This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
File:                     Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json)
Hash identifier:          4gVVs5mrem6LWjZsHN1fIHirnB/hoVFmXn1KehjUPYA=
Subject key identifier:   EB:CF:28:59:41:C8:5B:64:4B:8C:CB:D8:AD:1B:10:72:63:50:E9:6E
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Certificate issuer:       /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial:       019BF574F557FF4F260F5A31EFC010D9F9FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
Manifest number:          17F8
Signing time:             Sun 25 Jan 2026 14:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:41 +0000
Files and hashes:         1: 6-VbzQgi8XA2TJAq8RgMaysx0X8.roa (hash: nwaIi9ebrKp/Q5R4ShMm9TiJvoby9UkF3818QuosS1w=)
                          2: ByAZZvD6ZO4dFVGZCOox_IHwdzo.roa (hash: wGFO7OyD3Pn5gOzCEOeYwv/8FCnWxDnlJBKiFmfnr/k=)
                          3: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: dGjkgElTA0tfqncRIp3d4E3LWm7Ksl3Fl4hGw1znGSc=)
                          4: KM6PkAFxCJgnCXLELW5hiOAKjus.roa (hash: DuJVolLG90aax0OKvLaTyX/VTpILvcyZxRZVQhnBPeY=)
                          5: YoJZ9epoonqwiI5Cz_IYJxFC0KQ.roa (hash: rcBdfpWe95Pbv9jR1rFIiVQgv2ItDDK2rcgQtFQdM3o=)
                          6: kZOcgE-yQiEGZ59-58kZODUnVtk.roa (hash: NpX21ZAdgdJK8Ql3JOW4Xo/GtwmqnfCpzM6EirlUM7w=)
                          7: odPvkDMmAxjrc3ZPhrKtHv1Pl_Q.roa (hash: WbetbahmmvNLGyGKWf2niABo2rq9cUlLwj18Yb3Jj3M=)
                          8: ps2vvRE8em2BhpWugO8HL3Oy4sw.roa (hash: UVRw/RrZWURZppeHPUhCU3KyC7ib1pGilFd5giOzN0U=)
                          9: sT5NvgSrjzuwTioYpNTeZgud1ao.roa (hash: eCoPPFfnRnkLIs6eZVD/zHitzMoyIccre5mcG4E3t34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:f5:57:ff:4f:26:0f:5a:31:ef:c0:10:d9:f9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
        Validity
            Not Before: Jan 25 14:00:41 2026 GMT
            Not After : Jan 26 14:00:41 2026 GMT
        Subject: CN=ebcf285941c85b644b8ccbd8ad1b10726350e96e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d8:d5:40:b9:22:ba:be:4b:4d:8f:53:d6:99:
                    d1:07:c5:58:30:09:0f:15:ec:79:a9:24:8b:68:80:
                    86:a6:c3:eb:81:9b:05:a5:ab:96:5b:88:47:2b:b7:
                    57:fb:2d:38:3e:a0:6a:b7:39:a7:37:43:51:05:41:
                    6c:9a:0e:a4:2d:36:d9:35:38:ae:09:22:2e:ae:3d:
                    9c:68:f8:e2:b3:65:ff:13:26:28:7b:44:dd:32:6c:
                    9b:4c:0a:1a:ab:ae:2a:b7:27:b3:b6:f5:38:20:1d:
                    46:99:f8:ae:31:0b:88:1b:9f:bf:d4:a5:47:d4:55:
                    57:5d:3f:3e:a5:be:a6:b4:6f:88:10:7f:5f:93:84:
                    66:ef:42:e0:7a:d8:2f:8d:92:96:ad:48:b0:02:0e:
                    22:15:9f:0a:c3:36:1d:b1:99:58:6d:90:65:1b:a7:
                    6f:7b:6a:20:2f:07:34:85:72:ff:71:9f:6b:6f:22:
                    7b:1d:26:75:96:f3:0e:33:23:f3:2c:3f:2a:b9:d7:
                    1c:6a:0b:cf:79:25:bc:45:f5:e1:d4:8f:3e:da:e0:
                    c3:30:7b:b5:d4:c2:a0:80:81:f8:73:fc:25:db:14:
                    5c:dd:d0:47:ed:61:d7:51:f7:bb:3c:ab:04:d4:d7:
                    78:28:04:4c:37:da:f4:8b:2a:be:8e:9f:aa:79:f8:
                    47:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:CF:28:59:41:C8:5B:64:4B:8C:CB:D8:AD:1B:10:72:63:50:E9:6E
            X509v3 Authority Key Identifier:
                keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:92:de:34:ff:2e:96:af:44:2d:67:3f:a7:c7:25:78:71:d5:
         ec:fd:ff:a0:dd:4e:48:a6:5a:3a:8c:5d:37:52:92:20:87:2b:
         2d:fe:b9:b7:62:2a:f3:85:59:e9:99:7d:98:2b:13:fb:ad:fd:
         2c:d1:ed:57:5a:70:e3:0d:72:4c:1e:65:b4:2b:e1:ba:41:33:
         a2:92:c6:d5:96:6c:59:95:58:35:fc:35:6b:69:aa:d7:3d:b1:
         aa:32:6c:ef:45:be:d5:42:f0:4b:9e:16:5d:15:b2:0b:54:29:
         21:81:72:b9:dc:4e:0a:8f:40:02:de:19:43:59:a0:76:8b:36:
         2f:5d:10:86:05:8a:21:2f:0d:14:eb:f6:b3:56:b9:14:5c:93:
         7e:1d:19:89:2a:e3:d7:eb:90:a2:8d:02:0a:ae:f0:e3:2e:26:
         5c:e8:1b:92:be:7c:21:01:51:ff:c7:ee:0f:fc:a4:e4:96:7c:
         b3:aa:df:9a:ce:af:f1:72:28:ad:26:86:fe:e8:51:22:37:55:
         da:03:80:cb:de:0b:e5:05:68:ec:2f:9d:2c:e8:6d:04:05:ca:
         a7:6c:70:f7:f1:51:79:b0:9a:cd:77:09:31:53:c1:59:eb:f4:
         a8:a6:4f:7b:f2:9c:18:45:00:b6:38:1b:02:5a:22:39:89:1b:
         13:7b:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:52:46 2026 by rpki-client