This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File:                     xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier:          OjwyG1TE7wIiFPk6cBZtML2XBaEL0eZpqZGfCVNEEtU=
Subject key identifier:   C6:47:E3:A5:F1:85:2F:81:B3:99:80:CD:69:41:37:FF:FC:40:66:36
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer:       /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial:       019BF6F57B0DBF193503DAC09093DB581C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number:          177D
Signing time:             Sun 25 Jan 2026 21:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:41 +0000
Files and hashes:         1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
                          2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
                          3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: d/ESxEDTEUlU8ZQO7klhcHT0ZeCX1d2zJTN2nyPlnuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:7b:0d:bf:19:35:03:da:c0:90:93:db:58:1c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
        Validity
            Not Before: Jan 25 21:00:41 2026 GMT
            Not After : Jan 26 21:00:41 2026 GMT
        Subject: CN=c647e3a5f1852f81b39980cd694137fffc406636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7b:b5:a1:4c:9b:f3:b0:8c:7f:e2:7a:ff:01:
                    2f:87:52:2d:07:7e:9d:6c:b8:8b:2a:f5:7e:57:7b:
                    dd:bb:89:9c:f7:34:e8:d9:af:89:9d:b8:e1:90:01:
                    94:20:3b:08:5f:04:a1:9f:c7:27:36:93:83:83:fd:
                    38:f4:16:3d:a4:38:4a:52:25:b6:8b:74:40:ac:b1:
                    88:ee:63:44:19:0b:26:2d:8f:35:0f:1d:aa:6d:a7:
                    fe:7e:dc:05:8d:c8:59:f9:d9:f5:44:10:5d:8b:6f:
                    1b:2c:89:a9:c2:5e:52:ba:b7:fa:a5:e5:9d:2e:cc:
                    88:cf:70:5f:42:e3:44:43:43:68:e3:89:dc:17:1d:
                    f9:5e:24:c1:68:52:3a:97:4d:56:68:44:70:02:aa:
                    e2:df:dc:95:d4:d7:0b:c9:dd:8b:cc:d5:61:18:59:
                    77:97:95:fe:a1:ba:89:33:ab:b3:94:58:15:30:1a:
                    d6:e1:45:13:0a:c2:ef:9b:4a:3b:9f:99:25:72:7c:
                    c1:fc:35:36:ff:ee:19:45:79:43:21:23:8d:8d:b0:
                    ee:34:c5:dc:97:b3:70:10:65:7e:11:94:50:cf:31:
                    f1:03:29:c7:f0:a2:3d:94:98:b1:f4:22:4f:f0:ef:
                    02:fd:c5:80:64:c1:a1:9b:03:f4:b7:c5:ab:ad:21:
                    65:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:47:E3:A5:F1:85:2F:81:B3:99:80:CD:69:41:37:FF:FC:40:66:36
            X509v3 Authority Key Identifier:
                keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:ee:4c:f7:d3:a0:49:4b:0e:a0:a1:ee:95:96:89:ca:4c:74:
         26:d6:8e:92:87:c4:5d:ed:5f:f3:7f:40:c2:9d:9e:e5:a5:79:
         9a:cb:e9:be:bb:3b:9a:7b:ef:13:c5:3a:9a:03:24:85:61:64:
         0c:a7:07:fc:f0:56:eb:52:cf:1f:8a:1a:70:ef:69:4f:b7:43:
         26:3d:f8:e8:5d:6c:14:3f:34:6c:d4:1d:95:55:fd:67:26:c2:
         85:02:66:35:e4:20:87:2e:a3:2e:2c:81:09:f9:2f:55:ea:50:
         85:92:ef:d5:ed:7f:81:71:c5:f9:01:95:d7:b4:63:4a:21:d2:
         cd:ad:be:f8:3a:95:9e:b1:8e:d6:d3:b9:5e:70:07:68:a1:63:
         02:63:32:82:f6:36:6b:b7:0f:df:c0:fb:b6:9e:70:f3:a9:1f:
         c9:20:f3:b3:81:6f:05:2a:b1:e7:70:d3:74:3e:b8:6e:71:47:
         bb:29:ae:10:ca:f2:1c:fb:ef:d4:ea:70:63:5a:ab:fc:37:d4:
         5a:36:7b:e8:68:21:1e:11:68:26:e4:82:c2:a7:d0:7f:63:c2:
         96:f5:e5:05:91:cd:9e:f1:ce:5e:c5:38:26:3f:40:2a:e1:df:
         fd:e7:94:1b:71:25:eb:87:4a:ce:4f:bc:87:88:ac:8f:44:96:
         8b:c3:fd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:21:46 2026 by rpki-client