This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
File:                     cMnQbFGt1oKQY_G2exddDAAB5zY.mft (raw, json)
Hash identifier:          mhNk4jQmpbE9VjoH4wJUy6HNV6dVyHGpgS/0vB8UbNg=
Subject key identifier:   28:76:7B:76:70:AE:41:5D:A3:F1:CC:85:7D:18:47:6F:E2:58:22:83
Authority key identifier: 70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36
Certificate issuer:       /CN=70c9d06c51add6829063f1b67b175d0c0001e736
Certificate serial:       019BF6F5B30718FA79A0784E542FF7023257
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 21:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:55 +0000
Files and hashes:         1: 1-WshWzag49fgBIIVS2C0Ln43YnY.roa (hash: UrL7K+EtrLLqE/i5EAvmTal0bqvr0HWJvCJ78tbp0jM=)
                          2: cMnQbFGt1oKQY_G2exddDAAB5zY.crl (hash: e68+XfbtZ+wCOruMUqVM12vQ4Gi97JK0D1rLTp4Aqmg=)
                          3: vBdouYkRW9ci3JYZ30IDKLuHdds.roa (hash: WJUobDpZaCY+TaeHhazACg6LZ8z6jzGQfsE7W/uWZPM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:b3:07:18:fa:79:a0:78:4e:54:2f:f7:02:32:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70c9d06c51add6829063f1b67b175d0c0001e736
        Validity
            Not Before: Jan 25 21:00:55 2026 GMT
            Not After : Jan 26 21:00:55 2026 GMT
        Subject: CN=28767b7670ae415da3f1cc857d18476fe2582283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:11:2a:23:d8:75:c7:c3:f3:f8:2a:2b:11:d1:
                    59:8f:07:f8:48:dd:f8:86:b3:60:50:6c:17:5f:e9:
                    98:76:65:56:8f:b4:62:8d:27:9e:ae:a1:72:9e:c7:
                    29:60:6a:aa:48:ac:d7:9b:91:2e:30:17:f7:1f:b0:
                    44:42:85:28:f8:e7:03:15:6b:30:b0:68:ce:2b:74:
                    99:4c:16:f2:9a:4c:d2:4d:ef:0f:da:76:69:39:1d:
                    d7:3a:ea:5c:ae:6f:24:62:ae:b2:91:21:e2:e0:04:
                    0c:74:95:3a:25:7b:22:9e:0c:2b:c2:24:34:b3:84:
                    11:e4:02:08:3b:55:e0:87:c6:36:ff:a1:92:54:70:
                    12:6f:2a:2e:38:ca:9a:73:32:d4:64:2b:03:94:a0:
                    a0:d5:15:04:01:af:ca:0a:0e:93:ea:49:e9:31:e5:
                    2a:2c:7a:d0:b3:2c:08:e1:bf:ca:e4:b0:ea:2c:7b:
                    0b:20:29:2c:8e:0d:13:e6:69:8f:d3:61:7c:0e:ab:
                    25:9d:00:ab:8d:39:9e:9e:48:cd:e1:97:60:e3:41:
                    67:ff:f4:70:d6:fc:d4:ba:d6:c1:ff:c8:2a:82:6f:
                    34:db:7c:54:94:13:34:2e:38:34:7e:e3:50:07:c6:
                    ec:28:67:22:dd:a7:6c:65:29:59:0f:60:8a:9b:7a:
                    de:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:76:7B:76:70:AE:41:5D:A3:F1:CC:85:7D:18:47:6F:E2:58:22:83
            X509v3 Authority Key Identifier:
                keyid:70:C9:D0:6C:51:AD:D6:82:90:63:F1:B6:7B:17:5D:0C:00:01:E7:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMnQbFGt1oKQY_G2exddDAAB5zY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/28dd30-ec08-4dc8-a1d1-5d3a86494775/1/cMnQbFGt1oKQY_G2exddDAAB5zY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6b:b1:85:9f:6e:b6:69:a7:e8:7b:6e:d2:65:af:d9:fe:d2:
         7a:a2:d1:9a:eb:ed:19:9a:5d:8a:20:61:db:46:2b:2e:1e:89:
         03:51:be:2a:1e:78:86:3d:27:e7:01:bb:6c:65:a4:2d:61:f9:
         62:9f:7e:04:42:cb:bf:ec:87:cc:aa:14:14:d5:a1:03:13:e1:
         28:b2:08:e3:28:35:c8:08:24:1a:89:c1:3b:60:f0:0d:a4:aa:
         27:cb:55:d3:73:bd:03:4f:ff:e6:c2:fc:b7:86:4a:91:e5:2c:
         1d:14:f0:bf:13:34:5d:02:1f:4e:bc:c9:72:bc:22:fe:af:5e:
         a2:31:b1:3e:fc:1f:3b:09:a5:cc:1f:d6:8f:fb:a0:f6:ee:0a:
         33:44:ec:92:8f:1f:2f:ef:af:77:42:f7:b4:05:fb:e7:6b:4e:
         68:f8:0e:2a:5d:5b:7e:1b:c8:7b:51:68:3d:4f:b7:7c:00:3e:
         f1:29:6a:0b:bb:e8:d3:ba:fc:2d:95:35:c8:71:09:13:45:63:
         62:40:6d:e4:a3:ef:65:aa:16:e5:f8:1d:7d:38:92:63:dc:2e:
         bc:20:e3:25:98:c4:0b:64:45:bf:ce:08:0c:49:c1:4f:fc:f7:
         ab:d7:1b:7b:d1:d3:21:46:ee:47:06:a4:11:a3:6b:f5:80:89:
         a4:da:d3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:27:03 2026 by rpki-client