This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          mM5YNwHYLziR/9IaG/YtAGsAl+17Sd9NZHQccBvfS1Y=
Subject key identifier:   D8:C7:1F:B5:68:32:97:3C:F8:DE:4D:6B:8C:F7:84:BB:53:D0:60:B8
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       019BFC8A2DC66F7AC3983F63AF69B24D01E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 23:01:12 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:12 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:12 +0000
Files and hashes:         1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
                          2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
                          3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: ly2nPaFGD4RI9Hu8yx6jKjfeBOwgOZB/Bjvfk1NqM3w=)
                          4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
                          5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
                          6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:2d:c6:6f:7a:c3:98:3f:63:af:69:b2:4d:01:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Jan 26 23:01:12 2026 GMT
            Not After : Jan 27 23:01:12 2026 GMT
        Subject: CN=d8c71fb56832973cf8de4d6b8cf784bb53d060b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:89:43:eb:51:20:80:dc:ef:e0:5a:4b:e1:
                    3e:70:95:87:82:9f:5a:de:a3:e2:a5:55:97:3d:0c:
                    80:d8:59:ff:e9:06:49:ae:4b:fe:b7:7c:5f:eb:4f:
                    99:8c:2b:a1:8f:05:47:00:57:b2:66:ef:7a:b0:51:
                    b0:f8:11:b5:16:9c:bf:57:36:6b:9d:ed:69:58:7b:
                    c3:13:49:69:8a:5d:07:17:c8:97:a0:38:98:cd:4b:
                    2f:8f:ef:d3:4f:c3:5b:c2:f3:53:8f:a4:59:e2:80:
                    c4:d8:a9:ed:f2:be:a7:69:09:9b:3b:c2:0b:e5:46:
                    9b:f7:74:09:97:7d:ee:ef:5c:24:ab:cc:6b:94:28:
                    85:d5:f8:2e:57:9d:3a:a0:35:e2:38:1f:46:ec:81:
                    27:c9:ee:55:8c:82:34:99:ac:15:ee:6a:20:a3:1c:
                    d9:6c:c3:05:2d:57:48:46:24:d2:65:06:6a:fe:1e:
                    26:9d:b0:87:f1:02:5c:73:a3:fb:5e:1f:b8:29:81:
                    db:1b:44:51:47:f4:a4:41:7e:92:ce:5d:78:e5:92:
                    e8:1d:de:17:7c:6c:96:d8:cf:84:0c:c6:bb:45:85:
                    a4:7f:b9:58:80:88:e3:27:bf:21:53:0d:78:64:eb:
                    65:53:8c:9e:05:af:da:62:9f:8e:7e:fd:d6:84:dc:
                    f7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C7:1F:B5:68:32:97:3C:F8:DE:4D:6B:8C:F7:84:BB:53:D0:60:B8
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:19:93:d2:c1:f2:57:d5:42:5f:2c:6a:cc:bc:04:ef:a1:10:
         4a:ce:c3:63:2f:6e:c3:b5:3c:8c:a6:d2:24:05:a8:2c:0f:2f:
         39:81:7d:29:cd:51:d4:fa:74:47:83:4d:a7:97:24:bd:5b:9c:
         7a:68:a9:10:b0:fd:7d:fa:45:04:82:77:8c:ee:18:fd:7c:70:
         91:8d:e8:16:63:8c:64:b5:3a:1c:90:65:a5:31:fe:90:75:e4:
         1b:88:31:67:12:f8:b0:a5:64:8f:ce:8e:11:b3:e2:df:09:0b:
         a8:26:62:4e:66:ae:37:0c:7f:99:62:a5:bf:9c:b2:30:27:02:
         d3:4b:e2:7d:cd:8e:2d:e9:b9:db:7a:1e:59:18:35:a0:79:40:
         8b:7b:35:4d:8c:8b:aa:98:16:cc:e7:e1:9c:58:8d:40:13:1a:
         cd:5e:f4:63:e1:46:3e:13:ce:19:d9:45:78:10:df:73:2f:06:
         38:4d:57:41:12:c9:15:27:82:d8:8e:98:71:64:20:b7:97:01:
         95:b4:c7:38:72:65:78:8e:f3:4d:8c:3e:b6:05:b4:20:ac:cb:
         18:1a:86:21:5f:bc:98:cb:73:2f:0b:33:56:11:3d:f0:ab:01:
         9a:37:79:08:14:4b:ce:91:5f:c6:a4:b9:2a:83:bc:1d:2c:a8:
         59:ed:43:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:21 2026 by rpki-client