This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
File:                     xReRpYEcf27YH9RBtQJlr16cYbA.mft (raw, json)
Hash identifier:          Z9UBRgNaIzv8JokUE29o4yREH8wsuwVveInU8lgNQAU=
Subject key identifier:   9A:7F:B1:4C:63:10:BE:61:10:AF:23:F0:2B:27:FA:D1:5C:34:BD:C1
Authority key identifier: C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0
Certificate issuer:       /CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
Certificate serial:       019BF9F666ABF826D64C0F396D972F75EFD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
Manifest number:          17EE
Signing time:             Mon 26 Jan 2026 11:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 11:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 11:00:33 +0000
Files and hashes:         1: meduvkE4g-7_NYzpwBUpuDy0fCw.roa (hash: Ch8KIvSk+wsICXuHTJIlbbBxjJkAmiuMMWx8HiiHkT4=)
                          2: vI0I4kP4iBS-MXXMKDhVF_XKf7Q.roa (hash: VPn4BdBIJroCps/v1nH2+yo8aRlxWPoX7wGg/avedFw=)
                          3: xReRpYEcf27YH9RBtQJlr16cYbA.crl (hash: B81WQiTan0p29eq7avKHYu7ncp6hmBhY58qXnB/8cOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f6:66:ab:f8:26:d6:4c:0f:39:6d:97:2f:75:ef:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c51791a5811c7f6ed81fd441b50265af5e9c61b0
        Validity
            Not Before: Jan 26 11:00:33 2026 GMT
            Not After : Jan 27 11:00:33 2026 GMT
        Subject: CN=9a7fb14c6310be6110af23f02b27fad15c34bdc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d1:ba:e2:b8:bb:d0:79:9c:d6:af:d2:07:72:
                    79:e6:bd:00:e2:8b:c2:3e:7a:05:63:79:fc:85:f6:
                    88:15:d9:9a:f7:fb:b5:f6:c0:c5:5f:85:3a:63:b4:
                    57:a5:df:e8:88:33:8f:bc:de:80:46:e8:26:c1:89:
                    21:10:e7:25:c0:08:b5:a0:47:1b:b5:b6:6b:25:5d:
                    68:15:92:7c:f6:ff:59:ea:cd:e9:b5:20:4d:68:eb:
                    7b:56:ce:62:ad:ee:f9:b4:ef:d8:24:66:2c:d4:72:
                    5a:a0:5d:f1:05:99:93:77:e0:ce:be:24:f4:3c:7f:
                    63:13:7d:57:e3:8e:fb:dc:9b:3a:35:21:5f:2d:0b:
                    94:be:f7:ab:0b:6c:52:b5:df:61:e7:81:25:ef:88:
                    10:83:73:a7:b4:d4:10:c5:b7:68:d6:1b:b0:78:0d:
                    6d:6f:82:4a:47:37:da:3c:23:68:28:a1:98:92:c0:
                    32:8a:a2:c3:a8:8c:4b:c0:aa:15:68:55:82:7c:47:
                    17:41:18:4d:cc:9a:6f:60:41:3c:f1:83:3d:91:ef:
                    cf:71:f9:b2:a2:03:0c:ca:dc:9a:53:be:8f:19:da:
                    e5:ce:25:bb:e7:e9:a4:4c:ca:0e:7d:30:7b:d6:51:
                    25:69:cc:33:21:1d:2b:d3:f4:a3:d8:3e:4f:66:48:
                    75:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7F:B1:4C:63:10:BE:61:10:AF:23:F0:2B:27:FA:D1:5C:34:BD:C1
            X509v3 Authority Key Identifier:
                keyid:C5:17:91:A5:81:1C:7F:6E:D8:1F:D4:41:B5:02:65:AF:5E:9C:61:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xReRpYEcf27YH9RBtQJlr16cYbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/0bf196-65ab-4e74-a61a-819164b92b88/1/xReRpYEcf27YH9RBtQJlr16cYbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:29:7a:6f:f6:e7:d8:d4:f3:8e:ef:88:c3:7f:bf:73:d9:64:
         b7:47:13:90:9f:b5:0d:ed:fa:bd:81:a0:2e:6e:5b:f6:af:ea:
         64:b4:51:51:1a:6f:d1:33:8f:9c:73:59:35:d2:14:3c:f6:23:
         a0:d8:26:2d:38:21:70:71:81:2f:60:e8:5a:4d:e1:4c:cf:64:
         24:47:6a:52:5d:6d:c6:d4:fe:c6:c1:a7:77:3e:9a:ee:d4:8f:
         73:40:78:ce:7a:54:fe:4d:37:68:36:f5:b7:fd:33:29:d8:54:
         66:86:87:72:53:73:99:32:58:fd:57:79:1a:eb:fe:52:bd:97:
         4f:3f:e1:87:43:7f:58:ea:1e:16:f2:64:a1:19:18:d7:7c:ea:
         3f:b0:2e:c6:40:a0:72:67:f8:34:17:0e:09:8a:e5:2e:60:b7:
         db:bf:7d:6b:8c:d6:1e:4d:91:f8:be:f9:35:58:6c:0b:93:3e:
         ea:03:33:c6:63:8f:4d:94:4a:ae:81:dd:ff:43:b4:55:ab:ce:
         e1:e2:2e:70:26:34:8e:89:3c:81:78:47:1d:19:b8:ab:32:83:
         b6:b8:92:83:2d:c8:89:80:b6:f5:9b:d0:82:d1:2a:c9:09:2b:
         1d:fe:20:38:16:c8:69:81:f5:94:b4:92:b9:d6:06:ed:5f:ab:
         75:18:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:47:04 2026 by rpki-client