This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File:                     C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier:          TNBY9/URknRUSu2t8EbkmFznahHkS68IP/GZ1V0838A=
Subject key identifier:   4B:84:F7:09:39:4A:F2:B4:C3:EE:CD:C7:C7:E5:56:A1:F3:42:3E:DD
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer:       /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial:       019BF91BA80E88F82E13BDDB80949BFFC5AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number:          17E8
Signing time:             Mon 26 Jan 2026 07:01:37 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:37 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:37 +0000
Files and hashes:         1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: voDtBWzFzE/A/0Lt/yVz/2VNXcAqAX6revwES4WKq3I=)
                          2: Yt1VcCEjmlQDKKdsmlF9NNCAOVo.roa (hash: uwh0eGpdwABlDZD41+Scf8Ln/xjqhnaIPzab/PqpacI=)
                          3: hcS0FWEKBHU-zDotkcZOlJwtP2U.roa (hash: WtgqGoAtHK4QE/3S3ar/C9SyFwoXYF7WS3gKUYf+F7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:a8:0e:88:f8:2e:13:bd:db:80:94:9b:ff:c5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
        Validity
            Not Before: Jan 26 07:01:37 2026 GMT
            Not After : Jan 27 07:01:37 2026 GMT
        Subject: CN=4b84f709394af2b4c3eecdc7c7e556a1f3423edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:9c:d2:cc:94:53:27:d2:cb:c3:15:9f:cb:80:
                    f7:bb:11:cb:e5:09:83:26:49:0b:b9:f9:20:cd:88:
                    54:43:16:c4:f6:93:4e:ee:1d:57:c8:13:0e:3b:65:
                    5f:9f:5a:17:78:03:d0:36:92:95:fb:d6:b3:8d:6e:
                    5b:dd:47:ea:01:d4:fd:a0:e6:70:d1:c8:23:75:c1:
                    8b:90:b3:70:d6:56:7a:1d:36:75:10:f6:6c:bb:07:
                    c5:2b:57:c4:56:ac:1a:d0:37:23:c9:da:7d:dc:ff:
                    76:92:8a:3a:96:6b:d5:65:98:10:c7:46:26:b0:09:
                    83:fb:e9:7e:24:8e:32:0d:38:b4:a4:43:7e:b6:95:
                    9c:99:d0:74:d9:e2:8f:cb:1a:b8:a4:ae:7c:10:ef:
                    30:27:06:a8:2a:91:de:09:16:b7:31:fd:7b:f9:04:
                    bd:a8:10:e3:ae:f8:a7:1a:f7:8f:0f:72:e1:60:10:
                    77:67:3c:e7:a3:85:0a:61:b4:15:a0:e7:60:48:da:
                    78:90:f6:cc:5a:9a:82:fb:75:d7:f2:e9:82:50:00:
                    b8:bd:63:30:8b:af:0c:c5:c2:64:19:c2:71:c0:2e:
                    b2:69:84:34:f1:e9:d5:d6:0a:ad:3e:03:73:91:0b:
                    3a:63:16:1e:0e:5e:70:c4:b3:e7:f3:31:87:0e:ba:
                    d3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:84:F7:09:39:4A:F2:B4:C3:EE:CD:C7:C7:E5:56:A1:F3:42:3E:DD
            X509v3 Authority Key Identifier:
                keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:94:e0:09:73:cf:71:15:65:03:71:8c:9a:8d:6b:55:73:c2:
         83:2a:b2:74:2f:e0:ec:84:6c:30:31:0b:71:ad:49:2e:ac:dc:
         ab:a4:d2:91:6c:82:5e:5f:b1:56:20:db:b2:b1:ff:6f:fc:ea:
         59:ef:17:6f:a8:7e:7c:2c:d5:1d:65:72:ed:31:2c:6d:e7:27:
         40:b6:62:25:52:cd:aa:99:67:53:ac:f3:e6:93:53:c4:47:f7:
         b1:c5:e8:54:9f:59:90:d9:f5:c3:88:81:9a:27:53:61:7a:4a:
         72:5f:4e:31:d7:17:93:b2:2a:22:ea:1b:49:79:3e:5f:ad:03:
         d5:a7:fd:fb:fe:ce:52:81:63:0a:73:bb:e5:bf:28:7f:db:3f:
         60:2c:41:02:a2:ae:f7:45:62:86:2a:3e:2f:06:5c:9f:81:71:
         9d:8a:85:9d:25:38:08:c2:3f:a6:6d:3b:94:13:16:d2:4f:81:
         d5:4e:79:db:48:7f:a8:d1:3a:91:97:43:6e:81:ed:dd:ea:98:
         b7:6f:41:8d:7d:b5:87:63:15:8b:39:ef:c9:d1:02:f5:ea:dc:
         26:da:03:81:7c:e7:2a:88:70:0f:69:52:26:92:82:f0:20:6d:
         2d:52:0c:e0:8d:2e:b5:98:f3:1d:b2:89:fd:26:55:d7:a4:81:
         bc:85:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:36:06 2026 by rpki-client