This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
File:                     cVOwKU08jbFTBqsQnVBtp0rnCXk.mft (raw, json)
Hash identifier:          a3WKACvBXxfGPtAPUZW3WvzLLwYyD+gHCg9cyKrIb60=
Subject key identifier:   51:EF:61:E6:6E:3E:0B:7C:1A:95:E4:D9:CB:00:9E:CD:8B:16:94:BE
Authority key identifier: 71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79
Certificate issuer:       /CN=7153b0294d3c8db15306ab109d506da74ae70979
Certificate serial:       019C1D27C81F81F524CF599983947E556CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
Manifest number:          17FD
Signing time:             Mon 02 Feb 2026 07:01:12 +0000
Manifest this update:     Mon 02 Feb 2026 07:01:12 +0000
Manifest next update:     Tue 03 Feb 2026 07:01:12 +0000
Files and hashes:         1: cVOwKU08jbFTBqsQnVBtp0rnCXk.crl (hash: pMfQdhKkTY1WHU7S8uOi1txyx8BDf4eFEX308Cg+POY=)
                          2: uA7Vx2C904r9TfjpNMf_38HK6tA.roa (hash: mh6KzvsWQ7ay62shUSjJavZVXDITnNYoJN+fQex29Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1d:27:c8:1f:81:f5:24:cf:59:99:83:94:7e:55:6c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7153b0294d3c8db15306ab109d506da74ae70979
        Validity
            Not Before: Feb  2 07:01:12 2026 GMT
            Not After : Feb  3 07:01:12 2026 GMT
        Subject: CN=51ef61e66e3e0b7c1a95e4d9cb009ecd8b1694be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:4a:8f:a4:6b:8d:af:5a:93:5c:db:ec:eb:
                    53:61:2f:28:67:7c:88:13:f2:e1:36:56:71:d5:56:
                    f1:69:41:57:94:a6:99:6a:ba:43:6d:44:a8:88:41:
                    af:15:db:59:10:0b:86:46:7a:a6:5c:e4:00:9e:42:
                    34:3c:54:f1:07:75:cd:d9:8c:16:d4:c7:96:c6:ff:
                    4b:43:78:86:56:45:e5:e7:2f:51:b4:57:d9:6f:0f:
                    80:24:ba:1c:77:6b:06:bc:ed:da:8c:10:57:9f:ea:
                    0a:2f:4e:2a:ab:b5:d5:f5:af:94:e3:6f:0c:09:1f:
                    27:f2:ae:87:96:09:f8:8d:1e:73:78:1f:7a:52:f4:
                    03:97:b5:b4:2f:56:86:a9:ad:25:23:3b:aa:c7:92:
                    80:64:99:9c:84:c0:86:96:85:70:0e:10:f0:31:fb:
                    2f:b1:7c:de:58:c5:75:d3:21:30:39:73:e3:e7:a1:
                    91:91:f7:d0:ab:2e:1b:17:44:6c:c9:f1:c1:f2:aa:
                    89:93:f2:cb:05:66:c8:a0:e2:48:72:21:c9:25:62:
                    c5:76:84:43:5a:a8:e9:0b:b5:f2:c7:f8:14:77:d5:
                    41:39:47:d7:3d:27:d8:30:62:89:45:fa:01:1e:ae:
                    dd:75:6f:84:41:a6:e6:02:e7:1f:37:2b:71:1c:73:
                    34:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EF:61:E6:6E:3E:0B:7C:1A:95:E4:D9:CB:00:9E:CD:8B:16:94:BE
            X509v3 Authority Key Identifier:
                keyid:71:53:B0:29:4D:3C:8D:B1:53:06:AB:10:9D:50:6D:A7:4A:E7:09:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVOwKU08jbFTBqsQnVBtp0rnCXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/766e12-9a09-4553-8f62-2294cdda6a40/1/cVOwKU08jbFTBqsQnVBtp0rnCXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:7b:5e:18:ac:08:b0:ce:58:c9:c0:fd:8d:84:22:52:b3:d2:
         14:1f:b2:61:89:07:c3:74:27:c4:f6:fd:f1:42:8b:fe:9b:3a:
         ae:3e:9f:fd:0e:02:19:99:c0:a3:95:ae:29:4c:d7:76:41:da:
         14:fe:03:ca:bf:23:39:30:a9:44:b7:f1:d0:f2:8b:b1:42:9d:
         5d:ac:c9:8c:a8:0b:25:62:fc:6a:44:e9:27:af:ec:a0:91:83:
         b0:1a:e7:6b:2f:98:d6:cc:7a:9d:ba:86:98:d0:e0:c2:02:00:
         00:af:a2:6a:1a:d1:f6:3f:5a:a4:55:7e:e2:50:44:dd:b2:28:
         68:9d:8b:0c:9e:5b:46:1b:0d:4b:df:5d:91:9c:6b:4a:ef:37:
         05:6f:e6:5c:bf:e5:99:4d:5b:9a:b8:d0:46:b0:01:39:f6:b3:
         ac:81:49:88:a2:e7:eb:02:ec:8c:8f:55:23:f6:cb:92:1f:4d:
         05:d9:96:4e:51:ef:f7:ee:ff:3a:d0:ef:d5:e2:8e:c5:a0:e6:
         18:c9:1b:76:f7:61:23:03:45:3d:ea:13:3c:04:ae:46:34:e2:
         b6:a1:64:db:36:b6:7b:46:12:d7:54:53:b6:88:af:37:bc:4b:
         8f:05:07:5a:6f:3f:ef:34:8e:05:39:35:2e:9f:5f:0d:be:68:
         81:8f:39:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 15:57:50 2026 by rpki-client