This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File:                     F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier:          sQJKk6Yv0wrle6yfY9duUkX5YPNXtDhROKDvHPSl2No=
Subject key identifier:   5A:8A:B7:EC:16:E4:8F:26:58:80:91:BC:1D:9F:C8:C6:E2:44:54:D0
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer:       /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial:       019BFE786CCF48BD5441255CD583E35C2586
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number:          94
Signing time:             Tue 27 Jan 2026 08:01:03 +0000
Manifest this update:     Tue 27 Jan 2026 08:01:03 +0000
Manifest next update:     Wed 28 Jan 2026 08:01:03 +0000
Files and hashes:         1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: GfRgLrk5tSq0n1RBHDtLhwuajz3y4fMjRM9p/DlleCQ=)
                          2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 08:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:78:6c:cf:48:bd:54:41:25:5c:d5:83:e3:5c:25:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
        Validity
            Not Before: Jan 27 08:01:03 2026 GMT
            Not After : Jan 28 08:01:03 2026 GMT
        Subject: CN=5a8ab7ec16e48f26588091bc1d9fc8c6e24454d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:ea:dc:5d:c3:75:ac:10:ef:2d:b7:f3:1c:
                    9a:f4:ca:8a:c9:a4:1a:ef:8b:39:83:40:01:88:8f:
                    9d:1d:9b:91:3d:25:5b:a0:92:e6:4d:91:a4:64:2e:
                    5b:8c:c6:61:88:8b:b0:e0:10:27:c5:6e:a9:1e:21:
                    55:66:4c:b8:63:56:14:c2:f0:f0:f6:09:d5:68:fd:
                    f5:38:d1:27:59:ee:39:61:00:fa:58:87:4b:92:50:
                    98:c2:4a:a8:ed:23:d0:fa:66:03:64:76:6f:37:5c:
                    61:85:e2:0e:01:d4:1a:ea:04:36:7f:89:fc:c3:93:
                    6f:f9:4a:b1:b8:95:e3:7e:97:ba:cb:89:99:29:5f:
                    bc:85:4b:43:eb:25:28:df:60:52:ac:cb:11:8c:17:
                    aa:d5:78:f7:a4:50:29:10:5e:78:ac:e4:ee:54:c6:
                    99:25:06:5f:ce:30:bc:65:a9:0c:fe:46:72:59:0f:
                    4b:36:c8:14:cf:29:c6:ff:5a:74:a1:b2:c2:db:7c:
                    4b:27:f8:a3:33:ac:38:f9:3b:ff:70:6c:e7:62:64:
                    da:de:9c:70:b3:39:5a:9d:6e:dc:f9:80:00:f5:3a:
                    2b:4a:8d:40:a7:90:7f:7f:fc:fc:c1:78:3a:f8:e9:
                    88:89:6c:2e:45:10:f0:e2:ff:bb:f9:af:9e:cc:30:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8A:B7:EC:16:E4:8F:26:58:80:91:BC:1D:9F:C8:C6:E2:44:54:D0
            X509v3 Authority Key Identifier:
                keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c7:7d:b4:41:d2:63:2f:6b:24:57:02:40:93:91:78:9f:ac:
         de:f5:56:b8:7c:db:3b:5f:ca:11:50:7b:fc:ff:90:e9:30:86:
         e9:8a:0d:c2:b0:6a:f0:6d:20:ab:c4:2b:49:a6:f7:c4:c2:48:
         39:e8:53:7c:dc:6d:e4:9b:78:df:95:a2:55:54:68:f4:4b:e2:
         a4:d5:cb:5a:38:5b:b0:4c:a6:0b:db:84:37:2a:d5:32:5f:7a:
         0c:df:95:f2:0c:a1:75:56:03:e9:92:96:d7:25:e8:8e:58:3f:
         4d:42:ae:58:8c:d3:af:e0:18:b7:44:12:c5:d8:9e:f0:2c:bf:
         bf:01:1f:13:92:9d:53:86:27:7f:a4:f7:5c:a3:e2:77:47:a4:
         3b:1f:d1:9a:db:fc:d7:e7:38:be:7d:a3:2c:4f:d7:73:3c:22:
         08:ad:f4:e8:f5:57:8f:4c:3c:78:7a:01:a0:70:cc:11:fa:31:
         26:b5:07:d8:f5:e4:9b:55:7b:d0:1a:c4:3c:7d:86:ae:ed:15:
         e1:86:c7:f9:9b:e8:1d:bd:54:d9:2e:04:fa:d0:c5:51:1a:6f:
         2a:f4:56:3b:16:3b:ac:bd:82:0d:dd:eb:7f:53:bd:ff:a7:f8:
         05:4b:81:64:3c:68:fc:19:ec:52:79:6d:12:60:d4:02:3d:d0:
         7c:43:20:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:52:16 2026 by rpki-client