This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
File:                     1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft (raw, json)
Hash identifier:          EYsdB0LpTwvpmb/HX4HcRp8Xdl0BF0zMyS4v7bVFRQ4=
Subject key identifier:   75:25:31:96:A6:AB:5D:21:0A:FF:34:8D:5D:A0:6A:8F:AA:82:B3:BA
Authority key identifier: D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D
Certificate issuer:       /CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
Certificate serial:       019BFCC0BED825E5C463D5F29D4B70B82B8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
Manifest number:          17F1
Signing time:             Tue 27 Jan 2026 00:00:48 +0000
Manifest this update:     Tue 27 Jan 2026 00:00:48 +0000
Manifest next update:     Wed 28 Jan 2026 00:00:48 +0000
Files and hashes:         1: 1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl (hash: FI6NuuUVOLovBS75G+p2wp/1v6D79Uh3FMlLf0sLYug=)
                          2: tmnSwViCVLidelBADNdfURt7CII.roa (hash: EZOg8tYMcCPNoTuMMDXmPqQVtrqdvty1ZmDsRmkl75Y=)
                          3: zrt9WhsdMf2hq44BDT2v8p4tC64.roa (hash: XpWV8qEFWpFCztfH5cglvBgtoEGZmhv6MMKT5jtMF+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c0:be:d8:25:e5:c4:63:d5:f2:9d:4b:70:b8:2b:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62329d8d7e541953e120fd05f66cc6ebab0684d
        Validity
            Not Before: Jan 27 00:00:48 2026 GMT
            Not After : Jan 28 00:00:48 2026 GMT
        Subject: CN=75253196a6ab5d210aff348d5da06a8faa82b3ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:54:35:13:37:48:2e:19:43:3e:2a:4a:30:69:
                    f0:10:38:0e:12:d3:f8:9a:7e:9f:af:b8:de:94:73:
                    6c:3c:26:0f:d4:8f:aa:78:48:e7:ab:eb:d1:c0:f7:
                    c0:dd:69:5a:d8:31:12:00:ed:90:83:9a:5d:04:5b:
                    d2:a0:e0:24:c1:26:b4:35:86:13:34:a2:bd:4a:81:
                    ef:59:07:51:f9:83:81:2d:f7:c7:bb:2f:7c:6a:ed:
                    95:90:de:10:22:6f:d5:9d:5e:69:7a:24:49:d0:db:
                    ac:25:33:fb:1f:8c:32:a9:c0:1d:b6:5a:b4:78:1e:
                    b6:74:34:f3:12:af:34:e4:f5:bf:7c:77:3f:bc:a4:
                    4c:ba:79:10:b3:22:e9:89:7d:0b:0b:d5:8d:8e:32:
                    a4:3e:6f:b4:71:8b:83:ee:e1:fe:33:b4:37:19:e5:
                    48:65:07:b6:5f:21:df:93:3e:ba:af:2d:ac:50:b7:
                    98:cb:3d:6c:24:19:f2:f2:eb:4d:1e:4c:0e:6f:1a:
                    a6:ee:9a:73:79:1f:c2:48:1b:42:e4:60:03:d3:c1:
                    6a:b4:65:94:6a:48:87:e4:60:c0:64:77:a8:21:4e:
                    4e:5c:c5:e9:64:52:e6:92:90:d4:f4:12:96:fe:77:
                    98:75:13:59:52:45:90:db:a9:32:4f:16:07:e1:91:
                    bb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:25:31:96:A6:AB:5D:21:0A:FF:34:8D:5D:A0:6A:8F:AA:82:B3:BA
            X509v3 Authority Key Identifier:
                keyid:D6:23:29:D8:D7:E5:41:95:3E:12:0F:D0:5F:66:CC:6E:BA:B0:68:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1iMp2NflQZU-Eg_QX2bMbrqwaE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e85180-1910-4c42-a1f5-73202f0e1d03/1/1iMp2NflQZU-Eg_QX2bMbrqwaE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2c:71:66:be:79:8f:1d:74:a9:25:cd:ec:63:d3:df:6b:3b:
         e9:91:d2:9e:2f:6b:9f:67:94:5e:fc:7c:a3:b1:e1:7a:67:6c:
         fd:b9:33:40:74:01:4a:35:6d:af:25:d5:79:fa:52:c7:32:ba:
         b7:06:56:4e:1f:88:1e:19:db:6a:a9:32:05:43:f9:db:c5:6b:
         17:53:5f:ea:b9:f5:5d:ed:ea:79:e9:96:cd:1c:e7:9f:f1:c1:
         46:4b:69:85:7d:88:18:a2:d6:0b:05:66:e0:07:4f:86:23:a2:
         76:a6:db:29:38:4f:42:9d:1e:65:2a:a8:22:5f:39:6a:b3:7a:
         23:2e:8e:1f:b0:5c:2b:8b:f5:6f:c9:bd:d9:28:37:2c:f1:48:
         33:1f:ef:3c:b7:93:bd:3b:d5:35:08:49:e2:cf:81:30:4a:5b:
         b2:ec:b7:f6:86:27:33:d3:b0:a2:be:85:2a:71:35:49:88:46:
         87:9f:e2:91:75:90:90:b5:88:6b:c8:a0:7d:09:ff:70:b2:a0:
         9e:e6:0e:ce:36:f9:34:a2:ab:d5:11:6e:1d:6d:97:07:5c:a3:
         e8:77:80:94:8d:94:eb:8f:f6:57:ae:0f:8f:68:6b:ea:52:0b:
         20:1e:ee:d5:93:75:58:2d:e6:1c:38:92:53:b7:0c:3d:26:50:
         84:fc:16:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:25:43 2026 by rpki-client