This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
File:                     DXL-LIBe1jr8nInpMkrJTTCTmqs.mft (raw, json)
Hash identifier:          YTxdidkAuExsqSdEpoHhojgEhUzzHg1DzDuA+8w1FxU=
Subject key identifier:   80:E0:44:63:E5:E0:95:A4:D8:1B:83:A3:D5:34:B4:B2:F8:71:10:59
Authority key identifier: 0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB
Certificate issuer:       /CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
Certificate serial:       019BF4D110814E3EC4B4A6188A747FF4F195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
Manifest number:          104C
Signing time:             Sun 25 Jan 2026 11:01:40 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:40 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:40 +0000
Files and hashes:         1: DXL-LIBe1jr8nInpMkrJTTCTmqs.crl (hash: p/yXydnkyZbyQ9/PSwQ76ryLVFNv83y310HQeE6pmIM=)
                          2: G_ts_4Mq_gm33efoxHmW4h4Xa3o.roa (hash: zaxxR0jHx8djgjzgNeNchFmTBAVbOxlIsfNcGA7bRFE=)
                          3: PRXYBUMYEQRkV3ToDuIhNBrHhyA.roa (hash: uvNCYHR/ZZCKYM9W7EA0XBc+nLp6Db9Y2V2m/ZWTRGE=)
                          4: u2UoUcD01FR6Gm9X9tpyAaOzZTo.roa (hash: /+na6f52i0IzWlXOvWB9jKcZ2W/nTF/S0c3QA8HP8eI=)
                          5: wlFKLKiiGrz35Xi-5LjAPv-O29I.roa (hash: Xc0LKCazMtZLUwvnl2NzDp5cLTNr9d3bVVU78MpvOYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d1:10:81:4e:3e:c4:b4:a6:18:8a:74:7f:f4:f1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72fe2c805ed63afc9c89e9324ac94d30939aab
        Validity
            Not Before: Jan 25 11:01:40 2026 GMT
            Not After : Jan 26 11:01:40 2026 GMT
        Subject: CN=80e04463e5e095a4d81b83a3d534b4b2f8711059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:11:77:54:88:0b:ba:84:2c:78:33:cf:79:71:
                    3a:a0:0b:08:de:c6:69:01:5c:92:13:a8:f2:b7:35:
                    10:f7:df:5c:fe:7f:15:d2:e6:95:1c:f2:af:97:66:
                    00:66:0f:65:56:6e:55:3d:88:a7:fc:c7:d4:f1:4a:
                    0a:a6:dc:ed:4c:45:21:f8:7c:b7:1e:8e:85:eb:4b:
                    3e:9e:70:87:92:86:ce:8d:89:c2:53:79:66:98:64:
                    e7:51:12:9e:3f:9f:02:1b:95:36:82:25:a6:a4:2d:
                    89:a8:72:c2:ff:10:85:40:23:10:a6:0a:20:28:5b:
                    dd:54:42:af:19:5c:74:e1:02:2a:ba:e1:cb:f3:c4:
                    d4:95:c0:2e:35:66:f7:14:de:f1:e7:3d:b3:7a:af:
                    16:7b:a7:45:f0:d8:b0:f8:a1:e1:e5:41:d9:6d:2b:
                    be:e0:e1:23:d8:42:07:14:ab:4e:87:88:f9:44:a1:
                    64:f9:f3:5e:a7:39:0b:49:4b:ef:74:3b:58:17:1e:
                    c0:58:90:3f:42:56:dc:4f:6c:f4:6d:18:61:c8:10:
                    fb:ba:a8:a9:b6:3e:80:84:9f:f3:0e:a2:a4:0c:9e:
                    a3:77:82:76:3f:77:41:84:95:96:8c:78:d9:eb:e2:
                    b3:9f:6a:19:8c:b2:16:22:9f:43:9a:b5:de:95:5d:
                    a5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E0:44:63:E5:E0:95:A4:D8:1B:83:A3:D5:34:B4:B2:F8:71:10:59
            X509v3 Authority Key Identifier:
                keyid:0D:72:FE:2C:80:5E:D6:3A:FC:9C:89:E9:32:4A:C9:4D:30:93:9A:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXL-LIBe1jr8nInpMkrJTTCTmqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/22e1d1-9984-4158-8d18-cf818c7c451a/1/DXL-LIBe1jr8nInpMkrJTTCTmqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:82:8f:8a:81:06:2e:0f:a0:08:da:f0:0a:23:2a:1a:fc:3d:
         86:b5:65:28:35:31:7f:89:eb:1f:82:92:15:4d:c4:d1:7a:1b:
         47:8c:16:e6:c2:e8:14:b6:53:c2:9d:d6:61:6d:ce:16:6e:cc:
         79:ad:3b:7e:b0:8f:97:23:88:59:92:72:a6:f2:d0:34:69:0d:
         35:dc:e4:1f:93:6f:0b:a6:ca:f9:6c:aa:f1:d5:cb:e0:3b:11:
         b1:4c:88:79:86:ac:c5:00:2d:7a:ee:5d:2a:b2:02:37:f1:8f:
         72:83:83:57:48:13:fa:ae:48:51:15:93:b7:2e:1c:42:da:98:
         1f:1b:33:96:ba:56:c7:7b:fc:54:22:51:13:e7:96:ab:85:92:
         97:08:3c:53:a1:fe:66:be:70:6e:c5:94:de:42:e0:55:c2:aa:
         26:c2:a2:c7:f6:c7:3c:97:7b:06:e4:00:82:56:b4:2c:3d:8d:
         0b:4d:c7:5a:c9:42:72:ad:b6:5b:da:6e:0c:48:05:24:0a:9a:
         12:50:6c:5d:b4:9d:b6:f2:46:c4:cc:2d:70:12:19:16:24:0d:
         9c:2f:31:4a:e4:d0:b1:af:2e:8d:3a:2e:06:8e:0b:c3:bb:cc:
         89:e1:d0:b0:94:77:07:9a:00:f9:ed:8f:1d:eb:6d:9b:9c:b6:
         ba:c2:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:55:10 2026 by rpki-client