This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
File:                     po_5Ip79jRK0Jz80b4xkVOpYfsw.mft (raw, json)
Hash identifier:          Zh0xRwuKlSJqfcZacNl17JzoGLdr948OgXrhczpSyEI=
Subject key identifier:   C2:25:76:39:BA:4A:2E:E1:AF:A5:F4:38:0D:8B:A0:8A:44:9D:C7:17
Authority key identifier: A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC
Certificate issuer:       /CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
Certificate serial:       019BF4D089E664CEE7E10DC668493054F1F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 11:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:06 +0000
Files and hashes:         1: HvZskpw_21d-SsBdoI8uL-bUlg4.roa (hash: KmGPloyU4A9Te8//GhzETG1AxiKoerTgtl8Qk1jFdRg=)
                          2: cJd8S-uaABuXAFfWeDiL3NUesCo.roa (hash: 0fC3HtMmFazUCnfsakHQvupcYRxYZ5KP3wkprur/geI=)
                          3: po_5Ip79jRK0Jz80b4xkVOpYfsw.crl (hash: xt1TI5z7gU/yHNjI6l+UrY7q32oO/Qq+GmIsM52APQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:89:e6:64:ce:e7:e1:0d:c6:68:49:30:54:f1:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a68ff9229efd8d12b4273f346f8c6454ea587ecc
        Validity
            Not Before: Jan 25 11:01:06 2026 GMT
            Not After : Jan 26 11:01:06 2026 GMT
        Subject: CN=c2257639ba4a2ee1afa5f4380d8ba08a449dc717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:49:18:48:ed:fe:85:73:85:80:89:eb:89:35:
                    1f:4b:de:d2:e1:32:88:54:9a:f9:79:d9:12:8f:35:
                    83:e7:fc:4a:35:b7:ee:72:b0:6e:92:1a:28:ad:08:
                    6a:92:78:d9:c8:34:8e:62:8c:89:71:31:98:5f:63:
                    cc:eb:5d:a5:e0:71:34:34:f6:36:71:ec:d7:5c:59:
                    c7:ae:24:77:75:36:75:d0:a6:43:c6:8c:bb:3f:bb:
                    be:d0:98:60:31:68:32:f8:e5:48:01:de:ae:26:0c:
                    d7:47:df:e5:1a:57:f7:78:a9:9a:b3:16:8c:84:5d:
                    5c:49:b4:a0:44:da:1c:87:67:1f:39:92:56:3e:06:
                    7a:1c:65:67:bd:37:e2:49:38:61:f4:8a:c3:1f:26:
                    4f:f3:18:0b:9e:4a:33:71:a6:a6:d7:87:e1:28:12:
                    9d:47:37:58:4e:5d:f4:35:d1:53:66:53:c1:e0:11:
                    dc:e1:f4:70:dc:c1:b1:3d:18:79:be:ad:23:33:02:
                    0e:fa:9e:83:df:bf:96:89:34:64:c9:60:18:de:01:
                    64:42:81:39:b0:45:97:9e:a7:ae:e6:d2:67:32:55:
                    ec:b1:a8:78:63:82:3b:ca:25:f5:07:de:55:da:26:
                    34:60:5b:a2:6c:9e:df:fc:3a:d9:a9:e3:f1:5d:fa:
                    4e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:25:76:39:BA:4A:2E:E1:AF:A5:F4:38:0D:8B:A0:8A:44:9D:C7:17
            X509v3 Authority Key Identifier:
                keyid:A6:8F:F9:22:9E:FD:8D:12:B4:27:3F:34:6F:8C:64:54:EA:58:7E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/po_5Ip79jRK0Jz80b4xkVOpYfsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/2ff98e-6ff9-4233-b9f1-227e21e691e7/1/po_5Ip79jRK0Jz80b4xkVOpYfsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:30:81:6c:48:39:d7:46:12:25:fe:ac:c8:f3:2b:7b:74:68:
         b6:30:bb:29:5e:cf:50:51:f3:5f:ed:35:dd:9c:5a:a9:60:9f:
         da:cf:1b:8b:00:40:cc:31:26:a2:f5:8d:14:34:7c:01:d2:98:
         61:42:88:4b:ed:03:58:e6:72:f7:85:d2:14:b6:45:c6:bb:b4:
         25:3e:68:9d:96:5d:b7:8e:34:9d:b7:99:b1:fc:98:ac:88:23:
         a1:8e:6f:5b:85:56:98:f9:44:e6:43:b2:20:76:f8:f7:9e:59:
         e7:a5:7e:63:5b:fc:3d:a0:fc:97:4a:3f:fd:ca:a5:22:db:f0:
         db:01:73:7e:59:17:e6:1d:43:49:6c:68:ee:8f:9e:e4:61:ff:
         6e:6b:cd:2e:d6:c7:4a:47:e0:31:53:bc:be:89:6a:29:fa:02:
         44:06:8d:b9:f1:21:35:ed:9b:cc:e0:60:2e:8e:d7:1c:a2:02:
         dc:c3:7c:1a:d3:33:b4:01:9c:a8:ac:f4:c0:db:35:ca:64:09:
         da:2b:18:52:e4:7c:c6:d7:26:15:af:e6:6a:1d:ae:53:18:63:
         f1:ea:10:b1:57:0b:51:5e:ba:53:1e:e5:e2:2a:12:5b:56:dc:
         80:97:c8:f8:7d:3f:a1:d0:e6:40:5d:a6:20:2a:ff:95:f8:1d:
         f0:86:8d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:28 2026 by rpki-client