This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File:                     _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier:          hiVO6X9kxRCtTw5RiBt2ZLb1ltuRxhnWw6MUKgqTV60=
Subject key identifier:   43:B9:FE:F3:85:16:69:B2:00:33:57:64:ED:87:C2:14:98:72:5F:76
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer:       /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial:       019BFC1BD2D9521E686979756215FB93C9DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number:          17EF
Signing time:             Mon 26 Jan 2026 21:00:40 +0000
Manifest this update:     Mon 26 Jan 2026 21:00:40 +0000
Manifest next update:     Tue 27 Jan 2026 21:00:40 +0000
Files and hashes:         1: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: V60LVLQ7AB3e0samnmsxJincPgrV6xm/oO58qO47WKk=)
                          2: ffUc8_MFuN5GuGa6IoP-AwjDMng.roa (hash: KNgb7b/tPa4J6bvxUtY9aR+BXwQn3PEB0DvOOi2I63k=)
                          3: sM3tnsiZQn2B9YY5mcbZ8QMKhas.asa (hash: 8b+A4QTkJNsWBcHqmtMFMLgJOAkXA+/IFEAZETTjwiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1b:d2:d9:52:1e:68:69:79:75:62:15:fb:93:c9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
        Validity
            Not Before: Jan 26 21:00:40 2026 GMT
            Not After : Jan 27 21:00:40 2026 GMT
        Subject: CN=43b9fef3851669b200335764ed87c21498725f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:35:2d:21:6b:2f:54:8b:76:3a:28:62:94:78:
                    3f:81:ed:93:4e:56:ae:58:14:1e:70:1b:5a:6e:7a:
                    f6:be:13:ec:66:71:5c:02:7d:e7:64:1b:90:98:2d:
                    e3:d4:b4:b1:33:9e:92:27:92:7c:47:cb:81:ed:33:
                    c4:bf:cc:e6:cd:97:76:0f:db:27:8c:cd:fc:93:24:
                    e4:81:5c:2e:5e:95:dd:4d:fd:a3:a0:a1:9e:82:d9:
                    42:00:76:34:87:41:90:95:95:f2:24:e4:07:1e:e2:
                    23:bc:ae:69:6f:af:8f:bb:c4:6f:e4:50:f9:45:72:
                    26:22:b3:3c:41:4e:90:46:63:98:4e:b5:ee:60:8e:
                    e8:78:f2:9a:a2:db:d0:92:4a:1c:ef:c9:37:d9:1a:
                    0e:d6:67:b7:f3:67:09:da:e2:c1:f9:ec:9a:e2:8f:
                    20:36:03:28:e2:50:8b:59:b5:2a:a4:88:15:37:4b:
                    e4:90:e1:c7:ad:64:91:41:ae:0a:4b:dd:32:63:46:
                    af:a8:ce:c5:e8:3e:5e:27:35:a6:51:8b:47:db:80:
                    24:4f:b1:71:bd:4f:41:33:4e:94:50:94:a4:d1:ec:
                    59:57:21:48:1c:cd:c9:c2:93:de:a6:02:98:f9:f3:
                    73:f6:51:fb:be:91:a9:0f:76:6e:4b:31:c1:da:89:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:B9:FE:F3:85:16:69:B2:00:33:57:64:ED:87:C2:14:98:72:5F:76
            X509v3 Authority Key Identifier:
                keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:af:42:a7:7c:22:02:32:34:79:8e:8b:91:9b:0f:12:b0:69:
         6f:f4:8b:61:32:a7:07:5d:b1:a2:97:61:d9:16:de:ca:55:ab:
         bb:9f:0a:eb:ff:cc:ed:86:11:7f:d7:67:4c:69:6c:a6:41:f9:
         68:8a:72:b1:6d:a5:fe:c5:6f:26:9d:e7:55:2e:e7:1c:fa:b6:
         5a:43:25:52:94:ea:10:c8:ef:af:7d:29:a1:5c:34:d0:5b:8f:
         89:00:13:a1:6c:f5:8f:4f:9b:bb:26:e4:61:a2:90:17:a1:54:
         ae:c0:ce:91:44:42:a9:92:63:75:b5:1b:23:be:a7:3f:1a:d5:
         9c:4b:17:ef:f1:fa:26:dc:08:5d:6a:e0:6d:44:0b:14:4c:51:
         c2:a8:d0:27:ba:ed:0d:29:36:dc:c6:1c:fd:45:b5:10:4d:85:
         2d:68:63:72:ad:99:3b:14:22:5c:25:d0:25:dc:00:f8:ff:d6:
         55:6a:15:fc:7f:bd:c0:19:f0:6a:1b:68:da:49:0d:36:5d:a8:
         6d:49:38:87:ae:5b:80:a4:9c:45:7f:cd:49:e1:94:01:fe:35:
         11:4a:97:32:d1:d3:98:4c:9c:12:9f:e0:2f:c3:48:be:5e:92:
         8e:23:26:97:c3:8d:04:24:6e:c2:69:14:69:5d:49:cf:df:b7:
         a9:11:0d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:12:34 2026 by rpki-client