This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
File:                     DTVYVGosVLvYEqGSKKqY4HjTqmg.mft (raw, json)
Hash identifier:          HbxTk9FH9ILWJZbOMl0Y2HW5Hlzd8axrlXtHvQQdBkg=
Subject key identifier:   B5:A0:A4:E1:6F:7C:9F:26:C2:1D:24:E3:8E:EF:C2:AC:65:DD:B4:70
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Certificate issuer:       /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial:       019BF34FEC21FC396E6189222215B26CD845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
Manifest number:          067C
Signing time:             Sun 25 Jan 2026 04:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:59 +0000
Files and hashes:         1: 0kFTRKOE3jWGCAoyPfo6VNl6gNY.roa (hash: il4KXb3o4UsVQZBTVvlrB+YuKW6gXafGwP3odHFQM4k=)
                          2: 7dxEnT1CfSxLe7_sqKtwcYTqKsM.roa (hash: QclYUg3Wd/a2IKDACLA5HXN28WB2Yrc+C32YeqYRisk=)
                          3: 9B82YcNnUprt-4KUyQd_1s9v9Xs.roa (hash: 9bZCGC4PdB/89RTJWYuGX2hvdz0O1wHHsW+fifHAss8=)
                          4: DTVYVGosVLvYEqGSKKqY4HjTqmg.crl (hash: +88fQnTsykqTbdDB9oy2J/rNBNsIpkzmx5ZR1L5SIYI=)
                          5: D_vjqcKu-RrA1L9-NPBKRQy6u2w.roa (hash: +7JpMBrIwFcMPab0ahGtI2QPpD0AvXli50PzvLVY2SU=)
                          6: F6ReykvnwBeQdGSlwzXJzlYN8dg.roa (hash: s4VCcqJJfryWhoNKP5oyEvMnzjY6svyk5wyKPWs9bvE=)
                          7: Gay3j7r5bMuL1O3lqGZJU_WbCJA.roa (hash: 8Z1yEawpjvuXMIl7aRVa0CurHKu9yij+BtnWRFN4QL4=)
                          8: HxYp59riIlza87eFARnMPYgySWE.roa (hash: IbWFXF9QrKF/nXu4+XYR7TDUvfZ6vCunnlKcD+Se6xU=)
                          9: bfjrc-oiggd1qo6rctoBZsBjqBA.roa (hash: gT8ybax2ALNt41GPsw02TSXazlNeSoaU2pZJZ58CxTY=)
                          10: gy_RIzTwo_3ivq0rBuKmnXuwaM4.roa (hash: tCWSNQOzb9A+PPchWiIZ5rJnBeXKzzZ8nzXvj/Dyy5Y=)
                          11: magE7Oqvt4vQBy0S0W-6ngBkDPE.roa (hash: lje+xFMlOYI2U2KnAHNmX1xI+2awOlplYxa8y2jo/S0=)
                          12: vcGSAq_UFOrKcbjq8gwdxfB1Ibo.roa (hash: 3NDxRub2Y5A+FcimvidA2GMSTgfLKOnltwEtyfMEJ1E=)
                          13: yB_CfrIGe_rOQ30-OH4e0E-bsAk.roa (hash: VN5DLkVVpohVvi5e8W8Tot76S9TCt+6OKSkdhXkpmYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:ec:21:fc:39:6e:61:89:22:22:15:b2:6c:d8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
        Validity
            Not Before: Jan 25 04:00:59 2026 GMT
            Not After : Jan 26 04:00:59 2026 GMT
        Subject: CN=b5a0a4e16f7c9f26c21d24e38eefc2ac65ddb470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:21:10:46:ef:05:a7:82:05:d2:21:df:5b:fa:
                    21:b9:e1:13:8c:1b:87:ce:d3:bb:9e:ce:7e:48:91:
                    74:00:eb:8e:e4:57:b2:af:87:1d:37:a7:49:98:bc:
                    89:5f:9f:89:03:80:63:4c:1c:fa:02:3e:13:6f:a5:
                    2e:74:28:5b:8a:a1:eb:cd:f4:2f:a7:05:e2:03:b2:
                    6a:da:cf:6c:c7:5c:22:a4:92:a0:5e:1a:04:b0:de:
                    86:6d:df:c1:1a:5e:9d:f4:f3:23:6a:8a:a5:d4:0e:
                    66:6d:b9:f9:c7:99:61:26:4d:62:de:5a:2f:9c:a9:
                    51:21:88:c6:43:e6:33:9a:ae:e6:cd:64:24:9f:51:
                    f9:ef:18:49:7e:21:05:05:99:0b:a5:59:71:d3:2c:
                    81:a1:dc:1f:1a:f7:f0:dc:43:de:5c:01:94:68:36:
                    d3:14:e2:00:ff:84:6d:7c:60:46:30:10:36:da:2d:
                    99:11:f8:a2:b7:75:de:0e:4d:05:04:84:96:a5:80:
                    c6:9c:33:61:9c:17:cb:58:99:50:a7:c3:c0:3b:61:
                    89:92:c3:65:7f:67:0b:41:ba:d4:2e:35:89:06:fc:
                    84:e0:2e:b9:09:a3:95:66:a1:1e:66:87:8c:55:3f:
                    04:42:f8:32:43:c7:30:44:8e:33:9c:11:fb:8e:ad:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A0:A4:E1:6F:7C:9F:26:C2:1D:24:E3:8E:EF:C2:AC:65:DD:B4:70
            X509v3 Authority Key Identifier:
                keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:da:df:01:d9:e0:f8:07:36:d3:2b:3b:b5:0e:72:f5:8a:29:
         ff:8b:dc:06:99:92:a6:54:86:39:45:0e:70:18:be:ba:ac:5e:
         f5:90:2b:e5:f6:60:2a:e5:41:2c:66:52:34:2a:21:93:f9:e2:
         cb:76:91:80:3b:7f:49:f3:0a:53:71:5e:a1:57:37:6e:1f:04:
         67:6b:42:05:5b:fc:19:2f:c4:01:47:08:7c:18:36:28:6e:75:
         b4:ce:c9:f7:9c:86:b4:6b:02:be:66:1b:29:6a:53:10:08:ae:
         1b:e4:83:1e:f9:9a:6b:59:a6:bd:fd:c8:ec:b5:37:4d:19:9a:
         b0:ec:01:5a:d2:38:40:53:1d:90:96:ec:09:71:8b:48:9d:26:
         29:c2:bd:a4:26:16:27:5c:00:77:fd:51:58:be:d6:0c:92:0e:
         d2:e5:8a:c6:2e:ec:7e:45:e3:ff:a6:bd:01:0e:a4:21:31:47:
         fb:b8:c8:e4:2a:20:da:00:f8:e9:52:54:4e:95:73:e2:94:0b:
         a3:92:b9:e5:d2:23:d5:af:d5:f1:33:88:2b:0c:a6:b3:7e:c1:
         8b:be:5f:06:3e:df:93:2c:56:44:d6:cd:6c:de:c0:74:d4:82:
         18:cf:4f:07:0c:2c:b8:60:18:13:c5:2d:cd:cb:2c:2d:4e:c0:
         36:e2:62:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:44:38 2026 by rpki-client