This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
File:                     0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft (raw, json)
Hash identifier:          dMjg7G6rOY+DzhYhLYLtUVTfUk2v0l2esQjm/LmwFXg=
Subject key identifier:   4E:86:32:72:04:DA:F0:C6:95:57:08:44:39:8D:E1:D9:5B:AD:B4:7F
Authority key identifier: D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72
Certificate issuer:       /CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
Certificate serial:       019BF6517FD4AF61637939DAACE30889E59A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
Manifest number:          02D8
Signing time:             Sun 25 Jan 2026 18:01:34 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:34 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:34 +0000
Files and hashes:         1: 0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl (hash: W0lHVWD7djqPANEvNoZqVCQFengrtPSoXx0q9RGYv+s=)
                          2: RRSohk2nwrUzuw9Rw-D24vHj4iw.roa (hash: cMUbM2/hxrn9h126Zdm7DYzjZuRiajCmosfkit3vk8Y=)
                          3: c0Owme8MxYD620tsBpkMHThjdrE.roa (hash: Gh6CiZ1DobVHlOo0S4vuXYLdOtBEQiYqATFSpfC1Cik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:7f:d4:af:61:63:79:39:da:ac:e3:08:89:e5:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05ed7a58147aa514c8e6dafbcc5d8757c7d3272
        Validity
            Not Before: Jan 25 18:01:34 2026 GMT
            Not After : Jan 26 18:01:34 2026 GMT
        Subject: CN=4e86327204daf0c695570844398de1d95badb47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:06:5a:61:8c:60:3f:88:da:e0:67:41:9f:be:
                    7a:40:c3:a8:91:e3:4b:79:7f:27:a8:b5:fa:75:f1:
                    2a:92:5e:ba:f8:c9:e2:98:c3:6e:23:6d:b9:46:5b:
                    9e:f1:8f:3b:a6:72:a5:64:bb:32:3d:af:fb:be:91:
                    32:7f:a7:56:94:74:14:b7:9b:e5:84:8d:68:d8:c0:
                    bf:7f:53:c0:87:62:76:64:d7:f1:2e:6d:d1:30:8e:
                    8b:1d:5a:e8:aa:2b:f4:f5:07:2d:5b:f5:27:a9:47:
                    cf:1a:91:dc:5e:07:d8:bf:03:47:fa:df:cc:ca:53:
                    0a:60:cf:fc:23:3c:b8:18:88:92:04:04:61:1a:b6:
                    bd:f3:42:b8:29:96:62:40:d2:51:25:05:52:bb:a3:
                    39:a5:13:06:5c:38:77:2e:d0:20:5a:32:92:f5:d3:
                    bb:ce:dc:5f:8a:4d:47:38:98:18:87:fb:c2:17:c8:
                    9a:f9:d5:aa:ce:53:ae:20:bb:f5:66:06:61:49:bf:
                    64:28:d6:5c:f0:4d:e3:bf:97:29:fd:43:3b:f0:51:
                    06:fe:f0:3c:70:69:3d:7d:c5:36:f4:54:40:c7:ec:
                    6e:ba:c4:df:ec:e2:84:ad:41:10:1a:47:7a:a4:97:
                    4b:08:6c:2e:ca:db:5a:cf:02:f9:8a:ea:8d:ea:06:
                    be:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:86:32:72:04:DA:F0:C6:95:57:08:44:39:8D:E1:D9:5B:AD:B4:7F
            X509v3 Authority Key Identifier:
                keyid:D0:5E:D7:A5:81:47:AA:51:4C:8E:6D:AF:BC:C5:D8:75:7C:7D:32:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F7XpYFHqlFMjm2vvMXYdXx9MnI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/24fbfc-d902-49db-978a-35a20ff8923e/1/0F7XpYFHqlFMjm2vvMXYdXx9MnI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:83:ab:ad:cd:6c:d3:ff:83:33:d2:f6:76:1b:26:4d:df:
         4b:f6:60:12:d2:09:23:65:e0:a2:01:d8:28:46:27:f3:92:5e:
         3c:45:4a:0e:ed:6f:fe:74:08:e0:84:ce:f1:88:4a:24:79:2a:
         3f:42:3f:01:b0:f7:17:0e:36:ac:ee:2b:6e:14:fc:07:97:bd:
         23:3e:33:95:cf:1f:1d:17:15:04:14:51:fd:c2:4c:30:a0:ac:
         68:50:b3:bb:85:20:fd:11:56:5a:d5:b7:10:64:68:4b:4e:08:
         04:e3:05:6b:61:5c:d1:2d:33:32:b1:d5:ef:a2:2c:c8:b5:9f:
         61:65:01:ca:ba:49:23:29:62:c2:0f:a4:26:cf:96:5c:f4:80:
         49:4e:cd:b0:16:c1:58:48:e2:e8:62:4d:aa:b3:8f:46:1d:a4:
         87:14:df:30:58:6d:5b:9c:1d:25:3c:b1:7f:81:ef:1d:7d:c9:
         63:b6:a1:8f:05:b1:98:8b:2c:fe:a4:a2:b0:7b:43:00:57:aa:
         87:10:9e:ae:03:b0:b1:9e:34:92:19:5e:74:b0:75:e4:93:11:
         db:40:40:ba:84:7c:c7:dd:b5:86:18:13:3f:0a:54:cb:70:cb:
         03:f7:d1:6f:9b:7b:a5:8e:9a:d6:a3:21:5b:9c:bb:8a:20:72:
         e7:e0:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:45 2026 by rpki-client