This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
File:                     1uU17yFuvm9_xVz73DFTK5EtjmM.mft (raw, json)
Hash identifier:          TwwRQozO6eYg8YOGTy2UzPQuESqDhwyviaXjs74yBo0=
Subject key identifier:   28:60:EE:DF:6B:57:E4:19:D8:5F:E8:E1:ED:C3:39:8B:11:E5:CE:FC
Authority key identifier: D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63
Certificate issuer:       /CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
Certificate serial:       019BF3BDD829A902A18B6C955F3347BF76AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
Manifest number:          0D0F
Signing time:             Sun 25 Jan 2026 06:01:03 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:03 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:03 +0000
Files and hashes:         1: 1uU17yFuvm9_xVz73DFTK5EtjmM.crl (hash: N73+Mi6Mfkq4Lpm4MS8yBpXi/HyhXQbWnXRvKqBfn2U=)
                          2: DYnUNaZAsVV0zg8BMJ8ALP8YoaA.roa (hash: 99fcTIhNFwctA5y5YOLO0bKZ5UWAKG6gqXfeOW7ZWyc=)
                          3: KU8q2n2CMANYI0fRJo2s7p5G3KY.roa (hash: TGvZcgRzyrpwF/XoDD+tDWJMqg0cIvjLnDlG6w6JYqw=)
                          4: fMKyf5QsTFLvG0T4zt9iERuJPYE.roa (hash: vMcyvkuZGIeblXhGPjZRPWdSAOkA0ino94f3lLlOGuY=)
                          5: w0AIzL_yXPCHkJImPTgRwJJtTaU.roa (hash: sZxn5UqLt4mLh2cPzkHphFRVza6dN160+xYuKyv4YdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:d8:29:a9:02:a1:8b:6c:95:5f:33:47:bf:76:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e535ef216ebe6f7fc55cfbdc31532b912d8e63
        Validity
            Not Before: Jan 25 06:01:03 2026 GMT
            Not After : Jan 26 06:01:03 2026 GMT
        Subject: CN=2860eedf6b57e419d85fe8e1edc3398b11e5cefc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:37:48:68:2d:d2:b8:40:09:2a:d2:83:b9:de:
                    d6:fe:2c:86:5e:e4:3c:0b:7b:88:a8:23:10:a2:13:
                    d2:36:b3:83:60:db:51:37:ec:d1:b8:71:7e:f3:e5:
                    30:e3:83:44:4a:93:ba:92:bf:a5:3e:ed:79:64:b9:
                    d3:f9:a7:28:0e:1f:dd:c0:c5:18:d2:99:9f:8b:d1:
                    63:01:bb:d9:e7:29:e4:02:6e:fb:38:92:f3:84:ef:
                    b9:c4:d4:d4:e7:a2:03:b4:5b:b5:e4:c0:2d:e3:1a:
                    03:be:c7:df:ca:2d:ca:10:32:65:96:a9:d4:a8:95:
                    ae:9b:f3:93:4b:8e:4e:3d:68:94:a7:92:e6:e4:a6:
                    50:03:78:f6:6b:b5:61:bd:dd:12:59:f5:81:32:ce:
                    11:b9:cd:71:ae:37:0a:ed:34:6f:ed:d2:bf:8a:82:
                    ee:c5:43:8d:ea:9f:28:9e:97:f7:14:86:f8:02:ca:
                    91:39:bb:80:f0:12:e0:bd:16:38:40:3a:00:14:b6:
                    35:5c:ad:8b:ff:18:86:bc:e7:2b:65:03:63:43:59:
                    1d:ac:0a:89:d8:76:0a:66:73:a3:0d:09:dc:42:f0:
                    ed:5e:ec:7b:67:ed:14:a2:98:c3:4b:90:ba:e9:9f:
                    c8:04:10:1b:3b:1e:c9:d0:6b:4f:a2:7c:b8:be:25:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:60:EE:DF:6B:57:E4:19:D8:5F:E8:E1:ED:C3:39:8B:11:E5:CE:FC
            X509v3 Authority Key Identifier:
                keyid:D6:E5:35:EF:21:6E:BE:6F:7F:C5:5C:FB:DC:31:53:2B:91:2D:8E:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uU17yFuvm9_xVz73DFTK5EtjmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/bd0d7d-f425-408a-b07d-07711ed02b75/1/1uU17yFuvm9_xVz73DFTK5EtjmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b0:8c:6c:83:74:6c:49:f1:e0:ff:ea:28:70:56:78:97:ad:
         a2:1a:bc:bd:6c:96:36:60:34:c3:86:34:1e:f7:12:bb:96:b7:
         dd:d5:97:c3:57:da:63:5e:2a:6f:d2:ca:67:8a:d3:3b:70:99:
         d0:2f:69:ba:e7:9e:7a:2e:85:0c:72:ee:87:e6:68:72:7d:07:
         0f:88:6a:29:f8:0c:88:19:46:f9:f1:71:e0:5c:ab:93:ad:da:
         38:07:e3:b1:51:28:46:c7:27:45:7e:86:ab:17:e5:8d:fd:9e:
         3d:a1:e2:3c:a8:70:d1:61:57:01:3b:8b:59:75:b3:1e:d8:56:
         2f:3e:fb:a7:ad:83:4a:90:a5:31:3e:59:18:d0:51:c3:ca:00:
         ea:b4:a5:fa:27:43:69:6c:89:e4:65:6b:70:d7:1c:18:e1:63:
         f4:5a:00:02:72:bf:8b:64:c2:48:1b:3e:f5:6e:96:4e:96:4d:
         00:e3:1f:06:79:58:ee:1c:9d:d5:76:4f:37:70:0a:06:31:cb:
         bc:17:63:87:5f:ca:79:89:61:ee:bc:b1:0b:99:e8:e0:2a:f6:
         67:36:11:d8:a3:db:65:28:6a:81:ef:47:6a:e8:eb:da:58:46:
         93:ad:cf:b7:1a:c2:c1:9d:5f:8c:e2:5e:45:83:7a:a5:1e:64:
         2d:46:e7:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:24 2026 by rpki-client