This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
File:                     rR0qVix9shFRtKCSa41v7qzviFc.mft (raw, json)
Hash identifier:          kvsTdbxeiuOTSa2p8r2Sk4iljKXTbBIS3O9JF6WtmCI=
Subject key identifier:   84:B3:54:2F:64:F2:1F:B1:49:79:5E:E3:D1:32:21:E4:CC:B9:90:E0
Authority key identifier: AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57
Certificate issuer:       /CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
Certificate serial:       019BF57556E00B55B03F838257C13AE35212
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
Manifest number:          0CFB
Signing time:             Sun 25 Jan 2026 14:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:06 +0000
Files and hashes:         1: VcFoEEh31jZuhpy4eun_Hj-dma8.roa (hash: mbX6NMnSp6JT7rNp55SfsGeTE0wIj+qPbFrQAy6TmYw=)
                          2: dL52a-JSQC-00Ko98mQkGc0Xvzo.roa (hash: 2r+wEDTFQg2vugNKxVL/EHxSgKFbqV3jiVEPhPaqb/k=)
                          3: n_DU8ayGMsHeUdkTrzuKYMpaU_Q.roa (hash: KHioroc4KbkqEBK4timMsuRiTYXUbx4dAfmekQJR2xY=)
                          4: rR0qVix9shFRtKCSa41v7qzviFc.crl (hash: pzMRvm0K38l9lTW5uxqzwXP8h+v59RlEHoJZEQxpZZ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:56:e0:0b:55:b0:3f:83:82:57:c1:3a:e3:52:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad1d2a562c7db21151b4a0926b8d6feeacef8857
        Validity
            Not Before: Jan 25 14:01:06 2026 GMT
            Not After : Jan 26 14:01:06 2026 GMT
        Subject: CN=84b3542f64f21fb149795ee3d13221e4ccb990e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f2:a7:c0:1d:1b:af:ff:7c:5e:d5:00:fa:a2:
                    f5:52:8c:36:06:1f:59:89:f4:37:a7:1e:3f:d1:9d:
                    a8:6e:6b:a1:83:a4:1c:6d:d5:17:8a:a0:3b:d9:36:
                    4f:3f:c3:83:83:e1:3b:c6:60:0b:11:01:71:3c:05:
                    8f:08:7a:86:d5:29:e3:9e:8f:bd:cb:85:7d:db:b2:
                    fe:99:96:c6:3a:98:e7:b0:04:4c:f4:2e:63:8c:1a:
                    83:5a:fd:d6:29:15:3a:fe:22:a0:66:56:e7:f8:36:
                    89:5f:11:f3:97:37:49:f1:66:6e:b1:d3:72:db:65:
                    04:8e:43:f1:61:af:63:83:a5:18:83:c9:17:d9:c6:
                    88:08:8f:66:e4:15:b0:dd:fd:76:d6:b5:5e:1a:a5:
                    91:f7:20:eb:b9:f4:1d:02:76:ba:74:61:32:4a:68:
                    74:93:d2:90:19:c0:33:6d:bb:d4:41:7a:aa:65:29:
                    74:e2:37:64:a4:58:99:7d:26:50:63:e4:40:2f:63:
                    2f:fc:0a:c0:7f:1d:2c:f0:a1:e0:57:86:26:c7:54:
                    7a:e8:c2:5f:39:b6:d2:b6:90:f3:15:7d:66:9c:8f:
                    e0:30:31:e2:a2:c0:cd:52:16:6a:90:52:31:18:6e:
                    ce:eb:8c:4e:ab:51:ea:18:ae:45:b2:fa:a3:1d:23:
                    96:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B3:54:2F:64:F2:1F:B1:49:79:5E:E3:D1:32:21:E4:CC:B9:90:E0
            X509v3 Authority Key Identifier:
                keyid:AD:1D:2A:56:2C:7D:B2:11:51:B4:A0:92:6B:8D:6F:EE:AC:EF:88:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rR0qVix9shFRtKCSa41v7qzviFc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/83acd7-5e1a-49f9-b409-32936c3a4a9d/1/rR0qVix9shFRtKCSa41v7qzviFc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:66:e0:b8:20:da:3c:fa:4a:3e:a8:7f:21:99:03:4f:34:
         5e:01:da:68:97:d1:99:41:ed:f8:27:bf:85:bf:35:9e:17:4d:
         00:85:67:75:15:f3:e7:c1:d1:e4:33:60:21:67:36:35:ce:12:
         9c:ff:e2:02:1c:74:98:b5:93:29:d7:83:b0:b1:57:59:2f:25:
         53:ee:3b:e7:07:7b:94:5f:88:3d:2c:a5:fd:46:d0:fd:42:67:
         f6:e3:53:57:f8:96:b1:d2:98:55:2c:5e:fb:8f:a6:26:ba:ff:
         1e:8f:3b:99:e9:ab:1f:18:8c:4c:5c:0b:15:c3:28:fc:99:01:
         16:60:af:ec:19:9e:b8:8a:e1:68:7e:51:f2:48:2e:0a:85:67:
         fc:56:53:b0:1f:c0:51:34:cc:69:22:d6:e8:58:ac:6f:1c:7e:
         38:9a:61:d6:e3:0e:aa:e5:ab:ad:ff:c2:47:2a:97:07:8f:97:
         0d:1f:fb:de:67:7d:63:36:7d:5a:8f:64:61:99:7c:17:3d:bc:
         83:5d:ec:69:d4:af:f8:9f:60:b1:88:97:64:6d:5b:d5:db:3a:
         08:9a:e9:a5:b6:ed:8b:e8:c2:b9:b6:a9:69:4c:ff:35:a3:ae:
         8c:f6:c3:77:21:01:fc:48:8c:b5:0e:4e:66:75:2c:62:4b:aa:
         02:26:06:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:10:50 2026 by rpki-client