This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
File:                     DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft (raw, json)
Hash identifier:          MDjOLfREnzLEycaTfKm4ypoQvpuuJqzGM1bQUXViY0M=
Subject key identifier:   A7:4C:42:AA:38:57:27:2E:B7:E1:D4:F2:D3:81:EB:75:C2:BC:94:4E
Authority key identifier: 0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13
Certificate issuer:       /CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
Certificate serial:       019BF6BF012FBCD7D389C53FE32C9EAE8271
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 20:01:11 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:11 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:11 +0000
Files and hashes:         1: 8jdkfMw7eUzn90DXI27WIq-FZH8.roa (hash: nRC7DUWbyW69tXtXLJURQIyZvQTvanlFhNPctN2yNWw=)
                          2: DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl (hash: 1wIoYRa5iGVOb4yFxTN4+Bk2H/9YtM9E+ysPtBGQkK8=)
                          3: F2NgD0J7Chi0Zbd5rqGjO-46YWk.roa (hash: Q4tSXaAj/bwVV1OOYIrvJVBH9gu35Ngrr0aFbaINwhs=)
                          4: ToHiPhrCtrnjYoSZHMfMzvQKww0.roa (hash: tlf0dWkM8ozQrqBdjX39H8GbcCny8TCUT6Pf05X9Ges=)
                          5: yYMXkwFPkhHhnq27U9C0g2iVLLU.roa (hash: pG/nzOeAPQH1MO2qwEL/sb+3+IlzWBXcFvkEbi8UJZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:01:2f:bc:d7:d3:89:c5:3f:e3:2c:9e:ae:82:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d8cbee51990f1e05a9d1dc0c2f2f3a8a3470c13
        Validity
            Not Before: Jan 25 20:01:11 2026 GMT
            Not After : Jan 26 20:01:11 2026 GMT
        Subject: CN=a74c42aa3857272eb7e1d4f2d381eb75c2bc944e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:9f:7d:bd:7b:68:cb:aa:44:2c:5a:0a:3d:
                    6e:b7:2c:b0:22:38:fc:11:cd:0b:9b:76:7e:f2:78:
                    6b:6f:ba:f2:db:74:07:50:67:50:2a:98:e1:d2:a7:
                    dc:ee:14:04:95:b2:77:1c:50:43:d5:37:1a:92:d8:
                    9c:d8:0f:8a:2b:58:4b:c2:2d:7e:16:9b:91:59:f3:
                    31:db:ea:83:e3:a5:2c:49:44:56:9f:c7:da:ae:8c:
                    d4:fc:10:a7:ca:09:76:d8:52:d3:ff:5a:00:d1:b9:
                    b9:eb:19:e0:5a:09:1f:17:18:3d:d3:18:aa:d2:ac:
                    28:44:2a:74:ee:2d:7e:43:0c:2d:be:03:09:00:1c:
                    24:14:46:7c:57:18:b3:05:93:e8:3e:1f:10:53:6b:
                    62:3d:ee:3d:5e:28:2d:49:12:e4:80:94:f8:a3:f8:
                    97:33:ea:9d:0f:be:6c:c0:41:51:5d:77:83:55:a0:
                    32:05:0c:c8:5f:2c:4d:6c:b0:47:a8:4e:51:06:96:
                    45:ec:32:96:fb:bf:7d:d3:eb:5b:22:3e:e2:0f:1f:
                    8f:09:c4:c5:23:f8:0c:bd:bb:d6:8c:ed:34:f2:28:
                    a2:fc:35:6b:70:32:e0:dd:eb:c7:d8:0b:e3:65:93:
                    1c:df:70:f6:cd:d2:18:5d:e9:6a:95:62:09:83:b3:
                    61:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4C:42:AA:38:57:27:2E:B7:E1:D4:F2:D3:81:EB:75:C2:BC:94:4E
            X509v3 Authority Key Identifier:
                keyid:0D:8C:BE:E5:19:90:F1:E0:5A:9D:1D:C0:C2:F2:F3:A8:A3:47:0C:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYy-5RmQ8eBanR3AwvLzqKNHDBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/763d8e-2081-4cf8-b65b-1b1e78cbbb09/1/DYy-5RmQ8eBanR3AwvLzqKNHDBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:19:f8:90:60:9e:ad:f2:93:eb:26:40:1b:dc:84:dd:f2:76:
         9f:ad:d7:5b:a5:22:c1:a9:25:86:d7:00:96:63:cb:f8:ff:3d:
         52:d0:16:f0:00:99:0e:a0:97:62:1c:69:69:b3:dd:ab:1d:7a:
         e5:21:7c:5b:fa:27:b3:68:1b:cf:ba:5b:09:e4:89:f9:04:46:
         67:42:a7:7a:9e:05:b8:40:ed:aa:22:76:a1:3a:bc:45:be:4e:
         b4:fd:58:51:31:77:88:94:1f:1a:25:95:86:59:d4:7b:bb:b7:
         d6:52:58:36:1f:f7:d1:c3:68:49:91:c5:a7:25:11:42:54:44:
         fa:f6:d8:7f:95:79:0b:26:18:ab:e2:b8:cd:98:1f:d0:23:6e:
         84:e2:04:a4:36:7e:8b:a2:cc:af:e0:a2:2f:a6:20:f3:10:a3:
         23:5a:62:59:0a:8f:32:a9:9a:a1:6b:bc:30:15:1b:7b:b0:f4:
         b2:d0:33:b9:f2:88:0f:17:c2:60:83:58:d6:1f:9a:3a:05:6f:
         84:07:65:14:9b:ea:3d:2f:19:ce:7d:66:9a:14:00:0f:cf:c9:
         a7:21:a2:c5:f3:98:1e:d8:54:e2:c2:54:84:bd:fe:ec:95:e4:
         aa:33:3e:3e:5f:47:39:f8:02:0d:f9:ed:ea:27:7e:04:93:22:
         f5:0c:a1:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:19 2026 by rpki-client