This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          z62HY3XG+U9uZadqRS38P7X2ppjJY5k/wlhJLeg8yA4=
Subject key identifier:   17:86:97:16:2E:A2:5B:8F:E3:88:AC:25:00:FF:2B:40:AD:13:76:93
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       019BDF5C175CE15910D5B116CE8001393F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          17DC
Signing time:             Wed 21 Jan 2026 07:01:53 +0000
Manifest this update:     Wed 21 Jan 2026 07:01:53 +0000
Manifest next update:     Thu 22 Jan 2026 07:01:53 +0000
Files and hashes:         1: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (hash: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: Dqc1AcJUkP2vaMvLZ2UOtYVy3H95C3yWif9gHLNYXHg=)
                          3: wCh-pphXrFlnVedivymKoSdB-PQ.roa (hash: RWZ4wkHC1VRgI9WF5HxhbBtNjKgc6U0S8oWX6yGUEvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 07:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:df:5c:17:5c:e1:59:10:d5:b1:16:ce:80:01:39:3f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Jan 21 07:01:53 2026 GMT
            Not After : Jan 22 07:01:53 2026 GMT
        Subject: CN=178697162ea25b8fe388ac2500ff2b40ad137693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:84:a2:51:94:e0:e7:df:6d:1f:6d:d0:ab:
                    9e:5f:39:6f:7f:12:a0:b6:ab:57:e8:66:aa:b1:86:
                    61:f5:5f:86:2e:24:b1:9a:21:0d:75:55:ac:06:8b:
                    a5:76:67:8d:bc:ea:4b:72:31:fc:53:3e:56:e3:7e:
                    31:24:88:66:7b:4a:72:bf:69:5f:90:9a:d5:76:72:
                    11:5a:3d:8c:e0:e1:5b:a6:5b:70:ee:e6:8f:16:b9:
                    86:f1:52:a0:41:51:c6:11:d6:da:bb:41:b5:3c:8d:
                    ac:b5:6c:c8:0a:bc:3f:2c:c1:66:cd:57:1e:83:bb:
                    a0:9c:f0:35:92:46:5d:c5:2d:b7:6d:6d:16:a0:d1:
                    c5:2d:e9:ea:ab:35:1d:c2:07:96:cd:38:e0:fc:89:
                    9c:20:3d:63:98:7e:8c:b4:ae:3a:c6:5c:59:67:ba:
                    8f:59:7c:0f:15:73:1f:3c:bf:28:e3:e8:63:20:4f:
                    e4:5e:7f:a5:b7:47:76:92:5f:8b:3b:1a:4a:2e:56:
                    f9:58:73:2a:30:5a:a8:67:e9:b0:ff:08:3e:00:bf:
                    eb:5f:92:81:6c:d3:fb:c0:50:11:81:7e:00:a7:ea:
                    87:e4:92:89:68:cd:77:00:39:7f:84:20:83:b6:a3:
                    2f:a8:31:23:78:c2:19:f4:6f:eb:e4:e2:d7:7d:78:
                    11:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:86:97:16:2E:A2:5B:8F:E3:88:AC:25:00:FF:2B:40:AD:13:76:93
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:42:48:ec:3f:b4:13:4a:24:8c:6f:cd:97:91:6b:cb:fd:ca:
         c3:22:66:cc:fd:29:20:1c:9b:db:5a:0d:bd:a7:ad:21:54:f1:
         3c:2a:3d:36:7a:81:16:2e:72:5f:e5:74:bb:a7:f9:ee:1d:ef:
         50:78:58:14:8b:a0:2c:6b:d8:f9:01:9c:dc:f5:67:c5:b0:3a:
         7b:3b:87:2e:89:8b:59:79:b8:50:a3:85:ae:0d:6c:bb:7c:6b:
         8f:98:58:e2:47:a5:0a:86:8d:0f:60:fa:12:b1:a6:6e:5f:d8:
         38:f9:33:02:38:ee:46:59:d8:7d:30:10:4c:81:a8:5c:45:d5:
         c9:79:6b:a1:fb:bf:83:0e:16:75:d8:32:95:32:5c:4c:ba:f5:
         87:7e:52:fc:57:a4:39:54:cf:c1:ac:f6:5d:d1:c2:fb:de:e3:
         d8:ad:e7:a3:34:af:8b:c6:3b:28:b8:f5:4c:8f:28:b0:7d:52:
         d8:11:21:43:e8:d3:30:83:90:9f:87:d6:06:f1:01:09:63:a1:
         a0:28:5f:a4:69:b2:e9:79:97:7c:d4:e6:a7:d7:e5:27:ef:8c:
         f6:91:33:e3:e4:a6:27:d4:13:19:03:08:24:b7:38:fd:0a:b3:
         59:94:1d:9e:01:ec:63:e5:b7:d9:50:30:c3:1b:ac:89:cf:45:
         6d:b5:e4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:30:45 2026 by rpki-client