This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
File:                     g0eVFJWTl8Xj-nbh6klejh9sMZs.mft (raw, json)
Hash identifier:          o44BU7V5OQvW7CIw4DGJbHzOfDDY4PClIww6a3P+oaY=
Subject key identifier:   64:A5:CB:07:6F:0A:98:02:74:9F:6D:B6:1D:7F:04:C0:F9:F4:7C:29
Authority key identifier: 83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B
Certificate issuer:       /CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
Certificate serial:       019BFDD37724CC758DF3998325CE4ECE0051
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
Manifest number:          17F6
Signing time:             Tue 27 Jan 2026 05:00:52 +0000
Manifest this update:     Tue 27 Jan 2026 05:00:52 +0000
Manifest next update:     Wed 28 Jan 2026 05:00:52 +0000
Files and hashes:         1: Cn6kGq46LF9Oikb9XnL1lRq0D6U.roa (hash: 01J0VB2/sc7Wjg5UC4eC51E7MgriDtGuK8sC7s32gVc=)
                          2: eaURa3uTlyiZsAXJzkPz_x5Muw0.roa (hash: c+Yhm7pE68b9qJ0hObSRz8BZLxOQWu5iU9oFtQINp5c=)
                          3: epQedJVwRBT94oycCSPj2YdU8Tw.roa (hash: zh7Uj6j3oKDWZJe0YH4R9IHGVwdwn+U1F6Ti2AwnjzM=)
                          4: g0eVFJWTl8Xj-nbh6klejh9sMZs.crl (hash: 95kwpWYakaXznkZB1WDcEdvV2yo5rdidkWctbAlXXIU=)
                          5: ohKELa4D7u4-F5h5znUYEfXBTrQ.roa (hash: fMVIcUvcrWF7H5I6/6miPXqqmQnLYpDWZI9AaMxyhp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:d3:77:24:cc:75:8d:f3:99:83:25:ce:4e:ce:00:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83479514959397c5e3fa76e1ea495e8e1f6c319b
        Validity
            Not Before: Jan 27 05:00:52 2026 GMT
            Not After : Jan 28 05:00:52 2026 GMT
        Subject: CN=64a5cb076f0a9802749f6db61d7f04c0f9f47c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f3:dd:01:58:ae:49:5e:7a:9b:fb:f7:20:d1:
                    ba:7b:f5:30:dd:99:c7:bd:c8:77:21:16:6d:04:1e:
                    86:1f:d4:db:25:42:b0:64:18:c7:56:7f:cc:23:ae:
                    57:b0:31:4b:bd:93:25:31:07:a6:85:7c:6f:1b:1a:
                    64:74:c5:32:48:4d:93:d3:f1:84:cb:fe:17:88:1f:
                    e5:23:11:40:ef:cd:d7:dc:d5:d0:96:33:29:39:37:
                    8e:2a:17:f5:61:1d:10:b5:7e:a6:0d:a4:31:ba:9b:
                    fb:73:3e:e6:a6:d4:cd:87:36:e5:c3:d4:55:d2:22:
                    06:93:67:16:95:83:60:4c:a8:a5:ad:da:4b:b4:cf:
                    3e:03:35:09:47:59:28:0d:34:62:ae:02:50:56:18:
                    46:13:c6:77:97:69:2c:4e:1a:21:1d:c8:b3:89:67:
                    b8:6f:cf:11:1c:8c:63:c4:ce:e6:61:96:73:7d:53:
                    54:f1:0e:07:12:24:cd:78:72:a6:4f:de:ba:b0:90:
                    2c:4f:ee:a6:de:8f:c7:ec:f6:a4:9d:de:bf:6d:89:
                    de:d1:14:16:7b:73:2a:9d:a5:57:80:4f:2c:78:29:
                    c6:4a:e4:14:6d:3c:b7:8e:d3:34:4f:b0:bc:1f:fc:
                    1f:a3:9f:9d:30:0e:83:d6:f9:20:8a:20:e5:71:8c:
                    f1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A5:CB:07:6F:0A:98:02:74:9F:6D:B6:1D:7F:04:C0:F9:F4:7C:29
            X509v3 Authority Key Identifier:
                keyid:83:47:95:14:95:93:97:C5:E3:FA:76:E1:EA:49:5E:8E:1F:6C:31:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0eVFJWTl8Xj-nbh6klejh9sMZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e09181-2643-414c-8fbe-1e5e430dd711/1/g0eVFJWTl8Xj-nbh6klejh9sMZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:0e:e7:b6:7d:0d:46:fd:36:c3:a0:d8:3b:50:b1:0c:35:a2:
         94:8e:33:5b:b5:4d:75:bf:dd:bc:3d:a3:db:80:c3:48:b4:c7:
         a8:3a:d7:aa:be:04:c5:64:51:db:fc:f4:ed:70:e5:1e:1f:7e:
         50:d2:29:24:cc:eb:36:24:c1:9b:e5:8c:5d:2d:5c:31:5f:74:
         c5:80:e3:46:5c:2d:41:7b:9b:f9:e8:c7:35:1c:4f:9b:8f:cc:
         2a:c0:c1:ad:71:b3:04:cb:85:0a:41:c2:65:ec:4e:ef:bf:77:
         e6:1f:fe:f0:e3:95:0a:a8:bf:ea:9f:c0:09:b7:8c:04:2b:31:
         1c:79:44:db:68:c2:22:58:c0:74:39:2f:60:7d:eb:36:74:e1:
         06:c0:53:1a:1b:06:f3:c3:7f:b6:5d:f3:ec:d8:88:a5:f6:78:
         f4:a5:7a:e0:fa:14:5e:7d:65:c0:ef:41:ea:64:75:a7:ab:e7:
         94:fc:70:29:eb:2a:8e:6d:8f:b2:41:aa:30:bf:0c:6f:ac:94:
         b9:64:f9:98:2d:87:5b:24:46:e3:91:48:5a:f5:9a:2a:01:28:
         f5:fb:c1:65:9e:7a:be:0d:57:ca:c2:7d:d3:9d:66:6a:a0:ac:
         a9:37:83:79:71:3a:2b:8d:81:30:1f:a9:6b:fc:33:d5:74:ae:
         9c:f0:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 10:43:51 2026 by rpki-client