This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File:                     urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier:          eb0kg/XO08SgTCjrb2xhnScwn9hqkZZzJ5NHn3owmhM=
Subject key identifier:   9F:41:6F:E8:F6:05:B3:18:DE:4D:CC:22:B3:28:D5:2E:9B:F4:D9:95
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer:       /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial:       019BF274C1202192B34A0CE3D4A4EFD1C069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 00:01:36 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:36 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:36 +0000
Files and hashes:         1: PzKWoUJeFLqjUWS7LgF4BdwM7PI.roa (hash: OsmHic4Ai/0j0JqDsk2Y5rGOjUKPGoeMip/8Vo2h1CM=)
                          2: UsG3baUGIxj41J_YNnv0F0uvJ9g.roa (hash: Ou9qv1YwHjFroWI++/0y93X1Q7gw8mUqZv7cZxbQ++U=)
                          3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: UtLUOtvEntP+A9uONdEQgl+TQBsBYp2z9jWE6JWnViA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:c1:20:21:92:b3:4a:0c:e3:d4:a4:ef:d1:c0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
        Validity
            Not Before: Jan 25 00:01:36 2026 GMT
            Not After : Jan 26 00:01:36 2026 GMT
        Subject: CN=9f416fe8f605b318de4dcc22b328d52e9bf4d995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d2:e8:ff:5b:c5:b2:2c:c4:ef:0f:3d:1f:44:
                    4e:99:ea:15:4d:ed:39:a5:cb:60:45:b4:01:41:29:
                    7d:83:ec:24:b4:88:cb:d1:1b:37:a3:b9:90:6d:0b:
                    75:69:3d:3c:96:94:bb:d0:e3:02:f0:68:8e:61:53:
                    2d:25:b3:88:ad:21:a0:88:bd:f6:3a:73:02:fe:5a:
                    70:1b:41:ef:c5:17:ca:0b:2a:71:e7:2e:e3:91:36:
                    f8:9a:01:eb:cb:19:7e:cc:85:e4:a4:bb:9e:20:ec:
                    81:9c:5a:f5:98:55:8a:3c:d7:9f:e7:24:16:0e:e1:
                    a4:46:a6:2d:74:b4:83:46:e3:16:32:5e:8e:71:74:
                    5e:5a:87:3e:d2:60:3f:7d:d4:41:c3:54:1c:cc:e2:
                    45:8a:66:73:5e:01:5d:d6:09:4e:a9:b0:76:70:29:
                    6d:6c:68:f7:5d:9d:5f:8a:72:09:2f:db:df:5e:82:
                    5e:19:6e:b1:16:45:1e:0a:59:e8:8f:e6:83:25:da:
                    28:3a:fd:44:a7:4e:93:ca:0b:ff:b2:7b:f3:9a:74:
                    df:7f:90:f1:40:41:37:21:77:ad:74:b2:b9:4d:d7:
                    d8:07:3a:4b:0e:59:ae:6d:50:90:65:00:b4:29:c0:
                    dc:14:29:46:43:05:40:1a:85:36:1e:ac:67:35:8c:
                    0c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:41:6F:E8:F6:05:B3:18:DE:4D:CC:22:B3:28:D5:2E:9B:F4:D9:95
            X509v3 Authority Key Identifier:
                keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:74:b3:ec:e9:9e:23:a5:f8:19:cf:84:f0:53:4d:9f:11:64:
         be:ad:4a:1c:15:ba:72:63:17:36:d8:47:8b:29:90:7c:98:1c:
         b8:19:38:17:8b:05:f8:b5:c7:e4:49:f2:09:74:41:3b:d8:de:
         58:77:d0:6d:25:cb:52:da:f4:e5:76:58:fa:be:72:ea:f8:60:
         81:a2:1e:e1:c6:1a:49:3e:80:07:a5:80:b0:8c:04:72:e7:dd:
         ca:7d:90:ae:d6:62:d5:13:5d:dc:9a:3d:a2:77:05:cf:38:8f:
         9f:a5:52:bd:d3:9d:55:ec:79:0c:c1:94:20:76:7d:eb:b0:8f:
         59:fb:c4:ee:d6:67:74:be:49:9c:6c:be:09:c8:3f:7a:3f:8a:
         fc:02:14:ec:71:78:36:7d:8f:1e:79:1c:66:91:1a:e2:36:d0:
         4f:7c:e6:c9:a9:0a:aa:12:23:59:47:f4:bb:71:f1:30:e3:3e:
         75:fe:5a:bf:68:fb:9e:de:21:36:fd:4e:05:cb:01:d1:0a:f3:
         43:f1:92:fa:d1:5a:67:35:28:33:59:96:0b:77:25:c6:ea:68:
         15:24:9c:da:77:8d:49:03:b4:a5:c1:79:a7:ab:b9:8a:8d:40:
         c9:a5:5b:7e:36:62:30:37:2a:e0:66:f9:f3:24:04:5e:01:09:
         57:cd:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:51:20 2026 by rpki-client