This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
File:                     CvYXmN0YllwCevp_k64DD_Xh124.mft (raw, json)
Hash identifier:          nr9CRv5G7JXSpX1/9JPOi0e0avzBb0k7gC0177flx+c=
Subject key identifier:   69:63:57:7A:6C:A4:E6:50:9B:1D:E4:5F:A8:E6:B9:43:AB:DF:5D:93
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Certificate issuer:       /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial:       019BF61A0084868E855AC704CFF2FB78B8C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
Manifest number:          14D7
Signing time:             Sun 25 Jan 2026 17:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:57 +0000
Files and hashes:         1: CvYXmN0YllwCevp_k64DD_Xh124.crl (hash: bNHNSjh95xHpFijDndMOBm9yRUVbecCVPRqK7F7HPsY=)
                          2: DLJ6pZv9v7RsH8F6VQ_lW5bFnMQ.roa (hash: 3HjtcIEeBbHEpbePsORrm3Haa0CT/ayAnCW+7f+DUPc=)
                          3: FPRZaioA3xTO8msfX7PiUSgZVV8.roa (hash: /PvCGs9dQFAFmDQQLy53W0qWLgzSHrzsRVaAJqUCXKA=)
                          4: J2C83EkvxD6iiZWZI7R55RnGw40.roa (hash: UFEPU6QtSK4CNxqVRsk/kKd8o66/L85/1kUHWB5E8KQ=)
                          5: Stk5MKqwBhBjb3L_P55-ZdzOHP0.roa (hash: Fqr9M/KLr45EsMm0E2sjuvLpW1BPCxvYeLyhbh2RAos=)
                          6: ajQLDkbaiYjg9Ewq8A-W74AJY3o.roa (hash: vwPS5qwXBcM3Cg51hjkpOyz2MNXBUsFRFNEN5LMCq6I=)
                          7: c41uW2WZ-6Q5YK92YHQzNZYEKhM.roa (hash: aQ6L7ic1wbkKyG8vlw3gYFtNy2gVxv0/rtyRYP1HzOA=)
                          8: fu8EFLBF_9xBbOEHVnyNLRJnHa0.roa (hash: dKtegHQwYF7coZssB47iAI52kF7RHO6JNg34A6o1Uv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:00:84:86:8e:85:5a:c7:04:cf:f2:fb:78:b8:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
        Validity
            Not Before: Jan 25 17:00:57 2026 GMT
            Not After : Jan 26 17:00:57 2026 GMT
        Subject: CN=6963577a6ca4e6509b1de45fa8e6b943abdf5d93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:64:5e:ed:55:fe:f4:15:81:fe:d8:62:d0:
                    d9:48:8a:ee:4d:c5:48:d8:7e:3a:db:e5:a7:3d:a0:
                    13:aa:9b:7c:66:5a:c8:e1:96:5d:2f:30:8e:79:c8:
                    b1:bc:88:df:14:04:11:50:4d:85:40:79:27:b3:99:
                    1a:70:06:10:d3:e1:b1:e0:da:fc:56:3b:57:49:d2:
                    8f:54:e9:db:77:ed:1f:a4:32:95:2a:83:30:7a:0c:
                    99:0d:f6:82:8d:ea:53:aa:1e:cb:59:27:8f:df:c3:
                    98:f0:94:5a:b1:01:f4:05:9b:ba:57:91:99:a4:39:
                    df:42:f7:6b:99:43:1c:95:55:7c:91:cb:f0:7b:03:
                    88:b7:6a:d6:5d:dd:c0:d4:37:85:db:d3:d3:c5:f0:
                    20:04:6e:59:3b:97:da:d4:33:91:f2:57:30:86:d5:
                    5b:e4:68:16:95:36:d1:4f:57:71:a7:45:38:96:83:
                    4b:df:3d:88:c5:0f:37:fa:61:d2:a7:79:68:ce:a2:
