This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          TrolqjKYaz3XnSk3SqBwhcMuEIw7sOSNgJBnXQGJUHU=
Subject key identifier:   07:75:0B:8C:88:CD:82:3C:12:A9:89:F9:A4:2B:D6:54:3B:84:66:79
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019BF462EBD0FC036F4C4585854D4179CCAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          1526
Signing time:             Sun 25 Jan 2026 09:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:22 +0000
Files and hashes:         1: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          2: 39hneJOhhgQ3tuCJz5rk0Hahg8Q.roa (hash: 3hQnINDrkdh7j9/KioGKynE1ZZ9IVPMy4iOK1ZGZOvM=)
                          3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: yfA1Vo7wsfUHYXJcqmsD218ZID+jDhU7nsWTaGHpQQc=)
                          4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          5: s1fRzoLSNvV_vSYF8FK7qpyreHQ.roa (hash: L6hjH+xxHxV60LTIVIU/YS2Mb7ljdN9j8bKUQEJGgyQ=)
                          6: xlQewOWzzq7LozcT0cqTKn8iurY.roa (hash: muPAFPV5l9xlSoAgXyUhUa/d3koV/HrFw13eI9fUzHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:eb:d0:fc:03:6f:4c:45:85:85:4d:41:79:cc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Jan 25 09:01:22 2026 GMT
            Not After : Jan 26 09:01:22 2026 GMT
        Subject: CN=07750b8c88cd823c12a989f9a42bd6543b846679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2f:b9:fb:7e:55:8e:c8:ab:3b:66:3a:9c:e9:
                    69:25:f1:b5:36:c1:af:4f:8f:40:26:85:2e:e6:b1:
                    b2:bd:b4:1f:f6:a6:57:13:16:46:b0:26:1f:87:83:
                    f2:74:3b:16:63:e4:0b:eb:e3:00:1a:e3:65:a3:1b:
                    7d:0a:b8:7b:03:99:60:62:8d:c6:1e:c9:b3:1f:3a:
                    d9:61:ac:c5:c6:93:81:e2:20:df:50:b5:75:69:2c:
                    a3:63:5a:07:77:a4:3d:0c:74:97:c3:92:79:1d:da:
                    a7:31:bd:e6:69:64:b5:45:c5:20:33:f4:0f:85:ab:
                    54:42:92:87:b0:69:c0:33:07:b9:9f:e8:a1:45:64:
                    e9:d4:66:71:cf:6b:d0:e7:27:f5:e3:c1:2c:5a:db:
                    d0:60:f0:27:63:86:aa:f5:aa:6c:aa:d1:1c:5a:90:
                    13:0b:05:81:10:ef:a3:84:89:71:63:55:3e:db:db:
                    2c:aa:0f:f7:49:16:19:e5:f3:59:90:68:e8:69:9e:
                    94:db:08:fa:3a:5d:07:89:a5:1c:7a:36:d7:e5:33:
                    99:93:f4:1c:b5:cc:d2:9d:70:32:b6:6f:2d:ab:94:
                    1b:33:e4:f1:8a:96:ae:c5:9e:49:55:11:24:50:c7:
                    7e:9e:e7:ff:8b:f0:03:a0:77:53:3e:85:df:be:91:
                    ab:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:75:0B:8C:88:CD:82:3C:12:A9:89:F9:A4:2B:D6:54:3B:84:66:79
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:dc:78:aa:7e:0a:f1:f9:34:04:5c:ae:9c:fc:31:77:f3:2d:
         02:20:ce:39:35:5d:a5:7c:26:2c:84:35:da:2a:92:2a:34:59:
         cc:ca:37:90:79:36:2d:14:87:77:07:6f:0c:9b:66:83:19:15:
         1a:ac:89:90:e4:4b:51:9a:b5:9e:e8:c8:c5:00:d3:ba:6e:63:
         24:b7:a6:c8:ea:b6:72:5e:9d:0d:6e:b3:87:3d:0d:62:38:d7:
         c3:1a:d5:02:33:32:51:d7:1a:ff:1d:bf:85:69:dc:d7:cb:1b:
         7c:d5:1c:08:b7:d1:2e:d9:6e:e3:a9:5c:c8:31:8b:a4:06:fc:
         34:34:e9:d8:f4:7c:8b:5e:ba:82:77:5c:e6:b3:a2:f5:99:ce:
         50:91:35:eb:26:5a:eb:74:b0:23:3a:e6:9b:9f:8e:d1:29:67:
         00:50:61:78:9b:e8:14:f8:63:51:21:70:e2:c0:6b:ff:12:3a:
         d7:d6:3d:b3:66:9a:66:32:84:a4:ac:8a:50:d9:fb:ae:3f:fa:
         ef:0b:33:48:f4:35:78:9b:c8:fd:b3:74:c7:9d:45:9a:3b:91:
         fe:10:b9:49:7a:24:15:95:87:22:11:a6:da:d6:cc:c4:b2:5d:
         08:46:d2:76:17:cf:cf:07:e4:9d:60:0f:7d:43:a1:85:5d:6c:
         71:3e:97:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:25:07 2026 by rpki-client