This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
File:                     dUE1hHAyFWSttCp213OuPK57vVY.mft (raw, json)
Hash identifier:          zQZKvM4s/YvedRVDSL0Tcl2CzPfBsRq4FoY0L2uw29Q=
Subject key identifier:   18:E9:48:8B:3A:9E:51:CA:64:C7:6A:F7:27:D6:61:E4:88:F1:60:F0
Authority key identifier: 75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56
Certificate issuer:       /CN=7541358470321564adb42a76d773ae3cae7bbd56
Certificate serial:       019BF808816701D96BCF1063CC09A634D443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
Manifest number:          0635
Signing time:             Mon 26 Jan 2026 02:01:05 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:05 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:05 +0000
Files and hashes:         1: 2VmhrnY1R-y6rxXotPMotrQDcR8.asa (hash: Ap3BdSC63YcAczUKkEzGKumr15/KgLHB6Jp/DYCbOq4=)
                          2: dUE1hHAyFWSttCp213OuPK57vVY.crl (hash: Ba57AoLVgUrGxIsy4235uhG2ltqNrK2uJyozjSrV5dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:81:67:01:d9:6b:cf:10:63:cc:09:a6:34:d4:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7541358470321564adb42a76d773ae3cae7bbd56
        Validity
            Not Before: Jan 26 02:01:05 2026 GMT
            Not After : Jan 27 02:01:05 2026 GMT
        Subject: CN=18e9488b3a9e51ca64c76af727d661e488f160f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:52:5d:65:17:28:ca:b9:2a:62:7b:f8:85:5b:
                    84:ce:e0:c6:64:f3:ac:95:d3:b6:11:cb:dd:a6:19:
                    d2:e7:3e:e2:d3:5b:ed:fc:a6:93:b0:f4:94:e8:ae:
                    d3:7f:6b:c8:1f:fc:a4:e3:0a:5a:4f:51:75:f1:0b:
                    89:6e:2f:5b:67:51:1a:4e:06:12:d7:99:b2:d3:58:
                    9f:7e:33:d0:5d:34:e3:b4:87:a7:19:83:82:ef:99:
                    86:f6:99:e2:95:0d:83:78:95:11:82:12:3f:9f:c6:
                    bc:01:54:52:01:89:10:86:ca:4c:04:db:6d:64:aa:
                    da:5f:0b:54:f2:8f:d2:78:7c:f7:bd:a8:08:58:35:
                    32:73:81:27:47:6e:10:da:d1:79:1c:ba:d9:6e:78:
                    4f:52:93:ee:1d:fb:ea:c1:45:d3:f9:02:91:f4:5b:
                    49:5c:24:28:55:db:80:a2:fd:ec:1a:dd:83:b1:f2:
                    3c:3f:6b:c3:8f:a2:75:a3:40:07:23:2a:f1:6a:20:
                    e9:a9:63:ad:3e:b1:1e:51:b8:46:72:8a:8d:c5:5c:
                    ad:48:6e:3e:49:7e:72:a2:ba:d9:ed:ff:74:3e:54:
                    3f:9e:ba:59:56:54:b1:b1:4b:76:97:62:af:a3:34:
                    db:e0:13:72:e6:9b:4f:40:09:eb:a5:e1:e6:f7:89:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E9:48:8B:3A:9E:51:CA:64:C7:6A:F7:27:D6:61:E4:88:F1:60:F0
            X509v3 Authority Key Identifier:
                keyid:75:41:35:84:70:32:15:64:AD:B4:2A:76:D7:73:AE:3C:AE:7B:BD:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dUE1hHAyFWSttCp213OuPK57vVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c16043-a3de-4ab3-9e56-8265a96e420d/1/dUE1hHAyFWSttCp213OuPK57vVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:6d:a8:cd:1a:ad:85:3f:a7:d2:cd:07:df:1b:9f:83:65:17:
         c1:e5:32:02:c1:7c:2c:5b:ee:dd:ba:7d:61:56:fa:d5:88:9b:
         56:f6:e1:a1:e9:5f:ff:91:8d:26:ac:6a:c2:27:13:7c:b8:8e:
         3b:c1:af:7f:61:75:23:31:2c:86:b1:0d:28:2f:e4:15:ed:38:
         5a:dd:af:d6:51:8c:22:27:b8:08:ea:62:ae:04:4b:45:f4:64:
         cc:e7:4f:ca:1f:3f:c1:2d:9d:9b:7f:ed:2d:52:5a:72:6f:1e:
         31:c4:9a:ea:e4:f7:64:89:55:02:53:90:ea:61:39:8f:60:e9:
         df:63:2d:3d:0c:f2:e8:9e:8e:f1:b8:21:ff:55:38:b5:28:cc:
         4d:a9:b5:af:d2:47:c0:96:8a:f8:4d:ce:0c:d3:79:85:01:62:
         ea:bb:46:80:7f:8f:90:d5:bb:06:8a:b7:a0:35:98:bc:5e:64:
         42:89:41:3f:a3:e6:cd:55:d2:5a:b7:9e:2f:a5:ad:bc:db:d8:
         8d:fd:3e:c9:56:f8:9d:98:3f:2d:a3:ba:aa:a0:f9:64:f5:e2:
         7a:74:bf:0f:83:89:ce:d3:1f:44:c5:0e:71:00:8e:47:e0:c0:
         76:56:3e:61:40:e6:37:89:9e:3d:c3:5e:ef:ab:6a:9f:c3:a8:
         fb:93:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:46:55 2026 by rpki-client