This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File:                     C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier:          AzqPDpHCmYVBYcKar2xV0AeNKxWN/BVXOVEv1XJ1bf8=
Subject key identifier:   04:A2:7F:D3:56:77:6E:21:05:98:18:64:3A:85:36:C8:1A:DE:7D:CE
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer:       /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial:       019BF5E313A1AFA4D822B408F674B562779F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 16:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:58 +0000
Files and hashes:         1: BsVMQCwzb6fLZN9IOEUj8HBMBlA.roa (hash: gKYj8cm9ixiRan4+/ZNTVTfJExcSD4j/qJmLYu6r0l0=)
                          2: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: u3pSK/XUVShTx9IfOeRPiL2zW7MagNvtaI2d0prZzJQ=)
                          3: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
                          4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
                          5: qqChK2CC--XfiqQ3itiiXN4ZaLk.roa (hash: vw2QX5EDda3N6rfxeaGaRSjR39gSe4erxpGMw/tBzeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:13:a1:af:a4:d8:22:b4:08:f6:74:b5:62:77:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
        Validity
            Not Before: Jan 25 16:00:58 2026 GMT
            Not After : Jan 26 16:00:58 2026 GMT
        Subject: CN=04a27fd356776e21059818643a8536c81ade7dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ef:b2:84:ba:48:4d:2d:71:0a:00:f3:55:65:
                    9d:bf:96:a6:30:02:20:0d:85:0a:d5:78:77:fa:c7:
                    1e:c0:c7:52:2a:d2:ff:08:4c:90:14:9f:8f:bc:74:
                    bd:5c:0f:2b:22:97:ce:67:20:bf:36:00:c2:35:ee:
                    f2:01:04:51:6e:16:31:0a:70:38:d2:87:56:0a:b5:
                    13:37:0e:76:7c:3d:68:bc:ec:da:3d:ba:8f:5a:f3:
                    0b:f8:d9:09:e3:6d:d1:b4:2c:b3:e7:1a:f6:69:e0:
                    37:91:11:f3:50:52:6e:48:8b:0c:c4:08:cd:0d:93:
                    bd:32:9a:09:d6:f1:8d:91:83:81:12:2a:a3:89:8b:
                    37:73:cd:d6:d4:72:44:2d:17:04:3c:a5:a0:28:b0:
                    47:15:12:1f:76:23:8b:f8:cc:53:57:e8:9b:e4:8b:
                    c8:12:7b:b3:0d:1b:9b:ef:92:a5:96:c0:65:53:0a:
                    9b:e6:d1:d0:40:fc:00:df:90:c1:69:40:03:84:d6:
                    37:d8:e9:3d:dc:6e:76:8c:19:10:64:17:cd:8c:7a:
                    2a:eb:d6:ad:f2:e1:ff:7a:56:4b:be:9b:df:9e:dc:
                    36:f1:d7:c1:98:ae:23:b3:c6:25:8e:a6:d9:6b:dc:
                    f7:49:44:d0:f3:9c:6a:6a:a2:51:8b:6e:22:4c:f8:
                    ce:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:A2:7F:D3:56:77:6E:21:05:98:18:64:3A:85:36:C8:1A:DE:7D:CE
            X509v3 Authority Key Identifier:
                keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:80:68:8d:f3:bc:0a:0a:d6:47:cb:70:79:55:a3:21:8a:3d:
         95:0b:c3:3a:4d:b5:40:04:f4:ab:be:f3:bc:29:8d:4b:1d:45:
         3b:e6:ce:84:cc:3a:5c:6c:b0:01:96:3b:5d:5a:ae:24:d2:ba:
         b7:fb:c7:e5:81:02:ab:5a:74:0e:49:69:64:14:e1:eb:eb:42:
         5a:42:0d:9a:97:d6:2e:6c:06:d0:9c:7e:ef:02:fe:1f:12:71:
         5c:49:86:e1:41:ac:e7:88:f8:a2:85:59:b7:ef:6d:1c:b9:2e:
         23:c6:48:74:bf:81:8b:02:c9:06:cf:d2:6c:42:fc:96:89:7b:
         f7:f4:95:b3:83:32:60:43:fd:43:b5:c5:3c:a9:06:5e:fb:05:
         dd:b9:b3:ce:8e:46:2d:5f:a6:94:32:a4:89:ef:06:a8:a9:ce:
         9f:06:7e:fb:da:7a:34:e5:02:63:db:29:50:04:50:29:6b:30:
         5b:0c:54:b0:ad:68:56:4d:52:6a:b5:37:70:5f:65:28:ed:92:
         e5:fd:ef:f6:71:c6:c3:89:73:77:e0:a6:74:14:43:a5:c7:04:
         d3:53:60:78:f5:b6:16:83:32:9b:b6:ab:80:22:f3:a4:6c:6f:
         48:7f:10:bd:32:b5:8a:cf:d2:98:3e:f4:1c:49:4e:48:10:48:
         6a:08:8e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:10:04 2026 by rpki-client