This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
File:                     RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft (raw, json)
Hash identifier:          hDnPy1Id26zTb+kgqGMjymO4ibsZuUd1gPP2bni86bA=
Subject key identifier:   B9:9E:9C:C4:B7:59:65:D7:E3:34:52:FF:85:92:FC:FA:87:72:AE:1E
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Certificate issuer:       /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial:       019BF688397FD7F9251B4A772E9F950E4563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
Manifest number:          17F1
Signing time:             Sun 25 Jan 2026 19:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:21 +0000
Files and hashes:         1: 36DzStGfXWJaTvy_DFt5js-qBkY.roa (hash: 8LA/a3S6Q/+rbVsFghMDCmBix0HHSJzG0POoZHw8My4=)
                          2: 9yn0ZWrwWlwVQcTY4DZrDaNSuqU.roa (hash: XESXJFfuiD+BaGLEcM4v4ajEMguCnVi9qwOcF7gca0c=)
                          3: E1fZi9ctnO61xdkwBdXsEigsazY.roa (hash: AfabkRw7EM5b0Hf4k7+LAG9L1ed9yMxYQaK/+/5IZY8=)
                          4: RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl (hash: psdvFqDlAd4+mXwkWNFWfRd/uOs373NHXb5Mj7l3Ckc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:39:7f:d7:f9:25:1b:4a:77:2e:9f:95:0e:45:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
        Validity
            Not Before: Jan 25 19:01:21 2026 GMT
            Not After : Jan 26 19:01:21 2026 GMT
        Subject: CN=b99e9cc4b75965d7e33452ff8592fcfa8772ae1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:81:4d:0f:4b:e8:a2:e0:f5:d4:d6:3f:c2:b4:
                    e1:d4:a9:ed:bb:0e:5b:87:70:43:06:a6:ff:4d:6e:
                    4e:55:c2:eb:95:13:92:86:a1:de:4c:64:60:be:fb:
                    d6:6b:38:04:3d:fb:b7:74:d5:05:eb:be:00:5a:20:
                    5b:a4:a4:14:38:e1:bb:34:e5:06:ea:18:7f:d2:a1:
                    f1:a1:62:53:0d:82:09:92:e7:5e:eb:c2:02:93:99:
                    a1:e7:ea:05:ba:32:b0:42:1c:a6:59:22:aa:16:41:
                    23:b9:1c:86:6f:3a:85:ff:06:ae:d3:90:12:43:55:
                    4e:c4:cb:2e:bc:f9:bd:46:f7:84:ee:4f:88:ee:a9:
                    be:55:18:c2:a5:8a:c3:52:f2:53:d7:3f:06:17:dc:
                    33:dc:3b:7f:8f:32:fa:36:88:12:0e:03:a3:f8:90:
                    24:40:d2:bb:ed:8a:c0:88:d1:68:44:36:05:90:db:
                    2f:03:71:73:89:22:33:ea:cd:a7:7a:a4:ee:2c:56:
                    a3:3b:f0:05:88:df:82:1a:fd:54:19:ff:38:16:fd:
                    2c:cd:e0:e2:7e:86:27:b5:6e:28:be:01:c8:2f:00:
                    65:6b:d3:a7:55:30:ba:05:d3:02:9e:1f:01:a7:35:
                    b1:df:64:3b:e6:1f:48:c0:bf:63:0c:09:ff:b6:7f:
                    54:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:9E:9C:C4:B7:59:65:D7:E3:34:52:FF:85:92:FC:FA:87:72:AE:1E
            X509v3 Authority Key Identifier:
                keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b9:10:09:6d:98:c0:cf:41:a7:f9:46:73:e7:2f:46:ea:26:
         96:d5:a1:8d:73:b3:02:8e:d6:97:57:f6:1b:bd:2b:b7:1d:41:
         2d:ae:cb:35:a2:7a:3f:2b:d0:04:43:6b:68:b2:23:8a:b3:6b:
         28:32:d9:57:67:ac:43:43:2f:b4:7a:56:8a:97:e6:50:5e:37:
         bf:0b:f8:2c:b1:17:35:7c:98:0f:11:d7:70:e7:97:4d:f5:7e:
         00:15:56:ef:91:ce:78:bd:ae:16:ed:e9:5b:b4:70:ff:d4:23:
         ea:d2:89:17:19:84:26:5d:37:d9:47:3d:56:1a:85:0b:76:56:
         ac:bc:f8:43:bd:1c:cc:e7:ed:14:48:e9:1d:33:8e:a8:1b:fc:
         23:5a:98:6c:7e:10:85:7c:a6:9e:57:1b:28:0c:d5:f1:cb:b5:
         6b:92:55:be:97:6d:b8:4b:20:7e:94:ed:d6:09:aa:5a:2b:de:
         1c:e6:fc:e0:a0:0d:79:c1:64:c3:cc:23:03:40:47:1f:af:13:
         a5:82:ec:1a:39:b7:53:cd:4f:b7:3a:f0:69:e0:bc:85:37:fb:
         03:3e:e3:6f:cd:d1:5a:c1:9a:cf:2b:42:52:7c:5e:77:f8:e2:
         f4:85:be:96:12:d4:ee:24:f5:da:8a:ba:54:d4:17:e7:7c:fe:
         1f:a7:f4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:25 2026 by rpki-client