This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
File:                     fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft (raw, json)
Hash identifier:          GrZUv/xraBElm0slaDG35wItOSzqe96xlswz/pkJjT8=
Subject key identifier:   4E:C5:F7:84:CA:CD:3D:70:8E:E1:67:94:8A:CC:F4:B9:00:A6:70:64
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Certificate issuer:       /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial:       019BFB77BCBA9291F3A244B523173A89869C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
Manifest number:          17D6
Signing time:             Mon 26 Jan 2026 18:01:26 +0000
Manifest this update:     Mon 26 Jan 2026 18:01:26 +0000
Manifest next update:     Tue 27 Jan 2026 18:01:26 +0000
Files and hashes:         1: B2UAskXV_gpw_1Zd54EWgMp-uLk.roa (hash: Wztu5tKf6yPbKoTbElxbMgfRBQR7WU+p4qYB7HBJmO4=)
                          2: QuZtuYtxwjnkIizW_uZP621GARI.roa (hash: l+b9n1Wks+lJy53mwiELzEXTzeKjuCLSgRja0TBj0Gs=)
                          3: avohNYANBKv4qq3XkcvTOdS38TQ.roa (hash: iaIygUnr7eXRMWhN6cRZ9bof6sesbaqZvOPUXchc93o=)
                          4: fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl (hash: 55V8pkwNP5SZUYsdEyh71TVlYPq3hUzhkv1KBJ6MzxE=)
                          5: hYBDxPKgpEBy-0HqIG0AVKIIGv4.roa (hash: LN1o3/IUnxwvsUL4vj6kqV3IpcbqWaMlyNgv17b6oto=)
                          6: k1pADmn6GMiQRtZPNSp61p00vu8.roa (hash: 1SQM1MMTHspOQ+oTUfXQ2BweUAM4ByW84Vk4jd23GqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:bc:ba:92:91:f3:a2:44:b5:23:17:3a:89:86:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
        Validity
            Not Before: Jan 26 18:01:26 2026 GMT
            Not After : Jan 27 18:01:26 2026 GMT
        Subject: CN=4ec5f784cacd3d708ee167948accf4b900a67064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0f:87:33:5b:ea:75:e7:a3:3e:7a:f1:df:a3:
                    ed:ba:42:30:9b:90:5e:cc:fd:7b:65:ce:0e:f9:8a:
                    78:6e:d8:43:cc:e7:a1:2a:43:d3:94:88:b4:c5:04:
                    59:b6:e6:59:11:3a:85:ef:32:de:e5:bb:a6:3c:00:
                    c2:13:c4:08:9a:06:08:89:94:b0:d7:75:7e:eb:85:
                    e5:d2:03:bf:93:e3:ef:29:7f:fc:9f:ed:70:5e:03:
                    74:fa:b1:c5:de:7d:5e:5c:0d:45:0b:3c:bf:6f:ad:
                    fa:52:59:34:bf:b2:70:83:07:87:ef:25:c1:2c:ba:
                    2a:29:b0:2b:e2:76:4e:c2:28:80:16:97:3b:86:96:
                    a5:59:77:da:10:d7:72:a3:eb:ac:e2:80:17:01:84:
                    41:27:f8:1c:9b:ef:a3:22:cd:26:0e:ec:ea:3a:c0:
                    ab:c1:01:da:0a:b1:0d:8b:6a:05:a5:ca:66:31:5b:
                    ac:13:5b:d8:eb:29:6f:84:94:e4:de:fd:88:5a:7c:
                    53:60:dd:ad:70:5e:87:cc:c4:66:60:a3:a0:a3:52:
                    e3:67:73:27:5e:a6:f4:d5:1f:56:cd:26:75:d9:bb:
                    60:5c:91:aa:63:ab:f2:3f:2d:8d:01:af:37:72:2c:
                    23:fb:d5:9d:23:84:f9:97:4c:61:6f:87:43:3e:fc:
                    ff:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C5:F7:84:CA:CD:3D:70:8E:E1:67:94:8A:CC:F4:B9:00:A6:70:64
            X509v3 Authority Key Identifier:
                keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6f:1d:64:36:33:8e:7e:96:6b:44:4d:be:d6:50:ed:6e:2d:
         7d:67:ff:fd:13:ed:e8:ee:16:15:3c:ba:5e:9b:51:26:b0:03:
         b9:8d:05:fc:4a:f8:a4:dd:9c:4b:dc:b3:9e:21:82:7d:df:75:
         ae:db:67:1f:10:ab:10:5a:58:9c:25:76:08:73:5d:ac:45:2e:
         12:4a:cb:c6:e5:d8:9e:f1:e6:95:55:9b:63:72:c2:51:a4:3e:
         91:77:73:50:8b:57:8f:9c:51:ff:ce:1b:c7:85:d3:79:f9:f4:
         35:34:f1:ea:c0:77:e5:af:22:18:82:d0:15:8f:c5:96:54:d6:
         60:d9:23:65:11:46:08:40:1a:0d:f2:67:5b:fd:af:e2:5d:00:
         26:b4:e1:84:e4:29:20:f6:2e:8f:f7:f3:63:53:33:08:95:e8:
         79:98:68:ec:56:02:df:b6:1a:6f:82:99:82:1d:cf:bf:7f:75:
         d4:0e:b3:64:7b:02:46:10:d2:1d:a8:7c:41:60:98:40:29:81:
         35:9b:93:5a:81:8a:8f:fb:d9:5b:85:bc:06:93:ff:54:6d:73:
         6e:44:a1:7c:64:b3:47:b8:4a:a1:63:b7:ed:09:21:20:22:39:
         0f:af:d7:b6:7b:e2:76:c5:c9:f5:89:64:45:61:28:76:ed:8b:
         66:a9:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:09:49 2026 by rpki-client