This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
File:                     du8KDuj6FU162kOK8SEiac4KzEE.mft (raw, json)
Hash identifier:          TVkXSa8nhDPxMeUwE+qwu/vpLVuJ64xBPZluoyixEaw=
Subject key identifier:   7F:27:F3:56:42:A7:22:03:59:71:C2:20:FA:62:28:C1:8F:36:9A:D6
Authority key identifier: 76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41
Certificate issuer:       /CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
Certificate serial:       019BF3F4A8E270F9D9A32A6D69E011748F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
Manifest number:          075D
Signing time:             Sun 25 Jan 2026 07:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 07:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 07:00:55 +0000
Files and hashes:         1: 8X-KoCS_CU8kURq_ZAZXVIOmK14.roa (hash: SJRCGCTLI7qRzpMlBdPbpnoh4a93nmWJa23zttRgkJI=)
                          2: ahVZlR8V-SCq0qGs2Ba8PCHK87c.roa (hash: 4mAnuGZm3yJjfvM0MnpTHsToaK6IwB9ToRFiX7Ssoj8=)
                          3: du8KDuj6FU162kOK8SEiac4KzEE.crl (hash: GlEl8N5ysPwnTNF+MOhhCfxyMlRwpu6LZkNZ2lOQrUI=)
                          4: f9BVLAip7ndiLMIkBamn3zQu3IA.roa (hash: 67NYj05lmXLMB7WB8zJUBcnZzB3Nm/KReJjNyPG8c+o=)
                          5: vbJFubKoe57vVKHqUA-HZghNpIw.roa (hash: YCX9UsXniCoP5xRmTzYMDDvpToHqW+Wl+uPQWMRLB04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f4:a8:e2:70:f9:d9:a3:2a:6d:69:e0:11:74:8f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76ef0a0ee8fa154d7ada438af1212269ce0acc41
        Validity
            Not Before: Jan 25 07:00:55 2026 GMT
            Not After : Jan 26 07:00:55 2026 GMT
        Subject: CN=7f27f35642a722035971c220fa6228c18f369ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:7f:f2:5c:98:63:56:7d:52:a9:16:d8:ee:
                    50:86:d1:b2:31:51:d1:67:ad:9b:6a:46:dd:30:64:
                    0a:77:42:f6:2c:06:8c:53:e3:77:f9:5c:9e:40:a8:
                    c1:9f:1b:97:64:ec:2e:16:9f:7f:b4:e6:34:0d:c3:
                    c8:b2:1d:9c:c5:7b:5e:ca:ab:9b:aa:ba:16:6a:5a:
                    d1:c4:1d:60:0d:b7:b1:b1:25:04:0c:67:17:48:57:
                    59:91:9b:98:ba:56:ce:2b:0a:31:72:48:94:59:b1:
                    0b:45:f4:b2:a6:87:cc:96:82:1c:21:ed:2b:d6:a3:
                    a4:7a:cd:39:51:21:c8:3b:cb:d7:3d:17:73:28:74:
                    18:5d:ca:82:55:8d:92:6d:ea:8c:68:35:17:47:ec:
                    2f:85:ed:48:e6:75:aa:f7:c8:fe:56:2f:68:89:c7:
                    5e:50:eb:38:9b:38:69:03:fa:98:f3:6f:bd:19:ca:
                    eb:70:af:7e:0e:85:92:63:e7:32:01:bc:8b:07:db:
                    43:2d:b2:3b:0d:ef:d1:3b:76:a2:d7:da:c9:6a:ac:
                    e8:95:0a:a8:1b:40:1a:f6:1f:d8:78:f8:88:20:da:
                    18:fd:4d:cf:77:5d:25:19:ac:34:dd:38:22:cc:4e:
                    86:21:31:fd:f1:f4:a7:c7:7f:3d:ba:10:02:a1:a1:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:27:F3:56:42:A7:22:03:59:71:C2:20:FA:62:28:C1:8F:36:9A:D6
            X509v3 Authority Key Identifier:
                keyid:76:EF:0A:0E:E8:FA:15:4D:7A:DA:43:8A:F1:21:22:69:CE:0A:CC:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/du8KDuj6FU162kOK8SEiac4KzEE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/1686c3-da70-4b54-ab2b-3be995d2bbda/1/du8KDuj6FU162kOK8SEiac4KzEE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c8:bd:80:58:8a:66:a9:d5:20:40:d1:3a:a7:eb:aa:2b:03:
         a6:49:69:67:ea:ad:bb:72:98:bf:43:c5:ba:a7:d8:88:05:cb:
         b7:45:38:b4:54:2f:eb:31:27:15:94:e1:5e:0e:e3:18:c7:87:
         f5:23:b6:2a:cc:ad:b1:d0:4c:ed:e6:93:f6:47:38:8e:df:53:
         3a:37:07:f6:27:3a:1b:aa:ee:c7:fb:87:5f:02:ab:51:9f:7a:
         3c:c5:ab:c6:48:2c:2f:b3:e0:ed:92:18:ec:c6:99:02:d5:4d:
         09:76:7d:b3:a7:52:0e:27:de:9c:a1:92:b9:66:a9:1f:86:02:
         e1:ae:be:2e:48:e9:19:0c:c4:cd:54:da:06:1d:2c:0d:a6:23:
         4a:40:78:36:7f:6d:df:1c:18:7e:73:1f:aa:33:cb:57:94:08:
         f8:c7:4d:c7:9e:37:a8:8f:7f:33:f8:e4:e6:f3:76:09:47:b9:
         f5:a1:56:2c:90:17:7e:25:1a:ae:63:fa:9d:3f:53:d2:88:0d:
         28:dd:81:c6:1d:2c:c8:de:3f:18:fb:db:fd:90:3b:58:07:f5:
         d3:a2:fc:1e:84:21:75:15:b9:59:71:7d:a1:17:2d:d0:79:f8:
         72:d4:8c:44:0e:32:00:f4:bc:29:d9:e2:97:a4:ba:66:9f:39:
         e2:85:2b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:43 2026 by rpki-client