This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          dS/KG+IR4URzToexOrHDj338hFeADcYBiCfyTx700Gc=
Subject key identifier:   D1:C0:FA:7F:8B:5A:2D:AB:B2:0A:24:10:03:F6:23:5B:E0:E5:D3:67
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       019BF3F55734E45C53A1CCB6B4C67227451F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 07:01:40 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:40 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:40 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: OOfRs1x/wC79gaesWgJ+Y8M5K8fDCkOjb8ubbz3EtuM=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:57:34:e4:5c:53:a1:cc:b6:b4:c6:72:27:45:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Jan 25 07:01:40 2026 GMT
            Not After : Jan 26 07:01:40 2026 GMT
        Subject: CN=d1c0fa7f8b5a2dabb20a241003f6235be0e5d367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:4e:8a:0a:d7:9e:a9:fe:31:c4:87:88:89:36:
                    22:84:fc:0e:14:14:2b:91:a3:dc:2f:cd:ec:cb:fc:
                    ef:a1:50:fe:5b:66:d0:76:84:a1:6d:6e:46:8a:d5:
                    d6:2c:94:0a:cd:2b:8e:09:43:94:79:bb:6d:27:aa:
                    0c:f5:b4:85:68:d9:6f:50:46:84:65:5c:63:89:10:
                    1d:06:ec:89:5b:36:81:f9:e9:05:1b:83:1c:1e:da:
                    49:0e:85:1c:9a:5b:81:c1:d2:c2:5e:85:1f:d2:ea:
                    81:19:f1:6d:8b:45:00:84:40:8c:dc:b4:a1:08:07:
                    e9:35:a1:2e:79:8d:de:36:cf:29:b7:ac:2c:f3:3f:
                    22:c6:a8:a0:64:8c:72:88:ae:50:95:09:e1:e0:b6:
                    1d:df:72:67:5f:eb:79:d4:ef:3a:3c:9d:5a:1a:23:
                    e6:ee:62:8e:cb:4d:29:f5:b2:c5:01:92:fd:59:ce:
                    6a:a9:33:06:31:83:d9:ec:7d:7d:58:6f:0a:68:cc:
                    0b:9a:3c:39:d2:45:48:fa:4a:f8:7a:3b:ba:c0:b3:
                    49:61:61:6f:db:d9:19:6c:40:96:f9:d8:25:18:e7:
                    a2:50:3f:75:cc:d8:e1:a2:14:e6:a7:c0:92:b8:20:
                    a0:3a:f2:51:8b:a6:24:ab:e7:76:c5:be:03:93:90:
                    fe:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C0:FA:7F:8B:5A:2D:AB:B2:0A:24:10:03:F6:23:5B:E0:E5:D3:67
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ef:0e:93:4f:ac:81:de:27:87:f4:92:9c:14:bc:a1:ee:64:
         bd:74:cc:85:df:a1:fe:a8:f6:cf:ca:7a:e7:43:62:1a:82:e1:
         ba:94:9f:07:1b:ce:06:2d:90:70:8b:94:82:60:91:6c:1d:73:
         2f:50:09:ef:5f:2a:34:10:87:39:d5:0e:d6:1e:6c:ce:0c:82:
         54:9a:49:41:88:33:48:f9:e1:96:9f:b1:c2:9d:97:e3:88:17:
         2e:d3:7e:79:7f:c3:00:10:07:a7:c3:51:1b:82:dd:67:80:33:
         eb:59:09:ae:2d:28:fe:f1:89:9d:45:c9:44:d9:93:59:ca:60:
         36:6f:54:12:2d:45:cd:7f:3b:71:18:63:b0:e0:e3:94:1c:65:
         89:39:e6:f7:06:98:e8:73:3a:09:9b:e8:ca:8d:d6:77:08:87:
         51:a6:72:96:a7:1f:c9:01:ae:09:ad:4b:97:d3:9d:88:cc:b1:
         e0:83:0b:0f:c2:7b:87:37:2a:f7:21:9a:43:e2:ca:28:32:fe:
         53:51:c2:b8:bf:a4:c8:c8:83:0d:82:68:78:00:fc:5c:92:89:
         7c:13:44:d8:c3:5b:ab:9c:cd:ca:fb:2f:f4:67:15:bb:1c:94:
         c6:9e:a5:87:58:7c:18:85:e8:78:e3:50:1f:3e:65:98:f8:aa:
         1c:57:54:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:40 2026 by rpki-client