This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
File:                     DvgMyei0RaB_7srAr8WeQtxxAmM.mft (raw, json)
Hash identifier:          2jDNQDeJGg1zZBnuI91DId2cGVc0GPNxYEPqXu0V97M=
Subject key identifier:   51:6F:FC:87:16:6E:9B:42:03:69:B3:C0:A1:06:DB:B0:4C:5A:4B:1B
Authority key identifier: 0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63
Certificate issuer:       /CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
Certificate serial:       019BFA9C10FE6D25DDAB1D91A6B5656D29AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
Manifest number:          053B
Signing time:             Mon 26 Jan 2026 14:01:30 +0000
Manifest this update:     Mon 26 Jan 2026 14:01:30 +0000
Manifest next update:     Tue 27 Jan 2026 14:01:30 +0000
Files and hashes:         1: DvgMyei0RaB_7srAr8WeQtxxAmM.crl (hash: JtjbOs8aTmXYF9daGOtJsTXT0hMMlb4BOh0w5TyItqQ=)
                          2: Xm1NyxAzrsVfmOit8GLDJIUr3T4.roa (hash: FBeGZgtFYVn2jU+qekRgjUacFdjECcP1nPbLiXskECw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9c:10:fe:6d:25:dd:ab:1d:91:a6:b5:65:6d:29:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ef80cc9e8b445a07feecac0afc59e42dc710263
        Validity
            Not Before: Jan 26 14:01:30 2026 GMT
            Not After : Jan 27 14:01:30 2026 GMT
        Subject: CN=516ffc87166e9b420369b3c0a106dbb04c5a4b1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b6:ec:81:45:e2:34:c2:5a:c5:01:8a:68:10:
                    d9:48:f2:25:b0:cc:c7:38:09:c2:11:5c:2e:8e:bc:
                    41:a0:35:f1:c1:f9:e4:08:3d:99:ec:30:97:a1:c1:
                    b2:91:38:df:1b:b4:39:48:a9:84:89:9d:22:28:e4:
                    db:15:3f:16:3c:8d:52:5a:b2:11:81:4c:0b:0d:7f:
                    c8:11:33:be:92:af:b1:6c:c3:e2:42:1f:a2:38:2e:
                    56:b9:80:71:ce:72:e0:b3:b7:84:9a:08:77:85:8f:
                    df:79:73:9e:52:32:69:be:1b:55:fd:40:8f:46:5c:
                    2b:27:55:76:b1:e5:29:e5:07:00:a6:45:ea:01:39:
                    d4:ac:c9:4b:46:f3:d3:17:0a:3b:f9:8c:ce:cd:92:
                    0f:2b:b0:5a:f3:c8:b9:8a:0c:62:cc:65:cc:e6:6b:
                    4f:59:b1:3b:25:85:a6:80:35:71:81:81:f6:d8:a8:
                    db:2f:c9:f3:a8:d5:b2:73:fe:cf:54:83:88:c4:b2:
                    be:70:e6:df:fe:60:cb:09:33:b7:70:56:93:92:33:
                    8a:04:4d:b9:38:95:5b:9d:74:03:6a:5c:6e:e9:fd:
                    dd:6f:1b:42:05:b2:1c:e5:9c:3a:14:14:7f:86:aa:
                    15:b8:ff:54:a0:15:1c:1a:57:50:bb:7c:34:0e:ce:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:6F:FC:87:16:6E:9B:42:03:69:B3:C0:A1:06:DB:B0:4C:5A:4B:1B
            X509v3 Authority Key Identifier:
                keyid:0E:F8:0C:C9:E8:B4:45:A0:7F:EE:CA:C0:AF:C5:9E:42:DC:71:02:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvgMyei0RaB_7srAr8WeQtxxAmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/086bda-a464-44d8-8d1b-866e5d4c6edb/1/DvgMyei0RaB_7srAr8WeQtxxAmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:93:5f:84:76:58:c8:37:7d:c2:f2:85:10:7a:6f:2e:ad:
         80:72:c6:40:2b:03:17:42:7d:db:45:f0:28:02:00:36:f3:f8:
         cd:97:c8:30:18:a2:31:6d:4b:93:a8:63:49:da:42:b4:34:60:
         a6:73:75:77:9e:23:91:b1:c1:81:23:b6:4e:57:15:98:18:48:
         71:d6:29:c1:30:37:2d:a9:a6:99:8d:cd:c9:93:db:94:65:a5:
         f2:93:b1:fc:e6:76:eb:73:94:01:ab:54:80:f4:27:62:e6:8a:
         c0:dc:2d:76:5f:b9:5b:e2:98:9d:a6:d8:45:c6:75:89:03:97:
         3a:f2:9f:48:48:c0:af:82:9b:37:c6:f3:33:94:15:df:54:9d:
         bf:4d:b7:0e:15:a5:a9:60:3e:18:be:5b:94:47:0b:cf:27:45:
         70:0f:0e:ad:ab:6f:fe:bb:74:f4:39:cc:a7:8b:4e:7f:ed:7b:
         cd:81:af:a5:d9:f2:48:ba:ff:0b:9c:17:45:79:2d:1b:98:28:
         70:00:06:45:0d:b4:b5:13:99:62:db:21:0f:92:f9:43:14:c6:
         4a:3e:a8:a4:54:ff:62:83:fd:53:47:27:a9:08:c6:a5:50:aa:
         cd:fa:28:df:cd:03:3d:5e:57:e7:99:14:41:69:9d:9c:10:a8:
         50:54:75:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:23:31 2026 by rpki-client