This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
File:                     cw4Zvy8v23MCMtosRVGjEro-LuI.mft (raw, json)
Hash identifier:          LtyocigzBLh7ukGCXcXfXCeM2ibiJUP0yDeI5IGxdYY=
Subject key identifier:   8B:24:5C:EE:FE:6D:32:F0:4E:0B:57:34:8A:D8:4D:59:8B:DB:3A:0A
Authority key identifier: 73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2
Certificate issuer:       /CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
Certificate serial:       019BD6FD1264215611F593D7AD39BBBF78AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
Manifest number:          17E0
Signing time:             Mon 19 Jan 2026 16:01:08 +0000
Manifest this update:     Mon 19 Jan 2026 16:01:08 +0000
Manifest next update:     Tue 20 Jan 2026 16:01:08 +0000
Files and hashes:         1: 6TWVbOo0aRZmcX_sp3lPD9CiZdI.roa (hash: gPmBms7Ee3F+CBTlSi6nlg1BBxS+Ey8K66xwmLZe70g=)
                          2: Nzu07THw6Tky2XNtILrXxTbGAF8.roa (hash: EeS9tyAj4w8h1PE9Nvgak38E714oDDd68R5eMJ76c6A=)
                          3: Q5LeXJAR5nv8pnxIZARZWuAM-YY.roa (hash: W5ivVLyzbxcE+HpeC9koFj+JQtU4yM66sZ1hanJqHv0=)
                          4: cw4Zvy8v23MCMtosRVGjEro-LuI.crl (hash: Uy/EjamDuAZEnH8HA/9pxTODzZ/6qwciykwnVGc+HM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d6:fd:12:64:21:56:11:f5:93:d7:ad:39:bb:bf:78:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=730e19bf2f2fdb730232da2c4551a312ba3e2ee2
        Validity
            Not Before: Jan 19 16:01:08 2026 GMT
            Not After : Jan 20 16:01:08 2026 GMT
        Subject: CN=8b245ceefe6d32f04e0b57348ad84d598bdb3a0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:55:98:2a:9f:65:10:f4:c4:8f:ed:1b:e2:5f:
                    e7:40:ba:66:f1:05:57:82:36:8d:a8:aa:76:8e:96:
                    1e:61:25:0b:5f:b5:7b:8f:ce:59:91:6c:7c:e3:a5:
                    9f:96:e3:6a:07:14:a9:93:e6:4a:73:57:59:e5:a3:
                    2d:8a:97:06:12:57:f4:cc:ed:38:ea:53:0a:4f:20:
                    52:50:60:3a:1a:d3:fa:37:42:1b:07:79:e1:82:23:
                    27:84:78:be:c4:19:9d:f8:b3:26:75:1a:bb:09:c1:
                    e4:70:0a:ef:18:e6:98:9f:cf:f5:b9:da:0b:3b:07:
                    95:52:f5:61:8b:a2:10:39:aa:8c:f6:21:a7:49:8b:
                    7b:9c:47:d4:b4:3f:ce:83:06:22:fd:41:1c:28:da:
                    a4:1c:e8:ef:56:c6:ad:4d:f1:0a:3a:43:28:d9:7c:
                    bc:73:59:ad:3b:c5:88:ab:fb:a6:68:0d:e7:29:3c:
                    56:f3:18:11:7a:c3:83:44:9e:7f:37:9e:4e:5a:58:
                    3e:e6:28:6e:b6:12:a7:40:dd:00:36:41:f3:79:14:
                    8c:83:77:3f:60:5e:66:6b:d1:c4:19:4f:48:bb:a4:
                    aa:ea:ce:95:88:1a:bb:90:fe:ed:50:8b:a7:1e:27:
                    6c:2c:aa:c0:0a:d0:ec:0c:07:5f:0d:cb:3e:30:68:
                    47:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:24:5C:EE:FE:6D:32:F0:4E:0B:57:34:8A:D8:4D:59:8B:DB:3A:0A
            X509v3 Authority Key Identifier:
                keyid:73:0E:19:BF:2F:2F:DB:73:02:32:DA:2C:45:51:A3:12:BA:3E:2E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cw4Zvy8v23MCMtosRVGjEro-LuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/e81755-4592-4f20-af70-caf951e1531d/1/cw4Zvy8v23MCMtosRVGjEro-LuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:e0:80:66:4a:1f:8f:3c:08:3f:6b:bd:85:54:8c:4e:6c:b6:
         99:01:4e:67:e5:0c:d3:64:9f:3d:85:af:04:3b:28:22:db:88:
         28:f7:fb:65:55:83:ed:0b:f9:5a:6a:30:0a:00:bc:3e:7c:13:
         a3:f5:f4:77:8f:e4:95:d3:d5:9e:5b:23:d0:a1:65:48:ec:ba:
         76:a7:f9:98:a0:f3:af:28:10:0e:1e:f9:01:af:af:3a:02:3b:
         53:bc:a3:e9:57:c8:5e:bf:2b:72:cd:ec:32:d1:bf:91:99:8a:
         9f:99:89:cf:b2:a1:e5:a2:3e:f2:f3:5d:e8:ec:98:17:4b:dd:
         4e:76:6e:33:63:1b:c6:2f:76:99:70:6c:78:80:8a:a8:ad:63:
         24:99:6d:ac:61:4b:77:e3:24:ff:04:5c:e7:c7:88:72:25:e5:
         87:71:93:b0:f2:c8:02:58:18:c2:ce:bf:79:3a:62:50:64:b8:
         f6:a0:ad:5d:46:ec:6a:d3:77:2f:23:ad:e3:15:bb:79:dd:57:
         ff:7f:84:bd:97:7a:e2:90:13:4f:b5:cd:96:ea:4e:c0:c3:ed:
         6c:20:43:31:da:ec:2b:2f:6b:3e:ab:1e:33:9d:ff:ef:e8:c7:
         1a:b2:7e:4d:bf:ef:0c:77:f9:a4:0c:2e:46:76:f9:3c:48:95:
         ed:a6:10:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:29:34 2026 by rpki-client