This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
File:                     fx0OMpi-06fzn7OyRO2Ri_bE178.mft (raw, json)
Hash identifier:          /mMVEvxySt7DKhNF3eEi2LllehWT46UcqNiI6OBkLbQ=
Subject key identifier:   94:B3:E8:4B:22:8E:4A:B2:98:DD:0B:DF:B9:B8:37:DD:F1:2C:7A:DC
Authority key identifier: 7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF
Certificate issuer:       /CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
Certificate serial:       019BF42C26ED968718E7A55BB07E2B103CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
Manifest number:          15BD
Signing time:             Sun 25 Jan 2026 08:01:32 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:32 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:32 +0000
Files and hashes:         1: CTvb0FUa15u0RFsbQjogkyjXQEo.roa (hash: rc8P8+g7ke0pQjl95RJtZC0Plvgs/SZq9fu71nIHzfo=)
                          2: fx0OMpi-06fzn7OyRO2Ri_bE178.crl (hash: WkZtEemgjAKJROtT6kMcLePj7wqdPXVc4Dbq9g7FYAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2c:26:ed:96:87:18:e7:a5:5b:b0:7e:2b:10:3c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d0e3298bed3a7f39fb3b244ed918bf6c4d7bf
        Validity
            Not Before: Jan 25 08:01:32 2026 GMT
            Not After : Jan 26 08:01:32 2026 GMT
        Subject: CN=94b3e84b228e4ab298dd0bdfb9b837ddf12c7adc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:aa:1f:ec:9d:c8:be:c7:ea:ca:a9:68:c6:
                    f7:a8:1c:b6:15:08:bb:8d:9c:d8:2e:72:60:a5:89:
                    30:bc:cd:de:4c:a6:29:c2:7b:f3:17:3b:99:bf:8c:
                    08:08:a5:49:43:20:f3:d8:89:75:9f:24:d6:59:37:
                    30:a9:1e:c6:61:a6:02:a9:c1:a4:1b:d7:70:dd:5b:
                    7a:0a:7c:4e:1f:9e:18:62:84:6d:d4:16:33:f4:10:
                    d5:2c:98:52:ef:33:cb:54:15:1c:00:cb:bb:78:47:
                    5f:84:8c:61:07:15:51:d5:c2:96:52:9a:c5:da:53:
                    fb:2f:1c:8e:50:60:eb:81:f8:e7:ac:0c:6f:93:b9:
                    32:9f:31:a4:15:d4:27:32:6b:68:31:cb:f9:2f:20:
                    46:a7:56:2f:cf:61:4b:03:9c:5d:09:d0:82:7e:31:
                    cc:e9:a2:66:0e:5e:37:01:f9:fd:e0:49:1f:77:c8:
                    93:67:cc:e0:1d:8d:4c:8c:48:08:2a:b3:f7:f7:fe:
                    e0:a4:a9:37:0c:1a:71:a7:f3:95:18:c2:e9:8b:3a:
                    f7:69:d9:2a:12:f0:af:b3:fd:b3:35:47:ea:41:15:
                    6c:d0:00:2f:05:90:dc:2f:93:2a:20:c9:d2:ec:36:
                    79:a8:d6:54:b9:ec:55:22:db:19:86:27:55:68:8f:
                    da:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:B3:E8:4B:22:8E:4A:B2:98:DD:0B:DF:B9:B8:37:DD:F1:2C:7A:DC
            X509v3 Authority Key Identifier:
                keyid:7F:1D:0E:32:98:BE:D3:A7:F3:9F:B3:B2:44:ED:91:8B:F6:C4:D7:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx0OMpi-06fzn7OyRO2Ri_bE178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/e6506e-7685-48e7-a583-21af3dee8ee9/1/fx0OMpi-06fzn7OyRO2Ri_bE178.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:e7:2e:6c:6a:83:ad:ad:cd:20:89:c6:ad:e3:0a:d1:27:
         ef:49:e9:d8:6a:b0:89:cd:88:40:c2:56:6e:09:9b:82:01:88:
         6f:20:65:ab:66:3a:c8:40:2f:34:3b:b9:44:68:b2:1d:4a:dc:
         44:f2:b8:ca:c9:aa:31:a0:f7:de:13:6f:1d:d1:06:b6:d7:95:
         85:98:1a:a7:7e:0b:41:11:04:e3:82:1f:b1:1b:5d:f1:25:1f:
         b3:61:7f:b0:2e:e0:9d:1b:e8:f8:0f:5a:d4:a8:12:79:05:95:
         4d:53:6b:a8:83:4d:82:a2:eb:b2:79:76:59:88:d2:5a:83:93:
         24:94:9c:9e:de:dc:8e:15:9b:2a:f9:7c:ab:94:2a:7b:4e:6a:
         00:ec:13:60:ef:9c:53:c3:3c:16:c8:f5:97:26:2a:79:d6:a5:
         29:0f:56:4e:0b:56:b5:fa:9c:33:15:3e:1c:99:c9:b8:b4:72:
         91:05:8a:84:88:80:a4:f0:05:e2:cf:03:79:1b:31:b1:70:7d:
         0b:f2:f3:f6:d1:c1:b6:92:d6:19:fe:32:39:9f:2d:9a:41:8d:
         44:be:8d:cc:fd:c2:b1:fb:74:d8:4b:a4:5d:fc:ff:26:f5:94:
         0a:9d:41:b2:31:e0:d0:c5:31:94:45:cf:a1:1f:5b:5c:df:65:
         38:0c:1c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:22:06 2026 by rpki-client