This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
File:                     152kZWFcYAlDcIM4ktqEyIbhxO8.mft (raw, json)
Hash identifier:          Sjq3IYORGDVPteuLYgyECDnl2WBky9VdHmhITL4kNIc=
Subject key identifier:   CE:87:E7:65:98:DC:0C:A5:EE:3E:68:C2:CB:30:79:7F:96:80:07:97
Authority key identifier: D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF
Certificate issuer:       /CN=d79da465615c60094370833892da84c886e1c4ef
Certificate serial:       019BA45941CB64899C7E7C7B62DF5660D36B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
Manifest number:          17C4
Signing time:             Fri 09 Jan 2026 20:01:11 +0000
Manifest this update:     Fri 09 Jan 2026 20:01:11 +0000
Manifest next update:     Sat 10 Jan 2026 20:01:11 +0000
Files and hashes:         1: 152kZWFcYAlDcIM4ktqEyIbhxO8.crl (hash: ldAUuXClJ1v1LMdmKUjgm3SCmdnN1LQX5p3VOsOB8Yo=)
                          2: 9dcMnZF_hjQhvJcga50J4Lgw0oc.roa (hash: 6V2ZAOY1uWD3nVg5qScVh7xpT8E4AfFf2ucJTTSLBok=)
                          3: UZPOWsV_FJe0LaItYy8ujva8wUU.roa (hash: uIto6VX+5CDXd7vtEA+gBkH2FtA4Z4f+sQvfJ6SzABY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a4:59:41:cb:64:89:9c:7e:7c:7b:62:df:56:60:d3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79da465615c60094370833892da84c886e1c4ef
        Validity
            Not Before: Jan  9 20:01:11 2026 GMT
            Not After : Jan 10 20:01:11 2026 GMT
        Subject: CN=ce87e76598dc0ca5ee3e68c2cb30797f96800797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fe:4a:b5:cd:dd:e3:5b:2d:74:97:b7:11:de:
                    0f:e7:de:93:70:e9:72:cd:55:59:a2:44:20:ca:c6:
                    7d:c6:fd:df:82:cf:11:e9:1c:00:6d:92:62:07:c7:
                    d1:2e:e8:f4:d7:e3:6c:cd:8b:22:8d:4e:88:14:87:
                    d6:ea:f7:47:34:0f:f2:fe:89:09:77:66:e4:b0:ca:
                    09:c6:1a:2d:4e:85:7c:f6:f6:88:2d:4f:a8:28:fd:
                    84:6d:a1:d8:f8:24:4a:75:f7:0b:67:27:e5:1a:1a:
                    c6:30:95:d8:1e:82:88:e3:a8:98:8f:e5:3d:c0:f8:
                    48:49:59:77:11:d8:24:c1:72:dd:5e:40:d9:a4:de:
                    56:b9:b2:45:f1:bf:da:b1:1a:c9:b9:dd:4b:87:0e:
                    f9:fb:f0:a1:47:a2:bf:35:d0:a8:db:b7:25:f8:68:
                    7a:5f:2b:00:47:62:b6:37:20:b9:fd:ac:1a:7a:bc:
                    e7:17:5d:47:9b:30:0f:69:91:64:a3:b9:24:54:09:
                    13:08:12:f4:0e:be:24:fc:b1:e5:5f:25:85:2b:c5:
                    b2:0f:73:f2:05:48:6d:fb:16:e5:4d:60:d9:dc:d3:
                    98:f2:1c:63:e1:84:67:06:22:71:7f:b0:74:f3:ca:
                    83:b5:24:2d:c5:c6:98:d4:33:06:48:2c:d2:a8:64:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:87:E7:65:98:DC:0C:A5:EE:3E:68:C2:CB:30:79:7F:96:80:07:97
            X509v3 Authority Key Identifier:
                keyid:D7:9D:A4:65:61:5C:60:09:43:70:83:38:92:DA:84:C8:86:E1:C4:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/152kZWFcYAlDcIM4ktqEyIbhxO8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/d79c98-c27d-45b3-86d9-dad3bb13c0a2/1/152kZWFcYAlDcIM4ktqEyIbhxO8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:61:07:1d:f6:db:94:cb:bc:98:28:0f:ad:db:61:14:f0:a9:
         36:a4:21:07:7e:9e:20:f6:78:bd:30:68:d6:f7:c8:4d:5c:ec:
         14:92:bd:71:dc:5b:4b:44:a9:64:78:4b:39:e3:35:6d:b4:50:
         09:62:48:fb:3b:85:30:a8:70:11:91:4f:e2:2c:b5:2e:70:fb:
         aa:1e:79:59:b8:12:c8:58:a6:96:14:13:9f:33:e8:a6:c6:6c:
         f3:fd:c6:d2:13:4e:1b:b5:1d:02:f0:50:9d:ea:7d:11:7f:61:
         ac:3d:7a:2a:60:96:88:3d:19:98:5f:c3:49:c0:0b:e0:17:20:
         b2:5f:9d:c5:9c:77:92:92:38:f1:f4:8e:32:b4:04:83:35:01:
         01:33:d9:2e:60:56:85:3d:5a:1f:45:ad:17:6c:ed:d6:c0:a1:
         4f:55:98:1b:11:da:e4:7e:0f:a0:c4:c3:2e:0a:48:0b:66:a5:
         97:95:67:c6:4b:e5:82:6c:17:4b:a3:d8:07:39:3f:ea:f2:c4:
         e5:f2:c1:38:6c:a5:72:9e:9a:d9:5d:98:b4:3b:d3:5f:f8:54:
         ac:9f:7c:ef:46:ae:99:ad:1c:2a:80:8e:44:63:9c:30:46:08:
         b0:0e:7e:a8:24:0e:67:df:4c:7f:f6:a5:48:ca:42:a6:14:9f:
         98:e8:10:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 07:02:58 2026 by rpki-client