This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          nWq/H9w/Pz/5cVLhdgBC9oK7pAqSkdtCWcovP7K1IPQ=
Subject key identifier:   B4:44:FB:EC:0A:C2:53:80:48:20:20:96:72:C1:47:87:2E:06:D9:E9
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019BF6BEF8E2B76D10E13BABF6AB16304DE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          1180
Signing time:             Sun 25 Jan 2026 20:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:09 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: +IvL82Ty0f/YLKzLeRMQ+jzhh2CiXARMMDjLDnOJUw4=)
                          2: F_7qyDHqywNLF8a2Ln9h7egAvhE.roa (hash: IjqDhnh8x9qZZNGyBMM7Oq3knBWv4p+u6LpclmDjTsQ=)
                          3: c6e857IVOZYjl5N7fY8HNnzYA24.roa (hash: Q3SE15YAjAw2UrzA85zUtD+5MpRr2HDjWbZqQ2fn2Tg=)
                          4: uJnEIKPWJw-326x5IBBMzolFrLM.roa (hash: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=)
                          5: vy3qd6walzhl7tZubGmW08QmYpw.roa (hash: GjD8b7Cc0LKnz1abLpNBhT8sfyli2VNmhuoKhcV1ueM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:f8:e2:b7:6d:10:e1:3b:ab:f6:ab:16:30:4d:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Jan 25 20:01:09 2026 GMT
            Not After : Jan 26 20:01:09 2026 GMT
        Subject: CN=b444fbec0ac253804820209672c147872e06d9e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:c4:51:15:b7:70:8f:1d:2d:3e:8a:f0:2e:
                    80:7f:ed:06:07:36:6c:6f:b7:aa:fd:8e:d3:5c:0b:
                    9e:e9:f4:3f:43:b0:2e:ce:a3:62:6a:93:4b:66:ac:
                    dd:f7:47:f7:12:21:08:9e:01:d4:15:1f:98:9e:09:
                    37:dd:14:75:1f:f6:51:3c:d3:77:32:1a:9e:a0:97:
                    14:c9:b4:e2:97:ad:33:b3:73:5a:0b:f6:9c:ff:b1:
                    ba:67:e2:0d:d3:89:de:b9:34:46:0a:33:e0:8e:39:
                    ec:90:c7:72:fe:a3:65:1c:b5:ff:6d:15:02:a2:7a:
                    8e:ab:49:fb:5a:1a:ec:6e:30:75:cd:b6:66:35:63:
                    0c:92:c6:4e:aa:6c:b0:41:0f:0a:2f:00:80:df:4b:
                    69:8c:79:06:f2:b3:ef:47:c8:95:21:c3:11:47:bd:
                    f4:d4:e4:8a:9f:65:64:8d:cc:99:e6:5b:e9:26:51:
                    82:f6:32:a3:69:0a:db:9b:d4:64:10:b7:33:b4:6b:
                    98:3e:07:4b:56:5a:fe:d9:e9:67:33:c1:7e:df:4e:
                    11:57:57:0c:a5:0a:e9:82:41:f6:41:0d:bc:21:d9:
                    89:c0:26:48:66:94:7b:5f:74:31:5f:fb:df:94:8c:
                    b0:d8:7c:89:09:4f:23:d6:bb:34:88:47:3b:b6:22:
                    9f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:44:FB:EC:0A:C2:53:80:48:20:20:96:72:C1:47:87:2E:06:D9:E9
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:74:47:6e:c7:77:c6:a5:fb:d7:aa:f7:ae:22:82:c4:f9:1d:
         23:e4:23:0d:24:43:0c:ff:57:22:2a:1c:96:5d:76:4c:b7:8f:
         31:35:40:33:15:79:81:c5:9c:a9:66:99:68:ae:e2:fd:1a:48:
         16:d7:98:6d:ea:a1:26:1c:0a:0e:fd:8a:42:4d:d9:17:fb:63:
         84:b0:a0:77:fe:eb:d0:78:fc:0f:23:9d:1b:57:00:6f:e7:2e:
         1d:6c:43:69:66:bb:e4:98:e4:2e:ec:d8:09:73:fb:8a:6b:51:
         64:0d:eb:7d:48:45:58:2f:28:14:2e:19:04:4c:27:3f:f9:08:
         aa:8d:0d:48:ad:33:aa:16:8c:ba:6e:45:64:0a:5d:87:31:8a:
         fd:de:fe:2b:91:67:cf:25:67:ce:54:e3:f2:71:fe:02:f3:6e:
         90:c5:b9:21:11:40:0b:56:52:d9:eb:4b:62:d9:65:54:28:63:
         9d:60:c7:f1:f2:3a:d8:80:a5:47:ae:e4:38:df:0b:69:cf:ef:
         a2:32:64:0b:20:d1:f8:fe:cd:18:f1:d4:61:cc:69:5b:01:b8:
         0c:0f:c8:50:12:c8:fa:e9:a6:0c:6d:15:a5:6c:ba:1c:80:49:
         e0:54:3a:16:e3:73:51:b9:56:a7:51:81:93:f6:23:b0:4f:fc:
         50:8b:2f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:19:44 2026 by rpki-client