This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
File:                     iD9yYGUAJrlzoYp_PplY0yHs4ds.mft (raw, json)
Hash identifier:          rgXpWjVavyilce+3h/hkzXkwQBSVdsTnsWKlha7HeOA=
Subject key identifier:   70:87:6B:10:9A:C3:73:C0:8C:1D:93:68:D2:C3:9D:82:70:E6:2C:BA
Authority key identifier: 88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB
Certificate issuer:       /CN=883f7260650026b973a18a7f3e9958d321ece1db
Certificate serial:       019BF6F59AEAF4866B574393EB8DC4A9F3DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
Manifest number:          0232
Signing time:             Sun 25 Jan 2026 21:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 21:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 21:00:49 +0000
Files and hashes:         1: _nHQVX4gUfRcsyUXq5yHaGKdYhU.roa (hash: R3LVcKNvDMfvVqa7EK825MNQi2hSPcfWJhILpOzo+sU=)
                          2: iD9yYGUAJrlzoYp_PplY0yHs4ds.crl (hash: MrNo6Zy2bdoKF0rRkdjCy2rXK72bWsaRLsDgKMaQoqw=)
                          3: yWPZuql0MvhSm3JMA1hMhAx0qW8.roa (hash: 2i2jlPPD7IE9jQ4n5YA8j4oeQ4N7jBY19i7lQ4cGyLM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:9a:ea:f4:86:6b:57:43:93:eb:8d:c4:a9:f3:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=883f7260650026b973a18a7f3e9958d321ece1db
        Validity
            Not Before: Jan 25 21:00:49 2026 GMT
            Not After : Jan 26 21:00:49 2026 GMT
        Subject: CN=70876b109ac373c08c1d9368d2c39d8270e62cba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:81:b3:52:0c:d3:ec:65:c2:d1:eb:fb:3d:
                    2f:20:c4:fe:cd:5e:50:20:13:1e:dd:04:00:59:a2:
                    6a:f4:33:df:05:9c:fd:b7:91:e5:44:b0:80:45:a2:
                    35:99:76:9e:48:be:02:f9:d3:7f:be:8a:17:66:1e:
                    26:6b:b3:ef:25:aa:73:63:6d:8a:3f:34:9f:a8:13:
                    1d:dd:ba:85:30:0f:a8:a6:e3:cb:b1:1b:cd:45:93:
                    48:88:65:ee:1f:d4:60:bf:6b:57:d3:19:92:89:1c:
                    01:3e:2f:c5:80:4f:b1:df:61:cd:a0:5b:e1:cf:5c:
                    fb:68:20:1b:a4:17:f9:6d:1c:72:33:cd:c4:e4:60:
                    f0:76:ef:ca:42:1c:d6:d8:17:5d:4d:71:d1:19:f8:
                    3b:6e:a5:ec:f7:e1:ad:cd:75:89:31:4c:23:b3:5d:
                    13:17:0b:45:ec:66:e3:9a:af:66:ea:91:c6:b5:29:
                    bb:0f:0f:57:ba:dc:1b:81:c9:06:36:80:d1:1e:99:
                    49:1f:b8:53:2e:34:0e:8a:e6:6a:da:1a:f3:55:0e:
                    7b:b1:7c:52:d6:fa:6a:2b:ee:ab:02:71:fa:6d:a6:
                    d8:b7:c7:6a:89:a7:49:70:16:95:e1:93:0f:78:15:
                    75:4a:c3:8f:97:30:a1:7b:dc:43:e5:e2:56:ca:ee:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:87:6B:10:9A:C3:73:C0:8C:1D:93:68:D2:C3:9D:82:70:E6:2C:BA
            X509v3 Authority Key Identifier:
                keyid:88:3F:72:60:65:00:26:B9:73:A1:8A:7F:3E:99:58:D3:21:EC:E1:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iD9yYGUAJrlzoYp_PplY0yHs4ds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/11d4e7-e978-4037-ab09-c09ff16fc34b/1/iD9yYGUAJrlzoYp_PplY0yHs4ds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:b3:7a:94:64:00:04:cd:d8:16:84:bb:c8:db:fc:33:66:f5:
         4b:e6:2e:8f:ef:b8:a7:9c:18:71:64:1a:ef:5f:06:d5:2a:b0:
         57:55:d1:ff:32:29:02:ff:3c:a4:bf:c8:6d:06:e8:a3:1e:81:
         8e:b4:61:4f:05:61:31:5a:42:c2:0c:8f:95:57:31:dc:b5:85:
         49:e9:02:d2:4e:02:04:7b:4d:b6:66:0b:90:4f:6c:1f:6a:ea:
         19:48:3e:dd:cf:e7:4e:e3:3c:18:c7:8d:af:f2:4c:ea:04:19:
         df:dc:19:c9:25:85:58:b8:9d:c1:04:6e:3b:81:61:31:d2:b9:
         76:f0:5f:12:84:59:d6:01:d8:fc:8c:30:9f:db:a8:85:90:55:
         8a:85:3f:ea:2d:79:29:53:a3:22:72:30:e3:6e:4f:b8:43:24:
         0d:e2:4c:f9:6c:bb:73:65:67:8d:cb:c6:6c:c9:ac:b4:c3:a9:
         2f:c0:f3:68:bf:78:95:2a:65:b9:52:60:c7:2d:80:b1:d6:a3:
         cb:94:0c:88:ca:02:04:b5:a4:7f:dd:02:4e:61:8e:ec:4a:bc:
         13:dd:5f:1b:f5:f7:e6:3d:8c:10:9e:dd:d2:f5:ec:cb:90:9f:
         a2:fc:6c:84:9c:29:7c:af:32:57:b0:12:3e:04:f1:82:21:10:
         42:92:f6:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:15:23 2026 by rpki-client