This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File:                     S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier:          HS5QDb6dGsDZZPsbdUu08fYhGrLl2FnrkIZkfHO7EyY=
Subject key identifier:   9A:DB:DF:ED:5A:D5:8B:F5:6C:6A:2C:95:97:7D:C3:A9:87:7E:08:A6
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer:       /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial:       019BFC1BC5C898839BA88FAE3C07BEC89F71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 21:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 21:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 21:00:37 +0000
Files and hashes:         1: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: LmwlrfiMcPqpl5ccsVgP88BBdqbY5mrjUWHbTleGAaw=)
                          2: WNub_b8gcNqu1fV67q57r6UlmNI.roa (hash: W3o0N676i3NWWAuw5Jf6ypX8jnN/9ihF6+nuITCxXbk=)
                          3: bwdHvKYyhs4Ju5CwlBTPEYm3sCg.roa (hash: J52qNXcYUL8Md7MHBa4Z1H074n+eMZjwdb1rZYRHD/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1b:c5:c8:98:83:9b:a8:8f:ae:3c:07:be:c8:9f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
        Validity
            Not Before: Jan 26 21:00:37 2026 GMT
            Not After : Jan 27 21:00:37 2026 GMT
        Subject: CN=9adbdfed5ad58bf56c6a2c95977dc3a9877e08a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:10:17:64:49:88:8c:c5:50:01:b5:b7:8a:1a:
                    6f:e2:af:5a:e7:22:8b:83:85:07:cb:d4:a5:2f:e0:
                    80:ab:f2:ba:6a:ad:18:61:16:a2:c6:04:16:9e:c2:
                    11:79:c7:a0:0a:09:0d:9d:09:f7:3a:05:87:83:82:
                    9a:00:f4:64:0c:2e:70:c2:8d:70:3a:a8:71:26:25:
                    d4:19:93:51:c3:87:be:e3:12:a5:a1:a5:b3:d6:bc:
                    53:da:5b:9f:af:8f:6f:e9:56:89:fe:f7:02:43:e2:
                    2f:49:9d:38:91:9d:2e:07:9e:41:63:cf:b3:58:b4:
                    cb:4d:79:a6:20:1a:74:17:49:d2:cf:b7:15:6f:6a:
                    a3:44:8d:46:62:c7:b2:c4:27:69:d6:50:df:1c:42:
                    51:b0:83:83:ba:81:28:98:f6:2e:91:d6:36:8e:24:
                    27:38:88:77:e9:cb:00:65:1b:a7:be:11:4e:6c:d5:
                    ba:b8:75:c1:17:34:11:ba:14:41:1f:88:f4:6a:15:
                    0c:55:b4:2c:cf:c7:da:c3:21:c7:6c:30:bc:e7:67:
                    4b:52:cc:08:89:c0:7f:31:80:9f:be:75:61:98:5e:
                    56:b9:97:ff:e1:44:44:1e:47:1f:81:8b:cf:9f:d6:
                    62:e7:ae:db:23:a9:4e:e4:2b:70:61:e7:cd:af:a8:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DB:DF:ED:5A:D5:8B:F5:6C:6A:2C:95:97:7D:C3:A9:87:7E:08:A6
            X509v3 Authority Key Identifier:
                keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:f8:f8:89:f0:16:1d:c1:ae:02:75:ce:cd:ee:3d:17:8c:
         b3:bb:1e:54:ff:59:17:2a:3c:f8:cb:a6:22:c3:d4:5d:88:73:
         e7:42:63:33:7d:05:c0:a7:14:05:7c:45:ab:ca:74:42:b0:7f:
         c5:8e:51:f3:29:8d:41:d1:51:09:de:10:df:07:29:3e:2e:ec:
         41:c6:8b:eb:f5:24:da:17:da:d3:c4:da:f1:27:1d:4c:52:c5:
         c8:16:72:fc:66:2c:c2:6a:3e:a1:f9:48:8d:bb:63:9e:28:83:
         bc:ce:68:d6:11:35:28:25:d4:68:e2:c5:b3:e7:f9:60:e7:24:
         dc:a9:d5:99:58:e3:94:0b:30:96:9c:57:7e:ce:b3:b7:64:ca:
         32:0c:53:7c:3d:4d:df:d7:4f:e3:37:87:15:b9:0d:43:96:99:
         2e:ca:a1:05:f8:68:48:5d:7e:15:af:b6:96:3c:8a:d1:0a:ec:
         85:21:57:da:6a:87:5a:19:b9:03:58:c4:ef:6f:6f:e0:71:fe:
         da:63:bd:28:9e:1b:30:bb:2f:0a:2d:49:49:9b:43:6d:7c:a7:
         be:69:43:c2:b7:be:e3:ac:d5:cf:40:c8:9c:8c:7b:ec:6a:da:
         be:57:fa:0d:8c:f8:6e:3b:d2:40:6d:f5:23:4e:35:d5:59:af:
         07:c2:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:09:54 2026 by rpki-client