This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File:                     i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier:          rbJR4j6NmCvhYpZ2JRrgdgCFYkrIXmQkksHxoMnV5Eo=
Subject key identifier:   72:99:A1:2F:46:93:52:BB:CA:42:55:BC:23:04:05:70:F7:8F:3B:83
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer:       /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial:       019BFCC0E43B3995EFE2BA992230138CEBAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number:          17ED
Signing time:             Tue 27 Jan 2026 00:00:58 +0000
Manifest this update:     Tue 27 Jan 2026 00:00:58 +0000
Manifest next update:     Wed 28 Jan 2026 00:00:58 +0000
Files and hashes:         1: WUGBWhMtlbuPeSgdJcR9TomYq_g.roa (hash: YpNprpEpdwv3WzbtNOJB6/axNyALJCziE+BSrnsp57Y=)
                          2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: YmCteRqR2y5WW0c57ugeevnNe/p/WnlaBH4d3xZsYQc=)
                          3: iUaiCf92bE9L1AogU_P4Ws5OIvg.roa (hash: lB/aDmJbZNaICyqV1bdphm8nQcK/tHuDQZq5sC+egbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c0:e4:3b:39:95:ef:e2:ba:99:22:30:13:8c:eb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
        Validity
            Not Before: Jan 27 00:00:58 2026 GMT
            Not After : Jan 28 00:00:58 2026 GMT
        Subject: CN=7299a12f469352bbca4255bc23040570f78f3b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:15:52:1b:f8:ac:cc:8c:7f:25:20:ac:e1:e4:
                    26:3b:b5:21:cf:c9:da:97:3d:31:c0:e3:86:33:c6:
                    11:f5:cc:c5:1f:ad:89:3d:60:f2:c4:6a:2e:e7:27:
                    6a:cd:75:f4:55:38:d7:d4:48:71:e5:d3:3c:51:5b:
                    e7:67:21:4f:ce:00:75:c0:9e:38:bd:33:c9:42:bf:
                    26:bb:7d:5f:e7:9d:26:c6:a6:da:7b:32:f7:bc:3f:
                    be:c4:01:10:95:5d:bd:a2:2f:4b:69:ea:73:58:e8:
                    e9:9b:a3:ff:e7:82:9a:51:e4:5a:b1:81:59:ca:a3:
                    02:50:ad:fc:8d:4e:c8:8f:7c:35:27:3b:b0:ab:ce:
                    29:45:2a:be:94:2d:1b:44:f3:7c:05:00:ea:02:80:
                    c1:ac:79:e9:f1:d0:a1:85:95:45:02:4b:d4:de:98:
                    7d:24:f1:4d:d5:15:eb:96:44:d9:95:06:a8:da:47:
                    71:b0:9f:03:eb:8c:19:7d:59:d1:7a:cb:4b:40:4b:
                    a5:68:c6:70:cc:62:2a:f2:4c:3b:a3:69:45:64:e9:
                    3b:9c:fb:b0:90:03:cb:5d:14:8c:de:2d:20:f1:fb:
                    86:29:b0:c3:67:61:a8:95:d2:59:c4:3a:d5:4c:26:
                    b7:0f:86:4a:49:8e:40:a2:64:da:2e:7a:d3:fe:6e:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:99:A1:2F:46:93:52:BB:CA:42:55:BC:23:04:05:70:F7:8F:3B:83
            X509v3 Authority Key Identifier:
                keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:51:cd:54:56:46:81:c4:32:1b:91:0b:fe:f2:32:39:03:d6:
         e3:a7:38:86:0e:6d:32:fd:35:24:f2:07:c3:48:bc:06:25:0a:
         a2:bc:ea:3b:72:52:33:22:67:22:44:2b:d5:e3:7c:9c:4d:11:
         56:8a:d2:39:39:63:3c:27:f7:8a:88:3b:8a:f0:55:de:0b:e4:
         43:b4:fd:24:91:c8:b7:25:df:0b:07:57:e6:ca:6b:27:62:33:
         79:81:91:37:50:c6:09:19:6b:25:0b:39:d8:c1:de:d7:e9:7c:
         39:5e:ab:99:d7:42:ad:81:24:2d:be:c2:a8:41:95:16:42:66:
         08:47:d9:84:97:dd:cb:a1:b4:bb:5f:23:38:46:32:04:ad:87:
         6e:6e:f3:8d:3a:ad:51:a8:f7:f6:2c:c0:9c:90:b3:e9:97:b4:
         89:00:e5:0b:67:8c:65:35:f3:90:21:f8:90:df:92:fb:06:b0:
         15:6f:c2:1d:83:cb:e5:fb:2c:52:19:14:c6:52:ee:1f:fc:df:
         03:c1:e4:ff:da:82:de:2e:41:c2:4e:49:78:b5:91:ad:fc:11:
         04:6a:5a:42:aa:11:28:c2:78:e8:63:e7:c6:0f:7d:dd:48:54:
         05:c0:9e:a8:25:4a:06:95:36:f6:50:a4:1a:84:da:9a:87:78:
         3d:92:45:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:51:31 2026 by rpki-client