This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File:                     4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier:          KcUANyld5FjfVoBtN8sQjsjuHfn8ZEnIOsVPCFrBs4Q=
Subject key identifier:   D6:C3:1E:AF:5C:CF:3E:00:F8:39:39:1B:EC:32:51:A8:3A:AC:E2:C0
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer:       /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial:       019BF5AC210AFE6312D5D79540F86D1DB606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number:          18E9
Signing time:             Sun 25 Jan 2026 15:00:57 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:57 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:57 +0000
Files and hashes:         1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: hdO7vUb0LFRuODSNzqStnNaiUs06EXlisLKTfJom8ts=)
                          2: Mr6e66-hduQ_2Plh7o4YAdI0bng.roa (hash: LT3XRkl0zkPeI7NxrAQBrMnnE/3d0HUOmAJz1gmL73c=)
                          3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
                          4: WJQDqjdU85qKX_z9ajXtlIeeqwc.roa (hash: mlb+3yfxZjm9N1+YQt1lMML9aFyHgMQVkXXsZICY1yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:21:0a:fe:63:12:d5:d7:95:40:f8:6d:1d:b6:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
        Validity
            Not Before: Jan 25 15:00:57 2026 GMT
            Not After : Jan 26 15:00:57 2026 GMT
        Subject: CN=d6c31eaf5ccf3e00f839391bec3251a83aace2c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:11:e5:c5:8f:2a:3a:1b:1a:1a:9f:ac:39:be:
                    c6:2d:de:d0:aa:4c:ca:2c:2d:ed:b2:2a:fb:67:ac:
                    5c:de:db:83:dd:35:b7:9c:89:90:6e:a7:b1:0d:b7:
                    fe:12:b2:f4:85:02:f9:a3:1d:da:60:75:3c:78:a1:
                    96:7c:c6:ca:74:f3:b6:86:77:19:0e:d7:88:ac:1f:
                    6d:de:15:6c:52:63:58:b0:f4:ba:e8:2d:30:ff:88:
                    45:54:4d:6f:58:a6:ab:cf:c5:1d:58:2c:e1:8e:9a:
                    c6:26:55:98:f6:a5:31:18:6b:3e:37:a1:ea:07:1e:
                    40:c6:20:a6:71:b0:de:a8:60:03:e8:c8:55:6e:88:
                    b6:81:27:5d:79:4d:bf:51:14:e0:c1:ca:c1:f6:09:
                    ad:22:5b:47:16:f2:62:bf:ec:fe:d4:23:46:52:9c:
                    70:a0:79:da:a2:30:b3:3d:de:f7:e4:5b:12:67:7d:
                    96:30:be:94:ff:8f:48:5a:b9:e0:9b:ca:87:c1:61:
                    4a:85:23:ba:d6:4f:b3:e9:03:57:62:a0:a1:a0:66:
                    dd:1e:fa:d9:08:8c:09:97:0a:65:6d:b9:ba:dc:74:
                    e1:b9:2b:4d:07:13:60:7f:f0:26:23:d2:e9:83:d9:
                    58:4e:78:b4:b6:eb:55:ee:ff:c4:2f:51:b6:07:d8:
                    97:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C3:1E:AF:5C:CF:3E:00:F8:39:39:1B:EC:32:51:A8:3A:AC:E2:C0
            X509v3 Authority Key Identifier:
                keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a7:a5:ee:0b:68:29:56:61:e2:9a:13:aa:38:3a:0d:11:43:
         1f:56:f9:2d:10:85:71:72:65:84:54:8e:74:fb:98:ee:17:a1:
         32:90:7b:c7:83:70:75:e4:63:c7:e8:8b:bc:8e:31:90:77:f6:
         a4:23:d6:e7:bc:f4:31:11:5e:29:ae:41:d9:49:c6:2f:6a:5d:
         30:de:15:9b:66:18:e2:89:e5:f3:10:96:1f:a7:1f:dd:08:a0:
         cd:5a:d6:62:2a:0e:c3:a2:f5:3b:14:0d:2a:26:f0:11:a2:ac:
         4c:10:f3:cc:ad:65:94:5f:1e:86:c1:08:b1:0f:62:ed:8c:39:
         a0:14:e7:32:6f:e2:06:91:88:a0:51:9b:99:d3:b9:51:d4:5b:
         bb:8e:13:62:00:23:e8:50:c1:18:7a:f6:da:1b:12:14:8c:11:
         09:71:6c:90:b4:30:f0:e4:6a:7b:2b:e4:9c:08:0c:c0:ae:96:
         2e:24:9e:90:7d:ad:3c:68:17:e5:32:82:66:0d:87:ad:39:48:
         39:e2:aa:ce:58:40:b1:50:80:01:ba:e3:f8:29:7a:fe:10:7c:
         79:c6:c8:50:af:3e:23:c5:a4:ea:5a:0d:52:3b:35:33:da:48:
         5a:39:f9:60:90:8a:3b:83:67:84:4d:a0:6d:e7:c0:69:6c:14:
         c3:ad:93:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:30 2026 by rpki-client