This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File:                     0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier:          IJFWan0o/NHpfmgRhasKftzdk0ToEyAYP7eE6mYKDN4=
Subject key identifier:   A4:F2:FE:05:93:B9:1F:55:77:5B:CD:CA:E9:DA:C6:2D:9B:17:7B:E5
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer:       /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial:       019BF6BE69799E7F6D55D55719D4BC5B32D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number:          17EE
Signing time:             Sun 25 Jan 2026 20:00:32 +0000
Manifest this update:     Sun 25 Jan 2026 20:00:32 +0000
Manifest next update:     Mon 26 Jan 2026 20:00:32 +0000
Files and hashes:         1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: ogx4FuOdD9AdHkjLqMiVqDJ5e5UUtD0kEroBk/aKBHM=)
                          2: 6twj1FNGbSdC6GwrHJCaAlK97kQ.roa (hash: ZXy5hFs9BRqqonUgm00rE7vHIrD50csuYB7WxmR/ZMA=)
                          3: BfkIMDedHvkhA2THdLsjdvt92Lg.roa (hash: ltzWWyb9KbJKCS0qvZNQB+aDHpJjbdvCT6eRcpViW3Y=)
                          4: coJoVPwD-NPH-ETwi5cG_7WPcf8.roa (hash: GKRZPbLDmw4jESIu5RvOoK1/PXU2kw57mn7Q0tZcbW8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:be:69:79:9e:7f:6d:55:d5:57:19:d4:bc:5b:32:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
        Validity
            Not Before: Jan 25 20:00:32 2026 GMT
            Not After : Jan 26 20:00:32 2026 GMT
        Subject: CN=a4f2fe0593b91f55775bcdcae9dac62d9b177be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d9:f6:e3:0e:3a:92:68:38:cc:51:17:9d:77:
                    94:a9:da:5d:68:1a:ed:ef:27:3d:67:1d:99:e3:5c:
                    44:38:3b:4b:19:63:8d:e4:c7:e8:d9:1f:6c:40:50:
                    b8:08:b4:04:08:ef:cc:e6:46:34:b9:99:85:30:89:
                    13:73:31:a1:92:87:f9:a2:b4:90:72:bc:d4:8e:c5:
                    88:52:a0:2b:93:73:44:a5:a6:23:b9:48:b7:9f:91:
                    6b:60:64:d8:f0:35:29:55:cb:e7:82:88:f6:10:e7:
                    3f:04:f1:c3:4d:ec:74:d1:cd:02:be:cc:0a:34:79:
                    e9:a1:59:76:3d:d9:95:70:80:ed:f9:a1:bd:56:67:
                    12:56:b0:7f:1a:80:75:18:06:14:eb:7d:7e:17:48:
                    ff:ad:eb:03:2a:ae:ca:99:9d:5a:56:0b:e0:c6:35:
                    59:74:da:7d:2e:c1:63:75:4a:38:c0:ab:b9:64:36:
                    a6:07:6c:36:f9:32:c6:68:20:b7:6b:f7:69:6f:37:
                    6d:bb:ad:a6:c9:70:06:36:d3:6c:b8:d6:26:52:4e:
                    d9:65:7d:cd:04:0f:f6:16:54:dd:e4:24:c9:ac:2f:
                    6e:48:c8:4b:2f:1e:59:c2:7e:a7:63:8f:cb:98:29:
                    ba:fa:51:59:be:cf:df:b3:27:42:4d:76:9b:10:f1:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:F2:FE:05:93:B9:1F:55:77:5B:CD:CA:E9:DA:C6:2D:9B:17:7B:E5
            X509v3 Authority Key Identifier:
                keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:1f:25:a3:4d:e5:34:58:6f:be:9c:33:bc:25:46:95:02:7e:
         f6:8d:b3:7e:2f:07:49:79:03:ab:a3:75:5c:30:f6:3b:56:b6:
         c5:f2:f4:32:27:46:c4:b4:12:72:37:4a:9a:5c:81:9e:8e:25:
         ed:a3:4f:d6:3e:83:c8:2f:bf:bf:ee:7f:ff:09:9a:c2:df:02:
         3a:51:3c:d9:09:b0:96:6e:6a:2c:35:cf:bc:41:1a:eb:09:56:
         4c:68:47:18:33:94:c7:47:f2:f7:32:1f:5a:3f:36:a6:3b:fa:
         3b:88:ef:03:0a:13:0e:2f:1a:90:72:de:d3:2c:95:1c:65:d9:
         6a:cb:b1:ac:de:06:b7:2c:ef:7e:5d:22:f4:b7:a4:6a:7a:ab:
         f0:60:a7:18:15:2e:ed:4b:31:56:19:4c:e1:1c:05:2b:c5:51:
         21:0b:c5:8d:95:13:9d:8f:63:9f:ae:e2:e0:a2:7c:88:ce:1c:
         01:46:f9:e7:33:19:aa:c6:b6:10:07:7a:c2:bb:50:02:ef:d1:
         30:3a:7d:d8:8a:c9:f4:6c:04:60:36:97:c9:4c:69:34:e3:cd:
         0a:67:f8:a0:7c:6d:a8:97:23:70:2e:b9:3c:cd:57:aa:85:31:
         69:1d:10:b0:94:8b:fe:22:73:e4:3f:f0:ab:63:23:de:54:02:
         82:9b:eb:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:40 2026 by rpki-client