This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File:                     4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier:          NRYm5HGfDKJoLnTIGJNmBvzoONpNJZMKZ/+1hKKym3k=
Subject key identifier:   5E:39:FA:90:44:7F:CB:0B:C1:90:12:1B:80:C4:A1:C6:26:77:74:9D
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer:       /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial:       019BFB40426C0EAC2B12BE8E022834C52D1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 17:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 17:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 17:00:50 +0000
Files and hashes:         1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: ekwO+pgzPeBTI5/8rN/TH5k2rGnXUwINvOkKwgAvFLM=)
                          2: KUodnXGsFwyNehqN551Z9d54ZJM.roa (hash: 6vmbRe0Gw7jdU6fIKbRaOK9xmSJJHl1pGRS+mY2Td7Y=)
                          3: RxQknk-i6X3uYtHklAq4xTvLElU.roa (hash: e3Fk8UZszFvxL51DyoJ+zqnCymh1Yk5n+ob0FV7BX9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:42:6c:0e:ac:2b:12:be:8e:02:28:34:c5:2d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
        Validity
            Not Before: Jan 26 17:00:50 2026 GMT
            Not After : Jan 27 17:00:50 2026 GMT
        Subject: CN=5e39fa90447fcb0bc190121b80c4a1c62677749d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:d4:cc:51:14:c3:ff:db:74:db:0e:9a:ee:
                    9d:ce:1f:22:bf:63:cc:db:df:39:8e:09:2a:0c:12:
                    41:0a:a1:39:70:cb:9b:2d:bd:15:de:e2:80:57:c8:
                    f4:16:f6:1f:07:9e:b9:64:6e:fd:41:3f:76:de:71:
                    47:59:0e:d1:3f:a0:8f:6f:60:38:8c:f8:5e:e9:86:
                    dd:de:cc:05:27:d4:38:cc:2e:8d:b9:08:71:ff:b4:
                    eb:6f:30:82:7c:93:db:3b:f4:19:c5:c6:0c:a9:a1:
                    24:74:22:8c:5d:59:f4:12:63:b7:2b:87:3f:89:42:
                    a0:4d:ab:11:cd:45:d0:9f:4d:41:ea:00:ed:51:be:
                    f2:04:7c:82:d0:7c:42:61:ad:6e:0c:9d:b7:7b:78:
                    1e:6c:b9:aa:6c:28:94:c2:32:34:6a:d7:5e:0b:2a:
                    71:8f:8e:23:d9:3d:c8:23:03:db:b8:25:e8:08:fd:
                    2d:0d:30:31:fb:a3:3c:70:f4:c6:79:4c:a9:39:85:
                    7b:01:6b:8f:dd:f4:66:a7:a6:5d:34:72:73:b0:d2:
                    6a:40:7e:9f:93:66:51:6c:f6:78:7c:da:12:07:41:
                    f6:ed:21:89:cf:a4:36:f0:ca:25:3a:70:29:86:d3:
                    47:de:07:75:f6:98:a9:8b:6d:e0:7d:d0:b8:a0:91:
                    63:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:39:FA:90:44:7F:CB:0B:C1:90:12:1B:80:C4:A1:C6:26:77:74:9D
            X509v3 Authority Key Identifier:
                keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:42:9f:45:1e:27:86:74:36:1c:c0:e8:7f:53:1d:c2:f6:68:
         a8:ce:57:a4:c7:a6:91:9d:d2:2e:c5:3f:15:0f:55:e4:5f:c1:
         6e:2a:62:d7:61:bf:7b:d2:88:1d:71:e3:5e:2d:de:77:fd:d3:
         97:bc:60:2b:3a:9c:b9:fc:73:09:c3:1f:3f:85:54:bf:e6:e8:
         98:8e:c2:dc:1e:9d:f0:50:55:55:8c:dc:8d:d5:c6:fd:6a:3d:
         68:71:3c:b5:4a:0b:01:77:7f:de:b4:43:ce:a6:df:c7:33:c5:
         ed:d5:41:f5:a0:68:bc:24:21:7a:0b:16:21:0f:7f:5a:43:25:
         b3:4f:02:9b:9e:3f:06:4e:ed:c3:cc:7d:e0:54:fe:f2:70:cb:
         7e:4e:91:15:a2:43:17:cf:7c:36:e0:91:35:60:34:a4:d1:6d:
         3a:6d:dc:ad:e4:6f:ac:5a:b4:3f:ae:63:fb:05:9e:20:75:a8:
         11:20:dc:94:bb:d9:85:55:77:02:03:bb:a1:09:97:3c:bb:53:
         52:c5:d7:33:c4:04:14:1d:8a:cc:e6:93:f3:10:a2:8d:fd:a7:
         f5:7b:51:1b:06:eb:47:ca:2c:37:f1:55:ff:7b:15:84:45:c7:
         ab:99:1b:5f:c1:2e:a3:70:d7:8b:88:a9:0b:d4:d4:f1:d6:6f:
         b5:00:91:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:12:19 2026 by rpki-client