This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
File:                     Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft (raw, json)
Hash identifier:          l0Ts72CmlNEXPlJJHw6/CJJVSrZypi70TM2ZA/u15NY=
Subject key identifier:   C0:92:30:75:00:1A:AB:E2:49:14:CE:E0:1C:29:0D:85:C1:16:64:B5
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Certificate issuer:       /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial:       019BF4D0E002CA3480C9A9CD97804407D38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
Manifest number:          0D5A
Signing time:             Sun 25 Jan 2026 11:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:28 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:28 +0000
Files and hashes:         1: 04oBM0dgh9sTGQDONT8zC1ZUeKs.roa (hash: a198E2vy3vvQXfsujf/D2u3s7AvcBTuZCtT805HyC1c=)
                          2: 39eACmDFW1g2-B9DlwGLaRK-uO0.roa (hash: tgxi0BRb5Y9zXmRzFS2m/2sav+i6eK2POsugWd54n9Q=)
                          3: Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl (hash: sEJFbhZGPY+wES8g3odc0vgUg/apsWP83kd3kcnBzhE=)
                          4: WrswuEcV-d_8GQCOcKUSxtJxMG4.roa (hash: pKUlGUH4n08dvmWaoC8fikaIrvLNVFngkefG74USMmY=)
                          5: ZQpYmqUtlkWQcWjn2EUKSbAvOvo.roa (hash: bYXBLdaB4r96pfWbkmcAKS0XDR9kCdH5qkm7slBxPH8=)
                          6: ZhbmveLspuPhXP9h3zK76QdRgfw.roa (hash: wdIeciZyypaaWX92s7l6NMEi2dWA8lQnhvoZPYkqnKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:e0:02:ca:34:80:c9:a9:cd:97:80:44:07:d3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
        Validity
            Not Before: Jan 25 11:01:28 2026 GMT
            Not After : Jan 26 11:01:28 2026 GMT
        Subject: CN=c0923075001aabe24914cee01c290d85c11664b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:29:90:bc:0e:8a:68:65:15:cf:63:7b:76:c0:
                    27:e7:17:b7:74:17:78:5a:c3:1b:af:92:fe:d0:29:
                    36:d9:c5:11:a1:4d:9e:a1:da:42:63:04:ab:56:e4:
                    62:f7:be:4f:11:a1:f7:1a:c4:c3:e7:9c:2f:00:7e:
                    ea:25:85:3c:88:84:95:5f:1e:54:c7:b8:59:01:0a:
                    26:29:cc:b1:f1:b4:7d:bf:04:1f:ae:7c:a6:fe:06:
                    ea:36:62:76:22:df:1d:f3:1d:3c:e1:a8:0a:ea:9c:
                    96:14:d3:6a:7b:2f:d4:f5:42:2f:c2:a8:19:84:77:
                    3e:b8:02:85:c6:d1:2f:38:49:26:d3:9a:a1:5d:89:
                    3c:86:78:48:92:d8:3e:53:84:94:73:c3:12:34:60:
                    e4:9f:bf:55:0b:9a:4e:47:83:7b:97:60:5b:06:9e:
                    cb:47:d3:6e:0d:52:ad:fc:3c:4f:3e:56:7e:8a:c8:
                    67:e9:72:26:70:69:6c:f7:4b:08:1c:7f:c5:99:de:
                    3d:bd:91:2d:60:f4:c7:9a:04:5d:c4:b1:0a:48:84:
                    bb:75:81:27:57:93:2b:e6:43:63:81:95:6e:47:d0:
                    42:8c:11:26:3b:86:5d:dc:f7:a9:20:17:c4:d1:71:
                    1d:70:ff:1e:d7:26:22:82:56:64:bd:02:a1:66:c1:
                    6d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:92:30:75:00:1A:AB:E2:49:14:CE:E0:1C:29:0D:85:C1:16:64:B5
            X509v3 Authority Key Identifier:
                keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:d2:70:34:63:f2:45:00:3f:4c:4c:4a:3a:d4:89:fe:89:aa:
         78:c2:56:28:11:0a:a6:bd:7c:06:08:d2:c4:e5:c7:5b:5a:d4:
         b0:f3:c0:17:f9:74:ce:ce:42:8b:ea:73:42:f9:0c:74:11:66:
         74:b3:07:a8:6d:38:17:c3:0c:b7:bd:69:d6:98:52:05:eb:c0:
         8e:41:9d:78:b8:ca:4c:44:05:8a:00:40:19:87:ed:51:ec:f3:
         33:ad:42:3c:84:b3:dd:56:de:ef:58:e0:a6:fa:9b:09:cc:32:
         88:f6:59:d2:20:2f:ac:d6:7c:a7:a9:b7:88:3f:19:2d:15:0a:
         6a:ff:fc:51:1e:bb:82:16:ca:18:da:da:c3:bb:7d:5e:75:29:
         08:49:95:54:fd:21:68:8d:44:91:2b:cb:e9:e8:c9:cb:57:a8:
         d2:6f:fc:1d:df:f1:6c:ea:e5:81:38:1e:fa:c6:6e:fc:5e:48:
         f1:c1:46:a2:0e:79:63:1b:b3:65:b0:7e:41:ad:38:98:b2:e7:
         4d:03:b3:5c:79:a1:b0:5b:fc:df:41:86:48:57:31:73:60:cd:
         94:24:2d:c2:ef:b7:45:e5:33:4c:ed:1b:be:76:65:a1:62:fc:
         73:bf:99:7a:37:bd:74:0a:5c:6c:e8:4a:90:bb:38:91:4e:a3:
         e6:db:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:26:23 2026 by rpki-client