This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
File:                     cS-cs8KYsVC-t5CAN290verEOKw.mft (raw, json)
Hash identifier:          44sgBvCfvjHeuSeZhoO289UxsSnvhq6a0bT/SRcyYNQ=
Subject key identifier:   16:CA:DB:72:BE:88:EB:5A:BB:BF:D0:2C:D9:F0:17:06:FA:01:56:9C
Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC
Certificate issuer:       /CN=712f9cb3c298b150beb79080376f74bdeac438ac
Certificate serial:       019BF91BE751D91F27008F4BCD3C731F18D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
Manifest number:          17F0
Signing time:             Mon 26 Jan 2026 07:01:54 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:54 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:54 +0000
Files and hashes:         1: 84wKpW8a2FdOFdtJH09XGOkEUps.roa (hash: 1qhPnlo4Dt7J0oeNCr3M9RW7SmJ0MpohWBFUgdLw/U4=)
                          2: a8fiimQdU18P-F2tOQH9sjS2Djw.asa (hash: SNczP7mStVed+rVQzNAM+CHW/D0tMUWtQ+EIBgCl2dM=)
                          3: cFDNySQq-BoAAus-f6QDofmomPs.asa (hash: bmD9h4TJUpSAXYuI/gTQnCZ438ljBruFVbyjbe3Styo=)
                          4: cS-cs8KYsVC-t5CAN290verEOKw.crl (hash: fclnl01b+LhXbTv/6watWSQXVorphzFJgv9h7scu5mI=)
                          5: df4tfV0jAIZZKEaYQCM4AbSPAqg.roa (hash: dHoNYsRW1eGxyAi3gnD68do0NWTQc/BQpOK0JZnCoh4=)
                          6: g9Yn7ACDYVC8slU7jy3RutvpmLA.roa (hash: QstT1XItP19s81pUDHVgyYRJfqI7V21cNVai+M007RU=)
                          7: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (hash: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4=)
                          8: xYJNOiuy4j8LfXqPijvPDbsyKCs.roa (hash: XjFVGXZYnhKKZSPv2iOQnoaWZSCDkPQcxGHyVG/MCwM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:e7:51:d9:1f:27:00:8f:4b:cd:3c:73:1f:18:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac
        Validity
            Not Before: Jan 26 07:01:54 2026 GMT
            Not After : Jan 27 07:01:54 2026 GMT
        Subject: CN=16cadb72be88eb5abbbfd02cd9f01706fa01569c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c1:77:45:24:8d:8f:92:0d:5e:a1:e2:3a:2a:
                    0b:85:60:60:cd:76:f3:17:74:18:03:63:c7:4d:87:
                    f5:c2:1e:8a:51:a0:be:4d:1f:02:51:c1:c1:f3:fc:
                    8d:d9:79:49:d8:0d:9d:7d:b5:03:e3:63:9d:61:14:
                    91:6a:35:c2:f5:a6:48:c6:81:be:c6:a7:5a:5b:df:
                    55:f0:9b:4e:bf:97:39:d1:4d:7a:79:88:9a:29:f2:
                    45:13:31:77:98:aa:0f:69:00:90:2c:38:e6:40:d1:
                    42:90:66:b6:e4:de:1e:0c:2a:b8:d5:d1:80:7f:be:
                    92:63:38:cf:24:fb:6b:9b:43:b0:43:a7:23:21:a7:
                    94:dc:8f:fe:07:97:74:4a:0d:7c:c2:fb:ce:c9:c1:
                    dd:db:e4:46:6e:ef:ed:74:ed:23:fb:69:eb:d6:42:
                    bb:aa:a4:3f:7f:23:a4:e8:a5:04:27:67:ef:ad:10:
                    75:82:11:44:28:fc:b3:3a:bc:ee:fd:d6:bf:b8:c8:
                    ad:bc:b7:b7:0b:aa:45:f2:fc:50:d4:7f:c7:1a:47:
                    74:60:23:d7:7b:dd:c2:b9:f0:b0:52:02:51:34:ff:
                    49:9c:5c:33:87:8b:b9:1b:c6:ee:cf:eb:a0:33:10:
                    a7:f0:17:e9:5f:aa:ed:c4:ae:80:08:d9:ee:08:f7:
                    0d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CA:DB:72:BE:88:EB:5A:BB:BF:D0:2C:D9:F0:17:06:FA:01:56:9C
            X509v3 Authority Key Identifier:
                keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:83:15:c8:79:c7:c0:a0:d2:c0:f3:79:74:30:45:6f:12:
         b2:fb:56:51:be:07:08:10:4d:b5:28:02:35:a6:f6:5a:6a:fc:
         34:47:23:e0:0f:e9:27:2e:b3:c7:74:10:3e:9a:45:58:41:49:
         f0:a9:fc:d6:f6:dc:cb:d4:3c:3e:f6:eb:ea:4b:aa:40:37:74:
         66:a7:d8:63:04:a1:54:ec:d3:25:22:cf:f1:ec:35:0d:f9:60:
         fc:2f:01:c6:ef:be:2c:bd:d9:2a:df:b5:62:f5:49:f3:94:bc:
         6d:df:9b:10:6a:e9:6f:e1:c1:3d:4b:32:d5:16:3a:77:df:01:
         9c:88:a8:6d:6c:ce:00:eb:0f:ea:ba:80:03:58:3e:97:96:09:
         b5:5e:c1:0c:22:ef:7e:5d:da:79:cd:a0:5d:88:4b:11:58:25:
         d9:b2:34:87:fd:3d:aa:29:7a:a4:80:cb:5a:db:c8:5f:44:6f:
         6a:06:07:a9:cb:fe:14:d6:03:88:6e:3e:b2:7c:06:74:f9:20:
         6e:dd:d3:86:0d:a1:f1:0a:b1:4e:1b:22:b5:74:75:14:e1:01:
         1d:d9:de:21:43:74:f1:3d:4b:da:a0:13:f0:2d:6a:9f:b5:c6:
         f9:8a:72:ce:0a:e4:5d:a8:3f:4a:59:84:45:76:d8:c9:ae:7a:
         06:d6:1a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:28:49 2026 by rpki-client