This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File:                     LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier:          FkBvGzD4hBPimTe8GC1SfoPgYkEboUGYBI9bBWku/fg=
Subject key identifier:   88:D3:10:03:AD:6C:33:EE:9B:C8:7D:0C:F7:F7:01:39:99:EF:43:06
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019BF42BC10064DF17CD2247856D1B173B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number:          064D
Signing time:             Sun 25 Jan 2026 08:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 08:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 08:01:06 +0000
Files and hashes:         1: 0Abp-bYUiWE_QxdZ2fNs8j59Nf4.roa (hash: SrWvblZEWYAuXRKCnqyBmsmlPWM8xw8kb2qoOLFHdLM=)
                          2: 1Hng-4SN4PI86v1GEbcmAeM6xJU.roa (hash: +50ocMM94WO0B6nE4/tB75wRw5Xe9Z+nhF9cbV6gDrk=)
                          3: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=)
                          4: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=)
                          5: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=)
                          6: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=)
                          7: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=)
                          8: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: Fc6lmkb/KiNM5BnWSIdBoXC6ith0s479Yh9UJSSQRc0=)
                          9: OLmArH5IwWhE4X1-1oyWlt70SoU.roa (hash: qoAN1qHyDfHOZo1EmYKxtK2xB81mzjXDuLB7f175zdw=)
                          10: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=)
                          11: VNhF9CeN5jHWH1tX5Wl26BrCyHA.roa (hash: 2KghxCrjmwflH1r/P5I8hjxMykiOshc6jpUIIxBQRpo=)
                          12: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=)
                          13: oLV5SKfY-zjLqIyOW6zU-bz_SA4.roa (hash: w/7dM9IZeNCiZ2By+1jxyO/EjmzKRQDY0Hhm0lNI5M4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 08:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:2b:c1:00:64:df:17:cd:22:47:85:6d:1b:17:3b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jan 25 08:01:06 2026 GMT
            Not After : Jan 26 08:01:06 2026 GMT
        Subject: CN=88d31003ad6c33ee9bc87d0cf7f7013999ef4306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:11:90:dc:7f:a0:ea:0c:18:71:de:0c:5f:5f:
                    03:d8:c9:9d:fb:cc:02:bc:06:21:84:7a:fe:95:de:
                    fe:79:ed:c3:ea:da:2c:86:3d:10:74:ad:9b:4a:19:
                    37:b7:e4:e4:af:84:a8:35:7e:83:c5:6a:59:86:76:
                    d3:31:16:b1:b4:9a:c9:9b:94:ba:cf:44:51:eb:ce:
                    59:43:ef:37:b7:c5:bd:47:11:68:a2:92:d2:63:13:
                    5f:f5:2c:c3:bf:41:4e:23:e8:6d:b7:8b:8c:3b:cf:
                    7c:25:09:e5:58:b8:5f:ed:ac:31:2b:3b:9d:84:24:
                    5a:7a:dc:fc:7a:d5:80:f3:ed:f9:41:63:76:df:4c:
                    88:30:05:96:1f:e1:b7:d5:be:51:c6:73:85:43:4b:
                    97:a7:74:f5:cf:ab:13:c7:c4:4d:fc:7c:3d:21:2b:
                    de:88:81:95:10:84:16:f2:a1:af:28:99:eb:e9:9e:
                    71:3a:c0:87:5b:46:84:0e:ad:6c:0c:9f:df:a7:df:
                    b4:6d:51:31:b1:8a:2b:95:b3:41:23:8d:65:49:a0:
                    06:3c:02:cf:4e:aa:9a:1c:53:89:21:43:96:2f:6b:
                    f7:02:35:a5:63:a0:6b:4b:31:de:b3:52:5d:06:32:
                    1e:fe:5e:97:fa:1d:7c:67:dc:af:d8:72:8a:05:ed:
                    88:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D3:10:03:AD:6C:33:EE:9B:C8:7D:0C:F7:F7:01:39:99:EF:43:06
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:8b:a6:09:92:fe:a6:b0:37:be:28:d5:83:99:d1:8d:11:1d:
         c3:59:7d:a2:56:35:28:62:05:1a:47:db:b1:78:b4:f9:d3:51:
         0a:da:6e:30:8a:61:e0:90:23:9b:b5:e2:3c:dd:46:f6:8e:f1:
         29:88:49:9e:17:00:36:a1:03:41:7c:52:88:0e:e6:9e:6f:61:
         b6:a0:ff:6a:34:9e:4d:b4:3b:f6:0b:c8:0a:73:9c:76:1d:0e:
         46:3c:11:19:30:83:e1:c3:12:f6:bc:df:42:65:85:a7:bb:b2:
         63:be:6a:e0:df:7a:a0:b6:d5:9f:63:69:d8:c4:35:5b:f9:41:
         19:1e:ce:8b:af:15:2d:b8:3f:92:b2:03:ef:f8:af:36:56:d3:
         e7:92:06:d5:5d:8b:3a:99:fb:7e:7e:eb:6a:a4:ff:92:4c:a2:
         f2:2c:4c:82:d6:69:d0:de:16:5d:7d:06:4c:06:45:45:11:f6:
         cc:5b:c3:9f:a6:20:37:f7:7c:27:a5:29:75:4f:fe:00:8f:9c:
         0e:80:23:b8:2d:d9:f6:df:d8:52:5e:7b:8e:73:23:62:9f:49:
         3b:e8:1a:10:ad:aa:e6:63:e5:d0:c3:f0:ae:18:24:27:9a:eb:
         a9:74:14:7a:01:8a:cd:58:36:68:6e:71:28:40:97:55:82:75:
         53:b8:ae:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:28:59 2026 by rpki-client