_8Ho8r1k2j-nGFoU_RDlNoE.roa (hash: NZ8sSZ9siHhWGPZhK1C3U7mz9zhYVNPsOY9uQbWP0to=)
                          4: baXaAX1rxYa_2y57T1wari4SNRQ.roa (hash: Zn5x85hGWjwOTzCti/LCEZHhyAwdPWfVjbdllVnVtH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:83:ef:d2:3f:5e:6d:9a:a2:15:ea:bd:5f:c9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Jan 25 22:00:48 2026 GMT
            Not After : Jan 26 22:00:48 2026 GMT
        Subject: CN=3271be849953f23565f3e2402982a0c0194e7c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a5:dd:4d:92:4b:d4:e3:45:5e:07:6f:2b:a3:
                    ba:8a:de:11:5d:86:fe:be:1c:f2:d0:fe:44:53:b3:
                    9d:04:bd:65:a8:bd:0f:bb:fe:e4:b7:1b:33:ef:7b:
                    29:30:fb:15:c7:38:b5:55:20:fe:c8:03:c8:2c:1b:
                    44:52:09:6c:3a:68:40:e4:3f:25:59:06:70:1d:3c:
                    c3:8d:21:8e:fa:c4:35:4c:57:47:5e:85:66:70:db:
                    73:e8:cb:9c:05:c1:da:cb:cc:62:54:7c:23:37:32:
                    be:ea:31:68:39:71:a8:b7:f3:bc:0b:c1:a2:68:e4:
                    e2:79:ba:6a:14:fd:bd:5b:18:50:b3:ab:87:6b:da:
                    1a:69:0e:2c:88:9b:73:4e:94:2e:62:1d:c5:40:27:
                    61:a3:b8:b8:d6:a7:e9:de:2b:48:e0:11:7e:ce:10:
                    97:b6:9b:74:2d:e9:d6:2a:6b:d5:62:24:7d:aa:58:
                    c6:cf:d8:36:0a:37:a2:45:ad:89:f8:55:eb:62:ce:
                    34:a6:b5:3e:1c:5d:74:5f:77:7f:ea:c3:ff:cc:57:
                    55:d0:b3:71:22:67:54:cb:16:7f:33:4e:30:20:a4:
                    bd:81:cd:24:57:dc:12:59:c6:eb:96:94:c0:85:64:
                    67:be:f3:0d:82:c7:8e:62:aa:9d:3a:59:98:7f:4d:
                    9e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:71:BE:84:99:53:F2:35:65:F3:E2:40:29:82:A0:C0:19:4E:7C:7A
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:93:b8:9a:4c:94:95:d9:e3:64:5d:51:74:f5:ef:ce:74:5e:
         e3:d3:f8:25:80:de:c2:ea:70:c4:1c:54:c5:90:59:59:69:19:
         2e:0e:c4:5c:d6:6b:fe:b4:8c:c3:25:c8:e0:59:24:88:e3:19:
         27:44:38:e4:fc:be:37:07:6a:b0:f8:03:e2:c5:bf:60:cd:9c:
         a6:8f:a4:b5:1c:12:ba:75:bf:5c:3d:23:52:8c:27:24:83:6a:
         7c:a4:54:23:48:b7:bd:ab:e7:80:a9:3b:29:6f:33:cd:c6:ef:
         2c:8d:ad:69:f7:62:48:df:07:10:9a:e9:28:5a:7b:dc:4b:15:
         c2:3c:af:a7:01:dc:78:89:83:68:16:e7:e6:6c:3e:96:9e:65:
         6b:60:60:12:fd:69:52:6f:64:64:4b:1e:2b:75:2c:e5:b7:5a:
         79:ad:eb:a5:7e:27:4b:20:9c:49:7c:10:75:bc:bd:37:77:75:
         4b:d8:44:8b:eb:07:f7:0a:cd:53:18:88:88:09:9c:75:8f:49:
         4c:45:08:a6:34:1c:e6:cd:26:87:dd:0e:37:b9:53:da:d6:90:
         c5:43:33:f8:21:61:50:92:24:b1:d8:12:73:73:ba:52:f6:70:
         c2:0d:e4:91:5f:25:4b:90:71:31:38:45:db:27:2c:ab:36:8e:
         41:f8:55:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3LIPv0j9ebZqiFeq9X8nUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODJjYjEzZGRlMTI2NThjZGFjMThjYWNhZTkxZmJiZjVj
NTgwOTAwHhcNMjYwMTI1MjIwMDQ4WhcNMjYwMTI2MjIwMDQ4WjAzMTEwLwYDVQQD
EygzMjcxYmU4NDk5NTNmMjM1NjVmM2UyNDAyOTgyYTBjMDE5NGU3YzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaXdTZJL1ONFXgdvK6O6it4RXYb+
vhzy0P5EU7OdBL1lqL0Pu/7ktxsz73spMPsVxzi1VSD+yAPILBtEUglsOmhA5D8l
WQZwHTzDjSGO+sQ1TFdHXoVmcNtz6MucBcHay8xiVHwjNzK+6jFoOXGot/O8C8Gi
aOTiebpqFP29WxhQs6uHa9oaaQ4siJtzTpQuYh3FQCdho7i41qfp3itI4BF+zhCX
tpt0LenWKmvVYiR9qljGz9g2CjeiRa2J+FXrYs40prU+HF10X3d/6sP/zFdV0LNx
ImdUyxZ/M04wIKS9gc0kV9wSWcbrlpTAhWRnvvMNgseOYqqdOlmYf02eNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDJxvoSZU/I1ZfPiQCmCoMAZTnx6MB8GA1UdIwQY
MBaAFPOCyxPd4SZYzawYysrpH7v1xYCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDIt
OTcwNDI4OTFlYjk5LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDItOTcwNDI4OTFlYjk5
LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpO4mkyU
ldnjZF1RdPXvznRe49P4JYDewupwxBxUxZBZWWkZLg7EXNZr/rSMwyXI4FkkiOMZ
J0Q45Py+NwdqsPgD4sW/YM2cpo+ktRwSunW/XD0jUownJINqfKRUI0i3vavngKk7
KW8zzcbvLI2tafdiSN8HEJrpKFp73EsVwjyvpwHceImDaBbn5mw+lp5la2BgEv1p
Um9kZEseK3Us5bdaea3rpX4nSyCcSXwQdby9N3d1S9hEi+sH9wrNUxiIiAmcdY9J
TEUIpjQc5s0mh90ON7lT2taQxUMz+CFhUJIksdgSc3O6UvZwwg3kkV8lS5BxMThF
2ycsqzaOQfhV1w==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:19 2026 by rpki-client