This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
File:                     1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft (raw, json)
Hash identifier:          yPoZgiwsNPFlhYfLBhjIkzPqpX6OoYOuuXkMf3TpFNU=
Subject key identifier:   B6:92:C4:E2:83:AE:F5:FD:E8:9B:79:D9:6A:CB:59:C8:19:06:1B:C5
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Certificate issuer:       /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial:       019BFB772DBA1CAB7B3A2EBF27977A2C88F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
Manifest number:          17FA
Signing time:             Mon 26 Jan 2026 18:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 18:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 18:00:50 +0000
Files and hashes:         1: 1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl (hash: XPHZ9R5KEVT+alQbT3mIG99tMYjYfrfqbbgZVZbKtnE=)
                          2: 5a4DGw-2-kfHgsxaKehjNXnuCqE.roa (hash: sUZyzh0MHY05jTMpuhKk6CIitn9nHfz+b8Hqjb1Mmtw=)
                          3: OVwVV0u6mJBhfYtSaY2l0o5kYw0.roa (hash: tx3hkLfc3TC5UcoBMbPeFsEp4hR2aCEn9vjo3l+XOeY=)
                          4: SWXQ_yriq_Z6hdo9s_S-su9IOcY.roa (hash: npoD/pw5DyWoHlNaWh25GF0UUSoDz0q9Mp04Q5//gew=)
                          5: heDTdXiIU3U5I0MIE__M9Lti7cM.roa (hash: znxQVerRqN+xoXF1iL3YCKDXrvt5ZgceZ8vYsUDl8wQ=)
                          6: iZOSPrtVr9oSzB_9S2j4xEXS2ss.roa (hash: nZdp839a8RxYxDObd4MRvvPLHkIL2KF3YjG1vFoxffQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:2d:ba:1c:ab:7b:3a:2e:bf:27:97:7a:2c:88:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
        Validity
            Not Before: Jan 26 18:00:50 2026 GMT
            Not After : Jan 27 18:00:50 2026 GMT
        Subject: CN=b692c4e283aef5fde89b79d96acb59c819061bc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:52:08:3a:aa:af:28:b2:fe:b8:02:6b:03:ec:
                    00:35:52:f5:dd:f6:9c:19:d5:05:5c:6a:d0:f8:45:
                    08:4b:a8:fe:ba:75:6a:6b:6e:1c:0e:e0:aa:4f:03:
                    9d:23:71:f6:24:18:f3:bb:2c:77:48:a1:53:27:5c:
                    8f:0f:30:bc:15:ec:8c:60:f9:7f:de:b7:73:33:de:
                    eb:23:ef:64:29:35:28:2e:e8:d9:36:78:0a:ed:db:
                    6c:0b:95:74:2b:3d:9b:60:ed:83:cb:c5:73:5e:7a:
                    28:bd:fb:07:5b:9b:df:bf:7d:c9:d9:49:73:b0:37:
                    b0:16:b4:71:01:dd:97:15:83:fe:27:25:45:3c:05:
                    92:8f:b8:60:14:ea:db:b1:2f:72:0d:d2:f4:2e:cd:
                    c9:4c:8d:0b:47:bc:7c:0d:48:17:99:58:ae:f8:12:
                    f6:66:31:37:cb:95:81:f5:e1:9f:a9:cb:59:c8:5a:
                    2a:68:89:82:59:4d:42:2e:7d:c4:ce:2c:30:d1:7d:
                    9f:4f:ac:7f:d8:dc:ae:7b:10:b4:ca:a0:8b:44:4e:
                    72:df:44:29:ca:07:c9:bd:2c:8d:fa:c6:28:43:6e:
                    0c:cc:9f:95:51:76:02:9e:f6:ba:8f:0e:49:f5:50:
                    2c:09:e2:32:26:16:32:a4:a5:7d:e1:36:6c:4d:04:
                    6c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:92:C4:E2:83:AE:F5:FD:E8:9B:79:D9:6A:CB:59:C8:19:06:1B:C5
            X509v3 Authority Key Identifier:
                keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:f2:64:b0:eb:2c:df:9d:ad:f6:17:a5:6d:45:bc:a3:8e:b3:
         01:c0:31:f8:32:23:0c:93:fc:e1:5d:b0:27:85:71:4d:09:ea:
         9f:a5:7f:1d:7a:9f:88:91:d8:53:9a:64:9a:4d:1b:3d:66:5b:
         26:04:0d:d1:ce:89:95:76:25:71:96:ee:2e:71:75:fd:aa:9c:
         29:8e:a9:fe:27:32:02:0b:92:0f:ea:12:ad:38:9a:a3:3e:d8:
         04:35:c7:94:04:08:88:49:ff:1e:67:0a:85:40:1f:b6:b6:81:
         23:b5:d0:20:f7:d5:a8:a4:b6:c3:ef:bc:65:d9:31:0f:ce:c8:
         88:09:4f:21:0c:7e:46:81:c3:96:35:12:b2:52:7a:8d:d8:79:
         b8:b1:e1:42:6c:34:46:b4:7d:7b:ca:50:ff:3d:4f:c1:83:59:
         a8:c1:b1:0e:ab:d7:7f:71:60:23:5c:70:b0:9d:5d:02:c3:f3:
         f9:7c:2b:fc:79:7d:5f:ec:33:73:c2:6a:18:73:30:9f:98:5a:
         a4:09:9a:08:7a:f7:9b:9d:ff:65:9f:bb:94:b7:be:16:45:38:
         eb:b1:2d:3c:2c:63:60:d2:47:dc:c8:c5:14:fe:34:46:f3:64:
         87:72:01:2d:f0:ce:7c:3e:ff:3a:36:72:e3:9a:05:71:c0:f6:
         f7:67:47:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:48:27 2026 by rpki-client