This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
File:                     dBc29lciH8E0MWMjsHQFhanBsgw.mft (raw, json)
Hash identifier:          sImqRm+/T2YEPP0A+k2y10LF+x9Ak8rKjBGAcv+0VDc=
Subject key identifier:   6D:6C:5E:0E:B9:51:AB:E2:C2:CC:28:51:7D:73:6D:28:CC:D0:69:06
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Certificate issuer:       /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial:       019BF83FB5919A8C1640551B9C9F6F314680
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 03:01:23 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:23 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:23 +0000
Files and hashes:         1: 3D6ST7VPwU1ruJHTqcORchHTAiE.roa (hash: NASIK7MkKYD9o//4ZODXB3XY9C+uWrjRQevxzYiJxB0=)
                          2: FsryNOkpTRhYXYiVpfSErxkdF5I.roa (hash: 7TnmsucFlZLELXfMUZN9SGlpQMX8+cF0eWaXdVfCFOM=)
                          3: dBc29lciH8E0MWMjsHQFhanBsgw.crl (hash: fNVUvttMgUgZGHtzvNRgBnVAKw/CSDeiYRfbkbMwXF0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:b5:91:9a:8c:16:40:55:1b:9c:9f:6f:31:46:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
        Validity
            Not Before: Jan 26 03:01:23 2026 GMT
            Not After : Jan 27 03:01:23 2026 GMT
        Subject: CN=6d6c5e0eb951abe2c2cc28517d736d28ccd06906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:84:44:af:cc:96:41:88:28:d5:4c:5c:e8:
                    55:54:9c:45:3c:06:3c:99:85:9c:68:d3:d5:37:bd:
                    10:62:7d:a3:75:32:17:17:5f:5c:62:0e:8a:74:45:
                    31:fb:1f:74:4d:39:6f:df:77:6f:a7:1b:e4:49:dc:
                    e5:8f:00:ee:6e:fc:b7:b4:7a:3a:a8:ed:46:19:55:
                    41:01:49:52:3f:98:66:da:d4:4f:4a:e4:70:eb:3b:
                    f5:ee:df:33:56:db:17:0b:47:19:6c:5a:e6:17:d0:
                    f4:a1:2f:d0:d9:eb:c9:eb:0c:0a:21:2d:4d:78:f6:
                    08:e9:82:97:50:7c:de:8f:01:06:2c:19:ad:03:f1:
                    8f:3c:b5:da:eb:65:0d:8f:a5:f1:9d:ce:16:0e:1c:
                    20:f1:a8:81:d1:99:53:0a:27:6a:b2:b9:2c:7a:23:
                    ac:a2:8a:53:e4:fe:6d:f8:65:a2:5d:1b:a5:aa:f8:
                    b5:94:4e:14:8c:39:c5:6a:96:30:22:3b:40:6a:2e:
                    8b:8b:f2:22:b0:fc:9b:c1:34:a8:a9:44:15:1a:5e:
                    3f:51:ae:a2:33:37:58:7b:2a:d3:1b:03:6a:dc:66:
                    61:0f:3b:a7:3e:44:61:f5:11:35:31:81:b1:64:85:
                    c9:d6:29:f9:5d:a9:71:3c:c4:6d:ad:5c:3b:d7:b8:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:6C:5E:0E:B9:51:AB:E2:C2:CC:28:51:7D:73:6D:28:CC:D0:69:06
            X509v3 Authority Key Identifier:
                keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:82:35:72:72:99:44:ed:a9:a6:6c:6e:31:ec:5d:84:1c:32:
         7c:1d:ab:37:2f:04:ef:6d:56:50:77:9e:7e:5c:4b:86:58:85:
         77:66:68:c9:e4:eb:93:bd:7e:a7:dd:02:02:74:52:72:73:f6:
         e9:cc:1f:10:69:d2:79:cd:b5:6d:a7:fd:5a:62:5a:ca:8a:7e:
         e9:f1:64:ff:da:3a:6c:10:8c:ab:d2:48:d3:b2:b3:e3:eb:83:
         fa:e8:89:1f:92:dd:d4:59:0b:6e:f5:f7:17:18:83:89:49:3d:
         8d:03:6d:31:dc:b6:5f:37:88:65:ae:c4:bf:6d:a6:a6:02:2b:
         0c:17:38:ab:9f:59:99:15:a0:ec:6d:28:08:8d:f3:69:3a:af:
         9c:db:7a:74:17:49:f5:70:ba:e1:b6:05:3e:32:08:66:a4:8b:
         2a:b6:57:2b:db:59:9a:4f:52:d8:8e:d2:b4:ba:5e:11:73:2a:
         8d:b9:67:71:ba:06:8d:bf:3f:0d:78:6e:a7:8f:41:e6:b5:ff:
         14:49:fe:18:d2:7f:e3:3a:d9:02:56:48:24:c9:c3:e9:e0:eb:
         5a:6b:bf:42:b7:6c:69:21:19:04:55:c5:5a:07:80:06:fe:d6:
         30:74:11:29:ee:e4:0c:44:a4:11:6a:cd:bf:89:14:71:14:e0:
         dd:03:d8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:04 2026 by rpki-client