This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
File:                     F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft (raw, json)
Hash identifier:          GKTcoBOZdGYwMKtbAwDxuNv4ehsek+c034sls5lp4qU=
Subject key identifier:   E7:FE:2B:A4:92:28:61:BE:03:16:A1:02:4F:33:8A:95:5F:E0:56:39
Authority key identifier: 17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0
Certificate issuer:       /CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
Certificate serial:       019BFCF79DF800C63A5EA25C7DE9D915BBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
Manifest number:          0564
Signing time:             Tue 27 Jan 2026 01:00:44 +0000
Manifest this update:     Tue 27 Jan 2026 01:00:44 +0000
Manifest next update:     Wed 28 Jan 2026 01:00:44 +0000
Files and hashes:         1: F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl (hash: BrqTw8qsgiquroNoJe9YJxIqpHnCF8WtUcb8yg44k3E=)
                          2: iQGTd2WXoLVwRsQ_8nC_udEAF7E.roa (hash: Xe100ccFvMhNIhN2VUssDCNyo4J+LE95jPp43mX4rJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f7:9d:f8:00:c6:3a:5e:a2:5c:7d:e9:d9:15:bb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175501d93e9b2b1a4fed308e2ae431cc277e69e0
        Validity
            Not Before: Jan 27 01:00:44 2026 GMT
            Not After : Jan 28 01:00:44 2026 GMT
        Subject: CN=e7fe2ba4922861be0316a1024f338a955fe05639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:af:61:b4:5a:a6:a7:7f:7e:72:cd:c7:96:9b:
                    d9:db:43:df:6e:88:9d:4c:ed:3d:f1:0d:14:87:47:
                    bf:d8:87:05:eb:5b:15:2e:b5:60:2c:31:0e:9c:41:
                    38:ed:e1:b5:b4:83:27:5f:f3:cc:a3:8c:9a:46:fd:
                    50:02:b7:ab:68:86:8d:61:9c:5b:c9:9c:5d:9d:1a:
                    b4:d1:1b:48:ec:d0:1e:08:e8:2c:81:c3:60:b0:53:
                    e9:e7:c1:77:9a:ec:52:90:9b:7a:c6:a1:b1:3b:f5:
                    5f:47:57:4f:41:e0:87:2c:05:e2:c3:1e:57:4e:07:
                    36:83:0a:2f:ae:b4:8a:ae:30:06:6f:aa:79:c6:72:
                    6b:ae:69:44:b1:f1:6b:3d:f5:f4:22:c5:06:e3:c8:
                    d9:ae:1f:b7:b6:8c:60:00:59:7e:1f:85:45:eb:70:
                    38:b9:0f:56:5d:08:66:36:1b:fb:d8:91:78:f0:f0:
                    ac:74:93:fa:46:da:28:b3:b6:95:46:28:f3:23:97:
                    5e:cc:66:30:98:79:13:f1:8b:5a:c8:b0:9d:a1:16:
                    a6:61:ee:d4:be:3b:14:f0:7f:7d:c7:00:9d:46:71:
                    fc:0a:eb:b1:c4:c4:70:2b:c3:0e:d7:c7:61:42:50:
                    aa:03:67:66:ba:63:6b:b1:10:13:7d:f1:8a:ff:76:
                    3d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FE:2B:A4:92:28:61:BE:03:16:A1:02:4F:33:8A:95:5F:E0:56:39
            X509v3 Authority Key Identifier:
                keyid:17:55:01:D9:3E:9B:2B:1A:4F:ED:30:8E:2A:E4:31:CC:27:7E:69:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1UB2T6bKxpP7TCOKuQxzCd-aeA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/068191-878d-425c-8993-09b9905d41db/1/F1UB2T6bKxpP7TCOKuQxzCd-aeA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:79:7c:bd:e2:a1:67:22:bf:22:8f:c7:45:57:64:bf:11:68:
         a6:5a:e1:5b:1d:f2:f9:f9:1a:2a:d6:12:4c:3c:93:6a:bd:9c:
         a8:79:38:08:ed:cf:52:ae:66:7f:9c:b4:e1:ca:52:34:cd:c8:
         bb:bd:9e:40:75:c6:21:1d:db:1e:12:a0:6e:ec:97:37:38:70:
         c9:51:c4:c6:dc:cc:ec:3b:93:83:4b:bd:9b:14:bc:52:8d:a9:
         de:e2:ca:27:8d:81:1d:56:bd:50:d9:44:63:45:4a:d9:e7:d9:
         e5:7f:b7:ff:63:c5:1a:4e:f2:34:fb:83:f7:b4:53:19:44:72:
         62:d5:2e:a6:d9:86:6d:0b:2c:35:50:98:46:4d:2b:9e:8a:44:
         a3:95:43:2c:3b:d0:e8:64:9d:23:f2:ab:9b:ea:7b:ae:1f:db:
         e2:5e:42:88:8f:ab:19:25:1e:24:7f:53:bc:36:10:c6:61:a2:
         ae:64:d4:97:19:f1:19:d2:39:ce:28:45:73:20:58:6e:cc:ad:
         06:ed:2e:59:3f:1e:3f:2e:1e:83:63:98:41:c0:a1:43:0e:f7:
         dd:6d:b9:02:7c:a2:36:8b:3d:4e:6f:1a:74:fa:22:bd:b3:9d:
         f5:30:59:b2:04:b8:fb:63:9a:fd:3b:30:0e:d6:87:04:3b:f8:
         80:66:7c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:23:58 2026 by rpki-client