This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          fUEdz68APT7gVBlQv2sP5reWOnWULM+DCfam3p6I3wE=
Subject key identifier:   A8:75:70:C8:10:EE:F0:D2:AC:AB:8E:DF:75:44:BE:E7:C7:7C:39:88
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       019BFCC0D39098D1EE15B8BC5B688599B6CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          17ED
Signing time:             Tue 27 Jan 2026 00:00:53 +0000
Manifest this update:     Tue 27 Jan 2026 00:00:53 +0000
Manifest next update:     Wed 28 Jan 2026 00:00:53 +0000
Files and hashes:         1: Qs5aQVIRmNwQTTAz2KPYUQwI290.roa (hash: HTCONoxkAHOIEm4u3dHI3SAMwZlvU666BuYb+Y9SBcQ=)
                          2: cK35oW3CRoDVTabPCj-bao3z8NI.roa (hash: Ebd+i8ctjoE4+ZV/syWp95hkz3ZcP0gcjB71tiszUJs=)
                          3: oWZr4E334Nl5dhHXKUDjCqLCGyM.roa (hash: nZfWnD1u4woMdciLaCwLWuHO0I+/98sheC0fCywH+V8=)
                          4: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: 0rIzs1JabAdPshDHiKOF8yYSf5R0eQBvCJ5q5gv0drM=)
                          5: wsCCmspEM6WspzHVHs3VS2kVt5s.roa (hash: hed0UXeEzgYWiVtnJDozjUnK8u7srJbOFxteQGQPqbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c0:d3:90:98:d1:ee:15:b8:bc:5b:68:85:99:b6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Jan 27 00:00:53 2026 GMT
            Not After : Jan 28 00:00:53 2026 GMT
        Subject: CN=a87570c810eef0d2acab8edf7544bee7c77c3988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f1:32:56:b7:9b:da:fe:ef:8c:c4:d8:8a:9a:
                    dc:ea:07:fd:ef:09:ab:d7:a9:41:0d:b8:a0:12:9d:
                    49:a0:5a:10:f9:38:3a:1a:d6:53:b3:e4:ab:34:75:
                    44:ba:04:0a:89:53:85:b4:d7:fb:d4:eb:52:0d:40:
                    29:2c:97:ce:aa:47:07:45:00:db:4d:b7:04:23:99:
                    b5:c7:af:e9:0f:d4:8c:72:ef:2c:e4:90:5e:26:1e:
                    88:a4:5c:b1:f9:03:69:ae:65:64:ba:57:d9:4e:6c:
                    95:2c:47:44:4e:1f:24:1c:17:dd:15:5b:2f:e1:fb:
                    d2:ea:62:0d:82:ef:db:f5:30:1a:38:b3:d5:83:5d:
                    51:ae:74:97:7d:1d:b1:04:bd:2c:ac:5f:aa:fb:d4:
                    51:0c:a5:78:f2:89:ac:dc:80:35:55:0d:08:9b:63:
                    c6:ce:da:56:45:5d:f4:72:b3:09:7a:7d:dc:a9:a7:
                    54:fd:fd:80:74:9b:df:d6:a0:08:53:ec:0d:f6:b2:
                    a1:03:68:92:7d:ca:48:8e:37:4f:42:88:c9:13:07:
                    4b:04:04:7f:16:d0:84:d5:89:ff:91:33:e5:db:7f:
                    ab:b0:a2:26:cb:d8:cb:ec:c2:3e:10:c4:1d:6f:b7:
                    e0:83:68:b0:22:f6:b0:66:7f:46:a4:46:57:8f:ec:
                    97:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:75:70:C8:10:EE:F0:D2:AC:AB:8E:DF:75:44:BE:E7:C7:7C:39:88
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:37:70:27:9a:33:4c:78:95:c0:f8:67:f2:69:d2:fb:60:
         fd:c3:4d:66:c2:ac:f9:81:df:b7:90:fb:c0:30:97:8a:14:40:
         65:05:f4:6e:fb:29:7c:3d:e3:cd:1a:5a:01:7e:c3:f1:d2:21:
         f5:02:74:f1:75:8e:c5:1f:db:87:a8:b4:6f:e2:c1:cc:84:03:
         e6:72:f9:19:0a:1a:34:3d:0f:9f:5a:c4:3a:4c:59:7b:a2:75:
         8d:73:f4:0d:42:ef:a4:58:67:7f:b5:4c:90:ba:e3:a8:ce:99:
         c1:ec:cf:6d:62:cf:f5:cb:30:ec:88:5b:9e:0d:c1:b6:bb:93:
         d3:b8:bf:8b:59:fa:35:7e:63:69:fc:fd:c2:52:8c:56:ad:ba:
         2d:3a:10:12:9b:1a:3c:ab:7c:f0:19:8f:ec:b8:b6:13:67:ae:
         fe:e8:74:32:6a:da:7c:46:f4:72:67:75:0f:52:4c:84:9b:60:
         3b:db:a7:3d:21:1f:02:78:5b:c3:76:5c:af:32:9e:be:c8:be:
         f7:01:b6:e7:30:04:65:2c:8a:83:1f:9a:dd:5f:01:86:d8:ca:
         f5:bf:4d:8f:43:f2:68:18:ac:b0:67:58:94:8a:cd:60:35:d9:
         63:2c:3f:82:5f:08:6c:92:f8:ac:9c:7e:a4:5c:d6:a0:b3:ba:
         6d:fa:0e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:08:06 2026 by rpki-client