This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
File:                     61AMkAIyHwOWRYNxC3uqRZc0EhM.mft (raw, json)
Hash identifier:          /TchcQpOIHUiI94StNZAFfqnA9ZOXwJRPfidJZMZtI8=
Subject key identifier:   B2:C8:19:D0:E3:5C:AC:A7:76:AB:E1:64:80:F4:83:6A:12:D3:7E:D3
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Certificate issuer:       /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial:       019BF83EF4C5DD4DF3968588D4D9187DAE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
Manifest number:          17F2
Signing time:             Mon 26 Jan 2026 03:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:33 +0000
Files and hashes:         1: 61AMkAIyHwOWRYNxC3uqRZc0EhM.crl (hash: uypdGmY+48juUYx4L8mHR3j6AyLtKpFS4J0aeEGMj5A=)
                          2: 6SXRvRN9subXAXEQdsDxLyOEe-Q.roa (hash: 6v9+PcdA0J18w45pfjYrxPzjSyJ7JFTWHaytuSr4qJU=)
                          3: bmr462MOzzVfibPxeKpu-EewsJA.roa (hash: CnF+rGIRS/b/VIz1Q6MMhGy+46VVxN260juxQ8X0FSw=)
                          4: xG9W89NLTMo3zDEcMXWD8-7tuik.roa (hash: z2qG6bl0HluFOz/GCJOPJLYtdHcGTOZW8wletJFCQ5w=)
                          5: zhduJ-swFr0LmCkicbzPBV2VmQI.roa (hash: E4NsemPM+y5KCKmOA9mHsx4EyDl+oDm0fe+lJBg6OOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3e:f4:c5:dd:4d:f3:96:85:88:d4:d9:18:7d:ae:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb500c9002321f03964583710b7baa4597341213
        Validity
            Not Before: Jan 26 03:00:33 2026 GMT
            Not After : Jan 27 03:00:33 2026 GMT
        Subject: CN=b2c819d0e35caca776abe16480f4836a12d37ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:04:73:1a:59:48:71:34:82:65:b6:aa:e8:8a:
                    c7:be:fb:1e:54:8b:bf:06:67:0a:c3:fb:cb:35:1e:
                    65:0d:c1:58:30:2c:78:ab:6e:45:bc:91:d0:9e:58:
                    0e:c1:7b:b7:15:51:2e:6a:34:9b:2e:d6:8e:d4:ae:
                    dc:84:a3:13:f3:87:09:75:0b:98:83:d9:08:77:99:
                    b6:11:2b:fc:34:cc:73:55:ee:d8:fa:5e:d4:47:70:
                    47:fe:d5:16:41:38:13:32:dd:a8:1d:96:d4:33:19:
                    03:df:a2:1c:44:f6:85:be:16:de:fa:2f:c4:95:fb:
                    ce:57:10:f6:8f:1c:cc:89:39:78:ef:dd:3d:cb:1a:
                    c2:6d:ec:db:58:c2:1a:cf:0d:65:64:a0:6f:46:ef:
                    e4:e5:83:00:79:26:d4:92:16:1c:e0:98:9b:b9:17:
                    c6:58:1a:bb:5b:a7:ed:1d:bc:9e:75:2c:90:52:bb:
                    1d:82:05:57:77:ff:e5:58:27:17:42:c6:c9:59:61:
                    5b:bf:da:eb:50:7f:40:98:ed:7c:b1:36:07:5b:9f:
                    7b:df:21:61:60:31:3b:d7:3d:40:40:3d:40:4c:3a:
                    41:a8:27:8f:be:7f:ae:7a:ca:2b:7a:c3:c5:b9:3a:
                    51:01:88:85:24:62:d7:17:8a:07:fd:4f:83:12:e1:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:19:D0:E3:5C:AC:A7:76:AB:E1:64:80:F4:83:6A:12:D3:7E:D3
            X509v3 Authority Key Identifier:
                keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:48:3b:a6:88:c3:44:c9:91:f9:16:79:ac:c1:c2:de:ec:4e:
         12:43:85:75:a2:fa:c3:c3:5a:63:50:a8:d8:f6:4a:f5:61:d3:
         34:ef:71:a6:d0:c0:f1:b5:95:61:8c:65:8b:78:98:57:05:a0:
         57:bd:d8:2f:2a:38:86:72:1f:dc:b9:8d:f2:db:52:01:cd:67:
         76:64:bb:4d:f2:dc:51:c5:79:c4:3a:92:1f:82:e8:9a:a1:39:
         3d:e4:00:19:af:95:c7:80:ce:89:9e:8b:13:6c:f8:1e:75:58:
         66:35:50:4d:c0:47:e5:f6:f6:9a:7b:30:05:0a:a1:d8:94:45:
         32:66:01:25:76:e1:a6:0d:b3:2e:10:62:26:a9:b9:25:a0:3c:
         ce:2b:00:c1:87:83:2b:be:3b:a2:a1:f3:23:5e:a4:3b:0e:b2:
         07:2e:4f:6b:6a:fa:ad:bb:48:7e:e9:da:18:6a:96:a2:5e:d7:
         90:8b:05:02:b6:0d:8c:06:e1:f1:72:f6:ed:d0:af:a9:71:d7:
         a4:8a:94:81:b0:6a:c6:70:d9:ff:35:a6:cc:2b:ff:ea:d2:ca:
         48:bc:7a:69:99:5d:73:d3:cb:e2:91:47:a3:33:cb:9c:97:54:
         99:3f:24:33:96:f0:ca:7a:3b:41:42:95:82:9f:7a:c4:5a:2f:
         8f:b6:54:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:51:41 2026 by rpki-client