This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
File:                     fVllljYInjIyRpdinCGNo4orZz0.mft (raw, json)
Hash identifier:          T4qt61x1+clJB0sBQ8W8hCsS78smOYe+VsvIYX353OQ=
Subject key identifier:   DD:B9:B7:28:45:BD:7F:9E:78:95:D4:CE:B6:B7:79:2B:F0:4E:49:B2
Authority key identifier: 7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D
Certificate issuer:       /CN=7d59659636089e32324697629c218da38a2b673d
Certificate serial:       019BF5E38C22766992517DB65C870A098A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
Manifest number:          1624
Signing time:             Sun 25 Jan 2026 16:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:29 +0000
Files and hashes:         1: 6rNJQsn9nenf7gQdwKGULkmO48g.roa (hash: 07pBJi7Nc/k7+K1BPHdbPiHNkGiQWcczdjGOzLq8Sbk=)
                          2: 7c37mQO9hber9Y9a4WDKVYTKyGs.roa (hash: h/wnhDSGEGx3npO9CQ/X4FjS1+UA0bB6gXGJME9onWs=)
                          3: B3wonFQq_huZTMz-8wuSey9Fs1I.roa (hash: JnpdkfXYgXXAYDW/V89kghjchKm1vbi2ArxR3XgZ6B0=)
                          4: fVllljYInjIyRpdinCGNo4orZz0.crl (hash: Vrli38df6sXb5W2WhBOL80LLNe9Qhb/mJ/BqcZirwlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:8c:22:76:69:92:51:7d:b6:5c:87:0a:09:8a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d59659636089e32324697629c218da38a2b673d
        Validity
            Not Before: Jan 25 16:01:29 2026 GMT
            Not After : Jan 26 16:01:29 2026 GMT
        Subject: CN=ddb9b72845bd7f9e7895d4ceb6b7792bf04e49b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:48:d9:2e:5a:c8:f5:48:d5:ea:89:fe:97:eb:
                    53:a5:0b:ae:50:7d:8e:19:c9:96:d7:56:b9:7c:aa:
                    49:e8:f9:52:70:ad:b4:d0:59:ce:52:05:dd:ff:4d:
                    e3:67:cf:1a:ba:c6:1c:0a:09:be:d0:21:7d:46:cc:
                    c1:6e:28:40:0b:4c:27:c4:72:24:4f:cf:9b:4d:9b:
                    63:d4:a0:40:09:f0:3d:54:69:97:95:d6:68:8d:78:
                    b4:b9:ac:25:8f:95:b0:82:fa:71:9f:d5:50:9d:3b:
                    ca:27:81:af:c7:97:5a:10:02:b8:b0:a4:7e:6f:83:
                    e1:72:6c:26:3e:e4:3a:12:70:0c:f4:5b:f2:8c:81:
                    48:9d:4f:d4:04:c1:59:b1:20:5c:e7:99:5a:13:3e:
                    25:f6:60:ba:38:0b:32:55:8a:65:86:bd:d7:fe:1a:
                    cd:78:25:69:65:b2:de:38:31:3d:89:33:c3:7f:19:
                    16:49:13:fa:e3:c5:1f:c1:f5:b9:6b:40:48:48:dc:
                    92:27:7d:41:97:a2:ec:75:ca:c8:8b:35:59:0c:2b:
                    aa:5d:13:12:68:3b:2f:67:7f:6f:6a:58:33:35:ec:
                    c6:d9:5b:43:00:18:3e:c6:c3:cb:50:b5:c2:8d:db:
                    91:cd:33:af:cd:06:92:b2:cb:cc:16:90:23:f2:de:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B9:B7:28:45:BD:7F:9E:78:95:D4:CE:B6:B7:79:2B:F0:4E:49:B2
            X509v3 Authority Key Identifier:
                keyid:7D:59:65:96:36:08:9E:32:32:46:97:62:9C:21:8D:A3:8A:2B:67:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVllljYInjIyRpdinCGNo4orZz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/652ef0-ae30-45ba-9970-6c1cf725d8f7/1/fVllljYInjIyRpdinCGNo4orZz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:04:8d:c3:cf:ed:a0:b5:a5:ed:72:7b:89:76:9d:da:71:
         1d:38:6e:37:8b:f2:b0:d7:51:32:21:17:5b:aa:fc:99:6d:b1:
         cb:f1:b0:79:b0:48:50:4f:70:5f:79:80:dc:c1:23:ae:bb:66:
         24:e0:77:d9:89:62:2f:ce:59:f4:d5:e3:0a:04:e8:de:b8:ec:
         33:56:ef:00:4a:82:7c:2e:0f:35:ff:34:c1:5c:65:fd:88:2f:
         4a:3c:d9:bb:4e:57:65:70:c4:ea:01:03:b0:81:17:fe:ab:76:
         97:13:f8:11:1c:d1:b8:3b:ce:16:27:45:7a:2a:b2:55:82:fb:
         f9:2e:9f:90:de:35:22:91:33:b5:86:09:dc:7f:da:e1:f7:95:
         64:69:de:89:0d:f0:d5:a7:4a:7e:7b:25:ca:7d:03:59:8a:fb:
         6b:3f:e2:dc:87:d5:6a:7b:e1:d6:51:4c:c0:e0:df:ab:d3:18:
         1a:8c:ad:74:22:71:8e:1f:8f:a9:7e:c5:15:b1:75:9b:56:64:
         fc:39:90:f1:ba:74:80:f2:e9:63:9b:1d:bf:cd:6b:55:b7:11:
         b0:50:e0:58:c1:ef:7d:5a:ad:cb:39:03:d8:ba:ac:2f:46:5b:
         6d:df:18:76:cd:4d:a6:c8:d2:c5:c4:14:ae:74:37:c6:4b:fa:
         7d:23:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:20 2026 by rpki-client