This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          ft4QhrWhZEGmvHEEF/EnmSTvXNO2OioXzxjZG8KAsJE=
Subject key identifier:   27:0F:3B:58:31:F2:42:55:5B:17:BD:9E:8D:33:88:F5:07:FC:6A:54
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       019BF499113702D4394665488669CA1EF6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          17EC
Signing time:             Sun 25 Jan 2026 10:00:30 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:30 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:30 +0000
Files and hashes:         1: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: RX6+Dy6dh7a0i4wPIpPrlfVfBs2m6n/uuLKLfAazfL0=)
                          2: A5YCoo2ePdjpMfcxVU_Sl6k7Mss.roa (hash: 5TlL5QCxApqjt2a0h4QTIYJy/z6ABD0Zlh15ZtqZ6NY=)
                          3: Ooaqx-AaUuIu05bcvjpYwUT3gg0.roa (hash: WYWgX4Kkm4uSctkElEdv5T7C0cdbRdRsvjVMLWI0Es0=)
                          4: ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa (hash: GNXHKw8JOl4x62WkohXxkLR6V3oFi4zgRDQxr+0jQ1k=)
                          5: eM23ZnD8jpZVPByDqpueUzr7VuM.roa (hash: XpFVafOc5evuKnLSP6z1Ow2v+VF3PM8B+n8NEsUA1rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:11:37:02:d4:39:46:65:48:86:69:ca:1e:f6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: Jan 25 10:00:30 2026 GMT
            Not After : Jan 26 10:00:30 2026 GMT
        Subject: CN=270f3b5831f242555b17bd9e8d3388f507fc6a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:b8:e1:1a:42:c9:5c:a8:58:ae:b4:65:5c:
                    eb:4c:ff:83:13:29:74:e0:7b:97:79:ba:2f:41:91:
                    98:a7:91:32:8a:de:1b:07:84:07:4a:13:09:b9:2f:
                    16:07:de:09:d6:6a:db:1c:3d:a9:2c:0a:85:da:88:
                    ab:e8:08:42:5d:84:bf:92:26:08:2d:c3:6b:8a:02:
                    93:3a:ac:b4:78:f3:e0:e4:d6:0b:9c:8e:6b:18:f4:
                    41:fe:2b:03:43:d3:5f:6e:c1:13:36:8c:b6:66:be:
                    5f:45:7a:1e:62:6a:32:c7:4c:14:8f:09:48:d8:dd:
                    39:fe:d8:3a:4a:e2:10:30:a8:1f:2e:94:96:08:19:
                    21:f3:25:aa:83:50:09:04:95:57:56:af:1c:47:05:
                    85:a0:59:9b:ec:99:a2:76:fb:9a:52:2d:a4:c3:4f:
                    df:98:7b:6b:c5:36:1c:df:07:0a:d8:b9:24:0c:95:
                    47:83:74:f1:c8:ab:dd:6a:59:bc:21:60:13:1e:a3:
                    56:a1:5b:36:a3:19:f2:0f:de:bb:d5:e3:fa:ae:e2:
                    f8:30:fb:e1:77:f3:30:c0:9b:a5:aa:9a:14:76:e1:
                    f1:5a:a2:81:b1:bc:dd:ac:04:29:12:4b:4b:e1:4c:
                    05:a3:1d:67:de:9a:df:dc:d4:75:dd:01:57:1a:9c:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:0F:3B:58:31:F2:42:55:5B:17:BD:9E:8D:33:88:F5:07:FC:6A:54
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:72:ec:23:c2:91:87:bf:d6:40:cf:8e:49:c0:71:33:9f:e0:
         86:58:04:01:bd:1b:29:47:82:80:bc:ee:75:4c:70:a5:e2:0b:
         7e:a9:3e:0a:bf:a0:4c:3e:b7:00:8d:e8:6b:4b:44:df:c0:89:
         db:18:41:92:1d:dd:c3:90:23:9c:a6:58:13:ba:ca:9b:91:b0:
         24:97:39:d5:af:3b:55:32:80:16:93:50:7a:dd:db:11:98:d6:
         75:92:f1:45:48:31:a8:d4:0e:0c:f5:9a:12:f0:9c:be:94:8c:
         7e:86:1e:4d:28:de:4c:c5:fb:26:8b:b6:de:6f:e6:51:a1:52:
         bc:e9:b7:6f:08:81:d0:c7:42:50:38:f9:31:22:1a:b6:c9:1d:
         22:bb:c5:61:20:68:7b:d7:10:94:af:9d:5c:20:be:f7:9d:67:
         71:de:72:f5:88:d2:6e:f8:c8:26:64:8f:1b:e8:ec:91:7b:9d:
         65:65:50:7e:a5:7d:13:f2:6d:04:ad:08:d2:58:32:50:1c:62:
         b7:82:71:87:21:f2:f1:b3:e8:d1:ee:ff:db:d9:6a:95:7d:96:
         ff:5d:81:f5:7e:4d:b3:e5:50:43:51:a2:8f:1f:6a:31:91:6b:
         1b:2f:70:2b:0e:31:16:d1:61:a4:9c:22:77:3e:ca:c1:f5:50:
         91:8f:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:08:05 2026 by rpki-client