This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
File:                     4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft (raw, json)
Hash identifier:          cfqC93QZbr+gvWQTXnniU5wWh2gLHt6FdS8aPX+SBdE=
Subject key identifier:   57:BA:2C:BF:0E:97:CE:3E:A9:41:D5:09:C4:02:1C:44:AA:9D:4E:55
Authority key identifier: E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B
Certificate issuer:       /CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
Certificate serial:       019BD7339FBA85B8C38FE28C41D0874D8F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
Manifest number:          0170
Signing time:             Mon 19 Jan 2026 17:00:42 +0000
Manifest this update:     Mon 19 Jan 2026 17:00:42 +0000
Manifest next update:     Tue 20 Jan 2026 17:00:42 +0000
Files and hashes:         1: 4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl (hash: 6veYW8TSy4y4YSk37/MgGx7yFf5oj+jSBa0uO+wnZXw=)
                          2: LhVZpnJRBB7NrSzWfHHBJ2SG6bU.roa (hash: R8R2deH4wzpQeZtkxO49MWL5HlgBcEV1PZ5wfpJUweo=)
                          3: dEyl1wRLwZD53oaixGSnEJouVpI.roa (hash: GpR9gkiY/09kNYwh3uLXbfU1LJkTwOBwOzQDnF7Ik84=)
                          4: hFB_f-BZ_am25TGtg-kLEdIlptA.roa (hash: NoOMHYbmu75DUl11Vo7jX7dGF5BWLAYsxu8ojOU01yk=)
                          5: lLg_J9YIGk9Bx5020VMchGBjT28.roa (hash: z6BgfhJ3Bk6vD4wjFGLuDISYOvDfTRG5fR6HJauBSGM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d7:33:9f:ba:85:b8:c3:8f:e2:8c:41:d0:87:4d:8f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e22d83b78308d09e65d2150eac1623dee96d4c4b
        Validity
            Not Before: Jan 19 17:00:42 2026 GMT
            Not After : Jan 20 17:00:42 2026 GMT
        Subject: CN=57ba2cbf0e97ce3ea941d509c4021c44aa9d4e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:5d:78:68:51:f2:be:05:7c:77:b6:8a:83:
                    3c:b6:af:ca:13:3e:a4:46:d5:2a:7d:47:24:35:ca:
                    fc:7a:38:56:e6:c4:97:18:91:83:68:30:6b:7d:9f:
                    68:6d:9f:9a:7e:5c:3d:13:b2:85:67:de:a9:27:a9:
                    44:f0:ba:16:13:d0:92:2e:5f:66:55:fe:69:9b:a0:
                    9f:81:7f:51:0a:dd:68:c9:ec:08:82:86:2b:6b:be:
                    f2:55:be:34:5f:ea:f8:e0:a3:d6:86:57:76:10:53:
                    c0:6a:04:38:74:91:99:2c:2b:5a:26:cc:4e:a8:7d:
                    f2:b0:6d:87:16:0b:73:8f:18:6d:17:ee:e0:c8:ef:
                    c5:c1:79:5f:41:a7:ca:5f:69:76:92:05:45:91:c6:
                    fc:3f:5b:1b:91:13:be:59:31:96:91:3a:1d:91:f6:
                    2f:92:76:40:f8:2c:dd:b6:ba:21:9f:ea:a3:6d:ee:
                    5f:bb:ef:e3:ac:60:d2:87:45:83:f9:90:9e:c2:dd:
                    bd:c4:b3:e2:59:44:e1:d0:8d:42:77:1b:14:88:b0:
                    aa:1d:05:7f:b4:25:5d:29:f8:6d:a4:b3:97:90:eb:
                    55:d9:f4:c5:ab:3d:c6:d7:b3:c9:81:25:d1:48:8f:
                    ce:f1:39:62:b9:4a:f8:73:95:23:31:e5:4c:de:8b:
                    41:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:BA:2C:BF:0E:97:CE:3E:A9:41:D5:09:C4:02:1C:44:AA:9D:4E:55
            X509v3 Authority Key Identifier:
                keyid:E2:2D:83:B7:83:08:D0:9E:65:D2:15:0E:AC:16:23:DE:E9:6D:4C:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i2Dt4MI0J5l0hUOrBYj3ultTEs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/18fc14-0877-4fa8-a4a4-603b29fd1a08/1/4i2Dt4MI0J5l0hUOrBYj3ultTEs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ec:b0:dc:b1:0d:2c:19:db:1d:9b:17:96:a0:67:2a:df:95:
         0d:66:ec:5c:b9:7c:19:18:73:b2:79:40:6d:69:db:27:1c:8c:
         46:ec:58:4f:2f:c3:c6:1e:a1:c4:2e:ed:43:1c:1b:50:1d:51:
         26:2e:65:f2:44:74:5d:62:95:94:e8:ee:b2:0f:d3:b1:51:33:
         cd:87:c3:63:72:46:e5:2f:ca:a3:03:21:ef:2a:78:df:ef:73:
         f0:bd:16:51:eb:3d:65:4f:d6:12:da:c2:ee:b7:de:f0:00:55:
         54:68:45:7c:b7:f3:e0:ef:77:a3:11:0b:ce:44:b5:7c:0a:15:
         3f:6a:73:5c:87:9b:a0:cf:07:71:40:44:0b:e2:bc:4b:ba:f4:
         ec:a1:d0:2c:a4:93:bc:aa:82:af:a6:e8:8d:de:ef:64:56:a3:
         39:b5:b0:1d:91:91:14:43:d8:3f:7a:6a:95:1a:f7:d3:f8:cf:
         b5:fc:ef:dc:47:09:db:06:aa:45:b4:73:03:8a:10:af:1b:c2:
         53:d0:fb:6f:7c:a1:d6:58:39:65:9b:98:66:34:b5:5c:ad:0a:
         8d:cc:7e:9a:f0:1e:e1:8e:cc:08:47:16:be:d9:b0:17:96:dc:
         fc:50:c1:c3:8c:71:bb:08:15:1e:46:fb:e8:08:b5:cc:65:e1:
         8d:8c:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 01:55:07 2026 by rpki-client