This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
File:                     Djye4b4zCP1r1KfHrCudkQCJt3k.mft (raw, json)
Hash identifier:          rnzTntLbd2hwgVIlvHSINwPYUXn/tyOoHaFaACICrUE=
Subject key identifier:   57:D4:38:A0:E0:6D:64:2B:25:70:79:48:8F:BF:CF:B7:CE:49:99:9E
Authority key identifier: 0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79
Certificate issuer:       /CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
Certificate serial:       019BF4626B5617EA3E815462FF18180DE2C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 09:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:49 +0000
Files and hashes:         1: Djye4b4zCP1r1KfHrCudkQCJt3k.crl (hash: I7gZYH0NeEDvdhbL56wPgHZe2cAMDMM1M32hP0E34Og=)
                          2: Rn3_9vFVXU06CNsxoJF1MmOpw7M.roa (hash: xyFTVjGVyU+raorbvx64u0pXwIGXyRN5Lt5srPA+50U=)
                          3: f-ogC67M0j6pmdbRailAwDmYBsk.roa (hash: AiwIB7mPfTBWZfsnFMwdI5gkTn2LtdcdGevndgaf5SE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:6b:56:17:ea:3e:81:54:62:ff:18:18:0d:e2:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e3c9ee1be3308fd6bd4a7c7ac2b9d910089b779
        Validity
            Not Before: Jan 25 09:00:49 2026 GMT
            Not After : Jan 26 09:00:49 2026 GMT
        Subject: CN=57d438a0e06d642b257079488fbfcfb7ce49999e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8c:bf:11:fa:b8:f9:c0:d0:8c:62:01:e8:27:
                    07:0c:37:7e:00:f5:98:12:b0:cf:53:a7:65:eb:fe:
                    98:f8:59:f6:ed:b5:a2:ce:ee:b5:f4:52:3b:62:10:
                    ea:ff:18:9e:d5:d7:c3:aa:ea:5a:98:44:6e:8c:2a:
                    99:b8:51:4b:37:68:51:7a:07:ec:78:be:1c:74:50:
                    9f:a9:e6:f6:2a:00:73:38:55:78:f6:16:79:18:12:
                    57:c9:f3:15:1e:d4:7b:39:56:e2:fd:72:6c:0a:71:
                    ae:08:29:33:6e:56:41:93:39:fd:18:83:b4:96:93:
                    1d:ee:0c:73:3c:f8:a5:36:20:13:a1:9d:45:1b:68:
                    28:df:3f:d0:1f:ea:bf:8f:29:dd:42:35:b3:19:97:
                    ff:20:31:d2:b4:9d:c2:81:a0:d8:a0:19:82:d9:45:
                    bc:0b:87:8b:db:61:a5:0a:e8:3d:9f:a8:24:f7:6a:
                    1c:48:87:25:b8:ad:7b:17:a2:0c:39:0e:21:df:bb:
                    9f:9f:6a:4d:c8:89:ff:90:87:df:67:d8:d3:ad:f2:
                    c1:86:0b:f8:67:47:8d:d2:8d:46:c2:28:fd:2d:25:
                    57:36:9a:ed:fe:ee:1d:a2:ee:3a:e6:94:2d:15:a8:
                    ef:c9:5a:85:b8:d6:bf:c3:dd:e9:a5:90:74:0b:3b:
                    ce:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D4:38:A0:E0:6D:64:2B:25:70:79:48:8F:BF:CF:B7:CE:49:99:9E
            X509v3 Authority Key Identifier:
                keyid:0E:3C:9E:E1:BE:33:08:FD:6B:D4:A7:C7:AC:2B:9D:91:00:89:B7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Djye4b4zCP1r1KfHrCudkQCJt3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/caa2da-5ebc-45cb-b8fe-08f3e8907c42/1/Djye4b4zCP1r1KfHrCudkQCJt3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:11:70:4e:ce:a0:ab:e1:f2:a5:3d:25:5d:c9:4b:f3:17:4e:
         ed:40:0b:7d:41:ff:16:34:7a:40:38:0c:fb:60:b4:ea:6f:24:
         a5:36:be:d9:c4:b4:d3:fb:8e:87:ba:48:05:0e:d0:8c:c5:e9:
         96:53:6e:92:ca:69:b4:83:86:94:e4:fd:9f:0c:3e:e0:df:03:
         86:3c:be:1e:49:d3:53:6a:5e:e4:1e:0e:b5:f9:8b:da:ca:e4:
         9d:9f:2d:a4:3f:a5:e6:cc:f7:86:f3:3d:69:3b:02:f9:1f:af:
         d5:33:fd:99:02:bf:97:2a:8d:63:4e:07:07:e6:5c:01:cb:e2:
         21:79:70:59:07:4f:f1:b5:8b:3f:81:d4:2d:93:14:2e:31:ad:
         18:1f:8b:48:d5:11:e4:d0:66:08:0d:46:aa:b3:2b:ae:c7:f2:
         f6:74:89:44:bc:58:43:ba:5d:e5:82:4e:83:5e:62:23:51:f4:
         5f:b4:44:81:a4:69:06:a0:54:23:3c:0e:c1:81:8f:71:41:04:
         26:26:6b:45:ec:8e:5e:6b:7f:8e:c3:0e:65:e0:67:b7:68:e9:
         0a:c0:bd:8f:9d:80:92:06:22:98:4b:bc:57:ee:84:28:b6:05:
         33:93:d6:e5:a6:0f:8e:6e:9f:6e:2c:43:0f:22:93:97:55:ac:
         d1:e5:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:14 2026 by rpki-client