This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File:                     D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier:          w+5XnXAJnyIqIhZ7bgEUgoOs4lyfZ8I5b1R8nsz3DL4=
Subject key identifier:   D5:59:DC:01:81:D6:5B:28:3D:66:5A:CF:54:34:A4:50:F8:53:D6:04
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer:       /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial:       019BFA2E3DBFA8C5717061242BDCE0F0BB5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number:          16EA
Signing time:             Mon 26 Jan 2026 12:01:33 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:33 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:33 +0000
Files and hashes:         1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: qfEqOBPOVTX5x/n2WEW7xVoLkhqbSORazjPr/FE7LZc=)
                          2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:3d:bf:a8:c5:71:70:61:24:2b:dc:e0:f0:bb:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
        Validity
            Not Before: Jan 26 12:01:33 2026 GMT
            Not After : Jan 27 12:01:33 2026 GMT
        Subject: CN=d559dc0181d65b283d665acf5434a450f853d604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:e1:7d:35:31:4b:39:7f:9d:80:18:88:d9:f4:
                    4e:cc:b5:84:3c:9e:50:1d:05:14:88:f8:3f:39:61:
                    58:4d:83:ed:43:7e:64:3b:9e:11:2d:6c:0f:18:05:
                    59:3f:c5:6e:8b:48:19:33:13:2d:42:03:ac:85:93:
                    5b:13:d4:a9:5f:26:a7:b4:5c:0a:36:8a:76:be:1c:
                    66:42:68:5f:36:ba:f2:e5:9b:61:5f:08:bc:8a:b4:
                    16:2c:f3:72:36:f8:ba:32:f1:6b:a9:9d:90:39:16:
                    db:b8:3c:35:8a:03:fd:a2:5d:12:9a:29:31:e8:b3:
                    ff:87:3b:5a:73:3d:f0:f8:f4:c0:40:77:c0:6b:f5:
                    ad:ce:1c:00:a0:22:5e:04:94:14:6b:7f:13:92:db:
                    2a:7c:7b:00:e3:e4:29:0f:2f:79:08:7e:71:85:07:
                    96:0a:46:1c:79:ef:c8:03:56:27:38:66:83:cd:7d:
                    d3:00:61:4e:ae:0c:db:22:3e:a6:c6:59:31:da:86:
                    54:66:13:32:c6:d1:80:9e:00:57:92:a2:86:67:ca:
                    ac:44:34:01:7b:86:5f:8c:90:71:11:9c:9b:42:56:
                    14:ec:a5:d6:e0:0a:a4:05:9e:0f:c1:8c:bf:63:13:
                    4d:1c:ec:7d:94:e6:6f:45:62:cb:b6:ad:8d:c1:8b:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:DC:01:81:D6:5B:28:3D:66:5A:CF:54:34:A4:50:F8:53:D6:04
            X509v3 Authority Key Identifier:
                keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:04:5b:af:4c:44:f2:a5:7a:55:64:b8:4c:8c:98:0f:69:6c:
         28:02:37:50:9c:0f:c6:50:c8:68:89:e6:b3:31:ab:41:96:17:
         ab:7f:e5:77:60:88:0a:8c:a4:88:89:39:3d:65:22:65:78:23:
         17:ad:c7:cb:0b:8f:bb:51:68:9b:d5:2a:dd:e1:2c:03:41:3e:
         43:da:69:ff:61:52:4c:4b:b0:3e:81:63:86:f1:2e:2a:30:cc:
         7a:7f:a1:bd:94:d4:c7:79:1f:43:49:8b:4e:f1:48:50:f0:3c:
         b6:1b:e4:9d:71:eb:30:76:75:06:e0:9e:69:d3:c4:7e:c8:81:
         1c:ec:b9:4d:2f:36:06:4f:e5:28:30:a7:68:55:ae:c3:d6:7d:
         3e:97:1d:7d:fe:84:23:96:54:8b:aa:81:ee:68:d4:2e:51:e8:
         7b:66:f7:13:6b:7a:36:3c:44:35:df:99:e0:6d:57:99:a3:90:
         c1:2b:61:48:d9:a1:e5:3b:7c:b9:61:27:e0:2c:6b:38:c3:d8:
         65:f3:00:f7:dd:dc:56:34:96:1f:e6:2d:4e:89:fd:d5:ce:95:
         24:bc:5c:43:4e:c7:6e:a2:30:db:46:73:fb:bd:63:df:08:9d:
         d7:b6:e7:1c:ac:d0:c9:36:02:80:68:42:2e:ff:97:a3:e8:57:
         04:77:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 14:09:17 2026 by rpki-client