This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          AZRcjgQQCPqxhGAn7UaZ7agjpV2hz7yxYGTfw/ae4JU=
Subject key identifier:   0D:B0:73:89:7B:65:10:29:26:5D:4D:11:EE:B3:BA:A0:73:4F:EE:02
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       019BF319050F3D5AACC9E2C3E1F576D6604D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          1806
Signing time:             Sun 25 Jan 2026 03:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 03:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 03:01:01 +0000
Files and hashes:         1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=)
                          2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=)
                          3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=)
                          4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=)
                          5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=)
                          6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=)
                          7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=)
                          8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=)
                          9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=)
                          10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=)
                          11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=)
                          12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=)
                          13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: huCn0QbUIu1GijNJZjOB2ReLpDOoRH0Fqf32EXs1qls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 03:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:19:05:0f:3d:5a:ac:c9:e2:c3:e1:f5:76:d6:60:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: Jan 25 03:01:01 2026 GMT
            Not After : Jan 26 03:01:01 2026 GMT
        Subject: CN=0db073897b651029265d4d11eeb3baa0734fee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:b5:7d:69:3b:f8:17:88:b0:cd:7a:b9:01:
                    cc:85:fb:c3:df:67:fb:55:6a:9f:b9:29:17:30:4b:
                    1f:e6:9d:c0:c6:29:26:7d:94:e0:fa:45:3b:e3:bd:
                    4e:dc:2c:0f:2d:1d:aa:01:f6:d9:ab:b3:b3:ce:6b:
                    35:53:33:82:02:37:9c:99:66:03:dc:52:d0:b6:00:
                    98:38:3a:e0:0f:d0:1d:6f:1c:be:d3:b5:45:66:a0:
                    d9:60:f2:89:5f:98:0b:67:d7:dc:f5:4f:53:5e:12:
                    72:07:53:a2:4c:da:2c:f4:96:8d:46:f0:95:9f:52:
                    72:15:52:c3:14:e0:c7:9e:d5:2d:be:19:db:7d:72:
                    31:38:f5:c5:06:65:ec:f0:7f:c3:99:4a:f7:61:56:
                    74:65:95:c9:39:f0:58:c9:a0:c9:ae:f3:77:13:13:
                    cf:09:ea:94:ae:3d:45:af:d1:ce:0f:d2:7f:92:37:
                    82:06:e8:44:37:9d:d3:77:bd:2b:c6:18:22:08:15:
                    0f:99:43:3a:f7:3c:4e:21:8d:1f:ca:28:28:2f:4c:
                    10:11:2e:86:ae:ea:bf:08:5f:2b:f2:63:02:28:d7:
                    48:2c:3a:5a:39:ca:34:d9:9d:5a:4b:6b:49:ea:bf:
                    b5:26:c5:1d:7b:8b:ff:24:99:a2:5d:b7:49:b8:b6:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:73:89:7B:65:10:29:26:5D:4D:11:EE:B3:BA:A0:73:4F:EE:02
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:4f:e7:2e:15:8d:b9:85:f0:14:94:db:eb:7a:5f:7c:b5:a4:
         54:ce:03:75:be:78:ce:f3:e1:27:ce:49:11:f6:18:64:a2:6f:
         56:cb:0b:1f:3e:5a:87:d7:08:2e:d0:95:e4:5b:d7:03:d2:35:
         5c:6f:9c:cd:56:94:41:73:59:21:d5:16:c8:99:38:d4:25:0f:
         96:62:13:51:11:08:7a:83:3a:91:ce:dc:d2:c6:34:1d:87:63:
         78:f6:0c:f2:da:6f:e8:63:71:1b:f3:b2:08:bf:0c:cf:e6:ea:
         27:c3:44:ba:35:e5:0f:bc:cc:fb:0f:12:05:75:f1:30:41:18:
         0c:86:57:3f:73:4a:0a:38:d0:b7:46:68:4b:23:09:b3:2b:ad:
         eb:9e:16:b7:db:5b:45:73:8c:0a:72:fb:d9:75:f4:c8:c2:c2:
         36:53:0c:2d:4e:37:d7:62:44:da:a7:d5:c9:4a:f1:58:5f:c9:
         f2:fb:ee:df:23:c3:56:64:a3:1a:9b:4d:0f:19:8d:a0:66:f6:
         df:13:c1:49:3b:ab:ec:fb:7b:8c:c9:96:03:43:2b:f9:a6:e6:
         ff:09:d0:b8:9f:72:94:a0:b1:d3:2b:34:f0:b5:30:f7:c3:19:
         ae:86:58:ca:70:f5:84:25:e0:23:50:46:67:70:37:a7:f2:94:
         df:e7:32:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:56:31 2026 by rpki-client