This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File:                     sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier:          L7VCYwZMagJZxZb4DLWBzpuMbp8IyQK7Kta3BWbcCq0=
Subject key identifier:   00:87:D3:FE:86:E7:C5:49:B5:E1:54:7B:2A:C2:2A:BD:57:B9:91:0E
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer:       /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial:       019BFA2E82DC35AF3A54B697F37975915AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number:          17EF
Signing time:             Mon 26 Jan 2026 12:01:50 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:50 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:50 +0000
Files and hashes:         1: QvWAgIyFSp81QP1TU8EGOihTFps.roa (hash: 0pRqWv7OjhSbMQbgWqXrmBArFyxBxLPUemQb9GCiO7A=)
                          2: TQm8goqjLVI6iJwXimERg01NkD8.roa (hash: Yb9LvZhPI+JqfVckpy3u12GtucpcmDjrrqhMvFWHU9U=)
                          3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: IppLfk9lIgqoLcAWP4fj4JfMzPnckv93nhy5JFueNsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:01:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:82:dc:35:af:3a:54:b6:97:f3:79:75:91:5a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
        Validity
            Not Before: Jan 26 12:01:50 2026 GMT
            Not After : Jan 27 12:01:50 2026 GMT
        Subject: CN=0087d3fe86e7c549b5e1547b2ac22abd57b9910e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:cb:e2:63:10:6d:4e:e6:44:87:17:94:21:
                    72:bb:1a:86:fa:56:f9:56:2b:1b:2e:62:74:dc:bd:
                    5d:b4:33:95:56:33:1b:a2:85:7e:dd:80:97:ba:78:
                    da:65:8e:cd:96:04:2b:de:f8:0a:ce:1e:08:9b:a1:
                    ad:c2:cf:7e:bd:7d:ea:79:52:5f:c8:26:f4:aa:ae:
                    da:70:42:1d:d6:22:ff:2b:20:9d:98:ae:cb:61:41:
                    1b:fe:5e:bc:8a:ac:58:af:1b:84:42:bd:98:87:0f:
                    8c:3f:33:df:5d:a7:f4:3e:8e:1d:39:5b:f7:14:3e:
                    85:ae:af:64:e3:65:eb:37:39:0b:a0:6e:d5:5d:3c:
                    21:6a:bc:e1:4e:f7:df:e5:0e:62:9d:f0:ae:a0:11:
                    e4:07:33:22:a5:9b:fc:bd:c2:4b:08:23:df:02:95:
                    7a:65:2f:89:ff:21:9a:af:bc:4b:96:70:60:f4:05:
                    3d:55:27:94:26:f5:93:21:94:06:ea:30:82:48:4a:
                    f1:8d:fe:de:57:aa:55:0c:35:70:11:5f:ee:cc:b4:
                    b2:22:88:66:51:ae:32:0b:1b:97:2e:13:14:99:24:
                    9b:e3:ea:cb:9b:52:3c:8f:ad:61:35:d5:42:2d:44:
                    8f:67:7f:9a:77:1f:a3:99:fb:fb:f6:2b:c0:80:96:
                    ee:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:87:D3:FE:86:E7:C5:49:B5:E1:54:7B:2A:C2:2A:BD:57:B9:91:0E
            X509v3 Authority Key Identifier:
                keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:80:54:a2:2f:d7:98:07:74:80:b3:bd:a8:dd:ec:8f:af:
         03:60:20:bf:5e:a8:7b:4b:5b:0b:a1:c8:ab:41:93:a2:4b:ff:
         fd:e5:a5:7f:14:a1:c9:5e:1d:63:7c:c8:be:8b:36:63:d9:26:
         d9:e3:bb:27:99:a6:30:2b:f8:8a:ca:17:17:fb:32:44:fa:7e:
         7c:79:9f:60:e5:0c:d8:a0:e9:17:09:6a:b7:e8:06:78:ae:87:
         08:1d:6c:90:b3:44:d4:c6:88:25:7c:ca:80:f3:54:0b:ce:2a:
         6e:7c:90:9a:a8:1e:d2:1a:31:78:68:c9:72:b7:bd:06:6d:4f:
         40:26:b2:66:3c:1a:a2:6d:d1:3e:18:b5:02:8f:bc:ac:64:ed:
         e7:b1:a7:75:cf:69:3f:8c:46:75:b2:18:78:f7:29:01:3d:bf:
         7f:38:36:42:21:00:ec:65:16:e0:c2:52:5f:e6:7e:a6:b5:9f:
         c2:36:a1:1f:e8:ca:b0:95:b2:51:e0:e2:e8:e2:1f:ae:a5:5f:
         20:4c:6d:41:27:6f:74:6e:ab:94:eb:48:13:81:bd:17:35:44:
         18:43:8b:01:f4:91:cf:c4:05:24:25:d7:8c:ee:2b:72:8f:f5:
         0b:c2:e1:b5:65:08:67:b3:ed:94:2d:55:ad:80:28:7b:b3:5d:
         bb:5c:35:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:26:50 2026 by rpki-client