This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
File:                     9QVtq7mkcBDNG07ydLw9L0pZ6To.mft (raw, json)
Hash identifier:          2fPaX1L/fs08IdWZJFp06hTQeF/iqmHWH+4zHXaS9Dc=
Subject key identifier:   9D:D6:19:BF:FD:8E:41:46:FC:88:2E:6E:C4:AC:5F:4B:DF:BA:FD:06
Authority key identifier: F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A
Certificate issuer:       /CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
Certificate serial:       019BABDCA5FC71E32D9E8C7B04466161E799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
Manifest number:          17BE
Signing time:             Sun 11 Jan 2026 07:02:02 +0000
Manifest this update:     Sun 11 Jan 2026 07:02:02 +0000
Manifest next update:     Mon 12 Jan 2026 07:02:02 +0000
Files and hashes:         1: 9QVtq7mkcBDNG07ydLw9L0pZ6To.crl (hash: W0P01Na2BQLTFJ8vTTIWFPTukmvWrb/e1Ujr2xt4Q2M=)
                          2: RnRCh1Xrb9yuwaris6_5MCtF1KE.roa (hash: 80wSt9zZDVoZeJMwPuaJTAz1yifqf1crCsttUVlJAD4=)
                          3: u-xiDa9PrBG52ESi9g99XF0w-kM.roa (hash: Gn+0aGT2XxNqhltcQSBQF67cBSHRAted9T1Eep6Q9Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 07:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ab:dc:a5:fc:71:e3:2d:9e:8c:7b:04:46:61:61:e7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5056dabb9a47010cd1b4ef274bc3d2f4a59e93a
        Validity
            Not Before: Jan 11 07:02:02 2026 GMT
            Not After : Jan 12 07:02:02 2026 GMT
        Subject: CN=9dd619bffd8e4146fc882e6ec4ac5f4bdfbafd06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ad:30:d4:6a:26:f3:e0:32:1e:57:76:6e:7d:
                    e3:f5:19:e2:52:75:d3:82:1e:7e:b9:69:b4:b7:89:
                    01:39:7a:10:b6:f6:f8:87:b1:ae:a2:43:75:ce:9c:
                    72:e3:9c:af:48:32:66:fc:df:56:9b:37:8b:42:a7:
                    99:da:e1:c1:00:d5:74:c7:63:0f:06:92:bd:da:30:
                    28:34:11:cb:2b:fe:b0:a7:5d:9f:5d:47:a8:11:0e:
                    ad:f0:02:57:63:86:c4:0e:7c:b3:1a:05:7e:66:03:
                    9b:d0:48:7c:4c:be:3a:5e:6b:c0:16:87:f1:f4:49:
                    01:6a:e6:5c:e5:25:eb:0f:3a:27:d0:fe:97:d6:21:
                    fb:23:d8:f0:2d:73:f1:3e:e8:67:2d:89:71:69:1c:
                    12:ff:aa:fc:ac:a9:76:0f:b0:b2:99:9c:ae:f9:a8:
                    bf:48:44:05:56:a2:e7:ef:68:0e:42:ba:b2:6f:c7:
                    ed:1c:71:d9:2a:a0:eb:51:d9:70:31:11:f6:c4:82:
                    e1:d7:51:2c:15:97:83:fb:43:45:68:a0:0b:ae:8b:
                    b4:6c:de:d4:49:7f:68:8a:cb:43:9a:b1:bd:47:c6:
                    ce:fe:0f:8f:d0:8e:30:8f:1b:6d:49:80:bb:89:fe:
                    ed:0b:99:15:46:d7:2d:a0:d1:3e:86:46:25:0c:0d:
                    3e:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:D6:19:BF:FD:8E:41:46:FC:88:2E:6E:C4:AC:5F:4B:DF:BA:FD:06
            X509v3 Authority Key Identifier:
                keyid:F5:05:6D:AB:B9:A4:70:10:CD:1B:4E:F2:74:BC:3D:2F:4A:59:E9:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVtq7mkcBDNG07ydLw9L0pZ6To.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/0ac463-868c-4115-b583-de0ec76a4672/1/9QVtq7mkcBDNG07ydLw9L0pZ6To.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:91:3b:73:3f:af:18:b8:34:ac:11:7a:ca:1d:d2:92:79:3d:
         90:a7:3a:cd:f9:dc:cb:0e:61:b1:73:a2:f6:27:a9:27:d0:51:
         5b:9a:11:65:21:e3:8b:29:9f:e1:fe:75:fa:40:f6:bf:de:29:
         23:d0:4b:00:79:1d:99:51:4d:72:86:91:a8:af:a5:67:bd:34:
         52:20:f2:3e:66:7b:84:ff:55:29:96:04:56:13:ba:19:30:c2:
         ce:60:b4:8e:c2:e6:80:84:d1:6a:07:e6:ca:6e:83:90:5a:25:
         98:f7:3f:07:f1:95:78:7b:0a:62:d2:22:9a:36:d5:14:28:7c:
         0c:67:36:74:22:20:ca:7a:8e:01:29:da:05:c8:a3:11:27:aa:
         fc:f0:0d:ff:b1:ee:e2:ee:d6:93:74:69:8e:fb:c1:73:2c:b5:
         b5:83:11:2b:fe:34:d9:ad:8d:4a:ec:c8:79:d4:95:2a:6a:20:
         15:87:c4:6f:2a:1b:81:36:dd:b1:c2:07:29:f9:b4:d4:7f:9d:
         8e:e1:3c:23:f1:ca:c3:c6:f2:ee:b1:c4:43:a7:cc:3a:68:33:
         db:ec:7e:8b:94:05:79:ba:cd:f2:ab:b8:d6:59:2c:a6:f3:16:
         a8:d1:88:fc:3f:23:0e:28:72:8d:9e:dc:cf:d9:90:42:11:84:
         02:99:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 16:06:39 2026 by rpki-client