This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File:                     FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier:          vTTzufBgbT9gHTvwUSRtjgxMwFP7HnVend/kOno+Xzs=
Subject key identifier:   49:C1:EE:C1:86:6B:31:CE:5D:EF:25:E3:4A:CE:AB:9A:DC:CD:8A:82
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer:       /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial:       019BCF0BE9B78B5B10A5DF4332769E207FB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number:          17DB
Signing time:             Sun 18 Jan 2026 03:00:22 +0000
Manifest this update:     Sun 18 Jan 2026 03:00:22 +0000
Manifest next update:     Mon 19 Jan 2026 03:00:22 +0000
Files and hashes:         1: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: LzAjZn5eqveQOKAydmPrWZ19B5n3E6KfeZdsCTYrh5M=)
                          2: SZG8XeixTaqiVxW5rJUPZ8oUaFs.roa (hash: 1YSVd0Zexb+YYuPe7vCuTagdfSqZISFbptqFWf/HX9o=)
                          3: wpxxQF5AabypL-KTlSZ22CF0FgQ.roa (hash: LcmjGoMQfmQ0l8r/PAIze2pDnlI+sA44Nszwtlprn+0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cf:0b:e9:b7:8b:5b:10:a5:df:43:32:76:9e:20:7f:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
        Validity
            Not Before: Jan 18 03:00:22 2026 GMT
            Not After : Jan 19 03:00:22 2026 GMT
        Subject: CN=49c1eec1866b31ce5def25e34aceab9adccd8a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:91:eb:b1:80:d5:49:b3:55:55:77:a2:7b:
                    a4:14:54:9f:80:fd:64:e2:34:5e:37:cd:ea:3e:54:
                    ef:33:8c:28:22:d1:bf:8d:c8:2c:86:6d:69:72:49:
                    04:b3:57:e7:4d:95:2e:7f:4c:e0:8e:ad:00:b2:2a:
                    48:b2:e1:77:48:5b:b3:51:09:94:0e:72:6e:86:7d:
                    fb:c7:eb:15:c0:12:84:4e:d1:74:a2:06:fe:d3:62:
                    0d:0e:fd:cb:7a:3d:0c:4d:69:e8:1e:09:d0:02:1e:
                    09:b5:b6:8c:40:44:5a:84:ed:7d:26:40:d0:21:0a:
                    92:7a:c8:5b:59:e3:71:a2:68:d0:09:b8:71:26:88:
                    13:0d:e3:6c:cc:35:87:99:aa:d7:ab:5a:41:05:ab:
                    38:0f:73:f8:df:6a:6a:37:d3:0e:76:ff:96:08:6c:
                    7e:a9:75:fd:88:e8:81:22:cc:72:14:97:61:9b:4f:
                    1c:f6:12:02:49:9b:30:6a:4b:c9:c1:56:e1:d6:72:
                    55:87:43:80:d0:5f:09:6e:68:96:a4:24:a9:45:6b:
                    73:fe:a0:b3:1e:19:ec:c3:fb:37:67:f0:b5:37:95:
                    7a:61:2b:fa:23:46:46:44:03:8d:71:3f:5d:44:2c:
                    d1:90:f5:c4:03:b5:9f:ca:91:51:3a:d3:15:6d:1f:
                    4f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C1:EE:C1:86:6B:31:CE:5D:EF:25:E3:4A:CE:AB:9A:DC:CD:8A:82
            X509v3 Authority Key Identifier:
                keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:7e:5e:4e:7d:4f:ff:96:9c:6b:c6:0f:7b:c1:6a:88:35:13:
         28:0c:73:30:77:fa:2d:ba:64:58:c9:bc:ff:54:0a:0a:2c:39:
         51:e2:bf:58:1e:1a:7d:68:db:a3:b3:55:cf:9c:b8:81:94:6b:
         cd:8c:29:6e:bb:74:6d:8f:de:65:d6:5b:0b:6e:20:7e:a6:62:
         f5:a4:27:37:d8:0f:db:20:16:28:93:d0:4e:7c:79:9f:b7:f1:
         fb:56:0e:e9:1e:55:fb:04:0a:34:27:b6:f9:ad:81:1a:2a:ce:
         f1:7e:44:27:15:39:1b:63:fc:e1:58:c1:10:26:29:b0:12:76:
         76:54:5a:5a:94:7a:e8:cf:ae:bf:1a:d9:24:bd:80:28:40:f5:
         de:f1:5a:5e:44:56:5a:e0:a8:28:3b:50:d3:2b:c9:cf:25:82:
         86:60:02:15:98:30:5b:29:b5:97:96:76:f3:3b:13:34:a4:8a:
         f0:85:7a:56:f7:6c:53:6e:23:fc:a3:fe:72:9d:3e:32:8d:d5:
         b4:8b:df:2f:82:f1:ff:32:25:3b:8f:76:80:89:92:b7:0b:9e:
         1d:44:e8:1c:38:38:e2:ba:d2:82:e7:63:75:81:df:af:f8:2b:
         16:e8:91:29:48:db:47:a6:1c:cd:02:18:29:6b:80:2f:bf:28:
         2b:34:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:48 2026 by rpki-client