This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
File:                     1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json)
Hash identifier:          1c+zQxS/UGhE/3HOAvOluzRvwKvU5HpmZCDnXkJjSNg=
Subject key identifier:   4F:2E:47:5A:90:B4:81:DD:F4:96:02:28:16:40:EE:46:CB:EB:61:CD
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Certificate issuer:       /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial:       019BFE78D8BCC6C1BA0910E8E60E6E30FB55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
Manifest number:          17F3
Signing time:             Tue 27 Jan 2026 08:01:31 +0000
Manifest this update:     Tue 27 Jan 2026 08:01:31 +0000
Manifest next update:     Wed 28 Jan 2026 08:01:31 +0000
Files and hashes:         1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: 9XmT/qq/+ZyGraSSIBhYm2+iqAfYugY2iveNcCEw73M=)
                          2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=)
                          3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=)
                          4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=)
                          5: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=)
                          6: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=)
                          7: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=)
                          8: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=)
                          9: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=)
                          10: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 08:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:78:d8:bc:c6:c1:ba:09:10:e8:e6:0e:6e:30:fb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
        Validity
            Not Before: Jan 27 08:01:31 2026 GMT
            Not After : Jan 28 08:01:31 2026 GMT
        Subject: CN=4f2e475a90b481ddf49602281640ee46cbeb61cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:89:08:42:39:3b:b4:59:e1:23:e3:a5:50:
                    ec:65:c9:4e:23:48:fc:ba:ee:7c:c5:a6:92:c7:f8:
                    d2:88:a2:a5:6a:cc:cb:2a:e9:d5:80:5a:cd:e8:ed:
                    e6:35:a0:4d:a8:be:6b:33:90:7e:38:14:3b:c6:f9:
                    54:80:cc:42:38:11:6c:01:94:48:03:3c:86:01:87:
                    5a:25:38:ea:42:8d:7b:d5:b6:a7:ca:08:06:a0:ad:
                    b5:e8:c1:31:d3:2f:ad:fd:f9:39:41:89:d8:0e:d0:
                    42:c9:71:30:4c:88:e7:7e:c7:2e:c8:19:2c:7e:bd:
                    18:60:39:4f:b7:d9:0d:5b:91:ae:09:6c:ad:84:06:
                    37:f5:57:c6:10:58:1f:1b:ee:71:1b:98:38:75:db:
                    5e:8b:b5:c7:79:05:bb:34:bc:f7:f7:43:7e:b7:9e:
                    4f:57:43:ec:d9:59:35:4b:a5:80:b7:f1:ef:e6:c8:
                    c2:0b:a2:ed:6f:2f:9b:bd:07:4b:34:10:74:68:31:
                    6a:94:a1:c3:37:5a:b2:bc:68:db:28:3c:6b:37:0e:
                    b1:00:c4:ad:e2:66:dd:29:fe:02:0e:23:7d:ea:6e:
                    8e:54:c4:0a:35:e4:4f:ae:10:0b:33:36:ee:8b:76:
                    8a:ff:ef:09:ea:00:a5:b9:e6:19:1d:2c:45:a4:41:
                    36:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:2E:47:5A:90:B4:81:DD:F4:96:02:28:16:40:EE:46:CB:EB:61:CD
            X509v3 Authority Key Identifier:
                keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:5c:da:cf:9f:ec:ec:10:6a:73:db:33:1a:96:0e:a3:09:d0:
         84:de:01:59:03:e0:45:71:a8:7e:e9:7c:6b:27:05:15:c1:6b:
         b3:01:e6:e4:83:58:ee:aa:06:4c:98:57:46:37:a6:b5:b2:6a:
         f5:f5:23:b6:85:57:bc:b1:6b:a4:ce:0f:87:89:d3:54:60:31:
         9f:c2:86:d9:82:ac:eb:03:54:98:e1:94:e1:2a:91:7b:7b:07:
         10:39:2c:f0:c4:2b:af:01:36:fc:a3:fe:d8:d5:35:82:3a:33:
         d5:73:88:48:40:f9:ef:e2:85:2a:bf:3a:f3:e1:e1:fd:18:d1:
         6d:a9:71:5e:a1:a5:c8:a3:57:43:52:e9:f8:f5:1b:24:a1:9f:
         e6:e5:70:fc:91:be:b3:d3:86:52:d1:53:54:26:c4:87:86:54:
         b4:61:fd:cc:8c:e0:4d:ee:2b:77:22:b8:3a:2d:b5:bf:fb:9a:
         92:05:fb:54:24:47:f6:79:27:90:14:f6:30:dc:c7:bc:d5:cc:
         01:11:af:8f:8a:3d:a5:f1:91:79:e8:4e:21:05:c5:54:07:82:
         1f:c4:00:25:1a:4c:be:e7:23:d2:57:f9:8c:80:ba:d0:93:a5:
         62:35:e3:ed:98:f4:6f:0e:3b:b1:d0:a1:b3:8a:59:bf:72:35:
         04:4a:5f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 14:58:10 2026 by rpki-client