This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
File:                     FSdFXqf84Xz9BDGYUljRPga_pzU.mft (raw, json)
Hash identifier:          +xwF8OR1YzeX8lqVxFIWV9d+Yg1QfkhXxntkzkMRCZw=
Subject key identifier:   71:42:75:B5:05:DF:B3:AA:A0:27:08:1B:51:A3:6E:48:62:B5:92:90
Authority key identifier: 15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35
Certificate issuer:       /CN=1527455ea7fce17cfd0431985258d13e06bfa735
Certificate serial:       019B9F6A4D4FC8C91B925171D97598B1FDEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
Manifest number:          1081
Signing time:             Thu 08 Jan 2026 21:01:42 +0000
Manifest this update:     Thu 08 Jan 2026 21:01:42 +0000
Manifest next update:     Fri 09 Jan 2026 21:01:42 +0000
Files and hashes:         1: FSdFXqf84Xz9BDGYUljRPga_pzU.crl (hash: 0cM6Ulm0JwtslyOxBOTmciPqQ0C/cYkZpRKiAb+k6d4=)
                          2: jDnrlpzju9hJvaoQu4OXwOXPSyA.roa (hash: 5ssODwVsvynqY+E+xEJbdKWKWIk6XsrizpcJBHs3DN8=)
                          3: uxvdRH3Lx7ZudvJAlNDH4WnIMb8.roa (hash: 7H1SzU9/jyjG63PZcxwjrSZgzIIH3ECkB+OiPPAHQwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:6a:4d:4f:c8:c9:1b:92:51:71:d9:75:98:b1:fd:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1527455ea7fce17cfd0431985258d13e06bfa735
        Validity
            Not Before: Jan  8 21:01:42 2026 GMT
            Not After : Jan  9 21:01:42 2026 GMT
        Subject: CN=714275b505dfb3aaa027081b51a36e4862b59290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e3:f2:0a:60:4f:68:9e:7c:2e:5b:d5:cd:7c:
                    71:ad:35:28:d6:aa:9e:da:1f:b9:f3:a1:83:4a:79:
                    d9:cd:0e:12:49:1a:be:e5:4f:76:36:7d:27:84:1f:
                    81:ac:1a:b2:f7:63:6f:10:6e:c3:14:8f:9a:d8:14:
                    f0:ba:e8:c5:23:2c:45:76:fb:3c:a3:cb:d9:b8:db:
                    0a:02:73:93:f6:a3:5b:82:64:46:14:51:29:02:61:
                    31:ac:35:45:2c:d8:d3:b3:5f:26:bd:00:9d:bb:40:
                    ce:59:8a:f8:f1:44:ae:b1:29:20:f9:9c:2a:ef:d5:
                    a5:87:46:f0:12:b5:0e:32:f4:61:89:41:00:c3:c1:
                    fa:65:b2:a9:0e:10:32:36:88:94:de:78:94:60:a9:
                    5f:17:9a:15:30:aa:6e:a7:cb:e5:a1:10:49:8a:f9:
                    e5:c7:28:d0:2d:1f:2c:5d:68:15:b1:e8:db:f7:06:
                    cf:38:58:82:f0:12:72:48:c8:bc:83:73:3e:e8:e7:
                    66:db:33:b7:79:66:7e:09:f0:18:9b:16:51:7e:59:
                    de:e3:e3:b3:22:72:26:eb:f7:49:ed:1c:30:3d:1c:
                    14:59:55:db:1d:23:20:a3:55:b4:12:2b:73:26:0a:
                    67:e5:8d:04:d7:76:4c:cd:ad:70:22:c4:10:49:1c:
                    e2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:75:B5:05:DF:B3:AA:A0:27:08:1B:51:A3:6E:48:62:B5:92:90
            X509v3 Authority Key Identifier:
                keyid:15:27:45:5E:A7:FC:E1:7C:FD:04:31:98:52:58:D1:3E:06:BF:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSdFXqf84Xz9BDGYUljRPga_pzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/24c4f6-21ee-4b6b-a945-98f8ccd5db8d/1/FSdFXqf84Xz9BDGYUljRPga_pzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:63:ae:3c:ef:51:b0:e5:1b:a1:84:1a:1a:ed:d7:3b:cb:2b:
         fc:34:e6:f2:a6:1a:11:df:b4:38:ab:e9:25:ad:f0:1e:84:c9:
         fa:ea:cd:3f:64:04:42:84:23:40:2f:8d:27:af:47:b0:d1:98:
         72:9b:9e:c6:95:d8:33:a8:cd:d9:22:5e:81:8a:e8:a4:aa:d9:
         8a:0c:ef:b7:53:7d:86:e8:3a:aa:99:ef:eb:e7:4d:8b:26:9b:
         2c:73:20:8e:50:45:6e:08:dc:3e:5f:04:82:6c:2e:9b:b9:1b:
         2e:41:ef:e6:11:36:5a:be:ad:04:6a:a8:4e:c7:85:d6:ae:48:
         6c:8c:0a:65:2b:02:a7:02:dc:c6:bd:a3:6b:9c:f7:e4:99:0e:
         62:4d:79:78:8d:d4:23:50:18:4e:c0:f6:a9:11:84:63:31:91:
         7c:29:dd:2d:b6:34:7e:e6:66:bf:21:1a:39:29:74:46:90:04:
         7b:9e:4a:7f:a2:8c:02:cf:f9:18:c0:76:fe:6c:a6:ee:68:b8:
         23:c9:12:5e:6c:ca:6f:69:28:fc:77:59:2a:74:a8:8c:d2:c8:
         6e:de:b3:86:e4:a1:32:ee:b2:89:d5:63:e4:69:e0:07:19:c1:
         a7:73:2a:1d:4b:88:97:f9:bb:f1:34:e5:a3:48:90:40:20:af:
         83:99:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:53:18 2026 by rpki-client