This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
File:                     fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json)
Hash identifier:          kqn5jhN+F4Io7ucGclKtrPPF+3Bn65C3ipMHppnIR7g=
Subject key identifier:   AC:C9:5B:A1:F1:A5:57:A0:18:7A:DB:9F:FA:69:7A:9A:DD:B6:7E:E2
Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD
Certificate issuer:       /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
Certificate serial:       019BF3BDD02D2CFAAF392FB6A5035AA3899D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
Manifest number:          17E6
Signing time:             Sun 25 Jan 2026 06:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:01 +0000
Files and hashes:         1: VDuV_ga9fKWg5ZTg4MIqY7BMCyw.roa (hash: KhFc35C6NWJw+95DJdGU/WqBGVukwlgQW3Tv6X8QShQ=)
                          2: YV2FC6tSLQepIUe84M0yNrIYwXI.roa (hash: a1BK4hhpvi1wRKKydzXpZZxOv3b6LUqaoMmqbdgZ8n8=)
                          3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: PERUdT1F+97oCzdZbXEEnHSyuPyrgy9nl0xidGKdb3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:d0:2d:2c:fa:af:39:2f:b6:a5:03:5a:a3:89:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd
        Validity
            Not Before: Jan 25 06:01:01 2026 GMT
            Not After : Jan 26 06:01:01 2026 GMT
        Subject: CN=acc95ba1f1a557a0187adb9ffa697a9addb67ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:41:6a:6e:c4:1f:fe:f4:6a:a7:21:26:b7:
                    e4:38:b5:7d:49:39:28:bb:8f:d7:5f:11:70:24:d3:
                    4f:50:02:0f:21:9c:b5:23:fc:ae:e5:ed:68:bf:c4:
                    48:d5:05:3b:71:06:a4:0a:1e:49:a8:c8:a1:bc:e9:
                    8b:81:88:93:99:49:80:e9:14:41:f5:12:42:ec:ea:
                    7f:64:07:db:26:71:f1:fe:67:04:d9:be:35:43:ac:
                    86:25:8e:38:23:77:aa:c8:35:10:a4:11:82:8d:80:
                    dd:1a:86:85:f5:47:fe:93:08:13:1d:e3:d6:2e:d6:
                    ff:33:b9:69:55:46:30:87:f1:ea:e2:9a:81:84:6b:
                    67:b2:c2:1a:7a:56:c0:2e:7b:cd:0d:c8:e9:ef:c9:
                    5c:25:b3:e5:53:3b:60:00:54:d2:4e:76:82:8a:23:
                    d8:a3:2a:5b:b1:dc:26:8c:45:06:a7:44:9e:f7:b5:
                    84:e3:b5:dc:c2:d6:ee:c8:c5:17:2c:84:cc:9b:72:
                    e2:3a:9c:df:26:c2:e8:a5:e9:ff:89:30:b4:f0:1f:
                    e5:03:9b:72:a3:9e:1f:bd:cc:a8:a4:15:e7:80:70:
                    11:09:05:8d:03:49:3a:59:de:7d:46:27:05:82:0c:
                    69:6a:60:c5:6b:a5:f0:2c:da:83:f6:99:8f:81:fc:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C9:5B:A1:F1:A5:57:A0:18:7A:DB:9F:FA:69:7A:9A:DD:B6:7E:E2
            X509v3 Authority Key Identifier:
                keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:1f:9b:fb:a7:68:7e:90:cb:38:32:8a:55:d0:2b:bc:03:c0:
         d1:ed:71:1e:d3:7e:a2:f5:18:59:f7:fa:62:44:d3:47:9a:2e:
         13:ae:1c:72:82:2e:9d:ab:65:0b:53:28:f2:35:46:9b:53:41:
         e4:81:5d:b2:73:b6:7a:ed:fe:74:86:ec:87:19:0f:9c:ce:0e:
         cd:8a:37:62:83:1c:95:24:b7:1a:1c:95:4e:db:41:ef:f5:6b:
         8f:90:4c:e8:eb:be:f0:1d:f5:5f:22:63:d4:00:29:77:ca:ec:
         1c:6d:e4:de:9c:d6:44:8b:07:86:e6:ca:91:5b:12:b0:b6:f9:
         9e:4c:33:c8:95:53:77:2a:02:6c:ab:ab:87:5e:27:bd:cf:81:
         a0:02:f9:a9:20:0e:78:df:cc:97:2e:40:60:3f:88:1a:13:e4:
         d8:08:8b:0d:fc:0e:95:70:7d:f6:fe:3d:46:c3:ac:aa:cb:27:
         97:2d:00:50:21:fd:27:62:20:24:fc:af:df:8f:4c:17:d5:70:
         c4:4b:b9:88:77:ff:a2:61:9c:c1:0c:25:be:1d:ef:56:76:eb:
         a4:70:b9:e6:f9:24:10:93:cf:40:08:9e:81:6b:bb:88:cc:0f:
         6d:1d:3c:a8:df:71:1b:21:87:46:49:7e:ae:9c:7e:0e:90:10:
         ea:5d:70:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:47 2026 by rpki-client