This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
File:                     xv9UHPNkGToqAK2hQkSs00wUA4o.mft (raw, json)
Hash identifier:          J5M6cbTyPjcUQv/98UBcBVlhDxAR3r+w8MiubkX1GPA=
Subject key identifier:   B8:DF:33:07:E1:91:A3:E6:46:03:BA:13:E1:EA:80:08:61:31:53:C6
Authority key identifier: C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A
Certificate issuer:       /CN=c6ff541cf364193a2a00ada14244acd34c14038a
Certificate serial:       019BF574E2B40C4626FB021CB76DEB680F90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
Manifest number:          0457
Signing time:             Sun 25 Jan 2026 14:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:36 +0000
Files and hashes:         1: 13lETM7dYwgkukJoWApUFl8dJuI.roa (hash: cZO0/GICe69R1nGUBraIiKZbW7afS/3775vhW3rYR+4=)
                          2: EMqpNBcCNtehXNjtWHmz4Qx27pk.roa (hash: 8njOTJ/2VGv+q8vvCxeqjLAb7iHXNWrxTs90DA1iMqI=)
                          3: KVEesZy60JcmrCD9X0Zw8ckitl8.roa (hash: LDsra63f6peITAW/vE5Lx25+kAf2+irA29kJov0WXy0=)
                          4: Oawnl1sRK8bf7gAf5C5nWH9I1Jw.roa (hash: wkeGlAvS62MwRHYU8Z+cHP5CIoQV+KvyovxR/4O84h0=)
                          5: dYPKia158SIrrNF4l9j5f3SItUA.roa (hash: /mvbSwmPXlWJfBXD/fmkRZb24RyV5+E4SIG3bbAtRas=)
                          6: xv9UHPNkGToqAK2hQkSs00wUA4o.crl (hash: J1niYbKQrnncpr9Q8Sgj9fit1jpegZlPeng7Mt/CPWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:e2:b4:0c:46:26:fb:02:1c:b7:6d:eb:68:0f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6ff541cf364193a2a00ada14244acd34c14038a
        Validity
            Not Before: Jan 25 14:00:36 2026 GMT
            Not After : Jan 26 14:00:36 2026 GMT
        Subject: CN=b8df3307e191a3e64603ba13e1ea8008613153c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:65:b7:5a:34:0b:9e:48:2e:1d:b1:30:e0:3f:
                    ee:ca:1a:91:f8:5f:f5:06:3c:91:cf:8c:85:58:12:
                    f4:60:c6:4e:20:cf:4a:29:b8:55:9d:0b:dc:10:dd:
                    e1:b9:e0:b6:db:fd:48:c3:dc:4d:28:cc:91:df:5c:
                    8d:e2:3f:b8:dd:71:5f:6a:82:17:75:d5:55:f2:85:
                    76:88:61:10:5c:6e:8d:ef:6d:b6:18:0e:15:d4:84:
                    c4:d7:f1:06:e3:f1:7f:00:c1:33:a6:13:d0:7c:c7:
                    f0:c6:9c:99:92:e9:ac:2c:c8:cc:d2:6d:bc:2d:8b:
                    86:37:a5:f9:48:bf:46:89:7e:1b:0c:78:3d:d6:95:
                    c9:0d:6c:87:bf:9a:ed:60:96:00:a6:01:36:33:7e:
                    30:30:94:4f:4d:34:a0:a5:39:ab:67:65:31:ff:a4:
                    0f:02:a5:74:80:c4:0a:6e:3d:14:c8:6f:68:86:e0:
                    fa:fe:a4:cf:e1:c0:a3:8a:79:fd:bd:c8:76:ea:20:
                    2c:f4:9e:a5:a7:a8:0c:a8:a9:d4:81:be:b0:3a:5c:
                    a3:55:84:81:a6:ff:cf:83:59:c9:1c:70:e9:2c:b8:
                    82:f6:c8:a6:bf:ca:6e:e7:32:1a:92:80:b6:0d:31:
                    9d:34:a6:1e:06:a4:a1:2b:84:f0:3f:ea:43:54:3a:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:DF:33:07:E1:91:A3:E6:46:03:BA:13:E1:EA:80:08:61:31:53:C6
            X509v3 Authority Key Identifier:
                keyid:C6:FF:54:1C:F3:64:19:3A:2A:00:AD:A1:42:44:AC:D3:4C:14:03:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xv9UHPNkGToqAK2hQkSs00wUA4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/39a022-faed-4376-8be6-2a5e98abd1f3/1/xv9UHPNkGToqAK2hQkSs00wUA4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:99:65:d3:78:cf:1e:15:d4:3f:ad:59:d4:f9:4a:34:a4:4d:
         1b:2b:08:93:32:b0:7e:53:f4:2c:1a:ce:9f:64:c9:a0:e2:e0:
         75:63:b0:fb:e3:fb:71:f0:b3:98:b9:50:b2:22:c4:1d:2c:a9:
         69:33:72:93:39:c4:fc:ce:cd:5c:0c:3c:e9:5f:da:b2:90:1c:
         b6:8e:0d:54:77:7f:90:f0:51:e3:db:b7:58:b2:63:4c:04:c0:
         5a:d0:07:5d:f8:0d:db:64:b2:28:f2:4f:af:c4:08:f5:38:d0:
         94:a1:41:96:0e:97:94:d0:5c:c0:f8:5c:d4:2f:5b:00:a3:a0:
         f4:dd:6b:40:91:b8:6e:9f:29:78:da:87:65:19:36:93:ad:00:
         d7:4d:4e:65:9f:75:fb:6b:40:65:f5:e8:78:84:cd:ef:a4:ca:
         8e:3e:3d:49:83:cc:f5:cb:c4:51:45:4d:1e:b5:c2:4e:ee:88:
         f1:bd:8c:eb:ae:9e:b2:dd:9a:37:aa:3b:e2:69:0a:bf:86:5e:
         63:f1:0c:ea:ea:d9:4f:7a:f1:00:52:49:53:52:b8:b6:68:34:
         2b:c9:aa:8f:64:86:73:b6:5d:35:3c:03:90:df:44:15:51:d1:
         1e:f7:12:49:d0:45:2a:3c:5d:04:85:7d:70:6b:f1:06:11:ba:
         11:d7:3e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:49:49 2026 by rpki-client