This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
File:                     1lAD4kzs-_jowV_2N90V201_rpI.mft (raw, json)
Hash identifier:          yfhCkqT3K9JS5zb4+3VzPZFSA5eqkLdWGsST6yM8pFs=
Subject key identifier:   36:04:0A:AD:2D:D0:50:F9:72:48:42:EE:33:6B:31:71:96:55:A5:09
Authority key identifier: D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92
Certificate issuer:       /CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
Certificate serial:       019BF53DED644CEE7EF80FDDA668A87FFB10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
Manifest number:          147B
Signing time:             Sun 25 Jan 2026 13:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:34 +0000
Files and hashes:         1: 1lAD4kzs-_jowV_2N90V201_rpI.crl (hash: urEipnd4Q73tbE3gNVmlNKTj/1O7XNWPw2QixEySmEU=)
                          2: 4ZvAi-gn1pF-qrIQmhpNRfK8kj0.roa (hash: fHKVM+9R/f9S25YhWf0k6ch7xqovB3duuxyKCTErDx0=)
                          3: IWwnPa171sfGXqpY2mWfswCRM5U.roa (hash: 6A+J6jDcFtUHVF1QTU8jgrZFLP13CFzG45TXvJZuPBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3d:ed:64:4c:ee:7e:f8:0f:dd:a6:68:a8:7f:fb:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d65003e24cecfbf8e8c15ff637dd15db4d7fae92
        Validity
            Not Before: Jan 25 13:00:34 2026 GMT
            Not After : Jan 26 13:00:34 2026 GMT
        Subject: CN=36040aad2dd050f9724842ee336b31719655a509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ea:37:c3:3e:2c:c6:af:cd:dd:b1:db:18:d2:
                    1b:3a:12:5e:e0:71:03:11:d0:66:93:e7:4f:59:6b:
                    d9:81:4e:14:78:f6:57:bf:ad:08:fb:6d:f3:94:73:
                    bf:cb:95:ee:2f:db:db:da:35:94:07:7c:ee:6e:29:
                    c5:87:90:f5:ac:d1:cb:b4:9e:a0:e5:b7:1d:e0:bd:
                    30:10:e2:53:8b:c9:93:a8:a5:ba:b6:f9:11:ca:a2:
                    bd:02:62:84:21:28:c6:45:c1:4a:37:6a:2b:7d:b6:
                    4f:3a:35:94:e1:b7:de:13:52:6a:e8:f0:c9:7d:46:
                    55:11:20:eb:5d:7c:40:14:66:26:7c:b9:9f:af:c7:
                    5b:86:3f:66:51:05:79:db:bc:92:77:55:79:f0:5f:
                    48:f1:b0:72:20:3a:42:4a:fa:61:6c:50:f2:b4:8e:
                    98:fd:0a:fe:38:a0:80:fd:0e:52:d8:39:b8:91:e2:
                    3a:04:a3:22:a5:49:51:c8:67:43:eb:05:f4:8f:23:
                    45:21:d6:74:1e:7d:53:ab:3e:6a:8b:51:6c:55:8a:
                    87:4a:f2:e8:24:52:6f:7e:de:31:6d:d2:78:79:24:
                    53:ef:11:a9:d0:10:24:3f:a5:2e:95:b5:df:88:e7:
                    44:7a:0b:18:ef:f6:82:6e:d4:f3:bd:c5:74:30:44:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:04:0A:AD:2D:D0:50:F9:72:48:42:EE:33:6B:31:71:96:55:A5:09
            X509v3 Authority Key Identifier:
                keyid:D6:50:03:E2:4C:EC:FB:F8:E8:C1:5F:F6:37:DD:15:DB:4D:7F:AE:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lAD4kzs-_jowV_2N90V201_rpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/54910b-9a13-4ace-abf2-a2351f4e8915/1/1lAD4kzs-_jowV_2N90V201_rpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:02:d3:cc:73:96:67:cd:80:4b:d4:c7:9a:bc:b5:7e:94:16:
         28:47:15:45:93:44:eb:75:aa:a7:04:04:66:f1:62:b6:6a:c8:
         86:45:7f:cc:87:58:aa:a8:9c:9e:4b:3c:bf:e8:7a:17:85:0f:
         06:4a:cd:65:59:39:c0:de:0a:8b:9a:63:25:db:02:2f:9b:e0:
         1a:e0:81:cf:b1:b8:4e:ee:fa:ef:28:31:c4:6d:3e:0e:5b:7c:
         d8:b8:2c:4e:8c:1b:bd:8b:aa:8e:16:91:8b:35:d6:64:5e:b6:
         9d:f8:b1:7c:77:2a:0c:66:72:c6:be:08:d3:fc:6d:d1:7d:27:
         b5:8c:4e:ce:9d:31:e3:0d:51:08:a2:59:2c:e3:b4:a2:10:1e:
         30:f2:2b:23:a2:a5:39:37:b0:79:fb:10:64:0e:c7:cf:5b:2d:
         52:4d:ab:2f:63:4d:c3:0e:0d:ce:24:d2:19:9b:36:bf:3d:49:
         d7:be:63:2d:66:0e:63:e1:3e:2a:cd:b6:6f:40:d3:fd:0a:c7:
         a6:5a:8a:29:bd:63:35:9e:7b:83:64:64:86:22:ea:74:5f:de:
         d9:04:b5:df:c5:9d:f3:08:74:a1:9b:71:30:79:0d:74:b4:8f:
         5c:46:eb:df:ea:c8:40:f1:31:f3:2f:e3:b1:c7:0d:79:0c:f2:
         ad:0b:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:16 2026 by rpki-client