                    d0:f6:5f:0b:8a:21:64:5f:c1:02:8f:5d:ca:3e:05:
                    bb:59:f0:fa:c4:e3:24:23:2a:a5:5b:a3:cb:bf:69:
                    bf:f1:c8:5c:a4:cb:da:b0:64:42:58:a9:be:bb:93:
                    28:aa:d0:c0:2a:04:d5:19:86:25:e3:cc:8c:22:cf:
                    20:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:63:57:7A:6C:A4:E6:50:9B:1D:E4:5F:A8:E6:B9:43:AB:DF:5D:93
            X509v3 Authority Key Identifier:
                keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d0:e8:89:cd:7b:83:3f:98:01:7b:3e:25:f7:dd:40:51:54:
         a5:a4:ee:76:a0:0e:1e:37:70:e7:d6:08:ce:76:da:c4:c0:98:
         06:dc:ad:6b:56:f8:1b:50:b7:1c:7a:5b:e9:7f:18:ad:21:d0:
         c5:65:6e:ea:9e:9f:37:78:7e:53:93:95:cb:be:90:e0:10:49:
         e2:d5:8c:e2:cc:0a:a0:18:43:7b:98:02:ae:e8:97:90:e7:fc:
         43:cf:d8:46:26:fa:33:86:20:67:0a:54:7a:52:90:1e:92:2f:
         21:33:e2:02:57:8b:c0:7a:40:60:13:f8:82:f4:6f:e7:26:d6:
         f5:9d:8d:61:6d:1d:2b:fa:a0:d6:88:87:84:f3:47:44:7b:92:
         8b:8f:fa:51:9c:a9:ce:5a:b0:f1:59:63:78:bd:75:27:b0:8c:
         c3:d8:60:e9:43:0f:c9:fd:0e:32:01:bc:af:7b:6e:e7:a7:48:
         4b:94:82:62:08:28:68:ac:9e:48:37:a8:06:b2:fe:95:02:c3:
         e7:63:72:31:93:24:a4:1c:b9:e7:c4:cc:49:81:8a:e4:db:7a:
         ac:11:27:99:0b:73:55:99:3e:62:95:35:b6:d1:49:4c:f5:20:
         11:02:d5:ff:b7:4f:1e:6a:16:58:62:74:8e:0c:02:cb:9b:5e:
         9b:b3:99:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2GgCEho6FWscEz/L7eLjIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl
MWQ3NmUwHhcNMjYwMTI1MTcwMDU3WhcNMjYwMTI2MTcwMDU3WjAzMTEwLwYDVQQD
Eyg2OTYzNTc3YTZjYTRlNjUwOWIxZGU0NWZhOGU2Yjk0M2FiZGY1ZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtURkXu1V/vQVgf7YYtDZSIruTcVI
2H462+WnPaATqpt8ZlrI4ZZdLzCOecixvIjfFAQRUE2FQHkns5kacAYQ0+Gx4Nr8
VjtXSdKPVOnbd+0fpDKVKoMwegyZDfaCjepTqh7LWSeP38OY8JRasQH0BZu6V5GZ
pDnfQvdrmUMclVV8kcvwewOIt2rWXd3A1DeF29PTxfAgBG5ZO5fa1DOR8lcwhtVb
5GgWlTbRT1dxp0U4loNL3z2IxQ83+mHSp3lozqLQ9l8LiiFkX8ECj13KPgW7WfD6
xOMkIyqlW6PLv2m/8chcpMvasGRCWKm+u5MoqtDAKgTVGYYl48yMIs8guQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGljV3pspOZQmx3kX6jmuUOr312TMB8GA1UdIwQY
MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt
ZDZlMWUzNDdmOWM3LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3
LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjdDoic17
gz+YAXs+JffdQFFUpaTudqAOHjdw59YIznbaxMCYBtyta1b4G1C3HHpb6X8YrSHQ
xWVu6p6fN3h+U5OVy76Q4BBJ4tWM4swKoBhDe5gCruiXkOf8Q8/YRib6M4YgZwpU
elKQHpIvITPiAleLwHpAYBP4gvRv5ybW9Z2NYW0dK/qg1oiHhPNHRHuSi4/6UZyp
zlqw8VljeL11J7CMw9hg6UMPyf0OMgG8r3tu56dIS5SCYggoaKyeSDeoBrL+lQLD
52NyMZMkpBy558TMSYGK5Nt6rBEnmQtzVZk+YpU1ttFJTPUgEQLV/7dPHmoWWGJ0
jgwCy5tem7OZeA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:29 2026 by rpki-client