This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
File:                     iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft (raw, json)
Hash identifier:          pCGf2j91RWTR75jXi/FUG47pXGGhWDHezO6ktHQftJc=
Subject key identifier:   0C:B7:2A:6E:D7:32:0F:81:76:32:D8:9F:6C:74:76:4A:2B:F5:CA:D4
Authority key identifier: 8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8
Certificate issuer:       /CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
Certificate serial:       019BFCF870AB1B89B3200F6E80F04F372B22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
Manifest number:          17F5
Signing time:             Tue 27 Jan 2026 01:01:38 +0000
Manifest this update:     Tue 27 Jan 2026 01:01:38 +0000
Manifest next update:     Wed 28 Jan 2026 01:01:38 +0000
Files and hashes:         1: 1AAfNkOtoDPkV923JU6uKxUBzig.roa (hash: m+bM/ZO45nJYI69NyHTcglKt6eRpdsvdb8DCz1bIBG0=)
                          2: iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl (hash: zWUDWO8mJ6In83PwZVivHKhHHoNEH0AkdGJfNuzKp7U=)
                          3: zCmHEUDwxreVgjHT33MieHTkvHo.roa (hash: GOn7Ax5ilTDC4mIkf7WnEWeisHxiQ0BYABkeo+vnpp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f8:70:ab:1b:89:b3:20:0f:6e:80:f0:4f:37:2b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b0c8d35dd66657bffc90b6ac41600ffa623d5b8
        Validity
            Not Before: Jan 27 01:01:38 2026 GMT
            Not After : Jan 28 01:01:38 2026 GMT
        Subject: CN=0cb72a6ed7320f817632d89f6c74764a2bf5cad4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:40:8f:aa:ce:a2:7a:e2:d8:5f:0c:b6:c2:4d:
                    94:d6:79:bb:46:1e:e9:ec:1a:36:2d:52:b4:80:6b:
                    af:ca:ca:7f:1f:e7:63:fd:51:2d:61:8b:59:b4:b1:
                    ab:d8:fc:df:a8:20:e4:27:04:be:07:24:3e:ac:a8:
                    94:0b:2b:a7:9d:d1:1c:2b:68:e0:70:ce:0c:31:2f:
                    88:bb:b7:aa:77:d4:4a:27:dd:7f:f4:ae:7b:2b:c7:
                    37:6c:6a:1d:40:e9:5b:77:d0:2a:e7:cb:6a:c9:cd:
                    f0:ba:c9:18:30:e1:c2:b5:40:70:2e:0d:e8:cb:9c:
                    84:2d:5a:af:13:9e:7f:7f:94:2b:6e:cf:b2:16:a8:
                    5d:5b:25:04:8a:0c:c8:9d:4f:aa:2f:82:e6:01:c4:
                    d4:b5:d3:81:80:7b:c9:2c:a2:aa:25:9c:6f:12:59:
                    dc:0d:35:b9:07:19:1d:5f:1b:3f:23:94:a6:b8:63:
                    c7:5c:40:15:fe:cb:eb:37:e2:27:c6:7f:3b:3e:b8:
                    f2:85:43:de:34:15:6c:82:41:94:54:65:37:c6:28:
                    05:d0:52:73:6b:0c:66:01:8b:7b:64:9c:ad:43:71:
                    18:66:4d:0c:3a:99:ed:0b:73:df:9b:e6:61:1b:6c:
                    c0:98:93:6d:49:51:24:5c:80:3e:24:b1:67:7a:e6:
                    5b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B7:2A:6E:D7:32:0F:81:76:32:D8:9F:6C:74:76:4A:2B:F5:CA:D4
            X509v3 Authority Key Identifier:
                keyid:8B:0C:8D:35:DD:66:65:7B:FF:C9:0B:6A:C4:16:00:FF:A6:23:D5:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/d28fd4-c368-46b3-a17d-43187e29b0e3/1/iwyNNd1mZXv_yQtqxBYA_6Yj1bg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:dc:aa:78:76:db:40:c4:30:7b:7d:e3:18:62:34:82:97:a7:
         f8:5a:0e:c9:72:8a:c6:e3:b4:cc:24:8a:17:76:e7:35:07:c5:
         df:ad:34:b3:f6:6b:39:39:bc:a9:ef:9d:65:4a:6c:88:41:75:
         0f:57:3e:0c:64:28:da:6a:72:5a:1e:2b:3b:b5:a1:f8:43:5c:
         0e:5d:47:ba:16:1e:2a:68:22:43:04:4e:86:32:ee:a0:25:5d:
         9a:0e:e6:53:53:a6:77:b0:4f:58:32:69:d1:55:c1:be:4f:d4:
         c8:ed:e9:6c:43:63:b6:93:6e:60:11:b1:b8:ad:43:c3:47:74:
         9c:8b:f9:fb:99:2d:d4:fe:25:0d:03:1d:f6:32:14:8e:2f:54:
         3f:a9:2c:fe:ad:59:7c:1f:e2:42:57:2c:7b:ab:4c:f5:51:4f:
         da:83:20:56:2b:d7:d3:df:e7:57:b4:ba:a4:5c:a5:bc:12:75:
         7b:c7:a8:d9:46:11:cb:dd:39:35:6d:fd:6f:ac:01:ed:c9:55:
         2b:d5:59:c8:4c:b7:4e:a6:3d:77:4b:bd:03:ae:d9:c0:ec:f9:
         c2:62:a7:57:24:10:42:21:39:77:62:f9:24:0a:ad:8f:1b:14:
         e2:a1:07:4b:b0:ce:58:af:76:18:de:9b:0f:fe:36:e4:4d:9a:
         64:a6:d6:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:58:41 2026 by rpki-client