This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
File:                     RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json)
Hash identifier:          UfJsaCHlYd2gwloCr2J4yDAgCOnzBChtD3nuq2+adf4=
Subject key identifier:   B0:E9:4E:B2:11:B7:A8:06:83:92:E6:B6:1E:E9:52:2A:1E:50:4A:74
Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78
Certificate issuer:       /CN=4540daa4c245a4725f38041402b6bffded15ea78
Certificate serial:       019BF72D22CE2F5D827F19535A9F597CCB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
Manifest number:          17F1
Signing time:             Sun 25 Jan 2026 22:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:28 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:28 +0000
Files and hashes:         1: 7-IfBeOREFbAdtIR0Nls6fgjGNA.roa (hash: QlNkH+o+xX5oge3OqAOZNG2Y5XgHM8e3tzaKkSNLLl0=)
                          2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: mA/hj7hHrJRa9pfuD8++PhTC6qULt/qI/moZHAwxYz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:22:ce:2f:5d:82:7f:19:53:5a:9f:59:7c:cb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78
        Validity
            Not Before: Jan 25 22:01:28 2026 GMT
            Not After : Jan 26 22:01:28 2026 GMT
        Subject: CN=b0e94eb211b7a8068392e6b61ee9522a1e504a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:71:1a:a6:3f:44:84:4e:59:78:df:98:2b:d8:
                    d8:12:9a:c2:cb:fb:8a:75:a4:26:b7:8d:e6:ae:4f:
                    07:95:4c:02:dd:db:d7:87:8c:d6:25:48:39:ba:52:
                    a9:81:66:23:1f:c5:35:56:ab:ec:1a:61:d8:07:de:
                    53:21:dd:3e:00:6e:67:23:fa:91:5e:91:5b:48:f0:
                    bc:2f:56:98:8d:c4:5c:ef:5d:bf:73:16:58:3b:4c:
                    29:ff:a6:34:8f:1e:12:33:c3:dc:5e:92:cf:04:bb:
                    2f:b1:f9:4e:9a:55:ef:22:5b:dd:83:c4:19:9d:33:
                    b7:14:6f:39:9a:9d:9a:78:48:44:23:2d:a8:5a:b3:
                    c9:2a:c5:a7:69:b2:69:b3:25:1d:74:8c:5f:4d:d4:
                    66:c0:2a:30:7e:00:fa:40:ab:3a:4e:93:29:cc:fa:
                    10:44:4a:c1:a7:2c:72:91:3b:62:a8:b1:82:ab:c5:
                    98:cf:f0:34:87:61:3d:90:85:3c:1f:56:ec:3e:b4:
                    9a:6d:5a:a1:86:00:e5:82:42:ac:fd:73:06:22:c0:
                    91:07:b0:ac:4b:48:93:75:c4:7f:03:52:0f:38:96:
                    f4:26:5a:1c:33:a0:72:f9:44:9a:50:07:2f:5a:25:
                    8d:98:9b:75:cc:ef:2a:78:ba:85:c0:93:31:f8:fd:
                    e8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E9:4E:B2:11:B7:A8:06:83:92:E6:B6:1E:E9:52:2A:1E:50:4A:74
            X509v3 Authority Key Identifier:
                keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:55:28:75:b7:19:0d:8a:b8:5b:f7:44:66:ef:0d:0f:90:27:
         d5:ca:e3:7c:d0:74:4c:94:53:dd:54:10:c4:a2:83:89:78:39:
         93:15:dc:33:39:36:d2:c5:3d:9d:f0:8e:e8:93:9b:b0:93:ac:
         67:34:96:a7:1e:ff:c9:9e:fc:2b:e9:5c:20:2e:f6:ac:49:25:
         70:6d:f1:27:f8:35:c2:d7:bf:30:6d:c2:13:ad:de:fd:8d:91:
         41:db:d8:c5:c9:64:d9:93:0b:22:3e:8a:d1:aa:ce:5f:b8:c7:
         a5:33:99:56:0f:9f:60:f9:13:b1:a9:76:c3:86:3b:37:bc:7d:
         4d:9a:2f:72:01:a1:d7:44:89:ab:ef:6e:da:0d:e0:9d:48:2c:
         84:dc:de:dc:38:90:10:33:00:80:9d:08:b4:cf:a0:f2:37:2c:
         76:60:c6:4a:22:30:2a:43:91:6c:ec:8c:ad:3e:eb:01:2e:cb:
         89:7a:4e:43:d8:60:5b:a6:03:e6:70:d1:9a:af:7e:4a:39:37:
         0c:54:80:4f:46:65:a1:93:ae:25:70:f9:f0:29:96:f3:e9:ed:
         bc:7c:df:a1:30:06:67:19:e8:88:bc:e9:29:41:53:88:c9:91:
         f2:1d:5f:fa:ed:86:c0:58:d8:b7:9a:b7:56:96:59:d3:99:10:
         02:70:3a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:23:57 2026 by rpki-client