This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File:                     1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier:          ydjjADIPH+R2lHnirLllx/O0vS00b2Ob4st/9D08kck=
Subject key identifier:   3D:DA:51:83:37:F4:B2:67:CE:19:21:41:FC:8E:0C:F2:DF:23:C1:80
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer:       /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial:       019BF53EDC335459587A17E515C6C27B0417
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number:          084D
Signing time:             Sun 25 Jan 2026 13:01:36 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:36 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:36 +0000
Files and hashes:         1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: E9b/+Aoexp4ouhuUdKAKSPiXlAWv9/vmgPMb8w2wwDw=)
                          2: Cia7XDUlVcQjhopxxsVFSxmf98Q.roa (hash: Rgit10JBl/HzmYiRu+Za82DqspSX6JZYYxG73T1zZ9k=)
                          3: KW64rtt74S1zhjsRECqiGcQpL7Q.roa (hash: R6F/nrfUdQaOnAWUHDehNGl6m7vmiH2zvZoykDnOykg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:dc:33:54:59:58:7a:17:e5:15:c6:c2:7b:04:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
        Validity
            Not Before: Jan 25 13:01:36 2026 GMT
            Not After : Jan 26 13:01:36 2026 GMT
        Subject: CN=3dda518337f4b267ce192141fc8e0cf2df23c180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:d7:1c:a0:b7:41:f2:a5:13:7b:4a:5a:e1:
                    e1:23:f0:4d:b9:e5:cf:a6:78:f2:35:e9:5b:c3:ee:
                    ba:8c:6d:63:36:90:9e:64:66:d9:6b:31:27:99:dc:
                    3d:08:6f:0f:3c:38:b7:bc:9e:df:80:df:34:21:81:
                    79:48:39:4c:b1:bc:3d:1b:99:2c:63:3f:69:cf:55:
                    12:5c:1e:20:38:0b:f4:6c:a6:e7:2e:86:af:f9:49:
                    0c:c6:38:3b:28:12:fc:6f:9a:2b:4c:de:20:a8:65:
                    b8:14:44:8d:54:6f:eb:62:e3:0a:b6:10:28:c7:e2:
                    f9:99:65:a7:e1:dc:c9:85:63:16:05:5f:7f:5c:47:
                    bc:6d:ca:a3:ff:ba:5e:b0:b8:4b:47:23:53:24:2b:
                    39:c6:24:ff:26:db:c8:d2:76:43:ad:8e:1f:39:c1:
                    df:73:da:19:76:67:4e:d4:2e:25:c1:cb:f8:97:75:
                    43:25:a5:a0:be:1f:8f:b2:07:ad:68:fd:b4:94:f4:
                    53:91:69:97:9a:aa:3e:7e:d3:35:c6:76:14:86:b3:
                    40:f3:2a:84:8a:0b:7a:c8:54:03:ee:e0:56:03:54:
                    98:17:e1:23:da:38:6d:19:49:49:fe:7c:30:3f:c3:
                    4e:b4:09:53:6e:b0:6f:58:9e:8d:96:b5:9c:14:fb:
                    62:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DA:51:83:37:F4:B2:67:CE:19:21:41:FC:8E:0C:F2:DF:23:C1:80
            X509v3 Authority Key Identifier:
                keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:35:c0:2c:d5:57:dd:ab:a2:71:31:7d:09:f9:19:e2:a5:
         98:fc:d5:2a:da:e1:87:80:fa:37:1f:c7:9c:55:e4:82:ee:db:
         1a:1f:03:42:b0:8e:12:d2:4f:01:91:17:6b:72:d3:6f:0c:d2:
         b8:34:b7:41:5d:73:a1:66:a0:19:b4:97:22:b9:d8:7b:69:82:
         a0:e2:14:f4:c5:fe:3e:8b:9a:e3:70:75:a2:94:68:03:5b:96:
         6e:80:65:c1:02:e0:7f:16:dc:03:88:6a:c6:56:e3:92:29:e0:
         84:d7:65:5a:43:a4:ee:c8:c5:09:d5:77:4c:94:37:13:d4:fb:
         20:75:3c:d5:26:fd:31:f4:c0:aa:4b:73:b1:5c:7d:60:94:05:
         3a:14:54:bd:01:58:24:1a:2d:29:ba:4e:b7:e1:c6:35:d3:b0:
         3a:c4:cc:0f:f2:98:1e:39:b6:21:f9:14:21:08:b8:10:f7:60:
         77:bb:20:ec:f2:61:3c:45:07:de:a7:47:93:7e:d7:38:3a:3b:
         a6:16:94:2b:bf:19:8f:d2:5e:c0:06:fb:2c:7e:2d:29:ee:c5:
         dc:9e:bc:86:ab:dd:f2:6a:96:28:20:83:ca:fd:c1:dd:db:12:
         00:b8:03:a3:b4:54:e3:6e:f5:01:9b:45:ca:87:24:a6:f1:d8:
         54:42:48:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:48 2026 by rpki-client