This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
File:                     phraYSAkE82Pyi9JdCUnrQIflnY.mft (raw, json)
Hash identifier:          UKys35HvksYxf/5E8U6kE6nwUNt6mSoWf+ilx81jN6M=
Subject key identifier:   D8:53:CA:01:4E:D4:9C:52:BF:B7:CA:46:8D:34:F6:61:C5:84:78:9F
Authority key identifier: A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76
Certificate issuer:       /CN=a61ada61202413cd8fca2f49742527ad021f9676
Certificate serial:       019BF687D2F190014438695E85D68D78184C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 19:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:55 +0000
Files and hashes:         1: LV26UXUBiDjM_ESrnKwXDTyygek.roa (hash: O948YaLP3CB1Q1B0DwS4vZdURPuBNeFKJeoag3bjmCo=)
                          2: eSJ9M3YRMULj0vRUBV74lXf_M64.roa (hash: UuL1eC7zK/jssD2ClTL9pItbGfU98/yXUav7BdprTQk=)
                          3: k7az-_BtbKLYLi41aEKLRIvNmoc.roa (hash: B7UITnspL1Od2jE72rx43sMNx/qWRzT0FVRuVA3nuP8=)
                          4: phraYSAkE82Pyi9JdCUnrQIflnY.crl (hash: bqgkCWJvLXdjZmO55S1v0Z8Xp7uq2PmyU7Uf6z/bZ1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:d2:f1:90:01:44:38:69:5e:85:d6:8d:78:18:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a61ada61202413cd8fca2f49742527ad021f9676
        Validity
            Not Before: Jan 25 19:00:55 2026 GMT
            Not After : Jan 26 19:00:55 2026 GMT
        Subject: CN=d853ca014ed49c52bfb7ca468d34f661c584789f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:72:86:e1:cb:25:3f:23:6b:49:f5:83:86:65:
                    59:67:c8:1a:a1:92:b1:16:6b:ae:43:69:93:0c:47:
                    16:1a:e6:15:4c:24:61:f5:1a:a2:39:8b:7c:99:f1:
                    cd:af:83:56:02:27:83:5f:f6:7e:7f:a0:0d:81:9a:
                    d7:97:b3:87:3d:a3:87:3f:d8:6f:fb:c6:59:0d:2e:
                    6e:7f:d9:e8:12:83:fc:a4:20:71:11:9f:a9:bb:98:
                    ea:b6:b2:f9:01:24:6a:8e:db:61:15:5c:20:14:b1:
                    16:d3:e6:6f:bd:ee:a0:01:28:bf:13:b3:3d:7b:bc:
                    22:36:fe:98:1f:b5:aa:72:7f:63:af:ad:b0:d8:cf:
                    ba:03:87:37:25:cc:e6:de:6b:8a:87:66:da:85:93:
                    5a:7f:e6:d1:10:53:5a:8d:78:d6:61:ca:66:04:f2:
                    6f:bc:7a:11:91:43:c7:0a:f2:bc:31:ee:7f:db:10:
                    b6:89:53:5d:5a:66:f2:8d:15:47:64:6e:87:32:5c:
                    7c:34:ca:e6:92:0a:29:0c:49:04:a1:a4:25:cd:3a:
                    a3:03:c7:99:06:a1:25:62:ab:35:1e:07:33:8c:14:
                    1d:f4:2e:ab:c0:93:ea:d0:c6:cd:fa:d7:9e:ce:b2:
                    80:87:c7:d9:36:4c:a1:5e:42:3f:6c:b8:4c:4d:32:
                    fe:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:53:CA:01:4E:D4:9C:52:BF:B7:CA:46:8D:34:F6:61:C5:84:78:9F
            X509v3 Authority Key Identifier:
                keyid:A6:1A:DA:61:20:24:13:CD:8F:CA:2F:49:74:25:27:AD:02:1F:96:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phraYSAkE82Pyi9JdCUnrQIflnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bdab9d-458b-4d6a-9d9b-aeec7a859c59/1/phraYSAkE82Pyi9JdCUnrQIflnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:ef:01:42:12:20:49:9d:c3:b0:a0:37:26:69:35:aa:5c:8a:
         df:82:65:04:1f:21:ab:50:60:f6:24:49:0a:c2:40:02:10:2e:
         dd:33:27:34:e9:2b:48:30:f9:06:95:06:23:64:95:3e:2b:45:
         64:7e:22:ea:d2:fd:b7:3d:fe:54:2a:26:13:d6:1e:8f:5d:b3:
         ee:2b:37:01:b1:5e:13:80:43:6a:34:72:51:bb:b3:88:0e:e6:
         d8:34:ea:f8:e9:4d:28:17:27:91:a0:b8:f3:86:55:4c:4e:21:
         91:3c:62:c2:1d:a5:13:f4:0b:c5:47:95:5a:73:3f:84:55:13:
         3e:13:d0:ee:87:63:f2:5a:66:e7:13:57:92:d7:ac:73:20:42:
         58:68:d8:04:fb:fb:aa:d5:02:ab:90:58:5a:9f:b7:3e:ce:f8:
         39:11:b5:03:b6:50:8c:27:4a:84:53:4b:a4:cc:d2:50:61:81:
         59:c1:54:77:8d:fd:85:b3:47:c3:0a:74:1e:56:aa:9d:e5:96:
         ef:86:0f:8f:43:22:70:83:cd:70:a7:75:78:ff:33:49:e8:8d:
         0b:18:f8:c2:42:14:d9:b0:a3:8c:c2:1e:3a:e5:fd:f6:87:5b:
         fb:b4:44:ba:76:25:c6:80:95:0e:3b:50:c5:8c:a7:8e:17:73:
         0c:f8:92:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:14:44 2026 by rpki-client