This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
File:                     d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft (raw, json)
Hash identifier:          lUI0gJs7U9yu1mx1//zROT8AqbKhOyFGzgSbYuj2cZo=
Subject key identifier:   24:64:17:9B:EA:17:D2:1D:FC:7A:F4:07:4C:F0:B6:4F:05:5A:96:19
Authority key identifier: 77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46
Certificate issuer:       /CN=779fbaaac6541ab318529eb025613c6520e47646
Certificate serial:       019BF61A07F8540AC5DAD93000966F9D7D3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
Manifest number:          069B
Signing time:             Sun 25 Jan 2026 17:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:59 +0000
Files and hashes:         1: 1ULsjrhU_Mgs_8Mvd-oE1b7ANaE.roa (hash: BPqaZcuEdD+lQrMI+iPU/GW6APEbwg38yW1mZjGwXr8=)
                          2: d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl (hash: 6Z2nrkwUkROEN5ueO8YK476OxeIXX0Tb01uC/nmorsk=)
                          3: pXo0ZUaV-y6EDCcUoSCUhqpPURU.roa (hash: EuVKLvC6yGpoLeqj+M0pu9788Rfc943eOWrQgVLBCHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:07:f8:54:0a:c5:da:d9:30:00:96:6f:9d:7d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=779fbaaac6541ab318529eb025613c6520e47646
        Validity
            Not Before: Jan 25 17:00:59 2026 GMT
            Not After : Jan 26 17:00:59 2026 GMT
        Subject: CN=2464179bea17d21dfc7af4074cf0b64f055a9619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:77:92:6e:41:fd:c2:95:8f:a8:01:a8:39:84:
                    2f:39:34:5a:a0:74:44:c9:74:4d:68:26:1e:6d:06:
                    95:41:a2:e7:76:bc:59:aa:af:b2:a6:bd:f8:ea:b4:
                    fd:10:ce:75:80:ad:d5:70:19:f6:b6:cb:45:dd:16:
                    34:ce:b0:82:df:67:5c:5e:07:fe:22:a9:95:23:d6:
                    ae:72:2b:e9:d5:63:2c:f1:9c:0c:e0:83:ce:8e:e8:
                    82:0b:0f:cf:37:79:4b:7d:7d:ab:8e:f0:6c:d3:4c:
                    15:26:b0:c4:13:79:3c:4a:b9:3a:34:4c:3d:2f:6a:
                    4c:eb:a8:c4:4f:49:63:18:a0:ab:04:22:e2:15:ac:
                    7b:9d:ea:f7:76:38:38:f5:fc:83:ce:db:52:98:2c:
                    79:fe:e6:56:24:5f:41:da:f6:15:e2:d9:e0:71:5c:
                    9a:e8:a3:4e:3f:dc:dd:31:e2:27:ed:95:d1:b6:e0:
                    71:f4:50:57:33:65:cb:4f:bf:10:44:fe:14:15:58:
                    0c:25:c5:fe:82:49:07:6f:2d:58:fb:01:8e:b9:48:
                    9b:bd:74:0d:4e:38:80:b5:9b:75:8c:a8:5a:d4:20:
                    3c:40:03:00:c8:72:07:d7:d5:2a:1c:e6:c6:a2:8a:
                    ab:87:63:92:d2:86:29:de:5b:e8:6a:1e:d2:d1:3a:
                    e3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:64:17:9B:EA:17:D2:1D:FC:7A:F4:07:4C:F0:B6:4F:05:5A:96:19
            X509v3 Authority Key Identifier:
                keyid:77:9F:BA:AA:C6:54:1A:B3:18:52:9E:B0:25:61:3C:65:20:E4:76:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/983b47-47a9-4251-a129-20024918ee66/1/d5-6qsZUGrMYUp6wJWE8ZSDkdkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a9:46:10:47:00:25:cd:56:89:b5:3c:f6:17:30:5f:76:e1:
         76:14:c4:60:01:a9:9f:60:14:fc:3b:5c:6b:17:90:fa:b4:3f:
         a0:34:3d:e3:c0:3f:ef:a0:54:58:dd:da:27:32:f1:d8:dc:91:
         ee:2e:86:f9:d2:52:95:33:16:fd:75:43:57:41:56:5f:58:c7:
         49:36:d7:dd:f9:2c:be:24:75:5a:f7:71:ff:a7:3b:12:a1:14:
         41:21:26:40:98:6d:c3:71:53:47:c8:3e:e5:e9:e3:3d:b5:b3:
         d0:58:54:2a:a8:a5:4c:61:36:dc:3c:30:c5:98:57:87:98:e8:
         52:4b:6f:4d:0b:9c:25:7c:89:7c:93:79:eb:85:10:3c:4a:78:
         13:7c:b9:f8:95:0e:4e:be:44:35:57:fa:0d:b4:91:9c:26:54:
         d2:d0:5d:01:af:82:05:d8:95:d1:77:53:b9:65:64:01:96:64:
         33:fc:4b:45:b0:ea:83:ad:4d:95:70:ef:d1:56:43:49:b0:59:
         f9:2a:e0:8b:6e:23:e4:cf:08:8f:85:43:59:cf:4e:50:30:5f:
         95:c2:0a:d0:40:6c:7c:9e:a6:d3:84:9f:f9:a1:c9:ab:a1:dc:
         2f:9c:37:a8:61:48:0d:30:21:27:25:a2:a1:69:42:0e:16:a3:
         05:12:38:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:27 2026 by rpki-client