This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File:                     C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier:          py1qgO/FCOVesXvLZxQ64GvGom8tbhiCey+r/pWupqI=
Subject key identifier:   D6:7E:3D:14:ED:76:9E:DA:8C:AB:FD:AC:02:B0:90:9A:C5:89:E6:30
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer:       /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial:       019BF7D21A226971E130880509F939BC1B33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 01:01:40 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:40 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:40 +0000
Files and hashes:         1: BsVMQCwzb6fLZN9IOEUj8HBMBlA.roa (hash: gKYj8cm9ixiRan4+/ZNTVTfJExcSD4j/qJmLYu6r0l0=)
                          2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: jtYUnf0LWcP6t8CNWe0QgwH3sgA0ivZSM8oz4vK6p/E=)
                          3: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
                          4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
                          5: qqChK2CC--XfiqQ3itiiXN4ZaLk.roa (hash: vw2QX5EDda3N6rfxeaGaRSjR39gSe4erxpGMw/tBzeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:1a:22:69:71:e1:30:88:05:09:f9:39:bc:1b:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
        Validity
            Not Before: Jan 26 01:01:40 2026 GMT
            Not After : Jan 27 01:01:40 2026 GMT
        Subject: CN=d67e3d14ed769eda8cabfdac02b0909ac589e630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c6:4f:a5:4d:a6:b1:c4:28:46:99:66:bc:04:
                    87:8b:44:b7:f4:98:98:b6:ca:f8:bc:45:ab:5f:7b:
                    51:1a:f4:59:7b:e7:49:06:44:d7:04:47:e9:ac:3a:
                    ae:a9:40:ee:63:0e:18:ea:e3:69:05:6f:50:c8:2a:
                    90:e5:29:11:ca:5b:62:09:7f:4a:f5:93:1d:5b:d3:
                    b2:f9:14:9f:db:94:bb:5d:bc:4d:f7:25:d1:cf:f5:
                    ca:81:ca:b2:31:03:32:2d:18:26:d9:fb:d7:e5:85:
                    5f:a9:e9:1c:3b:00:e5:d9:67:8f:84:81:09:4d:66:
                    90:b4:62:71:9a:24:1c:dd:da:d9:7a:f4:54:02:f0:
                    ea:4e:c7:e5:6c:c2:c4:b8:63:e0:0c:3c:c2:a6:ee:
                    6f:0a:87:f9:b8:e6:48:c1:78:fb:3b:85:43:08:bf:
                    2b:fa:57:43:09:b4:c9:c8:83:45:b7:7c:13:5e:cb:
                    a0:e1:ee:1b:6a:02:72:ee:ed:ba:f0:e0:70:db:16:
                    50:03:f5:8d:18:12:de:01:fd:dd:d6:c0:74:d2:78:
                    0c:4d:05:6d:5d:83:35:7b:a4:0d:96:68:a0:4d:c1:
                    0c:e1:cd:2d:db:21:d9:6b:8d:44:21:2c:55:35:04:
                    1f:ef:c2:d1:82:ad:63:b1:7f:b5:03:0a:c1:79:03:
                    dc:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:7E:3D:14:ED:76:9E:DA:8C:AB:FD:AC:02:B0:90:9A:C5:89:E6:30
            X509v3 Authority Key Identifier:
                keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:e3:3a:92:96:80:e4:f5:c6:86:78:b5:c9:e9:26:a7:9f:88:
         31:86:e6:4e:64:ea:38:65:ee:57:ac:b0:4e:06:cc:7b:31:76:
         93:91:b2:0f:f1:0d:79:fb:ff:86:b3:2b:2d:a4:3a:f5:74:f4:
         ba:2d:18:55:e1:3f:eb:e9:f5:43:7f:63:c0:70:9a:0e:a2:5c:
         ac:8a:40:54:f6:e6:94:dc:6b:11:ac:4f:f7:7e:a7:f3:5a:d8:
         f2:33:59:92:c8:41:a0:ec:16:54:b9:fe:e0:fe:dd:ab:7f:d5:
         a2:10:03:e0:5d:80:b6:bd:23:40:6c:d2:ef:6c:34:4c:af:b6:
         74:3e:e8:5d:88:57:0d:17:7f:5b:c0:34:cd:92:a4:8c:74:4a:
         00:a4:20:19:6c:fa:e8:7c:0f:ef:25:b4:ae:37:bb:fd:f6:b5:
         6c:3a:b8:9f:fe:cc:d4:ac:f0:09:e1:26:56:be:b6:55:0c:23:
         47:a4:12:1b:ef:ec:e1:a2:17:1a:95:39:65:f3:4a:e4:98:6d:
         b9:f2:75:4f:3f:94:e9:3d:3f:cb:23:66:a2:01:ec:f3:b6:39:
         69:bd:6a:c0:52:cd:1b:a5:19:a1:e0:fd:2b:b0:6a:ac:cf:00:
         b8:ff:30:45:bc:91:95:0c:d7:1f:4a:fd:04:ba:e5:98:25:ea:
         cc:0c:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:42 2026 by rpki-client