This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File:                     1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier:          XdcMg5viW5yinL1VXxWFb3YOPkp1Ue95+2NbDCkSkZE=
Subject key identifier:   0F:3C:DF:1C:AD:20:D3:7C:6A:A8:D0:E5:19:E7:1C:C4:1B:B0:B5:CF
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer:       /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial:       019BF80805EBBD284BF6C6675C3E1B7E9167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number:          17ED
Signing time:             Mon 26 Jan 2026 02:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:33 +0000
Files and hashes:         1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: QA3uXtYzeLU1oMVyvkIiGWIl/btKVs87LD2KAzp3IBk=)
                          2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
                          3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
                          4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:05:eb:bd:28:4b:f6:c6:67:5c:3e:1b:7e:91:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
        Validity
            Not Before: Jan 26 02:00:33 2026 GMT
            Not After : Jan 27 02:00:33 2026 GMT
        Subject: CN=0f3cdf1cad20d37c6aa8d0e519e71cc41bb0b5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:db:10:92:63:12:08:f6:61:3d:4f:b9:ae:db:
                    27:74:6d:f6:d2:95:06:c2:b1:80:3e:48:97:26:af:
                    11:84:32:d2:c1:c6:a7:29:e5:e4:63:12:35:57:0b:
                    02:24:07:65:06:b9:a3:d6:55:0f:d5:42:4f:58:83:
                    c5:59:c8:03:64:14:e6:44:ea:dd:54:60:11:b2:b8:
                    48:2c:12:af:fc:92:ee:8a:df:51:df:9e:4d:fe:6a:
                    8f:5c:6e:8f:70:58:d9:62:24:ff:bc:2b:a6:6f:3a:
                    d0:e1:8d:54:8b:39:bf:5c:b6:5d:7c:d4:21:6e:c3:
                    be:ba:ea:1b:cb:a2:fe:89:73:af:7f:2b:f7:b2:ea:
                    7a:4a:96:86:d1:b9:ad:e9:60:43:81:98:8b:94:e1:
                    a8:eb:64:e1:a0:a0:9b:a7:c9:c3:4d:38:2a:00:e1:
                    d9:85:ed:eb:7c:76:05:95:9b:ba:3f:75:e5:e0:28:
                    44:34:36:a0:90:50:3d:21:ed:12:bf:0e:6b:36:2a:
                    88:db:c3:1b:af:fc:74:00:5c:ba:80:c1:8e:62:87:
                    81:ae:32:14:b7:72:52:c9:2d:97:52:a0:d0:8d:70:
                    d5:e6:a5:b3:bd:6c:90:1b:44:79:52:56:23:ce:56:
                    0b:7e:43:c7:7e:34:51:b2:18:6b:b4:fd:e1:1d:a9:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3C:DF:1C:AD:20:D3:7C:6A:A8:D0:E5:19:E7:1C:C4:1B:B0:B5:CF
            X509v3 Authority Key Identifier:
                keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:80:a9:e5:db:cb:19:f1:0b:e8:a2:25:c5:37:0b:0a:5d:a1:
         ad:22:58:42:24:d1:f5:af:ce:2a:a4:c9:00:2c:b3:5e:ff:9f:
         42:0e:b0:27:f9:10:e7:ef:41:ce:d5:89:87:ac:53:ce:48:c9:
         3c:74:6c:f5:dd:cb:5d:18:d3:96:6b:d1:32:48:4b:d0:6a:a8:
         09:31:30:0d:18:f8:59:41:d2:a5:53:74:f3:d1:ed:5f:10:2e:
         d5:e0:9e:31:4b:b7:7f:63:19:74:ac:fd:41:9e:b0:70:e7:01:
         f9:13:c5:4a:ce:7b:2e:96:df:0b:6c:75:14:46:ca:c7:91:54:
         1c:b6:ed:27:e4:4b:35:2c:88:97:95:8e:5f:63:3a:de:cc:1a:
         b1:29:38:d0:a8:92:dd:7e:c7:41:e7:7f:77:e3:3e:68:02:eb:
         19:b0:fb:55:3d:c8:c8:bb:f3:27:94:63:3a:f3:95:b2:88:1f:
         6b:95:b3:11:b9:c7:80:3e:b9:d0:2a:15:22:ca:04:f2:c8:a7:
         52:50:5c:38:32:75:b7:37:45:5a:af:e4:99:d1:2b:5f:eb:9a:
         1c:94:f7:f6:4b:6d:4d:2c:dd:ca:0c:f6:80:ea:a6:30:1c:61:
         48:c9:cb:c1:c7:6a:fe:80:90:ee:07:5e:f2:b7:0b:bd:41:96:
         55:7b:b6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:46:24 2026 by rpki-client