This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File:                     tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier:          LfK3umLLkuDj+qPDmaUdZk4c6g2JGbuCmDuqqJhhq9s=
Subject key identifier:   54:BF:BD:64:7E:1D:A9:44:09:50:65:AD:16:56:98:39:37:80:B2:D8
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer:       /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial:       019BF9F6A3C9EC0414903F2D17225E9AEAC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number:          17EC
Signing time:             Mon 26 Jan 2026 11:00:49 +0000
Manifest this update:     Mon 26 Jan 2026 11:00:49 +0000
Manifest next update:     Tue 27 Jan 2026 11:00:49 +0000
Files and hashes:         1: JAq5IJt_YzdoY2C_mteXzLVmKq8.roa (hash: EJI1PbxAdj1+ZoLCqp8KLxjEKCW9Bl8uIJ8QELUabNQ=)
                          2: sudPoVqFg1PQZP7-xy4v565d_SM.roa (hash: tABC2SMeyK75v3oh2kumS0Pn8iv5DPrW8wlj3JIpyAM=)
                          3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: +lK5nfEIInzCdCZcD638v3ac1Cwg51Z/ODOIzF+zemE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 11:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f6:a3:c9:ec:04:14:90:3f:2d:17:22:5e:9a:ea:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
        Validity
            Not Before: Jan 26 11:00:49 2026 GMT
            Not After : Jan 27 11:00:49 2026 GMT
        Subject: CN=54bfbd647e1da944095065ad165698393780b2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:66:b2:d7:48:1e:21:23:5b:ea:7c:e8:16:
                    f1:20:82:29:13:d3:fb:41:93:37:b4:b8:5c:bc:ad:
                    a3:05:c0:db:b9:39:66:95:98:8c:96:00:28:de:7e:
                    45:e6:bb:e3:b2:3e:26:85:a1:6a:8e:6b:6e:a2:0f:
                    4a:10:43:b7:82:3b:84:06:3a:b1:d2:a0:ae:ec:59:
                    73:dc:16:84:02:b9:0a:c1:14:99:09:8c:34:b6:15:
                    38:2c:a0:5f:42:e9:f7:ba:a1:7b:d2:c3:de:6e:4d:
                    5d:b0:ce:18:7b:98:8f:4c:79:a9:29:ea:23:87:6d:
                    1c:87:8c:a5:7c:46:20:c8:7d:18:8a:73:92:9d:3e:
                    cb:a7:b0:d7:aa:26:96:22:ff:59:13:bb:fa:51:37:
                    9e:4b:0a:86:92:e1:de:54:1f:de:46:c6:c8:72:19:
                    a6:0f:19:7a:f3:43:b7:c7:2d:85:39:c9:e3:b2:49:
                    0b:cd:b6:c4:93:5a:4f:f2:69:6c:65:4c:26:a8:1a:
                    62:f5:46:f8:51:9e:75:a6:bb:85:44:86:d8:21:70:
                    f9:f3:df:59:10:80:7e:82:d4:61:25:7b:7f:83:71:
                    f1:0a:db:99:d7:9b:3b:f5:e2:89:e4:53:85:eb:45:
                    d2:0d:4f:8a:5f:e8:90:e4:13:ed:49:d6:52:a0:38:
                    5d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BF:BD:64:7E:1D:A9:44:09:50:65:AD:16:56:98:39:37:80:B2:D8
            X509v3 Authority Key Identifier:
                keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bd:94:26:a1:eb:70:e6:40:b1:ca:b4:ac:a7:df:9e:1c:74:
         29:8f:e4:1f:34:82:b5:93:68:5c:9f:22:19:bc:1b:1e:47:31:
         09:32:2b:ff:5c:01:fb:53:3b:32:f4:79:ff:a6:5e:c4:6a:6f:
         88:c8:36:ba:76:31:15:c9:ba:f4:db:3b:22:9c:7c:81:81:e8:
         9e:d1:bb:f4:2a:15:16:84:9c:94:8c:5d:1f:7e:cd:97:15:b5:
         ec:35:24:36:e8:13:fc:e8:71:33:5d:4f:85:01:5b:db:19:1e:
         e8:74:e8:79:80:84:5e:d1:12:ab:b9:d9:b8:bf:b5:d4:2f:d3:
         eb:b7:08:00:8e:f9:cc:5c:76:e6:28:0d:db:52:13:8f:66:ed:
         51:43:9c:c6:2e:d5:46:bb:ad:e5:ac:9a:b4:df:44:3e:cf:2e:
         25:a1:54:8a:b0:0c:91:cf:8b:e3:35:e2:95:b8:30:1d:a2:02:
         81:6d:ae:2d:b4:51:c4:cf:aa:be:07:f0:74:8f:cb:16:d0:9c:
         a6:b3:ad:20:26:26:30:2f:58:d0:12:cd:69:06:01:73:92:95:
         71:f9:e5:f2:fc:b2:7d:48:73:13:59:b6:f8:78:f0:bf:06:02:
         fc:c0:2d:48:fe:b6:96:a2:ab:57:47:66:ef:c6:2c:7d:90:b4:
         b2:1c:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:59 2026 by rpki-client