This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File:                     KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier:          AbD7ZHnNolHyYX5ZYGWgtm5T6Fmn87DMS1JsKTnThcQ=
Subject key identifier:   FB:B2:79:A4:D1:83:17:9A:36:7F:E5:61:64:D3:1F:E4:F7:F6:57:8D
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer:       /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial:       019BF8E3C1B480B9C18E28ED3B89472E7562
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number:          17F1
Signing time:             Mon 26 Jan 2026 06:00:34 +0000
Manifest this update:     Mon 26 Jan 2026 06:00:34 +0000
Manifest next update:     Tue 27 Jan 2026 06:00:34 +0000
Files and hashes:         1: FVFRIPh6vjxNZF9GmdKTzMvxW20.roa (hash: RxEPmyeQKw2S/n6YHyV1FFH2RRQ1FPtU6WCYyBI+QSs=)
                          2: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: SaWtoBiY2p/YLABASvXKbssehdhFlZisLH3o2JABeiE=)
                          3: Ll4El4EPvQjU1m3_NGW31BoMNbs.roa (hash: aAbsXcXAi1Px9rBqFebnRpJI/7J+UKhx99NtmpOY4GQ=)
                          4: MlnC-jaRpZnIrgB8_eQnTAbVGTA.roa (hash: LraAiuo62bJSCi7FsjMWIePU6+pRqpeuBTDorfg6wzo=)
                          5: WVi_ybIpobHkUBuINJ5UAOJnWNI.roa (hash: 3fbJIuP8QMGU6Mp39Y5b/MTPHVVyptacQbOnxd8jif8=)
                          6: YJQfMl-kDd-ZdRuRWL9F3JaDAtc.roa (hash: gnWGWFdrNvGan6Zj654ovvMYwlS3b9SdtQbQJSYqz8w=)
                          7: cKL1r39FOEn9-Io6QM2GHDGad7Y.roa (hash: IVOj6G/Kxw/gIVSF+sBn1ShNhJ2a3NRvKy7Xif0pwjk=)
                          8: clfdiMu1i07BMzYCaMwkqCSWESQ.roa (hash: nPTdJ+2EENVzerbY85J3Hj4LaW3YuLFq8ExfSo1tXKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e3:c1:b4:80:b9:c1:8e:28:ed:3b:89:47:2e:75:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
        Validity
            Not Before: Jan 26 06:00:34 2026 GMT
            Not After : Jan 27 06:00:34 2026 GMT
        Subject: CN=fbb279a4d183179a367fe56164d31fe4f7f6578d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:33:5f:af:bb:6a:1c:97:e3:cc:97:a0:c7:32:
                    49:b8:b7:8d:d8:db:b7:0a:69:80:2d:b5:43:98:91:
                    96:42:eb:af:98:c2:da:62:0c:bf:c6:1f:26:e2:1f:
                    3e:d1:64:68:dc:e1:77:64:b8:2e:07:95:ce:8d:11:
                    5f:6f:4c:db:31:2c:fe:12:33:6c:b1:42:2d:52:0a:
                    02:1d:d5:6c:47:34:58:2a:fd:15:01:25:0d:b4:3b:
                    39:a2:89:49:af:93:04:38:38:7d:4e:fd:49:7d:81:
                    8d:2f:89:7d:29:6e:d0:49:96:71:8d:b3:fa:f8:cb:
                    9a:8b:ff:67:15:a3:6e:8d:99:3e:54:ab:d7:28:1d:
                    f4:d3:f7:fd:4c:08:1c:db:f9:94:24:32:76:3e:e0:
                    5d:7a:6c:28:ca:b6:f8:02:dc:20:90:f1:31:94:92:
                    ff:2c:23:46:b2:de:d0:54:1d:bb:9e:9c:b8:66:cc:
                    c2:d6:6c:a1:5d:5f:d0:f8:76:e9:09:f8:50:19:3f:
                    c7:eb:1b:f6:84:01:77:f0:56:e5:a5:d0:c3:61:97:
                    5b:66:20:3c:a5:60:fe:b8:5e:8c:8e:e1:63:30:86:
                    0a:37:d0:4f:05:a9:99:bb:b7:47:b6:4b:44:4f:80:
                    36:26:de:5f:2a:e0:e0:95:87:98:0d:25:10:59:56:
                    cc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:B2:79:A4:D1:83:17:9A:36:7F:E5:61:64:D3:1F:E4:F7:F6:57:8D
            X509v3 Authority Key Identifier:
                keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:47:60:0c:35:db:f6:29:74:4d:d4:a0:db:82:b4:16:89:53:
         66:c1:3c:d1:25:a0:37:f0:b7:e4:07:3a:89:b3:98:80:95:68:
         80:09:89:f8:79:a4:43:73:1a:69:26:cb:2d:2a:6d:f0:af:04:
         2d:15:92:f4:4f:4c:20:70:f9:80:8c:bc:69:6d:0f:0b:07:b1:
         e5:ad:59:9d:1c:ea:64:92:b7:3c:ef:80:38:40:02:22:25:f0:
         65:8d:58:42:83:9d:49:24:e3:17:ee:e5:f6:0b:c8:56:9f:21:
         91:6b:fd:21:99:8f:13:a9:3c:45:cd:35:5c:4f:9f:ae:51:6a:
         ce:58:cb:fc:d8:a0:b0:92:39:78:5d:5c:e9:c5:27:b9:89:cf:
         50:5f:87:53:b4:20:12:1f:53:d3:94:d1:92:22:69:5e:ad:58:
         6f:73:78:42:08:2e:22:e4:87:8d:f4:54:b3:49:ef:d1:d4:7c:
         fc:aa:96:02:c6:8b:5c:a1:11:dc:58:4c:fb:28:4e:d2:37:df:
         c6:98:ff:4a:a9:5f:e8:4b:10:dd:02:91:f0:60:a4:2c:35:94:
         95:96:a1:84:6d:8a:02:f0:fb:61:8e:a6:71:48:b9:77:7d:29:
         4f:3f:12:be:ab:5e:22:a6:f1:15:48:79:9a:d8:c0:8b:5b:1a:
         3b:f8:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:35:27 2026 by rpki-client