This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          7YbsQDSw4dHYsuGVbFBcG5vZpGCkf9Spt04giCzkjFw=
Subject key identifier:   03:93:F5:88:16:85:DA:FF:88:28:FB:78:E2:41:B9:5A:FD:77:C2:16
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       019BF57559AF8D30CAB4307D5FA8C63AC306
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          180D
Signing time:             Sun 25 Jan 2026 14:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:07 +0000
Files and hashes:         1: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: GiDvn6R0uUXb6HQgmUNE2Kt52ftmF/oggNqfdYNBanU=)
                          2: IGRV2WsskuWTSjE61k7EJ5BQL_g.roa (hash: TD0j7saLbQNy5wP2+Z7EAP+DfzUHpEljN22YPu7FxcQ=)
                          3: Kc_ZYw3v8hIzmM1zcgt9F5cxL98.roa (hash: Lw1rg+/Tz8s8iqnT6INdOtQPU4yz9vyMzF8Or+39BWE=)
                          4: OwT3MWkGmy8nucB77AIErlwv-c8.roa (hash: TO+izXPgq1XnvslTtUGRCnNQnecbCKgXbwm0U1xhS58=)
                          5: ei49HQBepZfijJONn1YXG9qTwnQ.roa (hash: 436lkK/qtqzaDmSUiPMUIk0ZEB4+mDd5VFzkWFWYadA=)
                          6: srVqtN9AKuKob17qSxiXLthPNyw.roa (hash: +JQZjxz4atLwzjKZMuA0Nmi1UuJgxYV5FzyfEPCpnlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:59:af:8d:30:ca:b4:30:7d:5f:a8:c6:3a:c3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Jan 25 14:01:07 2026 GMT
            Not After : Jan 26 14:01:07 2026 GMT
        Subject: CN=0393f5881685daff8828fb78e241b95afd77c216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:1b:c9:68:27:b1:24:18:cf:9c:58:a1:4b:a3:
                    34:6a:1a:22:25:e9:fa:07:8e:4a:97:01:e9:a3:c1:
                    65:8a:e9:4d:9d:d6:df:d9:4d:92:4d:b1:7d:92:cb:
                    0d:b5:46:2b:c0:e3:04:0c:58:aa:d1:de:29:74:9c:
                    8e:83:09:f9:ea:b1:ae:a0:6d:79:81:08:51:41:b2:
                    cb:5c:43:e0:cd:73:95:b4:26:f2:dc:90:f0:48:34:
                    f9:c5:9a:36:26:a0:79:9f:61:9a:cf:f5:ec:23:c2:
                    0d:ed:5f:7e:cd:40:63:e4:ba:55:da:f5:65:43:c4:
                    93:d4:a2:62:3f:a2:57:92:bf:37:4d:d0:30:50:fe:
                    8a:39:37:01:17:42:05:8d:63:27:c2:24:40:20:f1:
                    69:11:17:56:93:36:ce:5e:89:b8:16:31:e8:3b:eb:
                    45:9a:e5:cd:85:6c:66:f0:74:b7:a8:bb:07:d3:ae:
                    a1:11:24:c0:54:47:6b:d1:26:ad:16:23:e4:39:5d:
                    a9:e4:e0:fe:d4:73:55:e0:81:18:32:9b:89:ef:9e:
                    41:2d:fe:68:73:e5:4d:a7:ef:d7:e4:ee:88:05:81:
                    f8:f8:c8:86:bc:df:ac:a8:f8:8d:94:5c:23:62:e8:
                    e0:78:4a:f6:29:00:37:e2:51:8d:58:51:aa:c2:bb:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:93:F5:88:16:85:DA:FF:88:28:FB:78:E2:41:B9:5A:FD:77:C2:16
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:82:a0:98:02:29:85:1c:6b:47:51:f6:94:f6:eb:62:b1:67:
         b5:83:09:80:30:56:41:da:2a:c4:29:af:57:01:e8:29:c9:d4:
         ea:1e:11:b0:c0:a7:85:b1:93:21:34:b0:8d:7b:66:2e:d1:29:
         fa:9d:99:f1:87:9c:d9:9f:53:f1:92:69:98:a9:59:6e:3b:e4:
         6e:aa:a5:cb:6a:4c:8b:44:0d:0c:0f:69:de:18:76:0e:01:07:
         28:cd:50:f4:f2:07:51:3e:da:4b:22:26:87:35:f6:77:3f:71:
         b6:c8:89:d1:cc:5b:18:63:5d:1a:fb:44:1d:93:1c:e2:14:35:
         a4:39:48:1e:66:70:79:d5:11:9b:a6:46:ea:d0:d0:1e:dd:97:
         3b:8e:a7:43:08:4e:c9:dc:ca:40:91:19:b1:e6:74:38:b7:2a:
         e4:d5:71:43:53:4b:75:97:a0:3c:d9:8b:11:96:cb:fd:03:75:
         28:c3:ea:30:cd:fc:0d:09:50:ef:24:c4:65:16:60:01:4a:73:
         c3:9b:82:b6:65:e6:3a:cd:a9:16:15:01:c4:06:4c:91:a6:88:
         a0:92:80:a0:a3:bc:4d:d5:1c:a8:f2:1c:b6:2b:b7:67:ba:5e:
         b0:db:52:f6:bc:23:40:0a:ac:0b:e7:5b:59:f5:be:37:81:76:
         b5:de:25:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:00:52 2026 by rpki-client