This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File:                     01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier:          NAydWC8Dm8q9erJYULisRTQfm222HXNv+mkNSpMwcy4=
Subject key identifier:   84:86:43:6F:40:8B:36:6E:05:79:6B:52:BE:D6:65:65:F1:A6:DB:47
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer:       /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial:       019BF4994E0140CCFA8AFB68E4FDA35BFBAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number:          17E6
Signing time:             Sun 25 Jan 2026 10:00:46 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:46 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:46 +0000
Files and hashes:         1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: yYGfTHn80JFoSm7sCUh9LHglXhOfNJRE4QEhNO3XGSY=)
                          2: N5lhzOLzb9DWld9ai9yjW2kVDLc.roa (hash: otz3WZRX38iiM+hhQYkSTpyseb/af+HU5vUy0a+fTYk=)
                          3: TDVVAVJu7KfAhiGr1m5Du1HlA18.roa (hash: li+URB3yo8nZmvZyiiGhy9aGaIwk3rYi2nbOJFauLR0=)
                          4: mYQqzKv427W5-Gl4amiQFyFNlWI.roa (hash: xj5YFixKhBqBGjGQYQdSVRPVe8wusXZXxp3YqA0Gvx4=)
                          5: uUk1h5SII_Safw_pSYFNTK7-iXA.roa (hash: VTAbHmUg7zNhrsk+AD118pUR1Ps6/DM4GFSl39OP9BI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:4e:01:40:cc:fa:8a:fb:68:e4:fd:a3:5b:fb:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
        Validity
            Not Before: Jan 25 10:00:46 2026 GMT
            Not After : Jan 26 10:00:46 2026 GMT
        Subject: CN=8486436f408b366e05796b52bed66565f1a6db47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:cb:2c:c5:c8:06:d6:f6:de:7d:5f:30:df:
                    b5:fe:cd:d9:24:3b:9c:d0:bc:4d:22:2a:1a:ff:ab:
                    0f:46:90:6b:74:4f:83:b2:ae:0d:13:90:07:a4:c6:
                    d5:e0:61:5f:28:22:1c:43:64:c2:89:ef:72:67:94:
                    eb:a5:cd:17:d5:a2:ef:39:06:48:57:05:e3:f0:34:
                    e4:cc:68:88:70:e5:84:09:d6:1a:2f:63:5d:01:7c:
                    cf:68:6e:c2:f1:1b:62:5c:b9:47:95:18:d1:3e:24:
                    30:91:3f:47:5e:91:6d:a5:aa:b8:b0:20:13:12:7a:
                    82:ea:99:c5:85:6e:9f:2f:19:ad:6b:1e:bd:0c:07:
                    83:af:b4:5f:b2:f5:07:ab:b9:70:3c:4a:95:e3:d0:
                    de:f8:62:e4:cb:4d:61:25:94:5e:16:28:65:f6:c0:
                    44:2c:72:d7:6e:2c:e8:79:5b:ed:3e:e4:06:b3:22:
                    15:57:19:90:d2:64:9e:b5:a0:e0:2b:ab:ba:32:13:
                    b1:a2:5f:34:cb:05:bc:ca:77:b8:6e:99:c9:df:87:
                    cb:69:af:c3:c1:ec:74:7f:cf:d5:da:56:95:21:54:
                    54:d7:d5:8b:49:03:e1:90:7c:74:53:a2:2c:ef:c2:
                    cd:b6:14:75:6d:72:fe:df:d4:5f:f9:59:5b:12:20:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:86:43:6F:40:8B:36:6E:05:79:6B:52:BE:D6:65:65:F1:A6:DB:47
            X509v3 Authority Key Identifier:
                keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:2c:0c:a4:3f:e3:f0:ae:f4:85:a0:d0:51:9c:91:29:6a:48:
         b4:ef:e4:82:f3:b6:26:04:85:7a:4f:5a:b5:2a:55:4f:1d:63:
         ee:14:e0:57:2e:1c:a3:68:ce:52:16:f3:04:42:81:ce:78:d4:
         bc:08:b4:ab:7a:e3:6f:29:38:2d:cf:e1:9a:58:b4:b0:b0:74:
         7d:37:bc:bd:38:3c:5f:30:65:1f:7a:5a:9f:d1:09:cc:4a:12:
         4e:18:dd:ff:8a:04:67:7d:e3:17:09:e5:5f:57:30:5d:11:3a:
         37:d4:c6:00:37:50:41:d3:b6:ab:57:c3:30:fc:2e:d5:35:07:
         71:35:ea:a1:a2:72:41:af:e4:5e:ef:c7:44:11:15:31:e1:99:
         15:9d:be:20:0c:3a:8b:ec:da:03:2c:16:48:7b:6e:3c:43:19:
         bc:22:1a:e1:9f:01:e8:d7:98:97:c6:28:b8:5b:95:c5:b8:26:
         f7:a3:0a:c4:7a:e4:30:ae:09:14:c5:62:fa:9e:d8:2c:a8:d4:
         59:f4:77:56:32:85:2d:f7:5d:85:37:c9:1a:43:f9:7c:2e:2e:
         94:e7:b9:80:ff:94:20:6e:5c:61:c8:22:99:a1:6c:2c:05:62:
         32:9d:72:15:a8:bc:0d:a8:fc:04:e8:f2:dd:e4:f5:b2:a2:82:
         c0:51:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:46:09 2026 by rpki-client