This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
File:                     IfEONEIbr_F01gZ48y-l41zflX4.mft (raw, json)
Hash identifier:          Bn5Y8K3idf/ELSe7qu7LgewHV/2H3/qtuagMxILWj84=
Subject key identifier:   2F:C4:C8:07:8C:AD:33:3D:11:B1:F9:8E:D3:59:00:EE:3E:D4:43:F0
Authority key identifier: 21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E
Certificate issuer:       /CN=21f10e34421baff174d60678f32fa5e35cdf957e
Certificate serial:       019C0556580F95401287E08BA3E95C937F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
Manifest number:          17F6
Signing time:             Wed 28 Jan 2026 16:01:10 +0000
Manifest this update:     Wed 28 Jan 2026 16:01:10 +0000
Manifest next update:     Thu 29 Jan 2026 16:01:10 +0000
Files and hashes:         1: IfEONEIbr_F01gZ48y-l41zflX4.crl (hash: V/JmSMp8t2k00AvLFZ38HjrCf+OIuy7lLN3xi//e97M=)
                          2: LafhCKHDpi4rcNrf71MXyOI1EHM.roa (hash: XF4o9y6gObGTfi54AgBNdRl6bHiMBUPHjzeQ+a3180Y=)
                          3: RM97ggIra4Cqnk_opXca71a_8pU.roa (hash: vJp1dB7WwROzbWvLGcNp8RoRTx3NiiHamzM5eZdu7DE=)
                          4: UkEvL82Ai032M4wv8GxMsbA-KLA.roa (hash: vN3Xhywxjsgx4E5ET3s8qfI05X3umjLYJnDdpjt/QU0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 16:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:05:56:58:0f:95:40:12:87:e0:8b:a3:e9:5c:93:7f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21f10e34421baff174d60678f32fa5e35cdf957e
        Validity
            Not Before: Jan 28 16:01:10 2026 GMT
            Not After : Jan 29 16:01:10 2026 GMT
        Subject: CN=2fc4c8078cad333d11b1f98ed35900ee3ed443f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:05:7e:d8:44:06:0f:cc:da:bf:9b:04:aa:e6:
                    82:33:2a:4d:b9:ae:44:77:6d:f9:bc:e3:23:c4:72:
                    68:cf:ab:b5:1a:8e:7a:2d:7a:d7:8f:17:a6:fb:fd:
                    26:5d:b0:34:3c:cc:36:76:c4:d8:51:c9:0d:72:a0:
                    e6:68:54:aa:6e:31:5b:bf:90:69:c5:4e:63:2a:0b:
                    61:b4:8a:b7:44:90:11:73:25:5a:99:4e:51:88:90:
                    c3:d9:ee:b5:ca:a9:bb:a3:db:c7:82:99:f3:07:5f:
                    bb:7b:49:18:88:a8:ac:39:21:6a:d4:6a:c5:dd:83:
                    63:48:66:f4:63:03:74:98:9b:70:db:4c:61:27:d9:
                    57:08:b6:4f:dc:ce:9b:6f:b2:5a:94:f1:f6:66:8b:
                    83:bc:17:01:df:00:5b:a8:f0:32:39:0a:89:8b:73:
                    78:25:c8:44:33:0f:7c:47:ca:9b:93:f2:e6:61:fa:
                    fb:c4:52:23:b3:18:94:2a:37:a2:a2:61:53:5b:33:
                    b8:b0:db:f1:e0:cc:2d:be:0e:b8:b9:4a:47:c5:1b:
                    6f:e9:aa:8f:a6:fd:11:35:4f:64:ad:a9:7e:ea:50:
                    e2:b9:10:b1:83:54:23:1d:e6:32:ad:f8:72:31:64:
                    25:9e:93:5e:47:c8:74:68:92:13:fc:ec:80:33:17:
                    b7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:C8:07:8C:AD:33:3D:11:B1:F9:8E:D3:59:00:EE:3E:D4:43:F0
            X509v3 Authority Key Identifier:
                keyid:21:F1:0E:34:42:1B:AF:F1:74:D6:06:78:F3:2F:A5:E3:5C:DF:95:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IfEONEIbr_F01gZ48y-l41zflX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/3e7654-5124-4a6e-9497-9a9ed1ef2e8d/1/IfEONEIbr_F01gZ48y-l41zflX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:06:1c:68:95:21:75:73:a0:e0:95:b0:68:a8:02:b2:e9:c0:
         e4:90:e0:2c:a5:f0:42:df:2b:7e:88:b1:93:a4:b2:a6:0c:e0:
         b6:a5:1a:71:21:a7:66:33:d2:1e:ff:98:a5:c3:7a:50:4c:c3:
         1f:0c:56:04:e8:2c:9b:56:ae:bf:50:d7:07:29:fe:e0:b8:48:
         a5:33:ac:ff:70:9d:49:8e:3f:7c:47:be:42:02:d5:18:27:5c:
         65:a9:52:73:36:45:cd:04:84:c6:5f:89:cd:97:68:2f:de:ea:
         57:12:c5:8e:16:12:79:16:50:48:cc:71:b1:4c:5b:77:d8:94:
         ad:a3:53:04:f8:d8:5e:b1:0b:2b:49:ce:09:7d:c9:68:e7:fa:
         0e:37:9a:cd:3e:0c:78:66:39:cd:6f:18:5f:ca:4a:e7:13:bd:
         c3:cd:be:94:49:e4:08:cc:e3:a1:e1:09:43:ec:7d:61:40:42:
         f0:95:7c:48:c1:40:fa:69:15:8c:76:87:b8:9b:76:a7:11:02:
         32:cd:9f:d3:03:11:10:d0:d0:eb:b9:04:26:71:d6:ff:cb:f7:
         ec:34:06:a8:e3:2e:2a:9a:fc:ae:34:ab:47:a5:e7:fd:f9:15:
         42:10:9c:f1:f4:86:a9:02:17:b0:95:c9:b0:93:5c:98:a1:33:
         2d:78:4e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 01:40:26 2026 by rpki-client