This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File:                     FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier:          IKKkaaNP+JSN7bX9Uh8Iy5lmn7tH8zsbSeRaxtyUeIs=
Subject key identifier:   13:DD:74:AC:FB:48:B0:63:15:60:BA:A3:DC:CE:EB:38:82:0F:63:30
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer:       /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial:       019BAC81B5A977787DE9F4A7DE2C80A0E676
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number:          17CB
Signing time:             Sun 11 Jan 2026 10:02:20 +0000
Manifest this update:     Sun 11 Jan 2026 10:02:20 +0000
Manifest next update:     Mon 12 Jan 2026 10:02:20 +0000
Files and hashes:         1: 1Cy83jCl7kBGDNxqyufm78TXI0c.roa (hash: FaDgiWoM3k5efyXcsEBG7laf/bYAZ1lac2yh8oD/pOo=)
                          2: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: vQakrhGyM18hIAmwJ1rvLaNO+sZN6jP3ty88VhbM3c4=)
                          3: Gcgb4fKcIntpFBriNxDOmx88O0w.roa (hash: HNBuGy0i9eOtKQLzxEokhQmLu275mcy6wh+QVvZD+oA=)
                          4: sySDvKNNenjKTqJVkF08wLomsjM.asa (hash: +kidr1/LWB3zdQ+Hae9NW1Zctl0LMXwwKKQuCxYbKjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 10:02:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ac:81:b5:a9:77:78:7d:e9:f4:a7:de:2c:80:a0:e6:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
        Validity
            Not Before: Jan 11 10:02:20 2026 GMT
            Not After : Jan 12 10:02:20 2026 GMT
        Subject: CN=13dd74acfb48b0631560baa3dcceeb38820f6330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:a0:1d:dc:26:13:4f:5b:b1:25:1b:f7:2a:
                    d3:d6:f4:5f:9d:3c:af:5b:bb:19:4d:ac:31:75:30:
                    3b:32:6c:8d:f4:c3:f5:55:2a:a6:e6:38:b4:a0:88:
                    5f:b7:c3:f9:2c:9a:c1:fd:4d:79:77:1f:da:4f:1e:
                    48:47:6f:12:c4:7c:cb:5d:59:a3:5b:19:bb:c1:a6:
                    f4:13:a6:34:0b:8f:5f:5f:f0:7f:cb:3d:a9:b2:49:
                    1b:3a:e4:9e:b1:92:89:83:6f:d4:60:ef:9a:01:1b:
                    a3:0d:86:c8:25:86:f9:5b:03:43:43:5a:6d:a1:c4:
                    4a:1d:79:b7:dd:27:bc:16:13:ee:b1:c2:09:69:60:
                    44:40:9d:56:ae:ab:61:25:b0:2b:12:10:21:20:4a:
                    a5:04:44:9f:84:85:9f:d7:d7:a4:68:8a:0b:70:9f:
                    06:50:ef:7b:a8:1f:4d:55:d5:91:51:75:19:08:71:
                    33:e5:b7:ae:eb:b6:1e:1e:28:16:45:00:8f:c1:4a:
                    ce:3c:59:2c:04:c6:6a:26:62:0f:0c:fa:0d:55:9a:
                    ce:82:d3:a3:39:38:4b:e1:d0:35:6f:78:9a:12:3d:
                    ab:7f:30:d0:de:9a:59:d4:a9:d9:a0:2d:31:3e:53:
                    10:a0:31:22:6b:9e:4d:ff:34:0c:60:ca:72:33:b1:
                    95:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:DD:74:AC:FB:48:B0:63:15:60:BA:A3:DC:CE:EB:38:82:0F:63:30
            X509v3 Authority Key Identifier:
                keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:d7:29:47:fc:cf:5d:4b:a8:57:12:57:0c:2d:e1:5f:e7:4b:
         80:fb:23:cc:3c:e0:38:e4:ff:5a:6d:a4:ca:5c:67:98:11:86:
         9f:ba:25:8d:68:29:80:77:d9:3e:72:60:08:4e:b5:a4:2d:d3:
         0c:29:fb:a7:a3:44:ba:8f:69:2c:8e:b6:f3:ac:60:8d:44:78:
         eb:8a:a1:61:97:da:18:2b:0d:b9:67:99:0a:b1:60:89:20:f9:
         df:f3:66:8c:ec:1b:d3:57:bc:30:41:72:2c:d2:a1:01:e9:68:
         db:83:22:0d:f8:4a:8a:f7:e8:21:0a:ae:9f:3c:26:e8:0d:e7:
         c4:c0:9c:94:1a:79:9d:4e:20:df:23:2c:3f:60:2c:14:a2:86:
         a5:33:5a:f6:3c:b9:ad:fd:20:dd:46:0f:d0:9d:64:83:8a:91:
         a4:dc:c5:dd:07:db:d9:5f:bd:a7:2e:4c:cc:7f:39:88:34:83:
         f3:7c:df:63:fc:98:5e:eb:9d:79:eb:1e:c9:e9:5a:3b:33:5b:
         5f:95:4d:65:50:aa:b1:5b:c4:e1:37:78:71:b8:82:fd:58:5b:
         36:c2:28:89:a4:ed:43:14:09:68:7b:0d:4f:f5:24:e1:6c:a3:
         93:61:84:94:2c:5b:f6:58:87:88:8f:cf:76:e5:ad:86:97:a6:
         90:20:85:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 21:03:48 2026 by rpki-client