This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          vqQH4lToTChRMxov2vjfZK1dOjqXy+0NOz3twBRmySw=
Subject key identifier:   DA:E1:EA:F9:4A:81:46:AA:51:10:72:87:16:97:27:FA:C1:8C:FB:47
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       019BF6BF6D719761B48B4EEFA44011A79736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0919
Signing time:             Sun 25 Jan 2026 20:01:39 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:39 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:39 +0000
Files and hashes:         1: 1-MN9LsI_ApcBjUfCf7BZAYMymmI.roa (hash: bovj+Jqe6BlyPCl0kFgickpjRxIJvNEpYip/CdGpbQc=)
                          2: WArGNGelr1r7NS84iUickHFqYnk.roa (hash: F549c5qhlHTdQg1HJuYk5UKg7MGhA9lxMR7V6QvPJBo=)
                          3: kCCp6dqliCZNJheiiof3oIrr384.roa (hash: OW9qdUy6Epxe6HIETz0BdHheI0YEHmM3uARiGGAsUHs=)
                          4: uQzutUAf-r2QuULAJhXjnmwt7ng.roa (hash: 1veFTEsZ6F5oDeCmJlGSZOhtEnYT9oSi6cqBPJz1hiY=)
                          5: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: SU9gF42u/b4wJr45BJ+zCjafFrGqeR/PVva92S0esgo=)
                          6: zHGODXvP05wv_cUvL7qCYeZSaPY.roa (hash: 7NuWDkV9TKti1P6aQPSTxALIeUUTUhJXeVayss9sru4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:6d:71:97:61:b4:8b:4e:ef:a4:40:11:a7:97:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Jan 25 20:01:39 2026 GMT
            Not After : Jan 26 20:01:39 2026 GMT
        Subject: CN=dae1eaf94a8146aa51107287169727fac18cfb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:38:60:1b:cc:2c:91:cb:ad:f6:47:25:fe:
                    31:34:c1:88:d8:77:5a:61:21:61:79:56:bf:a9:db:
                    8b:ea:42:d1:a2:fa:90:a9:9f:33:c6:1f:03:f5:89:
                    22:1e:43:b6:27:12:19:f8:8a:90:5c:21:c7:32:99:
                    40:1d:6a:28:5c:db:57:4e:55:30:03:f9:83:c0:0b:
                    c9:9a:26:71:a8:97:39:8d:f3:28:8b:25:e4:60:39:
                    ab:22:a0:12:e2:00:55:b4:a1:e6:05:bb:7f:9c:54:
                    09:32:5f:6d:b4:04:72:b6:99:a2:3e:45:aa:1f:20:
                    bc:80:7b:dc:f9:d0:08:95:f3:1c:3d:b3:14:d7:0a:
                    f5:48:98:84:1a:9a:9e:bd:5b:2a:50:4b:bd:05:15:
                    44:21:ff:0e:68:18:5f:38:f0:82:a6:13:db:bd:fb:
                    f6:ae:c2:58:89:9a:ff:d8:54:4e:d9:22:31:7a:af:
                    36:02:38:1c:ea:d6:bf:f3:f7:1c:0c:35:b2:e6:b8:
                    e6:44:2b:83:38:69:a6:0a:62:8c:2e:96:8f:d8:63:
                    44:8a:d1:a2:d9:f4:3e:3c:ec:c5:20:17:05:a5:f2:
                    e5:f2:75:9e:fc:17:d5:99:89:6c:f3:79:30:d1:ba:
                    ce:ab:ce:eb:ee:d1:78:14:f4:60:38:bc:73:54:66:
                    96:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E1:EA:F9:4A:81:46:AA:51:10:72:87:16:97:27:FA:C1:8C:FB:47
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:df:77:9a:01:3f:7b:5d:f4:be:6d:0f:7f:e4:23:bb:db:16:
         47:fd:4c:ae:3d:c1:af:b0:05:de:66:af:d2:e4:a8:3c:ce:b7:
         1c:d1:64:9a:d2:fb:57:ff:2f:d9:57:9e:5f:cb:e1:a6:a1:90:
         a5:f6:a8:15:5a:3d:84:75:ea:be:34:52:bd:e4:38:22:84:44:
         bb:5d:b3:6f:c7:92:7a:a9:9d:06:94:5c:3f:00:f9:2f:97:15:
         a7:e6:8f:d3:c1:88:11:22:1d:bb:02:d5:d9:54:03:d9:17:01:
         8b:7b:c6:6d:b4:aa:4d:e2:98:87:12:84:f5:f2:5d:6a:cf:3d:
         44:1c:db:19:5e:58:9a:ac:88:98:30:1f:3d:42:12:b1:b4:0b:
         bc:d2:b6:48:e2:7f:df:fd:75:d1:3e:97:90:f7:b8:52:b2:10:
         f4:ac:4f:ff:ca:79:b0:90:28:f7:9b:82:08:e4:a0:bc:e2:d7:
         2e:58:63:67:b2:f7:4c:98:b1:4c:d0:5c:0d:f3:d2:43:ff:a0:
         e3:d6:9b:47:7c:38:65:4f:77:fd:d4:2f:1c:a7:82:67:7a:d8:
         7d:89:dc:2f:da:fe:3e:10:69:f7:7b:ad:10:31:3f:d1:fe:17:
         44:30:80:95:40:11:e1:b6:75:f0:41:01:5c:84:70:af:9f:76:
         57:90:73:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:34:41 2026 by rpki-client