This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File:                     RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier:          I8Vvyvpu+clOABIGnnDG8Adsx+bmSR66XFNdw7RYxos=
Subject key identifier:   A2:AD:BC:FF:8E:BF:D9:46:5F:5C:E7:16:3F:7E:66:70:D7:EE:FD:9C
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer:       /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial:       019BF5ABD7E706A2D2ABF08C0ACBBE8233AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 15:00:38 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:38 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:38 +0000
Files and hashes:         1: GM2WJN9_ezB4uJBKr6KMD-BXxpU.roa (hash: 9qjsgV72QPwQBNdaD4BbTgE2UrBD6jAtMEwROmmWrt4=)
                          2: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: aUNFATypC4kGpTLlLLxxfPnOxSy9z1NAVoxZr5bYE4M=)
                          3: j3zw_EB9Lg5lv5XhuHzhEXsd4JI.roa (hash: o6TreCVefDSXu+8rGe91JOOHIeWosH7WbE6szGGOzyU=)
                          4: qi5ZA3URPRKBFcrvMJgvff_lQec.roa (hash: pa4ExeDHOU0ec+F0w6UxxhQnL3A60YOMhjxZLKiRPHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:d7:e7:06:a2:d2:ab:f0:8c:0a:cb:be:82:33:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
        Validity
            Not Before: Jan 25 15:00:38 2026 GMT
            Not After : Jan 26 15:00:38 2026 GMT
        Subject: CN=a2adbcff8ebfd9465f5ce7163f7e6670d7eefd9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ce:cb:da:ce:fe:c6:39:2b:2b:35:ad:92:2d:
                    68:c0:a5:ae:75:2b:f9:ec:52:14:a8:70:00:0b:9e:
                    be:23:6c:81:18:c9:41:43:d6:1b:24:05:b0:ea:58:
                    dc:11:a5:47:4e:a9:b9:75:57:90:d7:61:1d:dd:a9:
                    9d:db:ad:ba:e6:9a:47:42:24:57:a9:9a:5b:7d:fa:
                    e4:af:1a:9d:9f:39:b1:94:8b:3a:d8:f4:7a:de:d0:
                    13:c8:55:2d:81:ee:1d:79:0f:33:f9:98:df:14:8d:
                    36:30:1c:87:d2:50:78:c5:c1:73:5c:77:9c:73:c9:
                    c9:69:51:54:6b:57:2f:13:45:02:a3:0a:40:ba:4c:
                    7b:12:a4:c2:c8:fc:f3:8d:34:c5:68:0a:7a:40:12:
                    fc:fd:d8:52:ac:49:22:88:b1:c0:cc:c6:82:c4:20:
                    68:f8:78:06:a2:2a:20:05:d2:92:df:38:19:19:5d:
                    ce:d7:73:bd:10:8f:3c:ca:0c:ee:e2:44:6f:00:70:
                    70:5f:9c:0e:27:f9:87:13:9b:80:9c:fd:09:41:ca:
                    a0:45:17:a0:3e:e3:3e:7b:11:1e:ee:d1:11:86:11:
                    a5:98:87:59:07:24:96:ff:92:1d:d5:23:7c:26:e7:
                    30:c0:60:75:d4:4c:f0:d7:3a:d5:e4:37:97:73:e0:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AD:BC:FF:8E:BF:D9:46:5F:5C:E7:16:3F:7E:66:70:D7:EE:FD:9C
            X509v3 Authority Key Identifier:
                keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:8d:0a:df:cb:7a:c1:cd:66:af:6a:fe:72:d3:c5:03:2d:40:
         7f:a8:72:7d:80:8d:48:44:66:ce:43:cd:21:48:67:8e:00:a5:
         39:16:2b:f1:22:53:d8:e3:51:b8:78:cf:83:fd:b9:99:65:11:
         97:14:b9:4f:d5:c2:ed:41:e9:70:0b:0c:cc:4c:ec:a6:a3:ce:
         14:64:76:39:a6:7d:d1:8f:15:1d:fd:22:88:c8:bb:49:14:a9:
         b6:61:24:84:a0:75:96:12:93:d4:1a:6b:36:fc:06:c7:47:e1:
         64:05:bb:6f:eb:4c:1a:65:43:cb:df:a6:9c:f5:ce:e1:74:e9:
         4b:ee:90:52:04:1f:f7:9f:7c:33:c1:0c:e5:86:13:38:b7:b2:
         e0:a2:8c:33:f9:1e:22:94:5a:b9:0a:99:ab:da:ea:57:81:91:
         8f:06:c0:2c:ef:0a:24:93:82:25:59:4b:02:02:9d:d7:43:00:
         bd:3a:60:24:11:31:59:6e:36:d0:9c:f8:cf:d6:43:2a:47:b2:
         7b:01:17:45:1e:ec:e1:2e:55:39:54:98:99:ec:44:6e:e2:95:
         0d:c2:43:86:20:a4:56:39:d1:02:8e:6c:07:f5:05:8d:6a:3a:
         72:1f:d4:60:9c:2f:1f:18:ca:66:7c:01:81:18:64:12:d7:b6:
         9d:a9:6f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:52 2026 by rpki-client