This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          Jff6RGExzKuMfWx9cl+ufr0jKiihv7s1qADOsPGVpl8=
Subject key identifier:   F5:55:08:75:61:BE:D3:3F:6E:89:76:50:42:AB:B4:AE:3E:06:8B:B9
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       019BDF92EC6015BB7E1DF708813F6B026055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          17DD
Signing time:             Wed 21 Jan 2026 08:01:46 +0000
Manifest this update:     Wed 21 Jan 2026 08:01:46 +0000
Manifest next update:     Thu 22 Jan 2026 08:01:46 +0000
Files and hashes:         1: 02Kwxm94BZ7RAXrgQDrQO6z-3TQ.roa (hash: mn+URibZ+VkSuh5/xjJWoAZ326sPISM/MDnjDXusDEM=)
                          2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
                          3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: Z6dUKbYYNBVvAl3rjGZ65QDUdS+NddWoCv4L2wnFgW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 08:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:92:ec:60:15:bb:7e:1d:f7:08:81:3f:6b:02:60:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: Jan 21 08:01:46 2026 GMT
            Not After : Jan 22 08:01:46 2026 GMT
        Subject: CN=f555087561bed33f6e89765042abb4ae3e068bb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d1:55:36:fb:b1:c7:7e:d7:ab:25:d2:55:3e:
                    8d:f7:2a:24:fc:aa:8e:e6:2a:66:e5:57:2a:be:ed:
                    b4:59:8d:55:e3:d9:f1:e5:8b:c3:5a:a9:ea:a4:e3:
                    74:8d:aa:35:16:76:22:06:58:5d:31:9a:36:fc:52:
                    a7:a7:d1:93:93:2c:a0:b1:8d:d5:cb:97:4c:ea:82:
                    c1:82:51:cf:8d:a3:83:63:37:bf:b5:5a:1e:41:87:
                    63:f6:e5:85:75:96:01:dc:f0:3f:cf:ef:7b:e5:73:
                    2c:80:f6:2c:8f:6d:53:3f:10:d0:6e:54:1c:f9:57:
                    d1:8d:b8:1a:d5:a1:a5:b4:51:51:13:ec:1f:89:68:
                    75:bf:bc:db:1a:8d:ed:ce:3c:1c:5a:36:7c:6c:67:
                    c6:40:69:99:bf:5a:ad:e9:95:6c:1b:20:15:84:17:
                    08:63:d3:34:b1:7d:90:b5:67:da:7f:fe:54:bf:3c:
                    79:d8:1c:39:61:77:6e:6b:0a:92:33:52:32:18:b3:
                    cb:31:e2:65:f4:67:ee:a1:27:ce:b8:20:ce:45:b5:
                    60:ab:15:b1:db:a9:01:4e:e9:c7:4b:b9:23:12:f5:
                    6e:8b:32:ed:a2:46:31:44:7e:18:5a:08:18:b7:5f:
                    b6:96:ac:9e:77:2f:ce:26:e6:50:0a:cc:5b:f4:7f:
                    b1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:55:08:75:61:BE:D3:3F:6E:89:76:50:42:AB:B4:AE:3E:06:8B:B9
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b6:bb:22:c8:e8:87:15:38:53:d0:cc:01:ff:39:42:a2:3b:
         61:00:15:62:27:09:e8:56:08:1b:db:eb:e1:3d:fd:2d:bb:35:
         3c:f2:71:b8:5b:8c:42:e6:f1:fa:0c:f1:1b:92:79:4c:f7:cc:
         56:fb:d2:cf:11:72:76:64:8b:26:74:a4:e8:ac:9f:bc:f5:44:
         0f:49:e0:36:68:4d:40:a5:62:b0:62:65:47:f7:4d:84:96:aa:
         7f:d8:dd:ff:e5:05:de:11:1f:1a:11:02:f9:e1:ef:d5:f5:70:
         67:44:ec:d8:9f:40:5d:9d:51:6a:b0:2c:58:9b:85:0d:1b:90:
         28:de:b4:22:65:79:43:8b:59:1a:19:b3:01:2e:8a:50:9b:a6:
         6d:e5:87:f3:af:3b:2b:b9:7a:ea:2d:72:15:17:82:9a:b3:29:
         48:e8:69:87:20:ae:6b:0f:4b:b9:f1:69:ca:b9:f2:0d:2c:6a:
         d1:d4:85:6a:ec:df:b4:a1:75:e6:3c:82:43:ee:fa:28:56:ff:
         08:11:f5:3d:f9:2a:18:94:76:fd:4f:72:3e:35:6b:df:a7:8a:
         fc:2a:aa:7d:01:5f:31:4a:af:b5:c2:bd:97:c8:c9:17:77:18:
         4a:82:07:e7:bb:d2:32:82:c7:1d:0b:91:6c:e6:96:9d:65:dd:
         2f:ad:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 15:50:48 2026 by rpki-client