This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File:                     arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier:          ofpkLnNwUprKNEprKuMwX9yR/gnCDJwqgsFuTHver/s=
Subject key identifier:   D6:C4:3E:FE:60:54:03:2F:4A:64:D5:E7:03:3B:85:49:7E:9C:92:26
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer:       /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial:       019C1E7177BDB15D817BAE7D0E8596D357B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number:          17FF
Signing time:             Mon 02 Feb 2026 13:01:18 +0000
Manifest this update:     Mon 02 Feb 2026 13:01:18 +0000
Manifest next update:     Tue 03 Feb 2026 13:01:18 +0000
Files and hashes:         1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
                          2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: nRhkEw9bYb42xkXoDPoliaxRFZdyrUKKIDhbpm4HdpI=)
                          3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1e:71:77:bd:b1:5d:81:7b:ae:7d:0e:85:96:d3:57:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
        Validity
            Not Before: Feb  2 13:01:18 2026 GMT
            Not After : Feb  3 13:01:18 2026 GMT
        Subject: CN=d6c43efe6054032f4a64d5e7033b85497e9c9226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:93:bd:84:ee:70:14:51:1b:88:ca:e1:7e:
                    c7:b4:6c:d0:ec:77:4e:f4:63:75:6f:97:48:37:3b:
                    92:b9:44:8d:2c:5b:01:9d:93:2a:bd:0f:7a:b0:43:
                    ab:ed:61:61:26:45:61:b3:53:c4:2a:ad:d6:41:64:
                    e2:16:f4:7a:08:03:1d:c7:9f:b7:72:fb:fd:04:7e:
                    75:0c:fb:86:fc:0e:97:3e:5e:25:2d:5c:02:9a:7c:
                    99:db:21:ad:23:34:65:f1:10:c3:32:4e:f9:27:d0:
                    93:4c:7d:6c:19:98:85:c4:1a:3b:db:9f:f4:c5:f4:
                    e5:d2:0b:57:1a:49:66:7f:e4:9d:84:bd:bb:25:d0:
                    28:e4:5f:a3:69:66:83:64:54:a0:3e:98:51:9d:b1:
                    52:48:88:82:db:1a:24:03:f3:41:75:9d:aa:fe:8e:
                    87:f6:b3:61:c2:ee:d0:43:dd:28:27:16:25:a2:25:
                    dc:6d:85:47:9a:5a:9f:df:b6:81:3c:10:ae:5b:da:
                    8e:8d:8c:e2:4a:d2:88:ee:fe:0f:26:c0:bf:d0:b7:
                    e9:a9:22:55:e9:47:f4:43:2f:fe:14:3e:d0:96:02:
                    6e:64:80:19:68:16:8f:ea:d4:4a:8a:0c:1c:73:7a:
                    07:a9:43:cb:c1:a3:92:b1:d2:7d:60:cf:24:78:a7:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C4:3E:FE:60:54:03:2F:4A:64:D5:E7:03:3B:85:49:7E:9C:92:26
            X509v3 Authority Key Identifier:
                keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:65:58:4d:0c:f5:d6:18:ba:45:c2:85:ff:ad:7f:a0:9a:7e:
         a4:c9:ba:07:48:1f:a0:dd:46:c5:53:94:e2:96:ba:68:59:5c:
         43:c0:81:2c:24:fb:1b:0d:96:7a:0f:e6:22:c6:c8:44:40:f5:
         80:39:be:60:69:b9:7f:13:0c:6a:79:27:4a:7c:da:f4:a2:fc:
         53:05:d4:fe:6b:97:14:c4:7e:a0:56:fe:b9:02:26:bb:23:db:
         39:6a:d8:a9:96:d4:77:ee:ac:c5:f2:7b:b1:a6:02:f7:fb:66:
         fa:be:d1:01:64:a1:73:6e:e6:4c:9f:0d:e9:c2:bc:ee:e3:cd:
         22:b7:a7:88:75:71:c2:ab:00:d2:da:98:f1:1f:6f:0d:69:b9:
         23:d2:5b:41:9c:ef:fd:b3:2b:67:ec:1d:4c:78:37:0d:2b:26:
         70:6e:d8:ee:c5:b4:9e:52:ed:f1:25:ee:2e:5a:36:1e:32:a1:
         f0:95:4f:83:80:14:16:9c:aa:4b:5c:b4:00:1d:ba:c1:d6:89:
         66:ae:ac:94:97:33:0e:bd:52:2c:81:35:a7:95:99:ac:a0:9f:
         af:e3:c2:93:be:64:56:30:32:b8:62:20:ac:8b:a2:8d:e7:5a:
         23:a4:67:c8:e1:e3:f8:d1:22:4a:33:6e:53:02:98:4e:2a:67:
         4b:4e:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:48:36 2026 by rpki-client