This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
File:                     FFXKMFkjEziJJe4UQQCa0x1LtB8.mft (raw, json)
Hash identifier:          M67cizS+q2hp6vGLK/Qkpp/1nYevHeKStOjgBOiGoXg=
Subject key identifier:   89:7D:67:53:06:0B:56:5B:6D:3F:75:6D:54:6A:55:AA:E2:EB:53:EE
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Certificate issuer:       /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial:       019BF8E4404A80DAEC51729DBF569F9D77C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
Manifest number:          0234
Signing time:             Mon 26 Jan 2026 06:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 06:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 06:01:06 +0000
Files and hashes:         1: FFXKMFkjEziJJe4UQQCa0x1LtB8.crl (hash: ikcP4t5DlOWOAmpjzJtYl9P8Gw0gGE5nG7aLzCJTSqU=)
                          2: W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa (hash: 0CCMus3U6y/Vhpkh6RFJf4seKPVSo2QOmMSt3f+sxgc=)
                          3: ghhUI-e3iC-VVQBJUymOLNQq5DA.roa (hash: Dkgbj1+OrDZzm++zFchEQsBrWz1XZhyfmgyW8LR2nG0=)
                          4: oVJBkQA-O0NzrQgh8tJmHAKTQWQ.roa (hash: bAWpRSTao5SUodimZihTy0UH7Q46FL0EVHclliB3Pco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 06:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e4:40:4a:80:da:ec:51:72:9d:bf:56:9f:9d:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
        Validity
            Not Before: Jan 26 06:01:06 2026 GMT
            Not After : Jan 27 06:01:06 2026 GMT
        Subject: CN=897d6753060b565b6d3f756d546a55aae2eb53ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:26:ca:79:18:58:2c:55:cc:69:5a:33:09:b1:
                    9b:a4:35:33:df:a2:4c:14:2a:53:c6:d6:f8:07:b5:
                    03:39:e3:10:b9:4b:8f:84:f6:99:ac:6e:58:4d:6e:
                    40:39:2b:b6:42:3f:97:46:4a:51:f5:2c:bf:1a:fb:
                    d2:bb:d2:3f:6f:4f:30:fd:8d:a5:66:c4:09:f1:42:
                    8a:26:29:ba:f0:29:9a:73:24:9f:da:44:be:1a:3c:
                    7d:2d:51:ae:e1:f5:3a:1d:27:b2:3b:94:a5:3d:35:
                    98:1b:be:51:af:9e:76:96:40:42:de:5b:f1:19:51:
                    96:b7:2c:07:e9:ad:5e:82:f0:a1:d1:c8:13:a6:aa:
                    b8:df:c5:0e:91:6b:3c:f9:2d:5e:0c:45:e4:45:a2:
                    35:93:63:60:35:9a:56:84:ae:a7:da:56:5d:3a:af:
                    61:5a:d1:42:b7:be:dc:31:d1:5a:07:ee:e8:46:84:
                    73:34:df:38:8c:cf:5f:ea:f5:6b:c5:9d:72:5d:02:
                    3d:82:b4:3b:ed:e5:bd:3a:f9:e1:7c:11:b7:2d:d6:
                    e9:80:92:2b:31:73:af:e3:d0:f0:7b:da:f3:dd:7a:
                    10:b1:36:ad:26:d4:f8:7d:8b:cf:ec:71:3b:13:62:
                    5a:32:29:8e:3d:6a:61:68:24:30:c4:30:77:02:24:
                    d9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:7D:67:53:06:0B:56:5B:6D:3F:75:6D:54:6A:55:AA:E2:EB:53:EE
            X509v3 Authority Key Identifier:
                keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:7e:87:4b:87:0f:d2:a1:e7:26:67:02:d6:95:ee:71:f1:19:
         5e:95:13:7b:80:b8:01:e8:98:17:60:06:e9:03:c8:80:30:44:
         34:de:5e:1c:51:b8:38:9b:ab:6e:12:2b:66:34:ef:30:36:a3:
         95:d4:1f:d9:c1:cb:f1:86:ff:5a:7b:17:df:0d:1b:b3:8b:16:
         ff:84:0c:c7:7d:86:23:bc:7a:9a:5a:56:ac:7a:9a:ea:30:80:
         84:0b:ea:07:74:1e:ca:a5:01:dd:b6:a3:cf:cd:12:86:3f:4c:
         b6:d2:8a:9e:03:54:0f:c3:98:a5:e5:5f:4f:2a:d4:05:28:4f:
         71:aa:ab:19:42:7d:d7:c6:43:6e:96:1e:ac:5e:68:74:f5:b2:
         58:39:f7:ea:4b:e9:ef:29:29:08:83:80:d3:48:60:a9:f4:3c:
         ec:a4:c1:83:ad:2c:46:43:ff:d4:4c:f3:bc:88:18:0c:65:b0:
         00:9f:10:64:6b:e3:9c:68:b2:95:21:5d:68:2c:84:80:c2:8f:
         23:3d:63:f6:73:8a:3d:fb:ec:1d:64:5b:94:dc:cf:f4:d8:0d:
         04:f9:64:54:26:32:85:a6:7b:ed:3c:a0:0b:a3:e7:8c:f9:25:
         31:49:bc:1f:15:e7:b9:6c:c2:97:14:36:57:da:de:08:1d:d9:
         48:62:b6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:02:26 2026 by rpki-client