This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
File:                     ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft (raw, json)
Hash identifier:          l9x4gXTah9gSMGe+8kKsty0Tigka5RPHeaAT5+8Hvo4=
Subject key identifier:   1F:92:E3:7E:85:28:91:82:BE:24:D1:5C:5C:72:22:D3:29:04:6C:74
Authority key identifier: 8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F
Certificate issuer:       /CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
Certificate serial:       019BD95A0199C027552DD0E968D579657119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
Manifest number:          17D9
Signing time:             Tue 20 Jan 2026 03:01:52 +0000
Manifest this update:     Tue 20 Jan 2026 03:01:52 +0000
Manifest next update:     Wed 21 Jan 2026 03:01:52 +0000
Files and hashes:         1: 9R3X_Fbswyp0dlU7e0jgLCwlRc4.roa (hash: 48MU1qRcOJqUGd4gBSOu3MVRdMSx3ak0Iy7V4C0HIPg=)
                          2: FMytXTkalgyla6hJFj4eKXqjzf4.roa (hash: uaDRTElD/eQeLBmpMs0iWQkiUkgTUHVvQqy46V1pRPI=)
                          3: VfzZLy_qDdGJi9lSEwmjw7oLt5k.roa (hash: 1oHM+ulR5lgMRMtepZExqDQwuwKJ8Qpfg/fB1/zmAX8=)
                          4: ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl (hash: ToysYFWiPcioJv9TyhLq40PgFeNa8zykHdTXtkKEfaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d9:5a:01:99:c0:27:55:2d:d0:e9:68:d5:79:65:71:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3ec0537242f44ce7d5933e9b32204b3f85e99f
        Validity
            Not Before: Jan 20 03:01:52 2026 GMT
            Not After : Jan 21 03:01:52 2026 GMT
        Subject: CN=1f92e37e85289182be24d15c5c7222d329046c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f3:77:22:6b:20:ca:d7:90:9b:6f:dd:b4:eb:
                    5b:d6:97:19:99:67:71:3e:2e:51:26:3c:cf:d4:30:
                    bd:ce:43:cf:b8:24:90:e5:63:aa:9b:ba:d7:be:2b:
                    73:68:06:22:8c:64:af:94:d4:e8:e0:10:ac:62:59:
                    ea:0f:3d:35:20:dc:90:73:72:68:8e:f2:bb:e1:85:
                    8b:c1:dd:10:5e:db:04:d8:e2:17:c4:71:42:b7:bd:
                    83:fd:dd:4f:4f:7f:bc:69:e8:88:f3:74:35:34:1b:
                    12:a8:ef:66:5d:75:8a:17:ee:b5:6d:71:3f:81:ec:
                    2d:95:af:6c:1d:93:22:0d:6f:11:4f:5d:7b:32:b2:
                    f3:85:b7:ad:98:37:9c:2f:c6:22:e3:76:62:13:e6:
                    b6:e7:02:6a:28:c6:62:2d:01:5f:d9:53:32:ba:16:
                    de:4a:ef:3d:d7:f9:e6:a3:d0:79:78:a3:8e:60:db:
                    59:b7:c3:47:a0:68:31:97:29:71:24:75:38:71:e9:
                    bb:7a:ee:7c:6c:d0:4f:d9:6c:77:22:56:d2:1d:7d:
                    36:9f:1f:24:b8:ff:1b:b8:b5:34:df:a8:e4:da:7f:
                    60:29:e5:15:f1:c6:44:fa:0a:f8:4d:70:1a:b5:74:
                    ac:bd:9a:a6:ae:52:6a:0e:c5:f4:bd:1f:68:1b:8a:
                    22:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:92:E3:7E:85:28:91:82:BE:24:D1:5C:5C:72:22:D3:29:04:6C:74
            X509v3 Authority Key Identifier:
                keyid:8A:3E:C0:53:72:42:F4:4C:E7:D5:93:3E:9B:32:20:4B:3F:85:E9:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9eb002-d26a-46d6-9d87-84093061e9ff/1/ij7AU3JC9Ezn1ZM-mzIgSz-F6Z8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:88:dd:65:72:c0:9e:57:ff:9e:51:0e:7b:c6:0a:6e:08:44:
         66:28:bc:fb:a8:1e:56:33:74:11:a4:c0:99:fc:af:35:82:ec:
         64:ca:c1:40:14:0e:7c:54:a7:9a:70:87:20:b4:28:41:d4:7b:
         d6:06:95:51:89:13:e3:9b:8f:8d:ff:cd:42:c1:3a:dd:07:22:
         1d:fe:59:77:ff:0c:3f:7b:fe:88:f1:47:b9:89:0f:b7:a5:51:
         73:1a:d3:55:2e:d2:83:e7:25:71:0f:fc:5d:00:94:1a:df:22:
         44:fc:7a:33:d6:c3:01:fb:c1:d3:eb:c9:0b:62:82:70:bb:af:
         ea:9b:d9:29:bb:35:78:7d:dc:86:e0:1f:fc:ac:21:04:d3:2a:
         8a:47:a6:a0:2b:64:86:83:e6:27:c3:80:b1:ca:fb:8d:3d:3a:
         82:f7:3a:32:17:8c:c0:62:c1:cc:dd:b0:59:fa:cf:70:c9:93:
         33:b4:22:ab:38:a6:65:c1:30:15:94:43:1f:ac:82:e4:66:b0:
         3b:23:e9:ec:3f:c5:41:66:e4:48:1b:1b:8b:87:2c:84:4c:f9:
         20:34:66:62:2c:a1:c3:5e:01:b6:64:f7:fd:7c:0a:ba:a7:71:
         cd:14:e3:4a:2c:e9:a9:cb:60:29:65:17:7d:10:5b:3b:a6:64:
         3f:12:b2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:41:16 2026 by rpki-client