This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
File:                     ATTJf7sEhrXGbRPKsaiymEYFIds.mft (raw, json)
Hash identifier:          sS3SjgIndPXZYzYBwk9F+deJYqcJ/tCUd+qZk8Rchxs=
Subject key identifier:   53:5B:CC:A1:6B:B2:B0:1E:35:69:70:2D:3D:D7:E0:1E:13:16:7D:00
Authority key identifier: 01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB
Certificate issuer:       /CN=0134c97fbb0486b5c66d13cab1a8b298460521db
Certificate serial:       019BF53E96EE339C8D59F36969A828282143
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
Manifest number:          091C
Signing time:             Sun 25 Jan 2026 13:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:18 +0000
Files and hashes:         1: 3De_e63suCP9ycJDJ_Ka1whD8Jw.roa (hash: ZUi0zvIhEAW3gS3GnJUwYhmDjTJ4T7kn28VhumIi1RA=)
                          2: ATTJf7sEhrXGbRPKsaiymEYFIds.crl (hash: 0KYbFq6FHLoT3mJoDqYRIZOu1CceCxi8FV2xlbfU2RE=)
                          3: sdvnk99Tq3EIIIB_nAVJu6v2-eg.roa (hash: rrdg+q8HbhUAgKysFVF0heLuEhPWLu99pYl5fvdmoyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:96:ee:33:9c:8d:59:f3:69:69:a8:28:28:21:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0134c97fbb0486b5c66d13cab1a8b298460521db
        Validity
            Not Before: Jan 25 13:01:18 2026 GMT
            Not After : Jan 26 13:01:18 2026 GMT
        Subject: CN=535bcca16bb2b01e3569702d3dd7e01e13167d00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:14:3c:16:b2:dd:c9:0e:6e:41:d4:c4:89:
                    14:4c:d2:c9:8f:12:27:32:06:ba:5c:b0:48:2a:c6:
                    71:00:10:74:7c:1d:6a:b7:2c:72:6e:49:5d:c1:b7:
                    4b:dc:1a:95:39:e5:65:ad:7b:8e:17:0b:8e:cd:7e:
                    ba:d1:8a:2c:9c:f6:ea:e9:55:93:65:d7:cf:8c:39:
                    b6:d9:65:d9:93:1b:17:5c:f2:ae:68:fa:b8:32:96:
                    9c:da:b7:b1:54:79:a3:ef:8d:06:87:96:22:d1:b4:
                    ec:b3:dc:5c:24:0b:6b:06:07:55:1c:73:c5:64:9c:
                    19:a8:1d:b8:7f:ed:c1:0d:f1:fd:d8:85:7d:94:13:
                    92:08:72:11:e5:bb:28:0f:e6:be:66:30:ec:49:56:
                    0d:8f:1a:46:b6:8d:ed:8f:95:92:1f:cf:92:af:63:
                    fd:1a:9e:f4:b8:79:92:57:60:b7:03:e5:cf:50:14:
                    d1:8b:47:82:c2:9c:69:34:28:cb:bc:18:9e:9e:b2:
                    ad:dd:3a:9b:16:1d:26:9e:25:67:b8:fc:97:09:9a:
                    8e:81:64:80:a3:42:73:ea:48:6d:81:76:01:25:6d:
                    7f:cb:c8:3f:cd:28:f2:29:32:31:dc:41:bf:72:f2:
                    ba:34:26:88:25:c4:1e:43:a7:45:b1:ac:95:f9:20:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:5B:CC:A1:6B:B2:B0:1E:35:69:70:2D:3D:D7:E0:1E:13:16:7D:00
            X509v3 Authority Key Identifier:
                keyid:01:34:C9:7F:BB:04:86:B5:C6:6D:13:CA:B1:A8:B2:98:46:05:21:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATTJf7sEhrXGbRPKsaiymEYFIds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/30e2a9-01f8-4125-9fdb-58f2875ca0bf/1/ATTJf7sEhrXGbRPKsaiymEYFIds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:79:0d:c1:c1:5e:61:1b:85:bd:43:7e:df:96:d8:57:d7:f6:
         b9:13:29:46:d0:19:4c:60:dd:66:4d:e1:29:cf:d1:2a:b0:25:
         d5:04:c5:b4:2d:f5:4d:d4:c8:ee:a7:b6:27:03:ab:5f:73:c8:
         fe:d6:46:f6:49:66:92:94:94:80:ca:9a:68:7d:a5:79:d2:d4:
         bd:c3:00:90:10:f5:4f:b2:d3:ce:63:b0:76:1a:d1:29:64:f1:
         1a:5f:06:9e:dc:87:3e:9c:70:24:17:f5:51:a3:9c:50:70:0c:
         3e:d0:8b:cb:76:53:4b:08:26:4a:5e:83:c6:74:ff:38:d0:00:
         2b:69:e0:cc:0e:81:83:0a:a9:28:ab:11:a0:2d:9a:63:17:01:
         08:a1:e2:e2:31:83:b8:69:18:cd:93:99:ff:94:f4:c1:a8:34:
         d4:2f:07:d9:a4:17:c9:fc:ce:1b:04:c5:bf:e6:cd:af:e4:67:
         f8:d4:1c:4e:2d:b2:34:46:d9:8c:62:ea:79:84:ea:18:6d:80:
         47:51:e5:4e:95:41:2b:55:70:a7:f0:d9:b8:a7:33:2d:0c:01:
         0d:fb:11:f3:31:af:e5:3c:e6:5d:b4:b4:e6:dd:9b:3c:56:90:
         d3:fc:8e:37:01:12:55:9c:eb:99:60:03:52:7b:1d:e3:ce:54:
         23:98:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:09:56 2026 by rpki-client