This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
File:                     dCsbXAdcPTvfo1JdR2sbKGfCoso.mft (raw, json)
Hash identifier:          LXjAxdwaNrl0TbhcywAFI6uX6/U8GQ6Nds5RB1ge2f0=
Subject key identifier:   99:88:EB:C4:08:DF:07:C9:AE:11:95:8D:18:39:A0:52:D5:3A:75:CF
Authority key identifier: 74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA
Certificate issuer:       /CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
Certificate serial:       019BF5E3B323D0282F5D6F1DB40D87C45DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
Manifest number:          1520
Signing time:             Sun 25 Jan 2026 16:01:38 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:38 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:38 +0000
Files and hashes:         1: dCsbXAdcPTvfo1JdR2sbKGfCoso.crl (hash: b9h0FtUzA1b0pBvUqWTaF6yJhrd6FM0LeGrwnpi9HA0=)
                          2: h8XV-KgY396KZBJ7Bi9YlZn3ShM.roa (hash: fluQLEMS1tYgpv9diRyw7o5a3GxgE3HkE4V51yJi7a8=)
                          3: oo1W6F0elMF6_CiE6UvVXxLai4o.roa (hash: t1F5I9ggDgCDZTVdA+hfkYMiN/rTAkrjwkTHtKs69BY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:b3:23:d0:28:2f:5d:6f:1d:b4:0d:87:c4:5d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=742b1b5c075c3d3bdfa3525d476b1b2867c2a2ca
        Validity
            Not Before: Jan 25 16:01:38 2026 GMT
            Not After : Jan 26 16:01:38 2026 GMT
        Subject: CN=9988ebc408df07c9ae11958d1839a052d53a75cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:35:16:6b:0b:37:5a:1a:fa:44:3a:ee:09:13:
                    b2:0d:17:6f:c8:90:26:4d:22:2a:19:63:1c:73:d4:
                    66:7b:98:7e:ba:f2:6d:e2:1a:77:46:6a:46:a2:e1:
                    0e:56:d1:33:85:08:59:82:63:8d:c8:8e:0f:56:e6:
                    4d:76:1e:ab:72:b1:97:fa:56:f5:0c:84:61:ed:d8:
                    56:ff:63:2e:f3:3e:8f:3f:50:dc:b8:b0:9c:01:72:
                    d3:fd:e6:b8:d3:ae:b8:aa:58:bc:5c:bd:29:04:25:
                    60:62:ca:36:ff:fa:f7:99:54:82:9b:4b:87:27:c9:
                    17:13:e5:0d:0e:91:4a:a3:fc:37:04:a3:f9:6e:ca:
                    5d:b7:ec:d6:3b:88:af:98:03:ed:6b:7b:c8:f8:be:
                    b2:e3:05:49:ea:75:4c:9b:22:3f:58:21:f1:04:72:
                    49:00:2c:6c:bb:c0:2e:d3:05:e7:27:00:62:d4:09:
                    37:b6:2b:2d:a5:68:b7:2b:4d:cb:2f:2a:7b:d5:f9:
                    61:b2:b2:53:03:9b:d9:ef:c6:c5:c9:78:73:ee:1a:
                    ae:13:1b:bc:93:c7:c7:e5:8e:6c:7c:bf:28:9b:55:
                    11:e7:47:1b:87:be:5b:1d:68:db:c9:a6:eb:5f:3f:
                    fb:69:ee:04:ac:66:20:c5:dc:4d:67:dc:ab:d8:33:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:88:EB:C4:08:DF:07:C9:AE:11:95:8D:18:39:A0:52:D5:3A:75:CF
            X509v3 Authority Key Identifier:
                keyid:74:2B:1B:5C:07:5C:3D:3B:DF:A3:52:5D:47:6B:1B:28:67:C2:A2:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCsbXAdcPTvfo1JdR2sbKGfCoso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/202a79-5bfe-4a48-a7f9-414196ac646e/1/dCsbXAdcPTvfo1JdR2sbKGfCoso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b3:76:eb:54:0c:92:bf:1b:17:1d:c8:00:73:65:f0:ad:c3:
         42:39:16:c3:d6:5c:f7:b9:a7:bf:ba:37:01:42:56:3c:e5:95:
         6a:81:c4:e7:21:36:52:40:81:3b:1c:2c:10:bd:f0:77:1c:75:
         a2:1d:97:af:60:33:bb:c7:b1:63:5e:77:dd:7a:c3:2a:3e:bc:
         23:26:9f:9e:6b:2f:19:20:81:1c:63:71:c7:1a:00:cd:0c:5a:
         bf:b5:82:4a:df:3e:83:63:f8:ce:49:4b:aa:52:a8:57:53:d5:
         0c:1f:d5:ac:ab:5e:ef:9f:f3:df:37:bf:30:5e:9c:c0:77:3a:
         54:b1:9c:20:67:0e:b7:3f:92:73:9f:5c:15:fe:d2:08:58:4a:
         82:80:00:f5:8b:27:e4:2e:1e:3f:75:c4:e6:6f:89:b2:ef:46:
         91:a2:dc:13:7f:db:a3:2d:be:a6:0f:c6:38:04:02:46:b7:75:
         2d:bd:ab:fd:59:94:b3:38:df:cc:1f:00:f8:17:e3:d1:99:23:
         40:3b:e1:83:d2:93:7f:fb:d7:5c:a7:26:86:88:bf:b8:3e:95:
         09:5d:70:e7:37:53:98:ea:dd:91:f1:b7:2c:16:5f:53:fe:93:
         44:e8:7b:ca:6e:88:2a:bb:67:e5:57:6a:f8:66:52:6f:ee:88:
         17:1e:6c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:49 2026 by rpki-client