This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
File:                     C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json)
Hash identifier:          SDuKJQrXmMoaQPLpPxwpYrEvUU5Y65UDGx0Ro1FrT84=
Subject key identifier:   25:48:DC:25:81:BE:EB:45:0A:51:CB:B3:BE:76:10:78:50:21:13:6F
Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16
Certificate issuer:       /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
Certificate serial:       019BF5ABC3913A6B2EEA978E199E135BD699
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
Manifest number:          183A
Signing time:             Sun 25 Jan 2026 15:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:32 +0000
Files and hashes:         1: 5WR7fSyniULB3Tc5JehR8lZZEAo.roa (hash: Hkml3aIPA9gLJBcJf5jJdyu4FaTsugyL3Rjl7R2HaPc=)
                          2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: Fdo+nflozE35wLEVeIcaqjvUnnIwDANjIjRkrpopWFY=)
                          3: GDQ6e5DXxJl7e4a1PuFdPMdgdpA.roa (hash: NFAS/YPr7cmLSO+xfeJAnaGaDT/lXw4eBBakcDd+nG0=)
                          4: NbgY2WOcJQL5HM_TOCX1iU7i3jM.roa (hash: HeRjjTbPOukeZTijkl0JJq0JI5dyIJat+MpVAEl6wik=)
                          5: Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa (hash: 5vVU8CpinnMNDApjLeGdIl2Z5WpD2a99HQpSOKcpVyA=)
                          6: WEEvyZDdTsB41WxUfj6LZ4yl2mY.roa (hash: ib+np8fqyahmEOQHpJakofEw2vzrTxLyloRSwSyU3qw=)
                          7: _qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa (hash: t56c+2Ht/FaNSMyC1mKhu0HZAUXfDcSUi9DNTN8F9N8=)
                          8: anqzHj_RBxYK0oKafgD2zP99QsI.roa (hash: ERFHbW67bqTT3uEBCgeFptdUh/X+KRt4341hnCHBYhg=)
                          9: k2VMFVozqPnYzXV1s0yW14brgu0.roa (hash: iUK8Oo0pMp3EC1NmFi93MB7dSsN9F4/PHcovJ6wIZ64=)
                          10: kQ0io2PNAP5BY8r7GxffYcQFx9o.roa (hash: 3jWAN8RtvcrXSZtLqgReLIQU9lIS3iNu48aFnlNqCkE=)
                          11: mkpUVZc-vUGm02tucPpx4ITb8yc.roa (hash: 7oJEAu9SY+cshxiGPE3FgFiCATL9zFHbwSfgmHPiX+8=)
                          12: sXYVzlN949bYEOpO7zS9qQzV3hI.roa (hash: e9BBGZUNUZ1LbqXnLLn0ySZ711mfMA/MI8l0i6//fJw=)
                          13: v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa (hash: 0SUNe2XwpLFI11Ihhq2d2WPppOz2Dt6w1G3PnhDPFVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:c3:91:3a:6b:2e:ea:97:8e:19:9e:13:5b:d6:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16
        Validity
            Not Before: Jan 25 15:00:32 2026 GMT
            Not After : Jan 26 15:00:32 2026 GMT
        Subject: CN=2548dc2581beeb450a51cbb3be7610785021136f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:d1:8a:54:e5:ac:4b:95:d0:67:5d:a4:36:
                    93:2a:65:56:fa:89:6a:6a:32:15:7a:2e:e0:af:fd:
                    b8:56:ef:73:93:a9:0e:f9:95:b2:ac:3e:71:3a:50:
                    e7:14:1a:52:44:dc:da:43:4f:f7:7e:aa:6f:c9:e4:
                    a6:62:3a:e7:27:46:1e:b2:08:61:2b:11:05:3a:7c:
                    2c:4b:7d:5b:c1:11:82:7a:77:2b:c4:c2:c8:78:f2:
                    3a:60:59:a8:ad:71:8f:b6:cc:cf:1b:9b:28:1e:57:
                    1d:80:de:f3:6e:9d:5e:04:a6:eb:85:a0:f7:a9:d4:
                    a9:ae:80:7b:d6:e5:1b:8e:b6:cc:0e:9e:ab:14:ee:
                    85:e3:95:bb:9f:91:75:47:05:3c:db:9b:21:af:08:
                    bb:aa:18:00:4a:62:77:47:46:2b:fb:84:ae:81:e8:
                    51:0e:8f:43:5a:51:45:33:de:61:0c:3d:30:5c:af:
                    19:c0:18:7e:2e:4b:9e:90:d1:1d:2d:29:85:08:ba:
                    d8:d3:62:01:c6:e0:ce:80:b3:70:12:93:2f:c2:93:
                    50:96:37:8c:0c:c3:7c:ab:87:46:af:97:23:07:87:
                    78:21:84:1a:1d:65:57:c1:8f:cf:7f:ea:0d:e7:0a:
                    a7:9d:bb:cb:2f:e3:fc:6a:33:3e:f2:93:bc:2e:04:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:48:DC:25:81:BE:EB:45:0A:51:CB:B3:BE:76:10:78:50:21:13:6F
            X509v3 Authority Key Identifier:
                keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:05:3b:bc:7c:d0:be:45:ae:25:04:70:83:b2:cf:d1:37:01:
         e4:2e:98:ae:a8:1b:72:8b:7f:05:05:d4:7c:4a:da:f2:40:fd:
         86:c2:5e:47:94:44:2f:25:ab:f8:27:c6:86:da:a1:0b:b2:94:
         88:ea:a5:d7:29:7f:3c:f9:be:a4:de:44:b2:82:9e:06:bf:a4:
         ae:40:3d:34:43:ff:37:2d:d1:eb:4e:63:63:ce:73:56:71:02:
         ef:af:40:bc:1b:2f:70:a8:70:5c:9d:7b:67:fe:4e:dc:26:53:
         34:87:db:d9:86:28:9d:22:40:8d:95:18:fd:d6:8f:c8:b1:ed:
         84:64:55:a9:9b:0b:8c:1a:70:69:90:14:b7:09:77:d1:c9:06:
         cd:a0:fa:ae:66:54:ba:a3:29:35:a6:eb:61:9d:d3:30:9e:9b:
         42:3f:4e:a2:7d:44:d6:30:63:6c:c9:f1:f5:73:6d:6e:a9:85:
         7f:23:eb:09:7c:42:24:b3:c4:c2:de:39:ff:c6:5c:23:fc:a0:
         10:48:66:de:98:73:b1:5b:f3:e9:3d:b6:45:14:21:a9:7e:5c:
         fd:9e:4a:b3:e5:ab:5e:af:0a:70:af:69:55:b0:a3:bc:b3:c4:
         ae:0f:2b:dd:c9:75:09:ba:39:a4:d9:49:b4:e5:63:c6:50:27:
         10:7f:26:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:09:53 2026 by rpki-client