This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File:                     exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier:          RfLykSznuajBpif0Tb28kd0hhIsozxLYc3Ri7B0DdOU=
Subject key identifier:   E7:A4:66:F6:C4:CB:EC:3B:30:DE:B4:C3:28:BE:A5:24:89:20:E4:50
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer:       /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial:       019BFB774EFF049C2753C219C6057A417FAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number:          17F0
Signing time:             Mon 26 Jan 2026 18:00:58 +0000
Manifest this update:     Mon 26 Jan 2026 18:00:58 +0000
Manifest next update:     Tue 27 Jan 2026 18:00:58 +0000
Files and hashes:         1: dHzF4P3tNtzyJNFvhC01ek08kYc.roa (hash: bUI0+2xFTsseXiv/I8zBJZyi3U6hUXamNCOgX/NaEog=)
                          2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: 1Q8l/HMWt1vVORNJ/lcF2XKIkycHBCj+yy0Rhj2miNM=)
                          3: iJCNoTkoUBkVfoOgCHAYe4clnEA.roa (hash: Hly0g7qbNz9e8/TcngsSJ9Ic9Kq0693Z1zASWnuVzzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:4e:ff:04:9c:27:53:c2:19:c6:05:7a:41:7f:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
        Validity
            Not Before: Jan 26 18:00:58 2026 GMT
            Not After : Jan 27 18:00:58 2026 GMT
        Subject: CN=e7a466f6c4cbec3b30deb4c328bea5248920e450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a5:14:b1:24:95:70:ee:c9:3d:17:fc:e6:56:
                    d9:01:07:9d:9e:5a:ca:82:64:2c:a4:06:ca:dd:57:
                    8a:be:67:ef:e6:f0:af:48:02:60:9b:c5:14:7d:6c:
                    a4:bc:aa:11:03:04:83:ae:ac:cc:be:f9:3d:33:eb:
                    93:32:7d:a1:d3:48:13:96:85:12:99:3f:33:a0:56:
                    30:a4:e3:2b:ef:7a:51:0a:95:d3:9a:9e:35:99:07:
                    35:de:78:07:b2:ce:36:e5:3a:28:ee:95:f8:a8:22:
                    33:98:e5:cf:2b:06:4c:31:89:80:f9:d6:e9:3b:6f:
                    97:28:73:21:e3:7f:f2:2c:4b:e7:d8:a1:f9:61:58:
                    81:96:27:75:50:a1:0b:fc:d9:4e:f8:36:23:e5:24:
                    90:30:1d:28:6a:e8:ab:bc:45:dc:de:a2:5d:37:e7:
                    ff:24:cb:f1:1e:b5:ee:61:ab:15:69:83:f8:b6:42:
                    76:77:c3:bf:c0:8e:09:ba:06:59:1a:42:7d:57:a0:
                    ac:3b:aa:21:28:40:5d:81:58:4c:fa:e6:92:33:9a:
                    97:2b:5b:e9:32:9a:bc:b1:c0:33:2b:70:28:4b:62:
                    d6:a6:1a:e9:8d:35:ff:21:2d:a4:16:87:a5:f1:50:
                    82:53:7b:74:cb:6d:13:42:cb:ca:89:e4:e4:3b:62:
                    d6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A4:66:F6:C4:CB:EC:3B:30:DE:B4:C3:28:BE:A5:24:89:20:E4:50
            X509v3 Authority Key Identifier:
                keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:0d:ff:4d:f8:59:f0:2b:0b:e3:f7:03:36:1f:9f:35:7f:
         22:b9:05:a9:59:79:d1:72:97:5f:91:38:7e:f4:61:17:d7:9b:
         58:5b:99:d4:d6:30:60:64:c6:43:3e:2e:5f:6f:a2:8c:be:88:
         32:52:ce:a9:89:29:51:12:c5:48:a5:63:56:54:94:9c:0c:07:
         49:11:9b:f8:71:3d:92:99:8d:a8:21:dc:19:c7:7f:31:2a:c9:
         c2:ae:67:2b:43:fc:a3:a8:9b:9d:ff:48:ec:d5:be:c5:4a:b9:
         66:4d:29:36:c0:c1:79:f3:42:e3:b0:e8:fa:e3:4c:2c:d7:2f:
         0d:be:e1:a6:d8:b4:5c:2e:5f:c8:48:14:4f:88:3c:7c:90:34:
         7e:ad:e6:db:6d:7b:0b:81:fe:57:cc:8e:11:3f:61:e1:f6:51:
         39:82:63:d1:41:4a:0f:0f:8d:b3:74:97:a8:41:40:fb:3f:a8:
         39:b7:6e:5e:26:64:35:2a:62:ca:bf:34:07:44:4d:b3:aa:88:
         ff:3a:83:83:27:03:3f:ee:3e:4f:b4:27:f0:68:a9:9e:30:ae:
         2c:e1:51:7e:6c:fa:55:ab:3c:50:f0:dd:9e:3f:18:2f:1c:e0:
         ee:1b:3d:6c:79:8a:a2:a1:c4:7c:7a:83:15:6b:42:5d:13:1f:
         4b:d4:d9:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7d07/BJwnU8IZxgV6QX+tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl
YWE4NDIwHhcNMjYwMTI2MTgwMDU4WhcNMjYwMTI3MTgwMDU4WjAzMTEwLwYDVQQD
EyhlN2E0NjZmNmM0Y2JlYzNiMzBkZWI0YzMyOGJlYTUyNDg5MjBlNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKUUsSSVcO7JPRf85lbZAQednlrK
gmQspAbK3VeKvmfv5vCvSAJgm8UUfWykvKoRAwSDrqzMvvk9M+uTMn2h00gTloUS
mT8zoFYwpOMr73pRCpXTmp41mQc13ngHss425Too7pX4qCIzmOXPKwZMMYmA+dbp
O2+XKHMh43/yLEvn2KH5YViBlid1UKEL/NlO+DYj5SSQMB0oauirvEXc3qJdN+f/
JMvxHrXuYasVaYP4tkJ2d8O/wI4JugZZGkJ9V6CsO6ohKEBdgVhM+uaSM5qXK1vp
Mpq8scAzK3AoS2LWphrpjTX/IS2kFoel8VCCU3t0y20TQsvKieTkO2LW0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOekZvbEy+w7MN60wyi+pSSJIORQMB8GA1UdIwQY
MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt
ODZkNmMxMzA1MzU3LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3
LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbEgN/034
WfArC+P3AzYfnzV/IrkFqVl50XKXX5E4fvRhF9ebWFuZ1NYwYGTGQz4uX2+ijL6I
MlLOqYkpURLFSKVjVlSUnAwHSRGb+HE9kpmNqCHcGcd/MSrJwq5nK0P8o6ibnf9I
7NW+xUq5Zk0pNsDBefNC47Do+uNMLNcvDb7hpti0XC5fyEgUT4g8fJA0fq3m2217
C4H+V8yOET9h4fZROYJj0UFKDw+Ns3SXqEFA+z+oObduXiZkNSpiyr80B0RNs6qI
/zqDgycDP+4+T7Qn8GipnjCuLOFRfmz6Vas8UPDdnj8YLxzg7hs9bHmKoqHEfHqD
FWtCXRMfS9TZxg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 04:26:26 2026 by rpki-client