This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
File:                     tDJYoYz00SKOXHkHDfpjMRaDIMU.mft (raw, json)
Hash identifier:          Q2NhfXx2pQ5HtSGNpy/n0w9qizGMCaaQgdy/ILCZNNA=
Subject key identifier:   87:C8:73:56:D8:00:DE:4F:60:0C:EE:A9:C1:E0:09:7B:4C:AB:71:10
Authority key identifier: B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5
Certificate issuer:       /CN=b43258a18cf4d1228e5c79070dfa6331168320c5
Certificate serial:       019BF2AB04FB94845F93F348199F4EB3F161
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
Manifest number:          162A
Signing time:             Sun 25 Jan 2026 01:00:52 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:52 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:52 +0000
Files and hashes:         1: LBEwWg6NXwV0Qivix1KpxT3aiNU.roa (hash: NAmrPdbUkUwZLyDdKu29iu1NmoDceqKiDehZJJ6AYqk=)
                          2: tDJYoYz00SKOXHkHDfpjMRaDIMU.crl (hash: +ahKXSKaBbnSvoFK7yIfHbnECvgrCdWj43hGGPUKKDs=)
                          3: u3rQ39mTeV2kE1STzKrih9_L758.roa (hash: KWfkHmC+Pf41EAOenIiA1l0ufOFeet991JgGZvHoQlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:ab:04:fb:94:84:5f:93:f3:48:19:9f:4e:b3:f1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b43258a18cf4d1228e5c79070dfa6331168320c5
        Validity
            Not Before: Jan 25 01:00:52 2026 GMT
            Not After : Jan 26 01:00:52 2026 GMT
        Subject: CN=87c87356d800de4f600ceea9c1e0097b4cab7110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f5:6f:d3:94:08:c6:5d:20:94:77:3a:2d:c2:
                    b7:9c:e7:9c:5c:12:c9:b0:9f:c5:4e:36:5b:bb:d4:
                    24:c7:35:d7:f4:91:15:a9:4c:83:a2:86:6a:e5:95:
                    84:f6:57:3b:6e:7f:91:40:17:fd:b3:ad:49:7c:3e:
                    d4:20:4f:3a:d1:ef:0f:dc:5d:06:9f:cb:4e:e0:06:
                    8e:1e:dc:7e:28:dc:b5:d6:fb:93:2c:d7:db:a6:82:
                    08:28:41:be:58:bb:16:e3:25:de:8a:47:f7:d4:10:
                    11:0b:9a:cc:d8:08:e2:60:8c:8b:3b:d6:d8:0e:5d:
                    8d:00:ae:e8:c9:ae:aa:dc:66:4a:e2:e9:54:6d:20:
                    af:80:3c:01:30:7c:54:98:94:96:5b:47:b3:47:0b:
                    f5:7e:d6:1c:ec:22:7f:6b:a9:d3:b9:bb:e3:ff:aa:
                    ef:e2:fd:bb:c7:20:40:53:e4:a3:cd:40:85:8b:94:
                    9e:b8:2c:ef:26:b3:6c:31:f1:3e:e1:2e:57:83:5f:
                    db:07:35:77:1c:ac:36:0e:04:93:c8:6f:09:99:e6:
                    cc:91:7c:ad:79:9a:bc:57:e8:94:f3:54:06:e6:1f:
                    d7:dd:98:7a:2e:13:79:fa:e0:40:6a:9a:b0:e0:38:
                    e0:2c:eb:38:95:8a:42:f1:54:e6:4c:59:97:8d:77:
                    db:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C8:73:56:D8:00:DE:4F:60:0C:EE:A9:C1:E0:09:7B:4C:AB:71:10
            X509v3 Authority Key Identifier:
                keyid:B4:32:58:A1:8C:F4:D1:22:8E:5C:79:07:0D:FA:63:31:16:83:20:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDJYoYz00SKOXHkHDfpjMRaDIMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/03a325-a169-44ce-84ec-5728fb24bf0e/1/tDJYoYz00SKOXHkHDfpjMRaDIMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:74:fb:c8:00:e9:93:9a:1c:0e:3e:c5:ab:ee:6d:8a:48:73:
         2d:0a:12:bb:ec:62:3d:28:0e:02:58:a5:7e:ff:1c:55:11:63:
         23:07:78:62:6c:c1:dc:68:86:85:fd:8b:30:b8:26:08:3a:06:
         ce:c7:ae:b9:53:be:65:3a:2f:09:0e:12:83:c7:7e:ae:90:7b:
         08:18:5f:cf:20:82:67:b0:bd:bd:fe:fe:9c:88:cc:8f:70:e6:
         91:23:82:0e:e0:e4:08:f1:ea:05:5a:52:09:75:28:7c:b1:95:
         f7:f1:a4:f9:5d:3d:96:2f:06:4f:32:04:b9:a7:02:19:d9:1c:
         57:2e:3f:f0:27:51:b1:b4:b3:5f:4e:b5:23:74:ce:3e:37:b4:
         1c:2d:b9:bc:15:7d:3c:5a:6c:5a:15:2a:4b:31:b9:b6:e3:b4:
         72:70:0a:17:04:22:81:43:90:58:1a:bc:d0:4b:63:4d:29:cc:
         71:9e:cb:09:93:2d:47:85:4e:bb:af:cd:15:09:7d:b8:a7:19:
         e3:43:51:54:71:d8:5e:ba:fd:87:b8:ac:14:13:e9:63:fe:0c:
         f4:2b:19:9b:a8:64:97:64:13:cf:6f:2b:f9:40:6a:96:5f:2a:
         2f:1d:12:df:d8:87:cf:1b:0b:1a:1b:1c:df:be:4d:d7:1b:97:
         ce:13:3e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:09:04 2026 by rpki-client