This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          Hymsp2ieuSzRH5pBORypsxt7ULpBXR3FO5pJkS0SaWg=
Subject key identifier:   D6:1B:E8:FA:33:02:AE:A9:8F:CC:D1:2F:03:44:AB:95:3C:60:38:6A
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       019BF79A3552DE9728DFE88038B11C40ECDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          0810
Signing time:             Mon 26 Jan 2026 00:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:37 +0000
Files and hashes:         1: 9F2fGaXqkwYq7hsidHwhVUABVT0.roa (hash: b+5jUhu8wzSR5Hz+8wVW5uNIAXefzuPQ7RL1+84Zd/s=)
                          2: FJjLx1iJw4VqFKz7FPQ0JyldOfI.roa (hash: ev1W9ohjVf7Q0Z9nGx/i+Cc2wNkdLs6mHMbE9kefqiU=)
                          3: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: nHbEdh/9zCoqG+vrsYUbgLG8uIdYg+GKyBKyjklElXo=)
                          4: yj4Baoa8O0cK9liPFSajl18EXPE.roa (hash: qR4NJRolj3aKBGShXLhpMIVXbSB+hmucW84pdI75rZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:35:52:de:97:28:df:e8:80:38:b1:1c:40:ec:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: Jan 26 00:00:37 2026 GMT
            Not After : Jan 27 00:00:37 2026 GMT
        Subject: CN=d61be8fa3302aea98fccd12f0344ab953c60386a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:65:19:58:4f:3d:d0:7c:fe:fe:4b:96:8d:
                    1f:78:11:e1:dd:55:1f:c2:7f:af:39:2d:28:64:f8:
                    90:e2:47:14:82:9d:23:d4:61:2f:31:62:2c:c5:49:
                    02:96:c8:e7:5e:16:09:3e:db:b8:a7:6f:9c:e7:81:
                    84:f5:65:15:55:2a:fc:eb:c7:d4:19:07:63:35:b8:
                    5b:30:5f:6d:7f:5b:90:cf:2d:48:84:21:01:39:4d:
                    8a:07:2b:45:7b:89:94:b8:2b:fc:a4:6d:31:9b:15:
                    80:53:e0:35:cd:c7:a9:42:aa:ef:8c:50:97:e7:c5:
                    9c:54:b9:4f:c6:61:cf:ab:3d:cb:96:0e:52:1e:29:
                    dc:f2:48:db:3e:46:c0:2e:94:ce:60:ef:a6:46:49:
                    82:62:7e:82:4a:30:1c:73:90:af:84:ee:d7:db:01:
                    89:5e:42:3a:9e:9a:62:2d:94:70:da:d0:9a:ad:81:
                    1d:e4:c1:c0:db:72:ec:69:34:e2:ad:8f:9e:24:93:
                    61:e4:fe:54:f5:91:93:3d:d7:6e:f1:8e:6e:5c:77:
                    b0:99:a6:96:cf:c1:52:98:1b:1d:48:bf:e7:b3:66:
                    8f:2c:4c:20:98:aa:2e:9b:64:00:b6:30:03:da:4b:
                    ec:8f:52:d3:92:9c:ed:cc:28:b3:4f:8d:50:55:f9:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1B:E8:FA:33:02:AE:A9:8F:CC:D1:2F:03:44:AB:95:3C:60:38:6A
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:71:09:62:26:77:13:5b:ef:b4:b4:13:e8:8c:47:0a:d8:6b:
         9a:5a:7e:eb:33:47:67:39:cd:61:6b:49:52:df:3b:ef:3c:0b:
         a8:78:81:f9:7e:3f:11:00:dd:c7:d1:fc:65:18:81:98:cd:14:
         eb:07:85:79:f1:d7:2f:18:2a:8e:15:22:a5:2e:65:e5:cb:dd:
         62:46:c1:df:bb:72:53:ef:b1:4f:11:9a:e1:69:35:05:92:41:
         20:c3:55:9a:cb:9a:8b:bd:73:d0:ef:c2:9e:e4:24:aa:c6:5a:
         8c:97:e2:08:16:ed:77:7a:ed:eb:16:49:44:0a:75:c3:ff:c4:
         26:5d:53:dd:7d:08:ae:b4:a5:ea:b8:e6:ac:a6:e6:7f:29:02:
         de:25:ea:7e:84:de:6a:d6:79:47:53:a8:71:dc:d3:a1:ee:63:
         af:5c:4e:86:d1:77:f5:07:5d:c9:7a:7e:3e:79:6e:28:b5:87:
         d3:d4:ca:7b:c5:23:3a:47:4a:eb:73:6e:84:60:ab:b4:02:59:
         7b:ba:7c:66:ae:14:e8:a7:95:99:da:fd:14:b4:f7:58:bb:6f:
         f2:7f:75:a8:ef:00:4a:78:c2:53:5e:cd:5c:9a:3a:2c:ef:26:
         e1:83:24:08:ce:88:bd:e9:92:1b:9c:0f:20:c4:cc:91:80:d3:
         ef:8f:99:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:52:24 2026 by rpki-client