This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File:                     V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier:          T3QbpSF8ooTHGWRHEgKLBvjVcPq3s00RBh95UkH9QlM=
Subject key identifier:   2C:1D:0B:36:79:4B:AB:80:8D:29:6B:38:A3:68:F9:3F:07:E3:AA:A2
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer:       /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial:       019BFC532F742E0BA1C6610C086438CD372F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number:          17F0
Signing time:             Mon 26 Jan 2026 22:01:08 +0000
Manifest this update:     Mon 26 Jan 2026 22:01:08 +0000
Manifest next update:     Tue 27 Jan 2026 22:01:08 +0000
Files and hashes:         1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
                          2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
                          3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: 7vVwnZGxCX35gedMRUm4EoBmKJvLWoH0QLWDsW3QjJQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 22:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:53:2f:74:2e:0b:a1:c6:61:0c:08:64:38:cd:37:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
        Validity
            Not Before: Jan 26 22:01:08 2026 GMT
            Not After : Jan 27 22:01:08 2026 GMT
        Subject: CN=2c1d0b36794bab808d296b38a368f93f07e3aaa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:30:4a:c9:a7:4b:e4:44:af:a8:9e:de:c4:
                    de:63:10:2d:20:13:1b:87:b0:27:07:6e:fb:26:d7:
                    e5:a5:d3:37:47:3e:90:22:6a:ef:e0:c0:84:5b:5d:
                    a3:ee:81:e6:de:9e:9a:77:c1:0e:e5:cb:83:d9:37:
                    44:12:7b:8d:d9:04:39:44:18:01:7c:3f:0d:ca:a3:
                    2a:db:10:fd:42:22:cf:a9:ab:6a:83:69:23:7c:21:
                    00:a3:56:1b:ab:69:1b:20:e0:29:e7:bf:61:96:21:
                    5f:f8:ed:72:75:a2:77:09:a6:36:f9:c6:e0:98:4e:
                    d5:f2:14:26:0f:6c:0d:68:59:21:11:53:4b:47:b4:
                    1b:b1:25:eb:0c:58:6e:19:36:cf:03:ff:32:4c:94:
                    25:c3:2d:12:c5:46:a4:b2:a2:40:53:11:e1:f0:f4:
                    73:de:83:eb:34:bf:a6:32:77:73:05:86:15:36:64:
                    fd:5d:13:a4:35:b0:3e:e3:c1:e3:b6:10:6d:d0:82:
                    44:bf:a9:0e:fb:f6:49:ae:99:c5:94:3b:8d:49:4f:
                    b4:f7:a1:9d:81:06:5a:c2:10:9a:e7:4f:23:83:f5:
                    b6:39:2c:a1:9a:e1:15:05:45:2f:a6:3d:84:9f:3f:
                    56:68:e9:3c:67:70:14:bd:13:20:31:78:05:b0:d0:
                    1f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1D:0B:36:79:4B:AB:80:8D:29:6B:38:A3:68:F9:3F:07:E3:AA:A2
            X509v3 Authority Key Identifier:
                keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:f2:b3:aa:0f:ab:c6:9e:13:f1:1f:0d:8d:6f:5a:87:a3:7d:
         8a:ce:ef:51:6d:fb:f9:6a:04:2a:94:3e:ba:26:88:57:b8:b1:
         67:8a:ed:c1:6d:32:46:04:a5:9e:5e:33:e0:d8:36:1a:77:9b:
         23:64:07:c1:40:94:f0:17:07:a7:5a:00:e6:da:a6:e9:b6:b8:
         99:e6:02:ac:12:e8:85:76:46:bf:ca:90:6b:e4:5b:cb:83:42:
         b2:7c:24:65:a3:2b:d4:62:c7:bd:b5:05:92:5b:44:e4:cb:49:
         f6:c8:62:ed:71:8f:54:19:5c:6b:fc:42:3f:90:fe:d1:20:35:
         14:33:57:ff:6c:cd:67:1d:59:cc:a2:00:09:31:49:e5:55:87:
         a0:84:a3:d6:06:99:3d:f1:86:38:a0:f9:65:0a:0d:b2:46:25:
         38:2e:80:5f:46:82:e5:9a:bb:f6:70:a0:79:3e:ee:5d:69:3d:
         48:28:b8:08:dd:80:c4:66:e7:ff:b3:98:76:26:9c:9b:0c:32:
         4b:7c:7c:6d:69:4f:31:2c:81:eb:cd:6a:da:36:65:d0:53:b3:
         2c:f9:20:1f:2d:5d:9b:b0:50:06:d3:55:34:2b:b4:96:e9:31:
         74:1d:54:43:ea:e0:f0:5d:68:2e:9f:e0:3c:21:1d:63:5a:61:
         d2:5a:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:29:41 2026 by rpki-client