This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
File:                     7fVL4bXtX9WS-spGjfERAJXz6go.mft (raw, json)
Hash identifier:          cfI2/RNYOgZL1tNVd+uF9HsQowlckLx2X9xJcvJlaVI=
Subject key identifier:   D4:C2:56:5E:2C:D9:F6:96:FC:F5:7A:B3:C9:71:CC:02:43:46:47:E6
Authority key identifier: ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A
Certificate issuer:       /CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
Certificate serial:       019B9FA0DD94C3CB7618137159E6737231A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
Manifest number:          17BB
Signing time:             Thu 08 Jan 2026 22:01:18 +0000
Manifest this update:     Thu 08 Jan 2026 22:01:18 +0000
Manifest next update:     Fri 09 Jan 2026 22:01:18 +0000
Files and hashes:         1: 1-OuWPae2QmllBKFyaudDbNphGTc.roa (hash: TeZRPwnS84XUZCjrREzBGuK8EpeGGUaXoq1j2Y/fQSQ=)
                          2: 7fVL4bXtX9WS-spGjfERAJXz6go.crl (hash: 7okHtYPr/R4gPepcL537zqG/7dKXCMvr2WXb7Ql9FfI=)
                          3: egw9QX1Wt4p34wD72nrev9Z3xNY.roa (hash: nskdvkCOlHahXUYLR2CJrMUSg+SVahy3tOlmXUVE40k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9f:a0:dd:94:c3:cb:76:18:13:71:59:e6:73:72:31:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edf54be1b5ed5fd592faca468df1110095f3ea0a
        Validity
            Not Before: Jan  8 22:01:18 2026 GMT
            Not After : Jan  9 22:01:18 2026 GMT
        Subject: CN=d4c2565e2cd9f696fcf57ab3c971cc02434647e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fe:13:b3:eb:f7:ff:ef:3c:50:82:d2:08:47:
                    f4:b3:c3:1c:c8:0b:a8:ed:63:7d:9d:a2:59:d5:89:
                    42:1b:0b:63:24:f4:3b:43:c6:e9:b8:08:7c:e4:ea:
                    0f:e0:fe:3c:55:2e:ed:3c:c3:70:18:d7:8e:18:7e:
                    fe:87:b7:b8:a9:a0:a0:67:1e:f6:68:98:61:cc:ea:
                    f5:8b:90:fd:12:b1:69:ca:cd:3b:e0:f8:5e:37:17:
                    00:56:b4:0f:04:4c:82:00:94:22:15:26:5d:91:e1:
                    e7:73:d8:13:7d:a5:4c:7c:12:ed:1a:c8:2c:da:b5:
                    60:9a:00:f8:94:ec:77:26:a3:f9:50:74:1b:45:66:
                    01:9c:31:0d:28:00:cd:58:6f:a6:22:a3:1b:eb:75:
                    45:9e:40:7f:a2:26:2e:f3:3c:3e:64:20:a2:0d:3e:
                    32:b7:97:13:e2:cf:76:78:f7:99:55:07:28:31:e1:
                    1f:bd:8d:9f:29:78:b9:ef:a4:fe:ed:77:a0:b1:67:
                    b9:fa:5b:f4:77:45:0f:e8:d9:d6:85:64:b7:69:f7:
                    24:c8:96:d5:71:65:d8:d2:eb:2f:d8:71:65:76:3e:
                    32:15:cd:2e:3f:28:7e:66:1d:98:c6:13:d5:0e:79:
                    07:52:be:3e:b0:78:6f:59:ea:ed:bd:10:6f:bb:77:
                    37:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C2:56:5E:2C:D9:F6:96:FC:F5:7A:B3:C9:71:CC:02:43:46:47:E6
            X509v3 Authority Key Identifier:
                keyid:ED:F5:4B:E1:B5:ED:5F:D5:92:FA:CA:46:8D:F1:11:00:95:F3:EA:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fVL4bXtX9WS-spGjfERAJXz6go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/40d893-e099-4148-b28e-9e614f4466c5/1/7fVL4bXtX9WS-spGjfERAJXz6go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:fa:14:df:fc:27:ee:97:3b:df:c1:fe:a1:21:b3:26:b7:b7:
         e6:1f:91:a4:ef:f1:e0:44:a1:4f:42:8f:ac:26:3a:45:fe:04:
         8b:63:7c:33:bb:05:ce:e7:92:8f:bc:ad:0c:86:0c:86:40:ad:
         85:81:a2:4f:41:aa:2d:fe:f0:ad:6c:77:23:d8:55:72:f6:9b:
         02:6f:2f:53:31:47:ef:e2:83:91:c5:f1:c9:cc:18:c1:75:f9:
         60:f0:2a:91:7c:70:dc:b3:79:85:07:6a:dd:47:98:96:e1:0f:
         81:a9:48:a4:dd:ba:97:3c:8a:a3:12:72:1c:7d:13:e9:35:b5:
         04:6a:c1:d3:e0:28:4e:99:4f:21:e2:35:b7:d8:fb:9d:39:c9:
         02:d0:d0:de:ef:5d:9c:a1:62:1c:4a:a1:28:9a:dd:4e:05:6c:
         7b:ae:72:74:15:d0:76:07:2f:1a:56:91:06:55:d4:f3:42:a4:
         44:3d:7b:b9:21:6c:eb:ef:6e:5c:78:20:62:fe:93:10:00:2b:
         23:c0:57:39:69:c0:7e:60:9e:18:42:5a:47:06:ef:9e:5d:5c:
         05:de:0a:17:9b:15:27:c4:52:83:31:53:52:15:f9:e1:c3:f4:
         bd:ad:3e:91:a5:5d:fd:77:12:44:e4:43:ea:aa:6d:1c:64:07:
         c4:55:2d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:53:20 2026 by rpki-client