This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File:                     dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier:          /Zq4o67QSBpgTI/cdC2b0pusJdDHMfcSoQdGfv6l2x8=
Subject key identifier:   15:10:56:AA:02:0F:CE:02:C5:15:4B:AA:DD:CE:64:62:D9:C3:4B:09
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer:       /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial:       019BF687A61B3305EDD782FEBE43645BFF13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number:          136A
Signing time:             Sun 25 Jan 2026 19:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:43 +0000
Files and hashes:         1: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
                          2: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: Oz3+ofJw31h7wt9I/yOYJOwdIUjjatRqlUxgjw5KXlY=)
                          3: hKLFSPa0iW1XzBfLJaDMo84eA1s.roa (hash: eG/xoTfgyJqNAYNur30ZD0Z6745jjcEOMSTYh+3y+lU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:a6:1b:33:05:ed:d7:82:fe:be:43:64:5b:ff:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
        Validity
            Not Before: Jan 25 19:00:43 2026 GMT
            Not After : Jan 26 19:00:43 2026 GMT
        Subject: CN=151056aa020fce02c5154baaddce6462d9c34b09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:cf:a4:a2:f4:3e:c6:4e:70:5a:68:80:89:
                    45:97:76:2f:27:3a:7c:4d:86:30:e9:18:bc:2b:4e:
                    7f:4d:52:72:44:59:49:f3:87:1d:c4:da:c6:de:9e:
                    5e:89:03:10:2d:0f:8a:5d:e2:f2:ca:26:89:27:ea:
                    d9:eb:79:c8:01:77:8d:19:95:a8:f3:8c:cd:40:fe:
                    72:c6:2d:fb:46:95:40:9a:f4:57:23:64:11:5a:11:
                    5d:f2:f0:e9:f0:4e:5f:ca:63:4f:81:ef:58:98:f7:
                    02:dd:46:1c:f0:28:d2:56:2d:d3:b4:0d:b3:a4:a0:
                    6c:29:e2:f1:07:c6:78:bd:37:84:f0:e2:68:b1:66:
                    13:0d:46:69:85:9c:e3:72:6a:6c:09:87:33:bf:36:
                    c3:b6:f3:c3:02:2f:cc:ac:d0:c6:4e:0a:b9:7a:6a:
                    35:34:d4:75:1c:ee:15:06:63:d0:3c:a0:63:af:c7:
                    fc:fb:52:fa:e2:01:1c:43:08:fa:e5:7d:70:4d:60:
                    94:67:c7:9c:78:7d:15:12:34:cd:4f:b4:a9:35:c6:
                    51:f6:e5:f0:2d:3a:5c:03:2a:f3:e1:25:83:84:de:
                    af:22:1e:e3:9e:0f:36:9e:07:09:f3:6f:86:ad:3b:
                    b5:79:5a:fa:57:96:50:3e:8d:90:b7:c2:ee:be:9c:
                    19:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:10:56:AA:02:0F:CE:02:C5:15:4B:AA:DD:CE:64:62:D9:C3:4B:09
            X509v3 Authority Key Identifier:
                keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:e7:67:b5:6f:df:8e:4d:0e:ee:b9:de:1f:ba:b6:b9:47:
         5e:a7:41:ea:06:5f:cf:7e:ae:e4:74:7e:ff:d7:f8:be:ce:dc:
         a1:4f:1d:9b:d3:45:ee:0d:44:dc:3d:9a:75:68:02:31:62:dd:
         a1:5d:49:ef:47:59:b4:75:51:04:f3:1b:aa:95:fe:3b:31:fe:
         76:c0:e2:2c:c0:b6:f3:e5:a5:f9:37:d5:7b:e8:13:0c:de:2a:
         2b:11:fa:65:6b:ea:09:60:a9:d5:4e:aa:55:3e:82:b5:52:c9:
         03:6a:75:cb:bd:20:d4:5e:75:1d:09:16:7a:ab:c9:8b:45:ae:
         0b:a4:c5:c6:5e:68:95:81:0c:64:a1:f4:4b:a6:5d:9a:1c:ca:
         7c:72:9e:eb:22:8b:a5:f6:48:65:3c:e7:76:ea:4b:61:1c:36:
         2e:94:38:27:d8:7c:5e:90:be:0c:01:5c:89:9d:38:ac:54:d3:
         ba:8e:c4:79:46:dc:7a:26:7f:f3:cb:b8:dd:c1:a3:b2:7a:b6:
         02:05:7d:80:b5:6c:89:85:f2:ad:48:9f:62:77:47:c0:dc:a6:
         9e:e0:10:38:b6:8d:ba:49:14:11:61:9b:a9:52:c6:da:1e:a3:
         5f:ab:84:66:a1:9c:c0:2e:a4:27:9f:ab:22:2c:bd:f0:5c:9a:
         60:14:bd:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:47 2026 by rpki-client