This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File:                     ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier:          JKncMJkhOLpFq4QK2UiEc6m+mI0OB18sjqmMk5h7TKc=
Subject key identifier:   3C:72:BB:9D:26:F5:AC:D4:58:02:C2:88:54:B9:59:DF:15:A6:F9:4B
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer:       /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial:       019BF462A8920E60BB07ED9596AE4AF389AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number:          0727
Signing time:             Sun 25 Jan 2026 09:01:04 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:04 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:04 +0000
Files and hashes:         1: Uv99MiDXyajOsQnEMoZEqygjiOM.roa (hash: J2J3fpMUvkwfwUFZMZrnnhWhczlVO0JpNc+f56+XNoM=)
                          2: tKZtiob_Nq3JG5qKeeGyKdGDt2o.roa (hash: orNqkM35VJUEOJvGQtjnDxsBymM4EnHV3TJiqbLgHGU=)
                          3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: nyNe8891iWO9SPXURSBKtS9abBgfeADj6K6mgaUTTI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:a8:92:0e:60:bb:07:ed:95:96:ae:4a:f3:89:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
        Validity
            Not Before: Jan 25 09:01:04 2026 GMT
            Not After : Jan 26 09:01:04 2026 GMT
        Subject: CN=3c72bb9d26f5acd45802c28854b959df15a6f94b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:29:78:b4:96:53:6b:b7:23:ab:1e:b7:19:
                    c5:69:10:25:b7:aa:4b:bd:83:44:d7:9c:b3:0e:28:
                    ac:22:55:be:d1:8c:92:08:e1:35:bb:9f:ff:29:c6:
                    59:0a:16:a1:da:9e:4b:66:d9:2d:f9:37:77:8a:60:
                    86:2d:37:8c:07:ee:67:80:3d:51:49:35:97:38:8a:
                    0c:25:6d:91:18:2f:31:0a:89:7f:68:6a:07:e2:10:
                    21:12:3e:85:6a:d8:2f:e4:81:34:73:0a:bc:f3:9b:
                    c4:0b:f1:23:6b:ea:a9:47:82:bf:9f:31:70:6f:d8:
                    7f:29:08:83:79:82:08:0f:ef:67:e3:7a:d9:f8:a7:
                    df:ae:26:56:e0:f3:91:ac:9a:b8:4c:6b:6c:c6:07:
                    27:34:dd:93:8b:3e:5b:b0:43:f0:8b:6c:80:1a:ce:
                    a5:79:11:74:3c:e2:1e:73:7f:23:d4:79:a6:14:e8:
                    16:ce:f7:59:48:a5:1b:5b:99:c3:3a:32:cc:35:47:
                    3d:cb:b5:37:4a:bf:06:be:1b:2f:ef:ee:b6:b1:cf:
                    6d:5e:97:2a:3d:1e:99:7b:53:bd:b9:f6:d7:29:3b:
                    e8:12:38:40:b0:c0:90:84:96:d4:68:aa:25:1c:2c:
                    22:91:01:f1:86:b6:ff:5a:c6:74:61:ee:74:20:30:
                    55:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:72:BB:9D:26:F5:AC:D4:58:02:C2:88:54:B9:59:DF:15:A6:F9:4B
            X509v3 Authority Key Identifier:
                keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:bc:13:51:06:bd:22:3e:6d:cd:bf:e7:e7:43:20:9e:50:03:
         76:48:fb:89:e5:55:0d:32:50:89:d9:90:6f:9e:6c:93:0e:5a:
         2b:38:ad:89:23:0d:b3:ff:d2:32:cf:9b:64:be:b1:2d:b5:3b:
         2e:33:4f:42:78:e9:ff:ea:79:e0:ad:77:3b:cc:38:1f:c1:ba:
         39:b9:f2:eb:0f:cc:21:28:65:5a:5c:40:70:94:49:70:a6:db:
         e0:12:7b:9e:21:62:50:1d:45:f4:a0:ed:bb:ef:cc:b6:54:b1:
         11:e7:e8:b7:0a:a9:b1:01:b9:52:32:f0:bf:9e:0e:56:74:36:
         2a:f2:23:d5:07:59:e0:f2:99:78:55:4f:14:11:2e:56:11:c2:
         a2:bf:75:74:b7:29:dd:ba:91:9c:45:73:54:7a:ef:0a:c3:bc:
         25:d0:66:b1:14:c3:30:72:d9:7a:2b:7a:68:32:30:c7:5d:f8:
         0a:db:cd:09:49:d7:09:2f:d9:b0:cf:04:ce:6b:e8:72:66:7a:
         75:d2:2c:1e:da:c2:5b:bb:2e:09:8c:6c:89:89:68:c3:15:a1:
         1f:62:8d:cc:67:4e:d3:bc:71:e8:ee:73:9b:18:28:af:64:79:
         50:b2:f2:b8:bc:a8:ef:d2:4f:bf:0a:67:c7:a8:8b:9a:6b:59:
         e7:8d:65:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:47:43 2026 by rpki-client