This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
File:                     gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft (raw, json)
Hash identifier:          O20wa0Z16jLyLIZZ1eqn0DXPwyKKMFuvx8bVK+mXoEk=
Subject key identifier:   A2:9D:20:87:AB:56:2D:1B:5A:CC:FE:60:37:44:6F:5F:0C:D9:E7:93
Authority key identifier: 81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03
Certificate issuer:       /CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
Certificate serial:       019BF72D7F4A75DF6C99328046F04DF997AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
Manifest number:          187C
Signing time:             Sun 25 Jan 2026 22:01:52 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:52 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:52 +0000
Files and hashes:         1: IUI0XObzqlXmJSe9907ojhvvGKY.roa (hash: lh17xK7xmqGsZK8e6QUcQhpWBvUMvRGKUOxPhaUyu88=)
                          2: gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl (hash: aSi2DxGRKpKV6flZlIf+pCm//06Ukc32nz07eg/8M04=)
                          3: yxM7J-fncjH39qOsj_6YqBGJVWU.roa (hash: AjHV8rOTeMWNj3biUMbUNtv+kWtvN/aGZ8u6KDIN/SM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:7f:4a:75:df:6c:99:32:80:46:f0:4d:f9:97:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81cca9f15e1921953a628c8ad2ac4be977b6c303
        Validity
            Not Before: Jan 25 22:01:52 2026 GMT
            Not After : Jan 26 22:01:52 2026 GMT
        Subject: CN=a29d2087ab562d1b5accfe6037446f5f0cd9e793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e6:8f:ef:83:ad:37:2b:1e:fb:02:91:9b:cd:
                    4e:ca:e6:f4:94:f0:9e:4c:bf:a5:a4:0c:d0:de:38:
                    60:1c:d4:30:ae:51:1a:b4:1a:69:a8:d0:18:92:0c:
                    98:7a:31:06:de:61:4b:e0:90:19:07:21:57:25:f2:
                    54:5b:d7:ae:1a:37:a1:3a:26:a6:43:de:98:49:8d:
                    85:96:bc:c8:87:6a:90:cc:52:b6:93:ea:03:a3:4b:
                    52:68:2d:7d:86:57:5b:bc:b7:2f:b4:fb:4b:64:4f:
                    11:9d:06:71:a2:64:b8:59:89:18:e9:ff:8a:36:8d:
                    55:ca:31:97:75:81:3f:07:dd:f0:04:c8:85:f7:70:
                    41:28:90:66:3b:be:0e:b1:f7:18:65:69:dd:33:99:
                    b9:02:81:31:59:77:7a:3b:5f:80:fd:b5:73:e9:29:
                    27:b0:d2:b3:38:b2:78:38:f4:0c:1a:d7:85:69:a1:
                    8f:74:f1:7e:a5:cd:27:a7:3b:52:fd:2f:b2:a6:7e:
                    95:32:dd:bd:ff:d0:71:3e:47:3a:6c:0d:91:6f:5b:
                    59:fe:7e:9f:2e:e4:a0:90:7a:5b:fe:45:9c:23:46:
                    6e:a2:ff:e9:31:89:df:fa:58:18:89:0f:85:69:1b:
                    bb:84:df:05:1e:2d:67:80:b2:e6:b2:78:33:0a:1e:
                    ef:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:9D:20:87:AB:56:2D:1B:5A:CC:FE:60:37:44:6F:5F:0C:D9:E7:93
            X509v3 Authority Key Identifier:
                keyid:81:CC:A9:F1:5E:19:21:95:3A:62:8C:8A:D2:AC:4B:E9:77:B6:C3:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1ea2b0-6b9a-44d7-a2e5-2206cc2e691c/1/gcyp8V4ZIZU6YoyK0qxL6Xe2wwM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:d6:16:b5:b6:81:a3:e0:1e:b3:a1:e2:9a:4e:94:2b:c7:99:
         c5:de:0f:42:ce:35:a7:27:3a:47:a8:06:0f:91:42:a7:15:2b:
         2e:2a:29:0d:6c:3c:b8:cd:63:9d:7e:ee:47:ae:29:60:b5:0e:
         6b:d2:37:b2:a7:fc:d6:e8:e1:b9:f9:25:49:54:eb:80:73:39:
         ad:58:81:f1:da:37:fd:75:c6:66:90:75:56:0e:cd:2e:2b:8b:
         27:98:3b:12:a0:23:26:48:e0:7b:1b:db:89:a2:d2:f1:39:3b:
         ea:ca:d7:44:06:9a:55:7f:c5:61:45:91:c4:f1:fc:60:8b:58:
         0e:80:14:cb:8c:ed:df:54:e2:ba:ca:11:6f:6c:7d:33:7d:b3:
         b0:b1:ce:75:20:61:c7:03:67:b7:c9:d4:20:0c:6b:65:dc:e0:
         44:34:af:eb:04:f4:8e:b3:7c:e5:fa:a3:5e:38:1a:a3:36:21:
         e4:c7:c4:05:73:ec:9a:55:52:06:b7:ca:dc:50:ba:b8:a8:48:
         7e:b9:6e:da:fa:6e:94:17:5d:93:1a:86:93:52:7e:58:f1:c5:
         26:ec:a7:4c:00:79:88:26:78:46:dd:43:28:27:18:e6:e7:8b:
         33:6d:06:80:a8:ec:31:95:6e:68:8c:99:5d:e4:f3:e0:80:a2:
         7d:c0:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:28 2026 by rpki-client