This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
File:                     FTSDi7MXuBhmmfCkSF222doZCNI.mft (raw, json)
Hash identifier:          gBZEp6Opv187Pnx4z3qa3Cq9W4FaK2BRroAUP1WYP5U=
Subject key identifier:   5B:3F:D3:AA:1A:E7:B8:EB:63:9C:4C:3E:30:C9:85:24:06:E3:5D:D0
Authority key identifier: 15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2
Certificate issuer:       /CN=1534838bb317b8186699f0a4485db6d9da1908d2
Certificate serial:       019BF499AC638D97487C1F886F17773DA271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 10:01:10 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:10 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:10 +0000
Files and hashes:         1: 8eUjrNm6imMBEiASLOUuqltQoVs.roa (hash: ZfpOTqbTAn2CuRX0LoEyNNAQ5rM0VLzFBNYb2IBiGIE=)
                          2: FTSDi7MXuBhmmfCkSF222doZCNI.crl (hash: TeybWeFFUzKtFPXxRqZTMD/Vw+Vr9i2xF+mgQsRZusQ=)
                          3: FZw0pgpqlzT5XyeIs7PFoGYFwFA.asa (hash: glk6t/DUYkuI6x781kKCmhQHELR1hKXbP1AbR2kHTMc=)
                          4: OpTwdj69eMigXueWV1BOB2dxLbA.roa (hash: 2kgLJoiz6VCqwiPbikEb5+NrvRferle8wU/FOd3hfZM=)
                          5: XdEB96U82mHFGVm_nS4xtciGIkQ.roa (hash: hdzlPow2QIj+p15z7CdLi4KjuG4H8crIwMXk1C1mtMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:ac:63:8d:97:48:7c:1f:88:6f:17:77:3d:a2:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1534838bb317b8186699f0a4485db6d9da1908d2
        Validity
            Not Before: Jan 25 10:01:10 2026 GMT
            Not After : Jan 26 10:01:10 2026 GMT
        Subject: CN=5b3fd3aa1ae7b8eb639c4c3e30c9852406e35dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3d:fb:98:22:95:7a:bc:12:76:38:84:81:bd:
                    6a:3d:7c:b4:9a:09:80:1d:00:39:ea:03:42:ae:a9:
                    e0:0c:52:97:34:12:cc:0b:4b:46:dc:bc:b5:08:14:
                    d5:4f:0f:47:d4:a5:5a:3e:2d:aa:cb:59:1c:70:5f:
                    57:2b:6c:fa:e7:b6:4a:d6:d2:34:94:95:5c:68:9a:
                    12:ca:a7:59:bd:87:56:dc:48:1d:31:0f:a6:68:62:
                    e5:11:63:80:61:14:15:49:d8:c1:57:f1:78:6d:f3:
                    01:e6:91:66:79:bd:69:9c:a4:e4:ac:be:e7:ab:e4:
                    80:20:ab:4c:98:36:28:97:bd:67:9e:ca:ce:4a:be:
                    2d:73:80:d7:8c:5f:02:7f:2b:1f:9b:17:9f:10:52:
                    2e:69:8a:3a:4d:bd:48:ff:9f:04:60:9b:93:2e:79:
                    f6:43:e7:3c:99:4a:45:0c:09:e3:2b:49:ad:2b:db:
                    6a:02:e5:f0:15:16:d1:b8:29:07:7e:2e:0b:b6:1d:
                    5b:84:61:5d:63:ad:da:fd:ee:cd:45:94:ed:5f:ec:
                    7d:a4:40:f1:4a:ef:86:06:5f:9c:a1:40:a3:cf:67:
                    8f:01:b3:90:05:b6:be:fc:fa:25:be:e1:7e:13:e5:
                    ca:0d:7e:7d:38:65:23:be:5d:6b:81:3f:ca:2b:c3:
                    ec:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3F:D3:AA:1A:E7:B8:EB:63:9C:4C:3E:30:C9:85:24:06:E3:5D:D0
            X509v3 Authority Key Identifier:
                keyid:15:34:83:8B:B3:17:B8:18:66:99:F0:A4:48:5D:B6:D9:DA:19:08:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTSDi7MXuBhmmfCkSF222doZCNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/14c1ca-1874-47ac-a18e-3a144c70e0b0/1/FTSDi7MXuBhmmfCkSF222doZCNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7a:b4:e2:65:ab:26:b3:4a:41:0e:5c:d5:0f:10:4f:78:96:
         c9:38:b4:79:d0:25:34:40:ba:40:fe:62:a9:8e:2e:ed:ec:a6:
         9c:e7:40:cf:28:e7:cd:04:4b:7e:20:64:a0:86:1d:d1:70:0b:
         ec:ff:fa:8e:aa:d6:5b:91:b5:b0:6f:2c:50:5a:14:ab:d9:ee:
         43:aa:84:11:fd:d5:f8:a6:fe:a8:b3:4c:4f:1c:fb:d3:9d:0a:
         71:64:d4:f4:47:20:39:04:ed:43:0d:73:d8:04:84:2e:19:ab:
         85:5f:c9:4c:6c:d5:7c:4f:da:4c:3c:94:8c:1c:2c:63:c3:0b:
         d8:32:b2:92:9b:b8:a8:1b:1b:57:b3:88:dc:15:83:b2:91:cb:
         10:b8:10:c1:89:6a:2a:f1:8e:be:75:31:fe:72:f0:3d:a8:f0:
         83:9b:09:71:b5:78:e5:85:f9:a1:00:68:2b:1b:2b:cc:5c:cf:
         ee:e8:7e:35:95:e9:54:d5:43:62:4c:47:0c:85:b1:76:60:df:
         05:14:44:c5:38:4b:ac:a3:cb:c9:46:e5:d4:97:e1:c3:8b:c1:
         1a:b0:cf:90:c5:2a:76:4d:fa:4a:59:24:13:88:a8:94:a9:53:
         96:0e:ad:25:6b:3c:e8:26:70:c1:20:76:ad:39:6b:dc:57:42:
         79:34:07:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:48 2026 by rpki-client