This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          MpgDyDrVZZTospr0quRtc2Ic2I4JjpFo9e09IF6p1zc=
Subject key identifier:   93:6F:08:93:4D:AD:11:21:ED:31:5C:25:9E:A3:8C:AC:4C:BC:96:C1
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       019BF2AB3CD6D19915B10BBE921C4569F7C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          1277
Signing time:             Sun 25 Jan 2026 01:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 01:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 01:01:07 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: QemeSWuI8W0K3EN8Q0cQ7A+KmHB7Gvml/0Vbw5r8TBE=)
                          2: 934_D2624JIRUsZNBmmDTwpOWXo.roa (hash: FiP3d7XAuc29ocbFIBjW+4Kw4lfkwQpzO2BLBNwTB5I=)
                          3: B8rWlO5zBSZ0rFhZVTmxxBCW08U.roa (hash: BvIksHHAQXEVjtiNQOfNtwSiFiMBb9MNFSH1VLW/crc=)
                          4: dr_QiPF5RowLmkVtFEqA--mi4Yo.roa (hash: kdVHR+HAMcUUf+nW4Adtpm5itFV2D+pTwJDkCvYO2eY=)
                          5: rSLgRzXc7wO9A2e_RCKG-a8FHf4.roa (hash: Z9tQA5QlYDpA+1bJUxMIqjwvzdSZlaSgBvZRFq8GUrM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:ab:3c:d6:d1:99:15:b1:0b:be:92:1c:45:69:f7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Jan 25 01:01:07 2026 GMT
            Not After : Jan 26 01:01:07 2026 GMT
        Subject: CN=936f08934dad1121ed315c259ea38cac4cbc96c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:35:f9:dd:e3:16:69:31:a5:39:d8:4c:96:0f:
                    34:58:ae:e0:43:24:00:52:00:49:4a:a2:e1:d6:32:
                    ed:1e:c8:e7:1b:cb:a1:da:4f:1b:fc:4c:5a:58:08:
                    51:49:d5:5d:be:01:1f:1a:97:50:8a:21:51:e3:5b:
                    fe:46:e1:ac:85:06:58:5a:5d:1f:5c:01:3f:79:7e:
                    b8:a1:84:8c:b8:36:af:0f:30:43:21:9b:3f:0b:6e:
                    91:0c:f7:2d:3a:28:23:30:a6:a5:a9:3e:41:7e:0c:
                    cc:80:6f:6a:77:bc:92:26:55:d8:33:f0:01:cd:49:
                    ea:1a:30:bc:f8:6d:47:ab:17:85:5d:77:5b:93:2a:
                    fe:86:2a:60:79:46:52:75:d0:fa:94:d7:5a:79:73:
                    c5:f8:f6:96:9b:c9:5d:b3:57:ec:31:a4:0d:0e:61:
                    b4:48:d0:d5:43:bd:39:d7:51:ca:90:de:9c:8a:eb:
                    3a:f8:8b:9a:79:eb:f6:dc:df:09:e0:f2:75:9d:a4:
                    64:11:ab:af:61:f3:e5:33:5d:df:8a:3c:27:cb:1e:
                    65:c1:28:e1:ca:ac:69:6a:42:6a:22:98:45:2d:41:
                    33:c5:4d:e6:f3:02:03:d3:80:18:c1:99:fd:76:fd:
                    62:79:72:26:1d:0f:74:77:f4:7e:df:35:3a:96:14:
                    60:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6F:08:93:4D:AD:11:21:ED:31:5C:25:9E:A3:8C:AC:4C:BC:96:C1
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c4:59:63:d5:a5:95:20:2e:f6:f5:07:34:2a:24:f4:d0:10:
         e5:f2:5c:7c:88:22:cf:59:b9:27:a6:72:89:ff:ef:72:7b:95:
         b8:60:95:bb:7b:9c:ec:de:0b:fb:ef:d4:3c:fe:43:c6:9c:26:
         5a:d8:b7:90:23:97:22:ef:25:d7:30:fa:00:31:f2:39:45:3e:
         96:06:71:ed:40:2d:27:48:e0:5d:bc:b0:89:70:09:c8:b7:d1:
         11:d3:0b:3c:25:70:d6:ad:b6:f4:aa:5e:e6:ed:39:9c:7c:bb:
         93:0e:83:2a:87:21:19:37:24:4c:aa:61:82:5b:2c:29:12:d1:
         57:9a:92:dc:5f:1f:58:be:18:51:dc:8d:15:e8:ff:71:87:85:
         83:ec:81:95:10:f9:c0:7e:e4:60:54:06:05:9d:20:d7:20:c9:
         34:38:c4:28:ff:c2:1d:14:bd:e3:28:d5:70:fb:ae:d0:08:e5:
         84:3f:47:0b:bf:7a:1c:7f:86:74:b8:73:92:0e:9e:27:be:80:
         fc:dd:88:ce:95:6f:3f:33:7f:9a:7d:68:dd:0a:f7:01:1c:35:
         f9:46:8c:dc:c0:b2:34:51:e9:12:b7:a4:29:46:9a:1f:8d:4d:
         45:29:eb:f2:ca:28:8a:b2:c7:0c:3c:26:7d:9a:2a:3e:53:71:
         e4:66:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:35:10 2026 by rpki-client