This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
File:                     Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft (raw, json)
Hash identifier:          AfWAhkp0Zbnsi53D/8NffGxEEJ2N6CQB04DUlaiiNv8=
Subject key identifier:   AC:AB:FD:57:0C:A3:98:71:E7:4A:1D:99:14:03:63:8F:FE:64:10:C5
Authority key identifier: 5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6
Certificate issuer:       /CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
Certificate serial:       019BF3F518E57221D57A1E52D364EB74CDE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
Manifest number:          0C0F
Signing time:             Sun 25 Jan 2026 07:01:24 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:24 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:24 +0000
Files and hashes:         1: 7bhQAxt7LG4RTh69WNyEDaY_6HA.roa (hash: dapwqJUlh8VuJr4YzwFIbO+Da6iaLyynpX+I2tkLj0s=)
                          2: J_SSKQI5qG2_bl4y8fHsm2Pf63w.roa (hash: UOGT2RhBA6tPeTqerB1WZ2vEx6H2vpB+E5UHZrjFo1U=)
                          3: T1FU-Jm7JYwNg0xKGTuY0V2-l_E.roa (hash: tW7AZ4KcZnYxw5pkQ3CADxYnfRfcY/hq4VXmAk2/rRU=)
                          4: WYbOXwxihj0bjLIXKj3u1ebytSY.roa (hash: t1z25B6Lt32VOFgFu4rCBJtBngirrzFPCmAMUlygmlc=)
                          5: X9LaIZvZk7QVXAM3DorY70TGSkU.roa (hash: 2sAg8BfA/gWKBYUqChRkOgn36XBOS6sN70Jy4EDCQX4=)
                          6: Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl (hash: WXPBPNgSAT0Rk3KQNc8OlR1IYt5XUeSQQlF+py/RAvg=)
                          7: dm6R5Y0rDPQEx3D9n2h0BIwl_0U.roa (hash: FxYpw3zVO69AVc5rp9FX5r+aLdXWK+KsfJVTY+QsNJ0=)
                          8: shjj7hyrahoIHbmyAEl19OuGu6Y.roa (hash: W1DcjBCIsHP6aoNvBFwm31SuTPO6dGz7Z05Xna7PSao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:18:e5:72:21:d5:7a:1e:52:d3:64:eb:74:cd:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd69d9f749630f0256cf0ceab58836b491a58f6
        Validity
            Not Before: Jan 25 07:01:24 2026 GMT
            Not After : Jan 26 07:01:24 2026 GMT
        Subject: CN=acabfd570ca39871e74a1d991403638ffe6410c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:84:f9:52:44:17:f5:39:e7:e1:d2:9b:14:
                    79:1e:0d:7d:f3:a0:ea:f3:80:6c:88:7b:b0:72:1f:
                    b2:5e:f4:de:ba:8e:16:9a:50:40:ee:53:13:d1:95:
                    fe:ea:c8:2d:1d:60:b9:22:87:82:eb:43:56:73:85:
                    a7:9b:0e:18:63:81:5c:2b:69:31:48:9b:34:9e:0a:
                    f1:62:f6:99:4e:f1:8a:57:0e:d5:28:f5:37:5e:06:
                    d4:59:e9:d0:a1:78:9c:e5:14:43:ee:4a:5d:5c:40:
                    12:e9:26:47:9e:f2:c9:1a:c8:25:0a:70:38:39:e0:
                    20:55:12:a1:10:f0:02:6a:7e:fd:5a:67:8e:a1:2a:
                    ee:f2:ab:a9:f8:87:bf:6c:d2:c9:20:3e:44:aa:fe:
                    e7:b4:4a:2b:0b:aa:62:f7:85:43:5d:27:df:4f:3e:
                    2c:24:6d:03:3c:5b:c3:d8:68:72:23:c9:3d:20:97:
                    67:d4:f6:b4:60:67:60:67:0f:04:dc:7c:26:1d:42:
                    72:54:67:3f:01:17:77:d2:fb:bd:66:44:43:f6:db:
                    26:96:7e:49:af:3c:ef:7c:1f:87:2a:89:c8:91:7a:
                    b8:e9:89:33:77:d6:53:fd:e4:2d:4c:d4:49:be:7a:
                    5c:c4:bf:76:61:81:0f:35:5b:e0:a1:6d:cc:47:03:
                    87:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AB:FD:57:0C:A3:98:71:E7:4A:1D:99:14:03:63:8F:FE:64:10:C5
            X509v3 Authority Key Identifier:
                keyid:5D:D6:9D:9F:74:96:30:F0:25:6C:F0:CE:AB:58:83:6B:49:1A:58:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdadn3SWMPAlbPDOq1iDa0kaWPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/616924-93b2-4dcb-aeeb-f3fd64331709/1/Xdadn3SWMPAlbPDOq1iDa0kaWPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:d7:fe:d2:f1:84:8e:3e:27:3c:e5:4b:98:c0:54:8c:17:96:
         1b:b0:69:c9:b5:dd:d1:40:e1:08:20:e7:c8:74:9b:fb:44:cc:
         9d:5e:e7:d7:79:eb:56:19:15:3b:23:3e:08:70:3c:18:72:eb:
         61:44:28:26:91:9c:fb:3b:ea:30:19:40:d2:6b:08:8d:4b:f5:
         98:3a:da:76:18:c7:4c:88:1f:71:70:a2:c8:e0:fa:b9:d2:2c:
         6a:06:a0:a8:52:01:3f:60:24:bf:b2:c3:40:f4:d5:51:19:3f:
         fb:b4:90:3a:2a:d9:eb:ef:ed:03:73:4c:20:09:62:c1:1d:17:
         a5:c6:cd:69:81:bd:23:6f:eb:56:b4:70:5a:13:37:b3:68:c4:
         64:b6:dc:f5:48:5c:e8:c9:6c:4a:07:34:b0:93:f1:dd:f8:8f:
         83:86:a7:8a:55:e7:4d:3c:ca:c3:bd:0d:95:6b:fb:2a:a4:66:
         e5:ca:e3:eb:13:e4:1b:23:45:83:f1:37:c4:26:c0:93:74:22:
         22:48:c8:bd:be:4c:3b:6e:63:4f:4c:c1:81:8c:c4:9b:aa:3c:
         d8:3f:3f:f9:02:9c:f1:58:e2:50:29:58:70:66:f3:f3:6a:ef:
         11:a5:dc:85:14:e7:31:df:77:b1:2b:b6:34:85:96:dd:c8:13:
         eb:62:fe:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:01:38 2026 by rpki-client