This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File:                     y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier:          e9zDRh32qmT+VXqZXOgQZKD/XtrPqzkKwVGpp201ttU=
Subject key identifier:   BC:12:A2:3E:F0:03:D1:82:EF:B9:38:DB:84:24:D2:90:C7:33:EA:B0
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer:       /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial:       019BFD9CF15C9B29C5F869F193FFB8F96CB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number:          0FFA
Signing time:             Tue 27 Jan 2026 04:01:19 +0000
Manifest this update:     Tue 27 Jan 2026 04:01:19 +0000
Manifest next update:     Wed 28 Jan 2026 04:01:19 +0000
Files and hashes:         1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
                          2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
                          3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
                          4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: 1R6/IQ/wcoEjuPAzRRnzNeedgKrdbEYXACch1clHfK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 04:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:9c:f1:5c:9b:29:c5:f8:69:f1:93:ff:b8:f9:6c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
        Validity
            Not Before: Jan 27 04:01:19 2026 GMT
            Not After : Jan 28 04:01:19 2026 GMT
        Subject: CN=bc12a23ef003d182efb938db8424d290c733eab0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:13:59:7b:7f:a0:0a:ff:44:d7:ba:d9:6b:50:
                    d1:00:67:e8:a1:6d:35:ea:de:3d:bd:c7:cc:27:e5:
                    6d:1b:11:53:84:12:f5:30:4c:fd:df:c2:9c:73:58:
                    93:19:eb:dd:d6:7f:1f:27:0d:53:f4:6d:aa:ca:57:
                    df:94:bf:e0:40:10:63:a4:6f:5a:24:b1:a8:d8:b5:
                    f9:a9:8d:36:b4:c2:71:89:e0:d7:61:b7:06:89:89:
                    70:ac:38:ae:e6:c1:3c:db:6d:15:f5:a2:af:3e:ac:
                    c9:18:10:87:42:39:74:fd:73:ad:9b:df:6d:77:03:
                    ff:ea:28:87:f3:6e:e7:29:d3:d1:a7:67:3f:91:ab:
                    2e:c7:79:53:56:c9:11:f0:e7:d0:cb:b8:1e:53:7d:
                    15:c7:9f:bc:f3:57:95:c0:d2:9c:2b:de:72:77:d6:
                    46:ac:d7:9a:52:32:57:1a:64:64:35:88:23:e9:02:
                    32:6b:51:8c:60:f2:9c:32:15:cc:05:93:93:1b:f7:
                    d5:2f:30:22:9f:a9:3f:74:c4:62:1d:c1:10:c3:6b:
                    23:c1:1d:ff:02:e2:50:e7:cf:07:9e:01:56:aa:f3:
                    55:eb:03:c4:0e:5a:ac:9b:35:b6:7c:ac:5d:f1:41:
                    a2:df:ac:7e:a4:f6:ac:93:35:cb:94:28:ca:95:2d:
                    3a:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:A2:3E:F0:03:D1:82:EF:B9:38:DB:84:24:D2:90:C7:33:EA:B0
            X509v3 Authority Key Identifier:
                keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f2:e8:c1:9f:71:0f:c9:02:1e:1d:39:57:62:34:25:7a:cc:
         03:22:4e:3c:53:70:df:90:fa:d8:d7:5a:6e:0c:6d:05:8a:aa:
         ff:2c:55:ea:09:e6:b3:ca:ae:46:82:ad:51:2a:7e:d1:38:56:
         9c:e0:65:7d:ea:5a:89:b5:4e:af:fd:50:80:3c:d4:04:a9:6a:
         53:65:b0:5e:5c:04:f3:4f:4b:89:61:89:5e:fa:eb:33:e3:5b:
         f4:2e:34:fa:cd:73:a7:d0:4e:89:89:c2:27:2a:c3:ac:aa:4c:
         fe:b9:0d:a1:d5:eb:f1:0d:c9:14:96:bf:65:89:f9:c1:01:53:
         65:b3:e5:e5:77:ed:44:87:5a:83:65:3c:f3:cb:52:20:4e:d4:
         f8:b2:84:cd:be:39:81:08:3e:91:dd:a9:90:5a:4b:f6:8a:97:
         22:72:7d:3a:31:38:df:f2:28:7b:6b:cf:bc:76:06:68:05:a2:
         85:66:59:ea:ac:93:48:fb:e8:d0:ad:77:70:28:92:0d:aa:97:
         6c:a4:11:2e:28:bd:00:82:e2:9d:78:b9:11:40:54:c3:a5:e7:
         b0:2c:9f:75:8b:ee:6f:b0:b8:f2:e7:63:6a:ea:b0:6a:cb:d6:
         80:68:a2:b0:6f:71:1d:bf:c3:43:55:b1:e6:b7:36:ad:cb:7d:
         5d:19:38:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:45:26 2026 by rpki-client