This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File:                     S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier:          Ncg91msrme+OG3KDkfNYdmd0YsuuSS0LgNXeocM1r20=
Subject key identifier:   0C:F2:3C:FF:0F:07:33:DE:D9:1B:93:BC:A4:4C:6C:A1:71:5C:E3:30
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer:       /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial:       019C1C83355A5F4DC34E940F04099636358C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number:          17FE
Signing time:             Mon 02 Feb 2026 04:01:26 +0000
Manifest this update:     Mon 02 Feb 2026 04:01:26 +0000
Manifest next update:     Tue 03 Feb 2026 04:01:26 +0000
Files and hashes:         1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: fgg2vbw6h3MEGs3pXn+Z2ZIqD6W46YiNim8e8NkZalY=)
                          2: oVwWnlXDmkKEJPwq_QTywUic6pg.asa (hash: vXDqor38fMbrJg0yNnP/TrAYe/tgp8ecmN/4akEFjw0=)
                          3: rRE5uT2PejBwD4ZCIiKOOxRBbBw.roa (hash: RRythu0hdE7VczlwlFEUnLZKoxWCSbWPkOFFbdjDuKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 04:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:83:35:5a:5f:4d:c3:4e:94:0f:04:09:96:36:35:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
        Validity
            Not Before: Feb  2 04:01:26 2026 GMT
            Not After : Feb  3 04:01:26 2026 GMT
        Subject: CN=0cf23cff0f0733ded91b93bca44c6ca1715ce330
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:42:73:e9:5e:e0:3e:1a:19:e0:65:90:e0:
                    e5:a9:6f:a4:92:0d:80:91:57:58:36:c7:9f:fc:f7:
                    98:5e:97:2b:85:87:6f:33:28:c7:05:df:f2:6c:3f:
                    21:a4:20:6d:57:70:66:05:a9:1b:96:d8:1a:40:78:
                    de:44:7b:37:b4:96:7e:1f:7b:97:22:58:9d:bf:21:
                    e1:29:6a:50:cb:e4:94:6c:77:3f:74:e8:52:87:cc:
                    9f:f1:b2:2c:7f:41:ad:3e:6e:88:cf:71:c6:e4:e0:
                    f6:a0:f7:86:0c:e6:fb:8c:18:fb:80:4d:f3:7c:5f:
                    02:a0:d3:cc:64:22:57:a2:c7:ea:f5:81:a1:48:93:
                    e9:fc:5c:f7:5e:fc:89:b2:58:93:d4:4f:e7:63:1a:
                    2e:d8:27:f7:c8:8e:6a:55:0d:90:5c:22:5b:14:f7:
                    7f:fb:8a:6e:a0:ab:bd:21:3b:23:bc:f8:89:1d:91:
                    06:25:fa:9e:0f:53:cd:57:96:93:56:f9:b3:f9:9d:
                    87:f7:09:27:7c:20:f9:67:ab:55:89:77:38:7c:36:
                    4f:24:56:45:1c:a3:54:11:ff:0e:e2:6e:90:af:c7:
                    50:99:27:2f:3d:64:b5:87:b2:86:dd:ff:7d:67:a5:
                    ac:a1:c7:42:7b:f8:db:1a:d8:89:6f:a6:26:3a:6a:
                    e6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:3C:FF:0F:07:33:DE:D9:1B:93:BC:A4:4C:6C:A1:71:5C:E3:30
            X509v3 Authority Key Identifier:
                keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:1f:2d:06:a2:5f:fe:06:02:6d:7e:5b:5f:9d:b9:7d:57:ed:
         ec:3d:ac:12:a3:3b:5b:8e:fe:a0:20:f1:04:c0:65:40:dc:68:
         bc:97:ed:e6:58:5c:31:38:cd:db:7e:d8:a5:a5:5b:5d:7c:d1:
         29:24:aa:66:12:9c:ea:c9:56:e8:0b:dc:06:07:e7:56:49:eb:
         12:94:63:37:d2:68:6c:73:22:2c:55:de:4f:70:57:ed:53:ef:
         62:67:1b:a5:92:a9:4f:9f:ea:8c:ee:07:75:df:cd:34:52:fb:
         17:7e:07:87:ff:dc:9e:4f:e9:9e:58:bb:60:62:7e:97:35:03:
         b7:84:fd:d6:49:a4:2c:db:81:d7:73:d9:2f:16:95:06:21:1e:
         5a:0e:33:7a:92:88:58:3c:7b:2d:a6:ee:af:9b:ac:41:2e:a1:
         fc:89:d1:ba:19:2b:25:ee:0f:c1:95:83:5c:56:7f:23:77:ff:
         3f:c5:db:73:9a:5c:a0:c1:a2:fc:a9:cb:cb:a2:2c:15:2c:9b:
         ba:d5:25:38:59:dc:f5:49:e1:d8:8d:32:49:8d:bc:1b:f9:11:
         a0:56:89:c8:b4:54:74:18:4e:ab:c1:76:00:79:8f:00:44:6f:
         e8:9d:c1:90:5c:54:dc:6c:2f:ba:fc:4d:ee:f4:35:b3:f0:83:
         64:25:d4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 09:43:20 2026 by rpki-client