This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File:                     nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier:          vTg1oY6iw1KZ7hmdiCbRTBFC7eP0kpMHPWlrrVxduyQ=
Subject key identifier:   9C:D6:59:D0:14:2E:A5:FB:DE:D4:A0:54:B9:26:C8:EF:F8:A3:86:28
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer:       /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial:       019BFA64406BC86021AD10DEC13ADE8A0CE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number:          17F0
Signing time:             Mon 26 Jan 2026 13:00:32 +0000
Manifest this update:     Mon 26 Jan 2026 13:00:32 +0000
Manifest next update:     Tue 27 Jan 2026 13:00:32 +0000
Files and hashes:         1: E8tqgGls_idrTZuBqV9BquCiz3o.roa (hash: vdVKiL0mPT/WkeBXx2QcT7V9CByZB8/0+IekjVyDQ9g=)
                          2: QyIrj4KBT2VQqHgbFbL2BDxfgr0.roa (hash: kp1CwaLzqr/s/iouj0Yw+AzVZxO6+NVySzklWCo6UCs=)
                          3: dltfgErKAVJhiBmKINA17o0-QCo.roa (hash: h63lR9XrHkLU6v+ibOR56TO6e1KLvDhOUG9IZ5RNy9k=)
                          4: hQDLXIuFPbPeMoA0n3wg3FSKYSw.roa (hash: BBMPveKRndrvVUm7Cra4ibGzFpyOil4iXtzIOV4kIxg=)
                          5: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: FYMU03Gm09EPIi9nuq2LMu7ii2SDnpkPT3DXHjWjw18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:40:6b:c8:60:21:ad:10:de:c1:3a:de:8a:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
        Validity
            Not Before: Jan 26 13:00:32 2026 GMT
            Not After : Jan 27 13:00:32 2026 GMT
        Subject: CN=9cd659d0142ea5fbded4a054b926c8eff8a38628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:b9:ea:60:db:f2:b2:09:60:e4:06:9c:df:
                    7b:e6:7c:1b:1e:36:d6:43:61:de:26:22:d5:f5:d5:
                    25:aa:fd:24:63:4e:29:f2:44:c8:93:4f:c7:2d:2a:
                    e9:54:28:54:aa:4b:e6:0a:17:e9:a3:93:42:26:b7:
                    f5:4d:92:69:e8:f3:2a:35:1f:52:39:0d:7f:a9:12:
                    dd:0d:fc:e9:96:af:f6:cb:8e:ef:b0:49:8e:dd:64:
                    de:ee:18:bf:de:a0:a2:b5:30:83:4b:ba:18:24:07:
                    2d:d1:df:79:92:5a:66:54:48:a7:3d:c1:3f:e2:ec:
                    35:72:27:2b:8a:fe:fc:04:69:31:e8:bb:3f:35:2b:
                    30:16:11:54:df:2c:17:cc:09:38:4f:b3:c8:ed:86:
                    a6:bc:81:9a:f6:04:25:d3:c8:99:b9:3a:f3:c4:25:
                    58:26:8d:d5:a1:94:39:aa:0f:ca:9b:6c:d1:3d:f0:
                    8f:c0:02:7d:a7:e4:d6:b5:46:e0:71:02:1d:ae:75:
                    32:e2:83:2b:8f:9c:16:e9:aa:cd:5c:00:30:ea:c5:
                    d6:d5:2f:52:28:b7:e8:7d:c9:5b:fe:8e:8e:27:f7:
                    17:99:50:33:88:ec:85:97:d7:9c:0a:d0:b6:37:27:
                    d5:62:ab:12:1a:07:6e:af:ba:eb:78:53:27:6e:96:
                    9f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D6:59:D0:14:2E:A5:FB:DE:D4:A0:54:B9:26:C8:EF:F8:A3:86:28
            X509v3 Authority Key Identifier:
                keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:96:ff:fa:7a:2b:a1:22:b8:67:49:67:ed:2e:68:e2:35:1a:
         4b:b1:75:0f:86:1a:20:3d:0d:80:b8:7b:c4:70:b3:e7:59:12:
         a3:f4:2e:06:ee:7d:e5:13:94:2e:f9:2a:ad:df:46:ef:e1:2b:
         b2:5b:e3:46:d7:d7:ed:95:79:0f:87:12:82:51:19:29:9c:17:
         81:29:52:55:f2:93:f2:75:db:8e:e0:cc:98:d6:d0:36:50:6d:
         a2:1b:bd:eb:2e:01:f3:53:60:45:ea:41:a9:05:6a:77:ec:af:
         5e:d2:b7:7c:d7:cb:d2:fa:04:ee:10:f1:a9:ba:f1:22:eb:25:
         8a:86:41:4a:22:4c:42:ed:fd:8b:de:cb:08:53:b0:98:a9:28:
         1a:a4:3f:37:61:dd:90:2c:1f:35:f3:13:5a:ca:54:04:60:45:
         a7:f0:22:25:b2:9a:6e:68:96:e7:ee:69:7e:db:53:d2:2f:7e:
         d0:69:ad:3d:c4:da:4e:34:eb:b9:e5:d7:27:d0:a0:84:cc:4d:
         74:09:0f:b0:ab:8b:00:1d:98:78:f7:c6:49:d5:6c:fa:cf:03:
         3b:d0:f4:27:71:8a:fb:2c:95:48:bd:d9:42:d0:fa:9d:4d:54:
         cb:58:d2:f3:2b:0c:e6:88:31:bc:65:97:a5:3b:69:70:51:06:
         e9:8d:8f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:53:34 2026 by rpki-client