This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File:                     tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier:          BPKbQOJ4IGEh7y/WJs2yDPAqrgAaRKbF3BpJ9dn7g0w=
Subject key identifier:   CC:DD:93:96:F3:A3:DC:AC:5C:DE:B7:BE:E3:47:23:8E:33:1E:F9:20
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer:       /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial:       019BF95206031F54F72E7EAACC43CBD0BEB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number:          17E9
Signing time:             Mon 26 Jan 2026 08:01:00 +0000
Manifest this update:     Mon 26 Jan 2026 08:01:00 +0000
Manifest next update:     Tue 27 Jan 2026 08:01:00 +0000
Files and hashes:         1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
                          2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: OFRS6V/Jf2lU4IIKBg/XGIZTnSZEG4Zz2X4gWN1xngU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:52:06:03:1f:54:f7:2e:7e:aa:cc:43:cb:d0:be:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
        Validity
            Not Before: Jan 26 08:01:00 2026 GMT
            Not After : Jan 27 08:01:00 2026 GMT
        Subject: CN=ccdd9396f3a3dcac5cdeb7bee347238e331ef920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:50:03:96:bf:fb:92:fc:6e:e6:00:17:5e:
                    13:7b:47:b8:f8:58:dc:54:52:84:44:cf:37:32:d2:
                    77:4c:75:f1:ec:e9:ab:24:24:03:2f:dc:b5:3a:23:
                    80:80:fd:32:36:3e:03:59:02:0b:25:91:93:65:92:
                    36:af:72:8a:03:91:fc:0c:45:f0:4a:31:19:ef:7d:
                    2e:5f:a5:43:c0:d0:b6:bf:87:d5:d1:bd:2e:65:b8:
                    b8:d8:ca:1c:a0:29:a6:d0:9a:05:fd:0e:2d:39:11:
                    85:6e:59:ff:1d:0d:6e:ac:c8:f1:05:5b:35:9c:f1:
                    90:b7:5d:6c:40:4e:4c:0b:3e:a5:e2:e5:3e:8d:dc:
                    b8:4c:8b:34:45:a7:f9:10:36:f5:75:17:bc:86:90:
                    5b:56:33:18:40:f9:f2:5d:3c:6c:58:78:52:d5:7d:
                    b8:ac:d6:4f:43:e2:c2:c7:ce:79:79:9c:c1:96:8f:
                    45:31:70:12:e4:95:7a:b1:b3:54:73:74:c1:ae:bc:
                    43:59:be:4d:b6:32:eb:f7:88:4d:4b:9c:d4:77:d4:
                    0d:cb:ce:3a:2e:2a:ae:6c:61:8c:58:7b:fe:8f:58:
                    20:9b:53:1e:f6:dc:3e:e1:ea:93:03:ab:49:a6:e2:
                    e3:ec:9b:2e:8f:13:2f:89:c0:72:c7:72:35:52:97:
                    86:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DD:93:96:F3:A3:DC:AC:5C:DE:B7:BE:E3:47:23:8E:33:1E:F9:20
            X509v3 Authority Key Identifier:
                keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:63:10:46:4c:87:00:36:e8:50:2e:9a:ff:d6:18:5f:a0:8b:
         ba:b1:b8:dd:e9:d0:a5:37:87:68:23:1c:72:08:1c:e0:48:21:
         57:90:e7:2a:7c:4c:d4:5c:04:37:67:cb:be:19:63:51:16:74:
         7d:93:6d:2f:3a:14:b8:63:a6:64:bf:16:36:1f:69:26:b7:e7:
         8f:04:f7:ed:68:7d:18:a6:3f:97:84:e6:01:f6:a6:c5:6f:7d:
         a6:16:68:92:e5:92:80:2d:e0:f3:e5:1c:0e:a1:6b:92:87:fc:
         5e:af:23:00:cb:af:16:55:be:52:08:e8:90:3b:47:f9:7d:50:
         61:28:78:cf:a7:d9:58:15:6e:4a:7e:0d:78:8b:32:f4:6c:52:
         f6:6a:58:56:35:bb:45:3a:1a:0b:90:51:56:f4:b8:73:c8:ae:
         3b:99:ff:54:b5:ca:3a:d5:20:17:5a:b2:d4:76:40:87:24:7b:
         6c:f9:03:34:3d:7a:4d:57:b2:71:cd:33:ed:8f:33:cb:9d:ae:
         99:c9:a1:8d:36:c2:1e:df:ed:f3:87:44:84:95:ad:6d:b4:c0:
         4a:b3:48:48:82:5a:04:71:a0:7c:9f:30:48:9f:13:d3:2d:05:
         8b:32:3b:87:5a:e7:a4:58:73:07:6a:67:87:24:81:a1:2f:d1:
         8f:0a:94:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:49:32 2026 by rpki-client