This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
File:                     2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft (raw, json)
Hash identifier:          dOZKit2iBIItg7jCG8TbD0pYOs5oHrUKe4iKSnIykuQ=
Subject key identifier:   75:FF:80:13:0E:37:8E:EA:DF:E2:82:16:1E:E4:17:1B:FE:08:D8:84
Authority key identifier: DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67
Certificate issuer:       /CN=dac633a14cac7c7a0922ffd980de5f278a3be267
Certificate serial:       019BF2E1D58BDDE2E559E7AAA6A53A19EAF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
Manifest number:          0DC0
Signing time:             Sun 25 Jan 2026 02:00:44 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:44 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:44 +0000
Files and hashes:         1: 2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl (hash: YQC0n6gAxQTbstB+krFmq1gZGRO/G55rBYIN2yzDjV8=)
                          2: i88AXjkXzlj40akB1G-HmIFf15s.roa (hash: 3yK2qP5LSrsi2hlIg5t/JF6Pz2bjj3/z4KWWbRJV2Jw=)
                          3: jUHIbqfq8yrGKCUZ3K_mRdy28OA.roa (hash: VoytDp/AhhYORR1aUTZNF199Gd9kVzSoMBMevGAIxsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:d5:8b:dd:e2:e5:59:e7:aa:a6:a5:3a:19:ea:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac633a14cac7c7a0922ffd980de5f278a3be267
        Validity
            Not Before: Jan 25 02:00:44 2026 GMT
            Not After : Jan 26 02:00:44 2026 GMT
        Subject: CN=75ff80130e378eeadfe282161ee4171bfe08d884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:12:38:56:c6:ea:06:44:0b:d4:aa:d5:bd:
                    e8:8f:14:4f:cc:dc:5e:3b:12:cd:e2:08:41:aa:c0:
                    f0:1f:86:1d:d7:03:d9:58:24:43:50:95:d4:2b:28:
                    2a:4f:8c:7f:cd:77:8b:0f:73:f9:3a:cd:9a:d8:e8:
                    68:9c:09:04:02:b2:aa:7b:df:5c:00:9a:76:ad:e2:
                    ef:4e:a4:3e:c7:08:0d:f5:cc:bc:f0:b3:13:dd:a8:
                    47:3e:67:30:5f:22:d9:2e:8c:6e:47:29:f6:a0:bf:
                    4a:f1:8a:85:6f:e8:ec:11:19:49:5f:7b:a6:ea:6c:
                    56:b3:81:3a:ed:4f:7c:66:61:80:14:1e:52:cc:6c:
                    4c:91:9d:57:d3:da:bd:ac:74:57:e7:b9:ac:02:40:
                    2a:ff:16:bf:9d:a1:88:a5:f0:e8:3f:f5:3a:e3:7c:
                    94:60:8d:ec:cb:cd:65:91:98:2a:5e:bd:89:ff:65:
                    6e:35:e1:46:b3:6b:6f:4f:bf:8f:59:8b:93:b3:f2:
                    19:7a:80:fc:69:65:40:e6:03:d3:47:fd:38:86:dc:
                    b2:f3:cf:18:ab:09:d6:d6:51:5a:26:a4:e0:d4:16:
                    e6:b2:a7:e3:94:c6:7c:dd:48:17:ed:d8:35:17:67:
                    37:cb:86:df:ae:69:2c:3c:aa:2b:dd:e0:32:24:4a:
                    0b:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:FF:80:13:0E:37:8E:EA:DF:E2:82:16:1E:E4:17:1B:FE:08:D8:84
            X509v3 Authority Key Identifier:
                keyid:DA:C6:33:A1:4C:AC:7C:7A:09:22:FF:D9:80:DE:5F:27:8A:3B:E2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sYzoUysfHoJIv_ZgN5fJ4o74mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c852b5-acc4-4d70-aeeb-24515a14c456/1/2sYzoUysfHoJIv_ZgN5fJ4o74mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:68:61:d7:fa:75:d8:58:43:2a:6b:de:46:c0:53:24:d4:
         ba:d1:02:0c:09:7e:d9:db:e3:f7:1d:cc:03:03:ab:3c:de:3a:
         e3:23:c4:ab:e5:35:25:ec:da:12:fe:75:8b:c5:dc:03:39:2b:
         28:f4:09:d0:4f:1e:60:4a:02:fc:36:b4:84:09:a4:2e:60:ee:
         5a:b6:13:43:67:46:76:45:07:bc:c5:98:07:b0:bd:94:b3:3b:
         b5:34:2c:4d:44:b5:b8:04:bd:19:53:63:9e:fa:f7:da:21:6d:
         05:77:ec:6f:20:14:d2:99:f4:d5:34:f6:01:4b:6a:77:f6:64:
         1c:04:1e:59:90:08:e6:c9:5c:6b:7d:29:09:59:30:6f:70:40:
         8a:34:5b:21:c1:c5:90:69:4f:24:1e:df:d4:ff:09:18:bb:82:
         b4:07:53:f6:86:32:15:fb:3d:6e:1f:d1:03:94:63:12:6f:2e:
         57:6d:6d:28:13:fc:42:66:e3:07:9a:0e:98:88:e6:16:c0:af:
         a9:82:a6:18:34:15:bf:c6:ff:a5:93:e3:bf:cf:03:bc:99:dc:
         36:23:77:9c:5a:65:81:c2:0d:a9:60:76:45:b4:25:d3:85:49:
         e0:93:25:27:1e:b7:8b:33:69:47:6b:be:23:26:d7:23:b3:18:
         64:01:54:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:49:16 2026 by rpki-client