This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
File:                     Anes0RLxxsgzvsIvi1PMcNI5CHY.mft (raw, json)
Hash identifier:          xAwizbr82dVcv6hueNocA1cw439M/T4vq/GcJFAjo1E=
Subject key identifier:   68:3B:17:A2:7D:32:B9:71:75:93:BE:A2:0C:66:B2:A7:CB:6E:A3:D3
Authority key identifier: 02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76
Certificate issuer:       /CN=0277acd112f1c6c833bec22f8b53cc70d2390876
Certificate serial:       019BF6BF7B67235CA8AC8B5F1D4FB9AFCE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 20:01:42 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:42 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:42 +0000
Files and hashes:         1: ANa1GBLoP5xu32cExEGS1ucyPeI.roa (hash: 03Pv5w9P0hLlvZZZpgrIUfLMLj2sMsn6vZZ11knaFKk=)
                          2: Anes0RLxxsgzvsIvi1PMcNI5CHY.crl (hash: isCSDduqyAJ8kwen2wQTNOhBDnjCMKyV/VkVP1EYZrI=)
                          3: e-lNAT2KWm6Z8P-XhIwHGDE5-pU.roa (hash: iVr8GEUOn1LFuRAheK6PX05d/ZM6MxTPjHOQdxUzn8Y=)
                          4: hzOfi7xasUduK6-Dsf-xHmLVWNU.roa (hash: 4jhdSegQbPfAmbaR3QHv7zCisX3cfxYoTmno1EUf1HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:7b:67:23:5c:a8:ac:8b:5f:1d:4f:b9:af:ce:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0277acd112f1c6c833bec22f8b53cc70d2390876
        Validity
            Not Before: Jan 25 20:01:42 2026 GMT
            Not After : Jan 26 20:01:42 2026 GMT
        Subject: CN=683b17a27d32b9717593bea20c66b2a7cb6ea3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:49:66:f6:95:1d:f0:e5:db:1a:a9:8a:02:cb:
                    f0:04:ad:c8:d3:17:24:b1:5f:87:16:b6:89:95:17:
                    83:ae:d7:22:f9:63:63:88:39:0e:c1:94:b0:9f:d1:
                    3e:39:2a:f9:32:79:61:a1:f3:cb:83:0d:7e:e4:3e:
                    b0:d2:34:34:77:c6:4b:d3:d4:0e:08:24:41:8a:5a:
                    3e:9e:a0:50:93:d8:ca:6b:73:de:5b:56:d4:15:f4:
                    38:ea:b9:af:5f:11:0f:47:5d:6a:b4:15:be:1e:ff:
                    42:42:22:9b:46:9d:4b:86:33:58:16:23:74:56:22:
                    32:84:f5:03:23:b4:c5:66:bd:40:5f:15:c3:c5:e1:
                    c9:83:7c:f1:6c:f3:a9:50:e2:22:11:c1:a3:f3:2f:
                    03:33:6b:96:bb:2b:f0:c2:bb:a6:46:4f:4e:56:15:
                    91:21:54:f2:4a:9d:58:d7:92:d2:e8:26:b4:d6:9e:
                    86:01:44:4b:a2:a3:d7:98:f0:51:b0:14:13:bb:05:
                    1d:82:9e:ca:54:5b:47:58:5c:f0:8a:04:18:7c:93:
                    d6:a9:df:cf:70:66:4b:e7:c6:89:2d:c4:6d:8a:6d:
                    28:68:71:f2:2f:fe:b5:e9:86:70:ed:67:be:78:bf:
                    c7:38:32:93:9a:f4:a8:e4:04:be:03:57:dd:e0:90:
                    85:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3B:17:A2:7D:32:B9:71:75:93:BE:A2:0C:66:B2:A7:CB:6E:A3:D3
            X509v3 Authority Key Identifier:
                keyid:02:77:AC:D1:12:F1:C6:C8:33:BE:C2:2F:8B:53:CC:70:D2:39:08:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Anes0RLxxsgzvsIvi1PMcNI5CHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2c0f0b-7831-41d3-916d-d9655987874a/1/Anes0RLxxsgzvsIvi1PMcNI5CHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:a1:3d:aa:8d:89:52:d4:be:63:13:c4:ae:c7:49:9a:8b:5a:
         f6:14:42:c4:f7:4f:6c:00:ce:ae:59:fb:9c:01:5a:83:2c:1e:
         e9:0e:d8:6e:b7:ef:f5:46:e8:2e:d5:82:64:de:25:fd:64:5d:
         a0:bd:4d:5c:ba:9e:dd:a4:08:78:33:53:f5:45:10:71:96:6f:
         e8:5b:4b:4e:e7:ce:e6:36:f8:c9:ca:2b:18:3e:2f:94:1b:4c:
         74:18:96:6b:e7:ff:1b:61:9d:b2:d7:e8:de:f1:94:df:1c:6e:
         38:9f:0f:7c:2a:72:ec:de:3e:8c:ec:e9:ef:8a:17:91:cf:03:
         72:33:ab:35:a9:26:07:04:31:0f:4e:54:40:31:b9:a9:ba:40:
         18:da:c7:d2:df:8f:3f:15:46:88:db:ad:2f:07:c9:16:8f:d8:
         9e:c2:2b:56:09:86:8c:29:d5:d0:5c:41:94:e2:37:41:3c:c4:
         0e:6e:cc:37:ab:5b:a3:08:96:da:8a:43:50:54:ad:b9:72:71:
         c0:d5:69:2f:4b:c4:92:4b:c3:38:16:a9:4f:62:8c:b2:aa:91:
         5e:7f:bb:c1:d8:27:29:44:40:b0:dc:f0:f3:92:6d:8b:39:af:
         27:39:f3:bd:12:b4:e9:a7:a9:f0:fa:b6:e5:d9:6b:b2:3f:49:
         63:91:62:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:34 2026 by rpki-client