This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
File:                     Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json)
Hash identifier:          eoo1KkWz2urzt9OAmare3qdy8NZuTyYtu3PZmmvZFr8=
Subject key identifier:   4A:36:EC:16:03:03:40:AB:85:6D:51:E8:19:C6:A0:92:3E:C3:79:0C
Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E
Certificate issuer:       /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
Certificate serial:       019BF61A2D98B0F85C9E8070000FFB316B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 17:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:09 +0000
Files and hashes:         1: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: HOqzqDgDgmFoKZde7r7B1Ltwwz5/6cs7nQEkeIXJ6BY=)
                          2: QYOd-v_8e8GqZaWaZn4NsRwrzCE.roa (hash: bzALPsBn3b3nr40PS8smC1Tiv9yVuzfoYDMShGNjL2w=)
                          3: lfENbqRcmLVwqdcIrs_dIngMNaU.roa (hash: Ccs8DxZ+yX5BpwYTUURzMbg1XTsNy8SpPhcN0nLXzBg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:2d:98:b0:f8:5c:9e:80:70:00:0f:fb:31:6b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e
        Validity
            Not Before: Jan 25 17:01:09 2026 GMT
            Not After : Jan 26 17:01:09 2026 GMT
        Subject: CN=4a36ec16030340ab856d51e819c6a0923ec3790c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:62:77:25:d2:19:fb:24:70:a9:1a:4c:a9:68:
                    ef:37:59:e1:b7:5a:6f:c6:5d:3a:97:5d:c6:45:04:
                    4e:1c:27:5c:5e:20:c3:6c:01:ce:86:9f:6c:41:93:
                    22:8d:ed:0e:9e:63:39:b8:c4:f6:2b:58:6d:ac:2b:
                    65:c9:8b:af:de:3a:bd:73:32:25:aa:b1:86:34:7d:
                    5a:6a:c6:8a:95:3d:40:02:78:c9:2a:3e:d2:8d:50:
                    d2:16:e8:4f:73:5a:d3:95:b0:00:9a:64:67:03:8a:
                    96:36:76:70:4d:9b:79:72:b2:c1:b1:56:df:e6:e2:
                    cc:7f:81:7f:39:7b:94:e8:7d:22:a2:f1:d8:b3:e4:
                    8a:a8:64:62:3b:a9:e2:80:b1:e2:58:9b:d8:33:6a:
                    9e:2d:d0:71:f8:5d:bc:e3:22:b9:31:2f:23:c5:4c:
                    dd:0a:e4:a4:0c:1d:b8:56:03:00:09:91:4c:58:91:
                    d2:2c:ec:17:02:98:03:b5:36:74:f9:b2:ce:4b:47:
                    b6:65:46:45:0f:35:21:a2:46:f0:b8:e7:8a:75:18:
                    cc:71:a8:44:ed:0d:ae:a9:8f:c2:2a:08:13:86:b8:
                    89:69:39:f2:2a:c6:cb:e2:3b:af:9f:b7:f4:7d:1f:
                    8d:47:27:36:13:76:bd:9a:31:d7:2d:7c:97:3e:eb:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:EC:16:03:03:40:AB:85:6D:51:E8:19:C6:A0:92:3E:C3:79:0C
            X509v3 Authority Key Identifier:
                keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6a:ac:d0:22:e3:75:c4:2d:55:3f:cc:48:5b:49:f7:a4:ba:
         a5:df:95:30:f7:8c:b9:18:ef:37:1b:cc:3e:4d:4d:30:1d:bd:
         ff:32:0a:df:bd:b1:04:5c:96:58:b3:61:c3:e0:51:42:c7:2e:
         a8:ae:2a:b3:52:33:10:21:a0:e5:61:9e:57:ae:9b:f7:04:6c:
         e1:09:d5:a6:5b:5b:a6:66:a2:2a:5e:d7:fc:81:4b:94:ec:7d:
         c3:02:73:05:bb:b4:ee:e8:82:ba:e8:77:da:17:69:43:71:b4:
         28:57:0a:20:57:10:0c:8f:bf:e8:57:0a:87:36:68:60:d2:a3:
         21:12:ad:1e:f8:f7:da:b9:58:de:64:51:62:1f:33:b5:78:b9:
         c2:35:f5:c9:b9:02:b9:af:06:66:2d:e9:f4:bd:7b:28:f5:8e:
         c9:4c:94:c1:55:b7:c1:84:4c:76:34:d7:db:dc:10:41:83:8b:
         1f:66:da:21:1a:35:72:76:bb:d8:0b:d4:b0:9f:75:3a:fb:9d:
         f5:ff:14:5e:c8:24:70:bb:37:ea:76:89:ad:a5:93:e6:e1:79:
         c5:46:20:b1:b3:08:7e:f0:3f:68:80:d8:d5:17:f2:7b:cf:74:
         b5:d6:31:16:eb:6c:90:d7:1c:50:20:5c:31:80:e8:53:07:1e:
         e5:92:44:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:06:20 2026 by rpki-client