This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          zi8at1TaftvOs60OsOc+/5G/agtnAAOlmK/JsWX6wH8=
Subject key identifier:   92:81:0C:FA:67:41:33:B1:ED:8E:83:1B:C9:D0:25:4B:BB:A2:ED:E3
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       019BF6F57A753421E6EE39E11989E3533CD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 21:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:41 +0000
Files and hashes:         1: Qs5aQVIRmNwQTTAz2KPYUQwI290.roa (hash: HTCONoxkAHOIEm4u3dHI3SAMwZlvU666BuYb+Y9SBcQ=)
                          2: cK35oW3CRoDVTabPCj-bao3z8NI.roa (hash: Ebd+i8ctjoE4+ZV/syWp95hkz3ZcP0gcjB71tiszUJs=)
                          3: oWZr4E334Nl5dhHXKUDjCqLCGyM.roa (hash: nZfWnD1u4woMdciLaCwLWuHO0I+/98sheC0fCywH+V8=)
                          4: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: +f4+39FwybfhtfRSZxciTRg5TP4+Rt21w8eqXJQTgH4=)
                          5: wsCCmspEM6WspzHVHs3VS2kVt5s.roa (hash: hed0UXeEzgYWiVtnJDozjUnK8u7srJbOFxteQGQPqbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:7a:75:34:21:e6:ee:39:e1:19:89:e3:53:3c:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Jan 25 21:00:41 2026 GMT
            Not After : Jan 26 21:00:41 2026 GMT
        Subject: CN=92810cfa674133b1ed8e831bc9d0254bbba2ede3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:af:de:53:70:29:6d:2b:92:d6:9f:49:76:55:
                    5b:6a:6f:0a:b1:63:17:93:bb:84:2c:00:e6:4c:28:
                    e2:f0:b8:bc:ba:ac:27:3a:6d:f2:53:cd:62:20:bb:
                    23:c2:7a:e8:14:36:cf:9e:55:3f:f0:a7:e5:15:79:
                    d5:d5:a4:43:99:bf:c0:18:75:00:69:36:32:ca:70:
                    69:9c:ec:26:2f:3c:7c:db:04:44:5f:35:43:27:4a:
                    cb:58:99:21:39:6d:ea:55:dd:af:ac:f8:5a:b1:b7:
                    5b:18:c3:d8:9a:4e:31:c3:25:97:e9:36:5b:52:b6:
                    f7:fb:cf:ec:51:bd:64:3a:71:3c:6b:a6:15:48:a8:
                    ed:a9:05:b7:cc:80:dd:0c:8d:ef:1c:0a:d2:ac:39:
                    ac:da:60:a8:c9:a2:2b:0d:00:8c:a5:7f:e7:31:e8:
                    75:93:51:99:a3:2c:a5:c3:c1:1c:a0:da:91:c6:08:
                    aa:8b:4b:04:a1:87:4c:ee:74:74:1d:64:53:2b:56:
                    87:ce:64:2c:0b:10:a6:8d:e4:f4:54:31:4f:72:25:
                    b4:fe:40:e0:42:84:0c:20:c8:83:09:77:8a:92:60:
                    e1:3b:c1:fc:0d:57:40:9a:87:0b:dd:6b:ec:c0:c0:
                    db:83:00:01:55:af:e9:c1:f5:24:c1:e0:f1:ea:2f:
                    a8:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:81:0C:FA:67:41:33:B1:ED:8E:83:1B:C9:D0:25:4B:BB:A2:ED:E3
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b1:1c:69:1b:e0:27:9a:25:d2:83:34:66:55:cf:45:63:86:
         51:f6:24:c5:93:91:79:06:71:83:e8:ad:fd:76:a0:74:c3:cb:
         fa:1e:67:f7:27:47:c5:7a:f2:bd:ed:95:e2:2b:a7:72:90:b5:
         1f:56:ca:5c:20:47:81:5a:9c:3c:19:5a:d3:d4:00:64:fc:cb:
         ff:b5:90:00:2d:ca:09:f2:55:b6:57:7f:67:ae:d1:73:39:dc:
         c3:f0:9b:47:83:be:ac:cc:6c:04:d6:87:b1:57:7b:6d:a4:da:
         75:3a:96:55:c1:d7:a3:de:14:05:1d:7e:4f:31:7e:2d:0b:a7:
         8c:1f:37:49:3c:ee:03:b2:95:aa:ab:b9:4c:5e:9e:12:41:c3:
         33:0c:33:ee:09:d2:95:2f:a3:ec:69:93:f3:8f:c3:9a:b3:f6:
         a5:f9:54:dc:ac:07:2a:06:87:8a:82:82:06:32:81:77:c8:d5:
         99:19:33:db:6d:b0:7c:dc:65:dd:9c:b5:56:da:93:35:cb:36:
         fb:41:3f:51:72:81:62:6f:ac:4a:73:ee:ce:3a:a5:f1:6f:78:
         70:52:02:b8:16:6d:85:32:13:04:03:77:8d:aa:f3:86:b7:b8:
         2f:b8:47:03:75:e1:a2:cf:ae:96:eb:42:2c:a3:ba:41:59:1e:
         9a:95:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:27 2026 by rpki-client