This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
File:                     C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft (raw, json)
Hash identifier:          9TGJwXaBU7VDFzID9oKJoG695Qd/eIkMwaP+dV/chcc=
Subject key identifier:   6D:3D:8B:45:35:48:40:D2:1C:0C:44:53:21:3C:B9:6B:09:AF:78:52
Authority key identifier: C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9
Certificate issuer:       /CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
Certificate serial:       16D4507E2A68E8CC4627B5D13E67401D0688844A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
Subject info access:      rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
Manifest number:          0419
Signing time:             Sat 24 Jan 2026 14:20:01 +0000
Manifest this update:     Sat 24 Jan 2026 14:15:01 +0000
Manifest next update:     Sun 25 Jan 2026 15:07:01 +0000
Files and hashes:         1: 326131333a376134323a3330303a3a2f34302d3438203d3e203136353039.roa (hash: OUajEHBBbRsewL9OwS+Pvj/T9rrSLXcsIY9ay83jvJk=)
                          2: 326131333a376134323a3330303a3a2f34302d3438203d3e203537313936.roa (hash: 6Axqhyp4yqCF4rrEIoh/LCJfrbeWXodzEhXCeqZwsE8=)
                          3: 3139332e33322e3130302e302f32342d3234203d3e203537313936.roa (hash: LQqi3SmaHdpP6MQV5CAyDlmnuunGVydlnP1+IDOz/nQ=)
                          4: C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl (hash: Wy4XAsjA7035TCrZSUp3tJkxreYAhW005E/x/+pOuUg=)
                          5: 326131333a376134303a3a2f32392d3438203d3e203537313936.roa (hash: 5OwzkaLUii9ngjYoZbrYO2htCcGwx8PARIooVDvbl7k=)
                          6: 326131333a376134323a3330303a3a2f34302d3438203d3e203134363138.roa (hash: OCminjwmZh7lq+WgeZFV1Nn5NIp84rJ8qzJwmmWMbd8=)
Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl
                          rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 15:07:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d4:50:7e:2a:68:e8:cc:46:27:b5:d1:3e:67:40:1d:06:88:84:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23a7169f6499dd2815c9178a890bc4c0514ddf9
        Validity
            Not Before: Jan 24 14:15:01 2026 GMT
            Not After : Jan 25 15:07:01 2026 GMT
        Subject: CN=6D3D8B45354840D21C0C4453213CB96B09AF7852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7b:fb:69:eb:a3:6b:eb:a2:94:11:28:c7:a8:
                    f5:bd:7b:b3:56:c7:55:67:2f:88:7c:48:07:37:e0:
                    89:64:1b:26:79:29:6a:e6:7a:64:0f:d9:72:2b:f9:
                    8a:b8:94:bb:08:4c:25:c9:12:84:8e:9d:9d:d1:8f:
                    60:71:c6:f9:c4:cb:2c:48:2a:5c:b9:e3:96:19:d0:
                    b3:5b:b5:c5:fc:de:2f:22:1b:12:35:71:33:a4:db:
                    81:1e:e6:77:49:4e:b1:af:06:78:d2:83:ba:51:65:
                    56:80:28:61:39:ac:2e:da:91:94:a2:eb:4a:59:32:
                    b8:68:30:a9:fd:1a:3b:66:99:2c:17:34:ff:2d:1e:
                    5b:0d:74:89:a3:a7:d1:14:a1:97:4d:a3:60:1a:96:
                    59:35:39:3f:40:e1:2e:1f:66:d7:3a:c0:b1:8e:62:
                    a3:a6:a6:24:1b:ee:3c:13:59:a0:7c:bb:be:30:fa:
                    b7:b3:c1:45:b3:46:6d:95:dd:5d:7b:6c:ab:c5:df:
                    68:97:be:db:b7:f7:7c:77:de:91:94:b3:d4:5a:03:
                    a0:86:8a:5b:11:1f:cd:84:09:ec:9d:78:00:e7:ca:
                    c1:72:99:f6:f4:0c:ec:b2:55:b1:41:01:0e:f6:ce:
