This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          crdwg6ggrva/u/vgMdOANVORiZm8GrkgKTzZvwSPVsw=
Subject key identifier:   C7:17:16:B7:A1:26:BB:7E:7D:D1:67:2D:F0:55:31:F1:C2:1A:1E:A9
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       019BC0AC069F4D34CF2A9B60000E02015FE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          15C1
Signing time:             Thu 15 Jan 2026 08:00:57 +0000
Manifest this update:     Thu 15 Jan 2026 08:00:57 +0000
Manifest next update:     Fri 16 Jan 2026 08:00:57 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: Cw9SUPepO6qwGZpTyU4olHgW45m314OX/5cop+blE8A=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Jan 2026 08:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:c0:ac:06:9f:4d:34:cf:2a:9b:60:00:0e:02:01:5f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Jan 15 08:00:57 2026 GMT
            Not After : Jan 16 08:00:57 2026 GMT
        Subject: CN=c71716b7a126bb7e7dd1672df05531f1c21a1ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:76:57:8d:86:54:33:df:23:18:f6:3b:bd:47:
                    f6:30:af:38:8d:f8:ef:54:c8:21:c2:86:8d:46:78:
                    37:15:ff:6c:ae:1e:43:69:94:c9:f4:af:a7:59:3a:
                    c5:e7:f5:28:a4:51:78:21:7f:3a:a4:f1:46:14:41:
                    d2:87:8b:74:54:44:11:f0:eb:19:8c:d3:e6:09:40:
                    6b:30:e8:13:b8:76:18:b5:a1:2d:b3:76:f9:d6:3a:
                    8c:5e:38:ca:d4:69:b0:0a:dc:89:ba:a8:e3:13:ff:
                    b9:75:15:04:d7:2e:36:e9:b7:b7:0f:ba:86:4d:fd:
                    57:04:94:13:66:b5:90:a4:31:bb:f4:04:0a:71:54:
                    4c:13:61:92:fc:83:ee:24:ff:70:7a:20:7d:b6:ea:
                    f5:17:3b:38:1b:c3:dc:67:c0:3b:73:19:c5:46:da:
                    f6:ae:10:c3:0a:ac:89:fc:a1:d6:ff:5f:de:a9:8d:
                    8d:eb:52:13:52:da:50:e2:25:1e:3a:be:a7:d8:93:
                    3d:05:f9:9e:0d:39:af:31:b7:ce:ed:8d:31:a4:b7:
                    61:8c:3d:53:aa:73:4a:e1:c1:8c:5e:05:53:0f:85:
                    7e:92:e0:95:28:27:99:79:dd:c9:70:7f:89:86:05:
                    eb:9a:24:f6:5d:a3:ea:1d:6c:2c:ef:f7:10:5e:5b:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:17:16:B7:A1:26:BB:7E:7D:D1:67:2D:F0:55:31:F1:C2:1A:1E:A9
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:67:ad:74:5c:07:35:ac:1e:c6:3c:55:81:23:fd:c1:bf:bb:
         24:35:e6:e6:42:cb:21:b5:79:3b:53:7a:96:1f:db:0c:bf:9b:
         d3:3c:0e:48:ab:58:b9:d4:0b:53:0c:2e:d4:bf:55:b0:b2:8e:
         3e:22:6b:90:79:7d:c2:0d:cb:4e:9d:e9:a4:ad:2a:47:8a:c9:
         6d:84:57:2e:84:c1:16:99:a4:65:d1:06:fe:11:e0:69:00:fd:
         5e:ee:f4:a8:eb:6b:68:05:87:9e:f0:e6:8f:2c:82:e6:9a:09:
         df:50:f6:03:c3:26:f4:66:5f:6c:53:96:89:41:8d:81:9e:06:
         ba:f5:24:ce:40:86:53:ab:af:5a:8b:1e:b2:96:96:5b:bf:2c:
         0d:a3:d9:fd:0f:f4:2c:5a:e2:ac:fe:8b:0d:b5:c3:81:98:83:
         06:78:72:35:99:10:86:3f:da:a2:25:aa:53:63:1f:39:fe:b0:
         d2:04:25:48:65:3e:bd:01:a3:0a:89:aa:3b:f8:e3:cc:2e:f9:
         e1:7b:d7:cf:fc:58:27:04:b2:ba:8f:fb:20:c3:13:4d:64:bf:
         a2:30:3f:9d:cc:ff:f9:de:db:b7:29:63:58:45:bb:52:2c:1d:
         43:59:4a:3e:5f:29:4e:b9:b6:cc:bd:81:53:ee:1a:25:4a:b7:
         9d:0a:81:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 15 16:21:24 2026 by rpki-client