This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File:                     i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier:          hq7UhpNC6r0uu1/5HH+mopq1PRQoxt1tzfAW2PYXYA4=
Subject key identifier:   F4:05:FF:6E:4D:55:EE:15:C6:99:60:D9:56:8C:C6:AC:C4:4C:57:72
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer:       /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial:       019BF6F5899527557CE7357E383AEEBB0776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 21:00:45 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:45 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:45 +0000
Files and hashes:         1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
                          2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: 86QHRbHt7PF465RL1ODEtm1DccwA+3yK9Yj7rnOjjRI=)
                          3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:89:95:27:55:7c:e7:35:7e:38:3a:ee:bb:07:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
        Validity
            Not Before: Jan 25 21:00:45 2026 GMT
            Not After : Jan 26 21:00:45 2026 GMT
        Subject: CN=f405ff6e4d55ee15c69960d9568cc6acc44c5772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:39:bd:e4:55:f8:f9:3b:ce:c9:36:bb:b5:d8:
                    25:94:df:9e:f1:61:20:24:c7:22:30:a3:6e:21:a4:
                    0b:96:65:fb:fb:68:e2:2f:87:19:48:ab:e8:39:d1:
                    b3:09:cf:ce:17:8b:37:ec:7e:ad:10:66:53:00:04:
                    1c:75:86:af:a4:6f:26:b4:e9:eb:14:e3:9e:aa:ba:
                    ff:86:fc:38:08:f8:01:99:70:bb:46:6b:77:1d:68:
                    99:59:cc:c5:90:93:1f:24:77:5d:d2:f8:63:2e:70:
                    eb:bc:9c:05:27:42:86:e8:66:06:47:33:ac:df:41:
                    7a:b4:10:3e:4b:b3:c7:3e:d5:02:e3:57:7c:88:b6:
                    3d:5a:f4:12:6f:68:0c:be:78:18:0b:b4:2e:7d:92:
                    e1:a7:6d:e4:7f:b6:1a:64:a9:c0:28:25:7b:51:ce:
                    c9:3b:91:87:a4:83:aa:8e:7f:3a:7f:6f:d0:86:fb:
                    bd:81:8c:27:8b:c7:05:49:89:91:16:4e:d0:23:71:
                    31:3c:6d:0d:06:1e:15:64:0a:2d:14:e5:16:49:1c:
                    f4:c6:2a:ad:3c:af:7f:53:86:6a:42:b7:eb:18:aa:
                    36:24:dc:6f:70:c4:e0:76:ae:e4:9e:36:3f:4c:1b:
                    77:ab:dc:f5:3f:50:5b:c5:cd:ba:e1:c2:0a:b2:54:
                    95:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:05:FF:6E:4D:55:EE:15:C6:99:60:D9:56:8C:C6:AC:C4:4C:57:72
            X509v3 Authority Key Identifier:
                keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:83:87:b0:ce:9a:cc:54:93:1d:58:c6:e2:dc:14:ad:1d:5b:
         22:5e:7f:68:86:a7:24:50:41:12:f7:ad:a8:91:65:e7:7c:53:
         05:6b:94:c9:32:31:3a:48:b2:e7:fc:d6:00:8f:f4:f1:85:ec:
         08:1c:d3:63:0c:88:71:5a:d1:b4:c3:93:53:9d:73:fb:bf:cd:
         5d:44:89:7d:ea:1d:08:6d:c9:d5:b0:8c:bf:65:1d:7d:29:31:
         e5:2b:8e:ca:85:61:43:f8:67:e7:82:d4:0b:6d:bf:d0:92:bb:
         10:f7:01:d6:bd:e1:ae:24:3a:ef:fa:5a:f7:ec:b2:71:1e:60:
         1a:17:42:86:1b:7a:34:07:57:25:00:cc:31:c8:0e:ca:2a:7c:
         f3:e7:e0:40:33:03:a0:18:c2:21:a7:b5:64:b9:f9:fe:a4:41:
         dd:1d:f3:77:41:85:c3:9d:37:04:4c:e8:fc:3b:b8:a6:6a:43:
         db:20:fd:e4:10:33:30:db:a5:de:1a:57:69:cf:ab:6f:dc:b8:
         0b:e5:9d:d4:a0:05:56:39:9c:b4:d0:29:bd:5b:ca:17:e9:d4:
         5e:f4:8a:c4:2b:b9:dd:86:0a:0a:02:81:a4:d9:0e:cc:c5:e5:
         c9:12:d6:d8:9f:91:50:8e:8d:40:67:5e:a9:6e:7b:48:63:f5:
         80:74:5e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:01 2026 by rpki-client