This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
File:                     d73XXy78JE-GoyGxUOYpNqFAKds.mft (raw, json)
Hash identifier:          l9GphwtTAWus5lEf6OfIISEb+MBBWUtj+vmKYfG4tgI=
Subject key identifier:   7A:55:4C:23:9B:30:5F:76:66:55:2C:A5:BE:68:79:8F:9D:91:66:42
Authority key identifier: 77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB
Certificate issuer:       /CN=77bdd75f2efc244f86a321b150e62936a14029db
Certificate serial:       019BF318D734F3DDE937E826C66AE2AC6A3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 03:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 03:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 03:00:49 +0000
Files and hashes:         1: UeHrvynok458nbOMxnfDo2XoOCg.roa (hash: mBftsmERWzpGKsnXFmodVRrKomChx92ReubqAs5GrrQ=)
                          2: d73XXy78JE-GoyGxUOYpNqFAKds.crl (hash: sdMCNWxoxRHOO1y8M60nmyfG8ILOh+v5v6x39NQcN+c=)
                          3: jMDauzNgql38unoatB3JO5Ml3iQ.roa (hash: Bmlq4o2YkAwlEIUrRalLb7yAT8WXu+XhxwnwkhpOnOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:18:d7:34:f3:dd:e9:37:e8:26:c6:6a:e2:ac:6a:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bdd75f2efc244f86a321b150e62936a14029db
        Validity
            Not Before: Jan 25 03:00:49 2026 GMT
            Not After : Jan 26 03:00:49 2026 GMT
        Subject: CN=7a554c239b305f7666552ca5be68798f9d916642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:32:c7:09:5d:8c:bb:2f:f3:2a:7a:07:a1:1d:
                    a2:be:b9:44:ca:85:50:39:1c:93:9d:9e:64:a1:e9:
                    e6:71:a2:6e:7d:0e:d2:fd:f0:c8:72:e1:d6:1d:a9:
                    db:8a:a1:af:c1:a9:63:63:8f:b0:69:0a:5b:a1:18:
                    17:e5:68:8e:ae:8d:85:aa:2f:82:c3:d3:d0:c6:84:
                    c4:29:51:75:8f:11:b2:65:24:4b:fa:d6:b5:0d:a1:
                    2e:8d:97:7a:51:6a:eb:17:f7:40:02:23:fc:cf:a4:
                    8a:50:92:1e:c7:76:3e:db:52:74:f5:3c:e6:3a:01:
                    fa:9c:2b:11:bf:8a:0e:d2:33:e7:26:d6:b0:2c:3a:
                    ec:ea:98:a3:fa:68:54:8c:eb:88:25:e1:b7:97:7b:
                    83:b3:01:24:f1:31:ce:99:4a:6e:9b:dc:2c:5a:e3:
                    17:e8:c5:25:74:0b:48:65:0c:74:66:2c:fc:e3:c3:
                    f8:67:50:d8:8f:49:2e:76:93:5e:09:26:31:f2:ad:
                    73:df:4a:b8:ac:91:3b:cd:d0:1b:e7:52:c8:04:1e:
                    d3:60:1c:5f:6b:16:f2:8d:b1:d8:ff:5e:7b:73:a1:
                    db:39:e8:93:ba:74:e9:83:c7:c0:6c:5a:74:84:bb:
                    88:50:0b:8e:05:1e:3d:b9:56:e5:ec:70:09:e4:43:
                    83:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:55:4C:23:9B:30:5F:76:66:55:2C:A5:BE:68:79:8F:9D:91:66:42
            X509v3 Authority Key Identifier:
                keyid:77:BD:D7:5F:2E:FC:24:4F:86:A3:21:B1:50:E6:29:36:A1:40:29:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d73XXy78JE-GoyGxUOYpNqFAKds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/26a34e-2094-4e76-a1ea-1dedbe7b5baf/1/d73XXy78JE-GoyGxUOYpNqFAKds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:66:59:0e:a4:ee:17:35:b3:aa:24:96:86:c6:be:c2:91:40:
         8d:99:58:53:e2:3b:7b:48:d0:cb:73:8f:f6:93:ec:a6:ba:1b:
         3f:82:09:bc:69:2f:3c:b2:c1:a0:5f:c4:85:ca:3f:43:b2:02:
         91:be:93:92:e8:92:e6:a9:7e:fc:2b:14:7a:56:6d:0d:f9:da:
         67:04:ae:b7:ae:24:d6:3d:3b:94:45:0f:17:8e:3d:ef:16:cf:
         8b:14:80:ca:a0:75:f6:b2:3a:69:16:ea:13:25:8d:b5:c9:7d:
         a7:3d:9d:d1:f3:75:61:d8:d8:bc:5e:2a:5c:f8:0a:10:04:7a:
         f0:1a:02:37:d4:78:67:b7:62:b9:ea:60:a6:a0:dc:df:47:e6:
         4c:c9:20:57:36:05:5e:a2:18:f4:bc:55:d0:1a:f8:99:ed:8b:
         29:4f:cc:b2:17:5c:96:20:7b:10:5c:50:23:61:f9:8d:5a:06:
         29:b7:b6:33:45:37:e3:d2:98:3e:f3:f3:f6:0b:15:8c:71:11:
         9c:e2:d1:77:ac:e0:7b:44:dd:b0:6b:77:ee:f7:ca:af:32:7f:
         e6:5f:17:db:7a:3c:4b:27:16:bc:c0:7a:80:09:7d:42:02:b3:
         71:4a:e2:5c:f4:91:e8:57:2e:0c:09:14:eb:60:49:5a:9d:8f:
         34:7e:be:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:09:40 2026 by rpki-client