This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File:                     fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier:          RGuiPwzN8q7ONwkF9SRIMA0x71NG+IAcvajnbg1290o=
Subject key identifier:   2A:73:90:49:31:D2:2D:3D:9B:F1:1A:32:5B:75:03:95:23:24:BB:84
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer:       /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial:       019BDF92E1FBF81C217DD594255F87242EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number:          1807
Signing time:             Wed 21 Jan 2026 08:01:43 +0000
Manifest this update:     Wed 21 Jan 2026 08:01:43 +0000
Manifest next update:     Thu 22 Jan 2026 08:01:43 +0000
Files and hashes:         1: c6SA4ELuvQVyR9kqQbJTsDZRqHQ.roa (hash: ezdtKJHH/isz/wjoYibJVODc5GKSAIgaQT3pgWHH64M=)
                          2: cA7qo8b7Nox5Eg3ETDI0GHB8bQo.roa (hash: hqs/XnPjGsbh3NQlfcv5MT/Lsf4omMXxdpDxcmlIJnY=)
                          3: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: snH539NcUlRMh6jABugGOGfvbueGD0FlvQUEz0dYiTc=)
                          4: szVJW4BISgtYuolAiNZFY_y2rbI.roa (hash: eLZ4AaO5OF9gS2a9pYE4naluJAqNXcxUNGLK/HZPDBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 08:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:92:e1:fb:f8:1c:21:7d:d5:94:25:5f:87:24:2e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
        Validity
            Not Before: Jan 21 08:01:43 2026 GMT
            Not After : Jan 22 08:01:43 2026 GMT
        Subject: CN=2a73904931d22d3d9bf11a325b7503952324bb84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:16:9c:1c:86:93:58:0c:57:65:1f:67:4b:
                    0a:24:22:6c:b9:9d:fb:eb:7b:0f:e3:50:2c:9e:cb:
                    79:45:81:0d:12:82:dc:b3:4e:2f:76:dd:93:1e:ff:
                    58:88:be:ea:29:5d:35:12:ce:3a:a8:e2:64:81:f8:
                    95:33:31:21:d7:13:81:af:08:92:31:5d:e0:fa:04:
                    a7:54:de:fd:02:06:fc:2f:7e:31:5d:e7:9c:ba:96:
                    6c:6a:97:f8:16:1f:99:fb:a9:cf:87:a7:2e:92:72:
                    7b:c2:9b:b4:7c:ae:bb:56:72:bf:68:74:f1:46:0a:
                    d0:66:d5:a2:88:c4:87:e7:3c:c8:4e:b3:a8:ca:43:
                    f5:99:39:c3:8a:58:c4:46:10:c4:53:9e:4a:3e:7f:
                    5f:11:cb:2e:dc:26:d4:8f:13:66:d6:df:1b:aa:57:
                    d7:03:14:d7:a9:24:ea:81:99:80:78:ed:20:9b:ca:
                    e3:24:85:99:bb:01:fc:1b:25:55:da:62:b5:63:15:
                    3e:58:7b:a4:59:c8:ff:ed:31:7a:f7:1c:ff:9e:64:
                    2f:48:55:e7:20:07:75:39:ce:47:e8:2b:52:50:19:
                    84:0f:51:02:7d:f8:1a:2a:e8:74:12:5a:37:82:cf:
                    e1:b2:87:af:e5:63:ee:f2:e9:cf:be:8d:9c:71:1c:
                    8f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:73:90:49:31:D2:2D:3D:9B:F1:1A:32:5B:75:03:95:23:24:BB:84
            X509v3 Authority Key Identifier:
                keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:2c:de:86:71:69:c6:85:a3:23:d5:bd:3f:8e:f7:4e:6b:ac:
         4b:88:de:23:dd:4c:b9:0f:01:99:19:0a:fd:34:e7:d1:b5:74:
         63:18:a0:07:88:12:21:b1:28:8b:a5:e1:64:57:bb:c4:c1:4d:
         87:1e:c7:6a:af:36:5b:9b:a7:66:a0:e1:b7:f2:42:d9:89:43:
         54:5b:29:59:95:96:0d:bd:e7:86:2d:5f:0d:1b:24:8a:fc:58:
         fc:d8:5b:e3:4a:8a:1f:ab:00:75:ae:6c:74:c0:1c:57:3b:3b:
         0e:08:c3:fc:7b:57:00:13:20:48:22:34:ea:9d:12:56:87:2b:
         a3:dd:6f:84:1f:e6:73:3b:d6:ab:ac:3c:1a:40:48:c7:03:5e:
         ee:1b:21:6e:e4:de:61:75:f3:5e:89:45:cf:44:3d:5f:95:f5:
         04:df:94:1f:e3:8d:c5:63:72:9c:d1:a8:d0:ff:97:dd:da:1e:
         79:4c:02:f2:37:88:80:85:4a:6e:e3:b2:89:e4:33:44:d8:c9:
         5e:23:8d:e3:34:52:9c:8b:16:83:86:5d:38:91:f7:7a:e4:e6:
         9d:f0:35:55:53:19:b2:9e:dc:d3:74:4d:8c:99:8a:e4:72:3f:
         79:45:da:df:79:4a:09:ef:74:da:aa:42:77:4e:6a:ee:64:04:
         93:b5:df:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:44:14 2026 by rpki-client