This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File:                     1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier:          YGENP/UhkG+87jC10CmQUDBAEJG+erVKqsuN2Va79Rc=
Subject key identifier:   7F:E6:77:2D:5D:34:64:77:0A:8A:09:01:05:BC:CD:F4:CA:97:14:B9
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       019BF57589BCFD187AEF8F65879AC3143D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 14:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:19 +0000
Files and hashes:         1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: CgZ1megbbGTqMYUxM1ZnEBcuSMezvr0K6MdDZFxYOH8=)
                          2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
                          3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:89:bc:fd:18:7a:ef:8f:65:87:9a:c3:14:3d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: Jan 25 14:01:19 2026 GMT
            Not After : Jan 26 14:01:19 2026 GMT
        Subject: CN=7fe6772d5d3464770a8a090105bccdf4ca9714b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5a:35:2e:a2:3d:9b:22:28:7f:76:8d:2b:15:
                    eb:b9:fc:81:b9:06:4f:d4:bf:6d:50:de:78:3e:f7:
                    bd:ae:79:cc:de:1b:81:43:6c:d9:a4:90:38:51:c9:
                    7b:b3:70:ae:67:8f:8a:72:08:b1:ee:b3:30:fe:79:
                    3f:39:81:39:49:88:8d:a8:89:a4:d2:99:dd:7a:76:
                    e5:c3:91:ac:f2:c9:3b:26:a6:39:a0:fc:1f:11:1f:
                    89:c4:02:c2:2a:34:ce:4f:65:2f:2f:ed:98:93:3a:
                    0f:90:1b:53:2b:6c:5e:c2:f4:17:a4:83:bd:2c:80:
                    6c:20:95:ac:5e:91:75:44:95:1e:3f:bc:85:e0:16:
                    bb:fb:80:99:06:dd:cd:41:0a:34:de:fb:b2:40:85:
                    ee:3f:67:34:d0:5a:a4:a6:e6:b6:5a:33:ad:dd:15:
                    58:a1:89:5d:bc:b5:aa:b5:2f:ac:af:5b:11:4d:89:
                    40:57:d5:47:55:02:fe:a3:51:ed:07:9a:fd:9c:65:
                    1d:0a:56:7f:5f:47:84:58:67:b8:a7:d0:a5:43:f7:
                    87:4c:c7:bc:d2:05:86:cd:5e:3b:53:f7:8c:fd:f7:
                    9d:2a:7f:6c:dc:75:35:87:e6:29:37:c4:8e:5f:07:
                    92:e0:23:69:e3:c1:8f:c0:96:c7:97:ce:1b:e4:2a:
                    b3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E6:77:2D:5D:34:64:77:0A:8A:09:01:05:BC:CD:F4:CA:97:14:B9
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:97:9d:ef:5e:cc:52:4e:83:40:b1:b6:d4:ac:3d:8f:0d:15:
         48:45:b3:a3:d0:54:8f:54:59:f7:bd:fb:1a:14:e5:3f:c9:37:
         d3:cd:d9:28:67:6f:3f:e2:1d:41:a1:ec:7a:7d:06:7f:62:61:
         f9:c8:7c:2e:f0:1e:c5:0b:bb:4e:c0:48:82:9f:0b:51:3f:aa:
         63:94:e4:7c:08:f2:20:d0:18:be:55:e1:96:f5:52:85:77:fc:
         e8:ed:53:9f:35:3d:03:cc:13:e4:3a:dd:f3:b8:11:f3:09:5f:
         2f:05:9a:ae:4e:5f:e3:96:d5:66:41:29:b8:58:5b:c4:6c:2d:
         15:ff:fc:c7:bb:cf:cb:d8:e5:33:02:bd:94:96:96:bb:d0:2f:
         58:c3:d3:ea:72:fb:f5:7a:e4:5f:e9:77:20:cb:bd:25:e9:84:
         b5:9a:66:91:c5:57:fd:9f:d6:d9:09:5e:e5:33:be:6f:bd:19:
         b8:4f:d3:23:a8:d5:c5:d4:30:7b:ff:a1:25:eb:b9:a1:fc:ea:
         b7:bf:e5:4c:92:3b:f4:94:f4:46:3c:67:5f:da:66:a2:7e:e2:
         16:56:ff:a7:6e:93:50:80:cf:7a:10:5f:6a:2e:62:8f:e8:b4:
         de:24:8a:35:0e:a0:44:f7:a0:93:4b:82:4a:9f:c7:50:f1:59:
         e6:e5:de:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:52:24 2026 by rpki-client