This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
File:                     DiKD5uavmRQidDcR96cjE3aA5p4.mft (raw, json)
Hash identifier:          WOTBFbqwG9TEZCDK/pkR4o/LB0gyMuiRBsO+RbQYgbc=
Subject key identifier:   6F:D9:4A:34:50:16:31:58:F5:23:D8:B5:1F:03:BE:A6:13:FB:FB:19
Authority key identifier: 0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E
Certificate issuer:       /CN=0e2283e6e6af991422743711f7a723137680e69e
Certificate serial:       019BF72D2F150071C2CE610B2E756A2B4390
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
Manifest number:          0604
Signing time:             Sun 25 Jan 2026 22:01:31 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:31 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:31 +0000
Files and hashes:         1: DiKD5uavmRQidDcR96cjE3aA5p4.crl (hash: /wEcUTbL0YRRKXYZK+DZ53I1CVg6/QcMHMvTn8iX1iM=)
                          2: YWPvVhMhWOdJq4IgusjcDgptc9E.roa (hash: VwHMf9+Fwh3KRyIosC2+XI4IaINip+46g+Oe4aIU/sk=)
                          3: oZhmNHo1g-fLhYbLEUh1GW508Ns.roa (hash: pc/tqbY3tzsPX8Y1oHBCD976XbZr/U1sHfOZb8voLLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:2f:15:00:71:c2:ce:61:0b:2e:75:6a:2b:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e2283e6e6af991422743711f7a723137680e69e
        Validity
            Not Before: Jan 25 22:01:31 2026 GMT
            Not After : Jan 26 22:01:31 2026 GMT
        Subject: CN=6fd94a3450163158f523d8b51f03bea613fbfb19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c9:11:1f:43:92:40:33:3f:0d:43:16:c8:6e:
                    44:14:08:0d:4a:80:4f:16:fb:6b:4d:61:2e:cc:85:
                    0a:11:c3:0f:06:88:29:4c:81:89:4b:64:ed:fc:d2:
                    b1:42:4e:fc:30:46:fb:87:fd:b8:3d:23:ca:bd:74:
                    d6:5d:04:91:3d:5b:02:1e:3a:53:5e:52:b0:bd:60:
                    ae:39:38:34:31:7d:80:85:73:4b:e0:2d:c1:ef:2a:
                    a6:04:2f:ec:16:f3:eb:47:4b:e1:5b:89:d0:4f:d2:
                    3e:1c:6b:69:ef:5a:70:8e:f8:2c:10:f3:3d:a5:b9:
                    0c:40:ab:ba:4f:14:58:9e:e9:79:84:88:a8:1c:f7:
                    65:2a:6d:80:2b:86:14:a0:bd:35:d2:5b:3c:57:93:
                    7d:b8:43:02:5c:c3:69:b7:b6:17:20:8b:90:26:44:
                    13:12:18:80:7d:26:73:2a:47:18:47:db:6c:10:b1:
                    9c:8f:d5:35:48:c0:27:ec:2d:59:51:4b:fa:99:67:
                    95:07:76:c9:a1:9f:67:d1:33:0c:d4:a1:23:ac:65:
                    3b:26:c1:14:f9:19:45:3b:74:9c:19:7b:11:a5:6f:
                    3b:94:71:19:24:55:7d:d6:65:67:c4:05:b1:88:cc:
                    fc:27:97:28:76:57:3b:1e:c7:9d:ca:04:3d:0d:39:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D9:4A:34:50:16:31:58:F5:23:D8:B5:1F:03:BE:A6:13:FB:FB:19
            X509v3 Authority Key Identifier:
                keyid:0E:22:83:E6:E6:AF:99:14:22:74:37:11:F7:A7:23:13:76:80:E6:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DiKD5uavmRQidDcR96cjE3aA5p4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84750f-76c4-41ee-8517-e0adab7f1112/1/DiKD5uavmRQidDcR96cjE3aA5p4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:df:e9:5e:83:c2:dd:e7:1d:08:10:e1:87:84:59:88:18:d9:
         74:c2:ec:8b:c9:f9:8d:e9:94:da:a9:7a:88:64:89:e5:61:22:
         a9:6b:7a:1d:46:c2:b9:da:bc:32:b8:82:6a:0e:f4:0a:86:46:
         f0:6e:44:14:61:d9:75:f5:0a:34:4f:7a:52:60:42:44:18:49:
         23:38:75:1d:29:2f:cc:2f:77:fd:dd:45:61:10:0a:24:9f:67:
         89:df:e3:ae:fc:2b:ec:15:01:c2:5b:6a:91:22:94:b0:37:84:
         5d:c1:32:bc:b8:c3:3e:6d:36:ee:d2:21:6d:22:ae:ea:8a:c1:
         99:58:7f:c9:da:a4:ad:9d:b6:a2:8f:4e:2e:ee:3c:c7:28:c8:
         96:7b:95:52:26:6a:88:8f:a1:4d:9c:62:e7:90:b1:81:44:ad:
         54:55:a1:65:0e:24:9e:d0:00:c6:c9:fe:d2:48:72:5d:67:48:
         8a:67:70:f0:d5:96:8f:54:57:e9:d9:b9:13:da:dd:35:24:f9:
         f6:c3:ae:a6:2d:3e:be:cf:3f:f2:60:15:90:bd:2b:8f:04:e6:
         bd:f8:0a:b6:e9:a5:7b:67:e2:59:59:db:45:f4:6a:4f:be:54:
         36:33:4e:53:f2:2b:f2:c6:5d:2b:6e:85:1a:7f:b6:fb:e6:b7:
         d0:7e:7d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:41 2026 by rpki-client