This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File:                     FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier:          VJHVRGPFGC/ca6Si0QNHE8W/bZ8COFki9OCif5Bw5vY=
Subject key identifier:   D2:1D:93:80:09:4A:2E:C3:23:83:83:C8:60:56:FD:F1:18:87:B5:91
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer:       /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial:       019BF72C9AE4828FA71EB2A4EB68A02E2C51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number:          0A10
Signing time:             Sun 25 Jan 2026 22:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 22:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 22:00:54 +0000
Files and hashes:         1: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: DyA5mZlMh7kugKvAi4+u1/jm7amo9spRlMJBTjasEVI=)
                          2: SGpevAZGETQFuN0tYIFbuVO-oHU.roa (hash: p6/1XP6vhlSrsHHLDARcNdGWShp5rNMH31ibs+saZHQ=)
                          3: h00EwWS0nwQcNex-PoN4bBKe784.roa (hash: KPJZ49G0RdOibbutyTd80kdxdj+ZbMSn0AFJ4T8Y7D8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:9a:e4:82:8f:a7:1e:b2:a4:eb:68:a0:2e:2c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
        Validity
            Not Before: Jan 25 22:00:54 2026 GMT
            Not After : Jan 26 22:00:54 2026 GMT
        Subject: CN=d21d9380094a2ec3238383c86056fdf11887b591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5c:4e:c1:4d:43:7f:28:d6:03:4b:fe:65:af:
                    37:5b:a8:a3:df:91:06:1c:9a:a0:04:66:03:85:d1:
                    7a:7d:c4:2a:a4:32:ac:11:1d:ad:10:54:12:b9:34:
                    75:b7:08:cf:e8:f1:2b:78:ef:04:8f:9b:1e:f0:ee:
                    98:e2:a6:b3:7f:93:9b:3f:61:a2:60:0d:11:36:8a:
                    ec:23:21:04:6c:ac:b2:1a:26:26:be:7d:dc:c3:c4:
                    3c:cd:00:07:e9:4c:95:7c:b0:33:d7:38:0c:d7:38:
                    41:28:f4:b4:d3:0e:ef:69:82:5c:84:f8:22:c1:6f:
                    12:06:9c:7f:7f:28:e9:9b:7a:bb:ca:f2:90:a6:17:
                    4c:73:96:af:ab:cb:9c:12:d2:9b:9c:72:4e:b0:f0:
                    b4:4c:43:22:33:58:f9:7f:6e:4d:d6:e3:45:4a:3c:
                    ec:45:21:ff:e8:35:eb:80:9a:cb:13:e9:ba:81:f9:
                    99:e3:1c:09:b7:a0:a6:bd:ca:3d:a3:44:50:6c:c5:
                    58:44:70:92:cc:9b:98:4e:11:6d:7c:11:88:36:7d:
                    54:9e:30:74:58:97:57:55:03:27:fe:44:76:a0:c6:
                    b2:69:ef:c4:8c:d2:db:f3:12:61:a6:c8:32:5c:43:
                    76:39:47:4c:ec:41:bd:52:3b:e4:89:94:19:f0:4b:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1D:93:80:09:4A:2E:C3:23:83:83:C8:60:56:FD:F1:18:87:B5:91
            X509v3 Authority Key Identifier:
                keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3d:8f:61:b6:a0:0f:ad:ff:86:ee:b7:bb:e4:85:ce:d4:d1:
         91:28:a7:7a:04:20:df:8d:21:90:7d:f6:34:a9:f3:55:9f:fc:
         2f:65:2f:5d:52:93:b5:b2:00:cc:a0:ee:48:29:5b:fd:70:f0:
         c7:f8:f6:de:4e:7f:7c:15:ac:12:cf:27:f4:ad:36:b9:e7:d3:
         f0:6d:da:cb:48:c0:80:9b:68:ed:bf:92:e3:87:72:fe:7f:66:
         f1:9a:4d:9e:e0:9e:b4:86:d5:28:50:45:a0:a0:d1:39:d3:de:
         a1:f9:e2:83:98:f8:a9:6a:9a:84:5a:d3:f7:82:c1:39:51:f6:
         2e:a0:a1:97:c0:1f:e0:7b:79:39:79:94:6c:e9:f9:ea:8a:6c:
         3d:46:ad:88:35:bc:ca:8b:6f:b6:0b:93:ff:11:26:a2:69:31:
         7e:f4:64:f7:d2:6e:29:b0:a9:84:06:8a:ba:f6:e3:8a:16:08:
         40:73:c2:2b:98:52:71:9c:be:41:98:4f:07:0b:f7:03:dd:dd:
         62:02:4e:8d:b7:b2:aa:4d:c5:8f:4c:b3:79:2b:11:f9:2f:55:
         c8:a1:6a:d6:08:68:5b:c6:5e:c0:92:fb:e8:c0:2d:bb:3f:15:
         58:73:3c:f4:8a:83:75:b8:4d:a0:13:b0:b6:62:87:7d:e1:5d:
         43:44:6a:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:17 2026 by rpki-client