This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File:                     I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier:          18ulDp3FXC46nypYRnjfTHqipwqneiC+YlDglg+3nYo=
Subject key identifier:   15:8C:B1:A0:FF:7F:DB:9D:D8:AF:A7:FA:91:42:52:9E:DE:F6:27:F6
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer:       /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial:       019BFA64E6C7A8898BF2CF054BB310F6327F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number:          02C1
Signing time:             Mon 26 Jan 2026 13:01:15 +0000
Manifest this update:     Mon 26 Jan 2026 13:01:15 +0000
Manifest next update:     Tue 27 Jan 2026 13:01:15 +0000
Files and hashes:         1: 2eb7NbWGKQr9AuoFG0noSQ2eJ7E.roa (hash: 0jcSmBTvhe4wLRS/tRMO9Kp0nd5ABXWyz2AY1UPsHZU=)
                          2: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: Z+BelTZ7UE2PPb+JZRN+0htVvgEgnuN4mZLXM5l6LYE=)
                          3: Jul-hlkH3B_yi8db3Xa6bxqhyTY.roa (hash: LUngNTkp4Q/Zn5TQsP3wRApERFrtYeibr/XkTVutBeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:e6:c7:a8:89:8b:f2:cf:05:4b:b3:10:f6:32:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
        Validity
            Not Before: Jan 26 13:01:15 2026 GMT
            Not After : Jan 27 13:01:15 2026 GMT
        Subject: CN=158cb1a0ff7fdb9dd8afa7fa9142529edef627f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:cf:c6:54:aa:f7:c6:82:fb:63:6f:e4:92:
                    07:18:27:5b:43:d0:47:b8:fd:75:81:0c:e1:bc:24:
                    94:37:dc:a6:b3:3b:e3:e9:83:a8:79:b2:6f:30:b5:
                    a8:09:50:8f:b8:bb:c4:89:24:05:73:db:cb:70:1b:
                    05:df:27:96:91:2f:72:0d:e3:4a:ba:52:f1:0d:6f:
                    49:b6:44:11:71:e9:8d:e3:c6:9b:72:d1:25:ad:90:
                    2c:1e:3c:e2:03:e7:11:2b:b4:f1:40:64:e5:5c:fd:
                    a3:29:84:68:2c:05:dd:71:84:55:39:c6:14:e3:fb:
                    37:ae:8b:93:dc:1c:21:2e:16:85:0f:fb:60:66:18:
                    77:52:ce:f5:f1:dd:c5:c9:ea:05:8d:21:50:c1:b1:
                    a7:ba:5e:32:cd:96:ae:02:a0:64:01:a0:cf:49:41:
                    65:a2:87:be:50:53:9c:78:cd:a5:16:da:ab:00:b5:
                    be:c8:2c:22:87:f0:6e:77:40:8f:b5:7a:55:d5:ce:
                    b6:27:ff:c1:33:96:c7:31:65:cf:c3:1f:19:d0:f2:
                    59:c7:96:b8:ae:81:cb:77:35:a4:c6:f5:ec:74:2e:
                    60:d3:b6:f5:33:28:cf:cf:f2:06:f1:e2:6b:5b:f4:
                    c1:08:8e:a7:19:11:0b:d4:1e:df:09:b5:7b:da:93:
                    ef:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8C:B1:A0:FF:7F:DB:9D:D8:AF:A7:FA:91:42:52:9E:DE:F6:27:F6
            X509v3 Authority Key Identifier:
                keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:eb:02:c5:0f:3d:db:75:ae:f0:8e:f1:c6:a9:a6:a3:db:f7:
         2e:a9:35:23:80:37:1c:c6:bf:0b:40:a5:8f:9b:f9:e6:5a:19:
         30:0a:eb:5f:96:21:af:b2:2b:ea:64:54:d2:55:cb:35:04:5d:
         ff:b0:4d:51:8b:f4:a5:f0:41:30:54:f7:a0:4d:97:e1:a1:58:
         4c:c2:5d:e4:62:3d:e8:4f:5f:08:53:67:75:60:b2:89:97:78:
         61:28:49:fe:b6:8b:6d:7c:c3:75:1f:f1:f1:7b:bb:b4:83:7c:
         51:8b:f7:fe:90:5a:c1:a0:cc:c5:16:ea:64:fc:ff:b3:a1:2e:
         10:77:71:f7:25:0b:1f:c2:89:87:83:1a:bb:97:10:3c:9a:98:
         af:94:ba:15:10:4f:24:44:91:3d:57:e0:1c:91:b5:a4:e1:d8:
         2b:36:25:fa:5d:37:48:3d:10:5a:d0:b5:db:af:b0:f3:62:94:
         6c:2b:ba:86:84:a1:41:dc:3f:d4:06:a1:21:e9:8d:30:ec:8d:
         8d:6b:f0:02:d7:a4:5a:05:e2:56:5b:e3:5f:45:59:04:04:14:
         f0:1e:bb:f3:d8:8e:f9:37:3e:44:e5:59:ab:12:d6:2a:78:3f:
         0f:ad:1b:88:33:8d:3e:eb:6b:dd:26:5e:8d:40:f2:89:3b:60:
         73:38:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:00:55 2026 by rpki-client