                    a0:74:d5:72:ef:67:cf:35:a7:c1:15:bf:fd:af:9c:
                    5a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:8B:45:35:48:40:D2:1C:0C:44:53:21:3C:B9:6B:09:AF:78:52
            X509v3 Authority Key Identifier:
                keyid:C2:3A:71:69:F6:49:9D:D2:81:5C:91:78:A8:90:BC:4C:05:14:DD:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjpxafZJndKBXJF4qJC8TAUU3fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/clonoth/1/C23A7169F6499DD2815C9178A890BC4C0514DDF9.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:7a:d5:48:6a:0c:65:34:fa:e9:03:f6:0d:62:bd:f1:03:8f:
         de:cd:4c:c8:a5:a4:16:b7:ae:7e:39:02:d2:31:da:be:d1:70:
         e0:40:96:74:14:32:f3:05:8a:37:60:97:81:4f:5e:6a:b9:80:
         78:2d:05:d0:57:83:e5:24:18:b4:05:4a:3c:51:56:e5:1f:c9:
         62:fb:74:b7:98:b1:d7:cd:92:fa:4f:de:15:6b:8e:7b:15:20:
         76:8f:9d:ef:50:1d:90:f2:16:84:e5:4e:ff:ab:51:9f:60:b9:
         c3:75:a2:ee:e8:92:43:08:32:57:b2:f6:6e:98:12:f7:33:75:
         50:ba:be:32:6b:6c:9f:46:b0:ca:94:2e:75:77:b3:04:98:ea:
         6a:5c:67:40:7f:b5:08:c9:38:0b:9d:a7:7d:23:80:3c:37:af:
         19:90:0a:ca:04:fd:22:5b:8e:69:16:62:9a:30:e0:d7:36:fc:
         69:4e:de:34:33:10:cf:93:1d:23:26:c6:2c:6c:d0:57:39:9b:
         69:ec:95:7e:34:24:41:d6:d1:a5:7c:fb:65:35:e9:eb:a1:80:
         62:51:d0:17:3b:c6:dc:07:50:94:3c:77:50:a2:18:ee:58:90:
         35:03:1a:0e:6f:73:c2:6d:1a:a8:a9:0c:0e:8e:32:9a:a7:63:
         21:2a:d4:be
-----BEGIN CERTIFICATE-----
MIIE0zCCA7ugAwIBAgIUFtRQfipo6MxGJ7XRPmdAHQaIhEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzIzYTcxNjlmNjQ5OWRkMjgxNWM5MTc4YTg5MGJjNGMw
NTE0ZGRmOTAeFw0yNjAxMjQxNDE1MDFaFw0yNjAxMjUxNTA3MDFaMDMxMTAvBgNV
BAMTKDZEM0Q4QjQ1MzU0ODQwRDIxQzBDNDQ1MzIxM0NCOTZCMDlBRjc4NTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFe/tp66Nr66KUESjHqPW9e7NW
x1VnL4h8SAc34IlkGyZ5KWrmemQP2XIr+Yq4lLsITCXJEoSOnZ3Rj2BxxvnEyyxI
Kly545YZ0LNbtcX83i8iGxI1cTOk24Ee5ndJTrGvBnjSg7pRZVaAKGE5rC7akZSi
60pZMrhoMKn9GjtmmSwXNP8tHlsNdImjp9EUoZdNo2Aallk1OT9A4S4fZtc6wLGO
YqOmpiQb7jwTWaB8u74w+rezwUWzRm2V3V17bKvF32iXvtu393x33pGUs9RaA6CG
ilsRH82ECeydeADnysFymfb0DOyyVbFBAQ72zqB01XLvZ881p8EVv/2vnFrJAgMB
AAGjggHdMIIB2TAdBgNVHQ4EFgQUbT2LRTVIQNIcDERTITy5awmveFIwHwYDVR0j
BBgwFoAUwjpxafZJndKBXJF4qJC8TAUU3fkwDgYDVR0PAQH/BAQDAgeAMGAGA1Ud
HwRZMFcwVaBToFGGT3JzeW5jOi8vcnN5bmMucnAua2kvcmVwby9jbG9ub3RoLzEv
QzIzQTcxNjlGNjQ5OUREMjgxNUM5MTc4QTg5MEJDNEMwNTE0RERGOS5jcmwwZAYI
KwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQv
cmVwb3NpdG9yeS9ERUZBVUxUL3dqcHhhZlpKbmRLQlhKRjRxSkM4VEFVVTNmay5j
ZXIwawYIKwYBBQUHAQsEXzBdMFsGCCsGAQUFBzALhk9yc3luYzovL3JzeW5jLnJw
LmtpL3JlcG8vY2xvbm90aC8xL0MyM0E3MTY5RjY0OTlERDI4MTVDOTE3OEE4OTBC
QzRDMDUxNERERjkubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYB
BQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASg
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWetVIagxlNPrpA/YNYr3xA4/ezUzIpaQW
t65+OQLSMdq+0XDgQJZ0FDLzBYo3YJeBT15quYB4LQXQV4PlJBi0BUo8UVblH8li
+3S3mLHXzZL6T94Va457FSB2j53vUB2Q8haE5U7/q1GfYLnDdaLu6JJDCDJXsvZu
mBL3M3VQur4ya2yfRrDKlC51d7MEmOpqXGdAf7UIyTgLnad9I4A8N68ZkArKBP0i
W45pFmKaMODXNvxpTt40MxDPkx0jJsYsbNBXOZtp7JV+NCRB1tGlfPtlNenroYBi
UdAXO8bcB1CUPHdQohjuWJA1AxoOb3PCbRqoqQwOjjKap2MhKtS+
-----END CERTIFICATE-----
Generated at Sun Jan 25 07:29:24 2026 by rpki-client