This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
File:                     are5zuAEMA6v4JvxL8ttod0wpNc.mft (raw, json)
Hash identifier:          OBrr9jCLmCcZ9klq+ZugpWN6D9BLFRsxBkTSaR35SJo=
Subject key identifier:   BF:6F:34:D8:08:A9:FC:81:67:DA:BE:03:C9:97:0E:7F:70:AA:9C:7C
Authority key identifier: 6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7
Certificate issuer:       /CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
Certificate serial:       019BFB0A3729E44C6E5A27C5BB1EE2BDF62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
Manifest number:          17F1
Signing time:             Mon 26 Jan 2026 16:01:48 +0000
Manifest this update:     Mon 26 Jan 2026 16:01:48 +0000
Manifest next update:     Tue 27 Jan 2026 16:01:48 +0000
Files and hashes:         1: T0XlvLPSE0rq8c-N7OAkkhLwUFg.roa (hash: tcM1/9+Y0ysaMgq7228hAfu0hiNGpyhSmSnmef1IcbQ=)
                          2: are5zuAEMA6v4JvxL8ttod0wpNc.crl (hash: 3VtdarUD8BWSx+UiTW7are09RMI0BD1EgHIS5Tvi1R8=)
                          3: uAlfyOgC6lACz_fQjNh5oktGozY.roa (hash: AyHxXbtccjqD9qYxj8NhKDHPVrcTXTiY5Ov+6QmBFbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:0a:37:29:e4:4c:6e:5a:27:c5:bb:1e:e2:bd:f6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab7b9cee004300eafe09bf12fcb6da1dd30a4d7
        Validity
            Not Before: Jan 26 16:01:48 2026 GMT
            Not After : Jan 27 16:01:48 2026 GMT
        Subject: CN=bf6f34d808a9fc8167dabe03c9970e7f70aa9c7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b2:4e:49:77:20:f2:d2:18:d0:81:b1:4e:40:
                    3b:00:66:2d:15:4b:86:63:f7:82:36:ba:61:6f:93:
                    5b:33:a6:59:85:2c:fb:aa:05:32:23:79:15:6f:dc:
                    b6:cf:f0:44:69:10:20:a7:39:83:b8:2b:53:70:ff:
                    11:15:51:24:9a:ce:1e:ad:24:07:4f:d8:41:33:8a:
                    4f:86:e0:1f:b3:c2:81:48:54:fd:39:0a:f4:6a:1d:
                    3a:5d:a6:1f:73:ef:d5:65:98:3a:50:8b:08:3c:93:
                    bf:d2:91:cf:7c:d3:87:65:f7:1c:1a:a9:02:54:9b:
                    58:87:d8:9c:ac:af:f3:47:ed:ac:b3:b3:1a:c3:c2:
                    90:92:2e:cc:8c:ad:1b:5d:b7:f3:93:6a:29:10:42:
                    c1:0a:ef:a4:43:63:00:d2:79:0b:5d:d3:07:94:42:
                    c5:bf:a2:31:ca:c2:dc:63:0e:8d:06:e3:b3:28:15:
                    63:97:76:c2:cb:24:d8:a9:cf:fc:5e:20:de:a3:4f:
                    28:08:96:55:fb:3d:8a:20:ea:10:75:99:fa:0c:54:
                    f6:cb:fd:8c:16:47:9c:66:31:71:8d:e8:74:99:03:
                    61:c1:46:cf:b5:30:2d:94:7d:67:52:e6:b2:fb:c0:
                    4e:94:9b:e3:80:d7:58:33:22:b2:27:f4:a3:2e:88:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:34:D8:08:A9:FC:81:67:DA:BE:03:C9:97:0E:7F:70:AA:9C:7C
            X509v3 Authority Key Identifier:
                keyid:6A:B7:B9:CE:E0:04:30:0E:AF:E0:9B:F1:2F:CB:6D:A1:DD:30:A4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/are5zuAEMA6v4JvxL8ttod0wpNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7d11e2-5274-447e-9fe6-88aa6fd0aa8e/1/are5zuAEMA6v4JvxL8ttod0wpNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:92:ad:eb:73:80:92:0d:26:80:11:5c:6b:b8:bf:f3:91:94:
         ba:85:c2:92:55:07:d2:6a:12:41:1c:87:66:4a:19:a6:19:c1:
         51:0b:99:2c:c4:77:db:88:60:e7:ce:37:8f:87:10:16:27:82:
         1c:61:4e:67:97:e0:0a:55:e7:32:b7:17:5a:2a:5d:12:7a:cc:
         86:02:a8:74:0c:38:ba:64:c2:ac:8a:97:4b:bc:a9:fd:25:ac:
         ee:d3:01:7c:ec:75:ea:59:81:6e:c4:23:66:d5:b3:8a:e6:fb:
         41:91:e9:74:e1:89:5f:08:23:a3:d0:c3:d8:4b:cb:51:38:02:
         f9:ff:76:94:1e:6a:4a:79:c4:c0:ad:1a:1d:60:29:ec:a5:f7:
         2d:a4:00:a2:c9:7d:9d:d5:db:bc:c4:41:20:c0:0c:47:1e:72:
         ba:9b:2a:31:c6:85:76:33:45:94:e5:d6:41:e6:0a:91:d5:c9:
         52:93:3c:5b:7f:ba:a6:c9:eb:68:e3:64:8b:73:21:44:51:27:
         a1:71:9a:02:c1:2e:62:3d:7e:65:15:24:38:89:1d:b0:36:82:
         da:6f:a6:61:6f:5b:fb:40:2a:44:51:c1:ad:2d:c3:0f:13:dd:
         83:3d:d4:33:36:8d:b1:c6:aa:aa:96:f0:21:5b:1a:14:66:25:
         20:e4:1f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:08:48 2026 by rpki-client