This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
File:                     rUyDCxEmFIOmK2aWpMNyDorYig0.mft (raw, json)
Hash identifier:          4PV4XumOl7iAmUYGvim7D7fHKAd6m82Ktr7tyXy0b/o=
Subject key identifier:   F0:49:8A:83:A1:EB:DC:FC:5E:D4:A1:5C:6D:1C:B7:6A:EF:BF:C4:10
Authority key identifier: AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D
Certificate issuer:       /CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
Certificate serial:       019B9E2064AF14899EFC17502FE4B3F677B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
Manifest number:          1685
Signing time:             Thu 08 Jan 2026 15:01:21 +0000
Manifest this update:     Thu 08 Jan 2026 15:01:21 +0000
Manifest next update:     Fri 09 Jan 2026 15:01:21 +0000
Files and hashes:         1: 5A_9S0_k2z9CIFI_8Yk78IZDaEI.roa (hash: nmz/iYmV6mKVOLZrYAox5VaizjrAFHQfQwQAyHHQgTM=)
                          2: Axc_E2xRyuIueu7MxwSrAbNKRdM.roa (hash: BDjOOm0VSjHKXhROcrzw3kdn2+1ifBZy1hpq2pHuv2A=)
                          3: PaurkzffyErdpNi4ejYNr7FnWdc.roa (hash: jPNQ7UykvWYwuvPZ1rpjnsZHusFbctpC3HqhplZrHe4=)
                          4: Uryh4fThyDLMPt3qMbkDETFPkjs.roa (hash: /xcRZ3cub7ymv3GtgsooN/HcmqZzVT8RJVzKbGyx/dQ=)
                          5: rUyDCxEmFIOmK2aWpMNyDorYig0.crl (hash: To4ieqnD93cqzZSQ/QYosuGZhghxmiFudKr2IQcMAH4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 15:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:20:64:af:14:89:9e:fc:17:50:2f:e4:b3:f6:77:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad4c830b11261483a62b6696a4c3720e8ad88a0d
        Validity
            Not Before: Jan  8 15:01:21 2026 GMT
            Not After : Jan  9 15:01:21 2026 GMT
        Subject: CN=f0498a83a1ebdcfc5ed4a15c6d1cb76aefbfc410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b9:d3:af:08:eb:ea:62:c7:bd:c9:c0:31:46:
                    52:b5:29:ce:6c:51:d3:2b:0c:cd:e0:9f:4d:6c:84:
                    ca:09:b9:23:10:b8:a0:3a:e6:4d:83:92:ad:ab:7d:
                    30:dc:24:44:2b:4b:11:1c:2f:9b:1a:a0:0f:8f:e2:
                    d1:7c:4c:47:49:f9:a0:4c:89:a7:ef:46:6d:34:68:
                    c4:7c:3f:7c:4f:d0:8a:32:57:7f:bc:24:f5:26:3c:
                    cf:cc:63:03:00:ba:57:22:4c:ed:5e:f4:08:61:43:
                    b7:20:7a:62:a5:73:0b:48:0a:84:6d:28:64:04:40:
                    12:27:22:48:0a:86:b5:c3:1a:5f:ad:54:b0:52:65:
                    b7:55:71:34:25:7f:bb:00:bd:3a:43:04:8d:a4:ee:
                    e3:e8:b7:e2:fc:10:e6:51:ec:5a:42:a4:ed:97:5f:
                    e5:9c:7e:02:61:eb:5d:42:e4:e4:9d:18:51:b0:9d:
                    3e:99:86:99:82:ef:8d:1d:b2:90:ee:37:1f:34:21:
                    d2:61:d4:33:a7:1f:1c:83:02:6d:f7:7b:1d:7c:b6:
                    0f:47:4b:d9:5e:84:68:90:82:c6:3b:ba:ba:29:20:
                    4b:cc:76:c1:c7:a3:a0:cc:06:37:2f:00:8f:77:30:
                    bd:80:f0:0a:23:df:42:47:36:f5:9e:cf:a3:57:cd:
                    5c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:49:8A:83:A1:EB:DC:FC:5E:D4:A1:5C:6D:1C:B7:6A:EF:BF:C4:10
            X509v3 Authority Key Identifier:
                keyid:AD:4C:83:0B:11:26:14:83:A6:2B:66:96:A4:C3:72:0E:8A:D8:8A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUyDCxEmFIOmK2aWpMNyDorYig0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c6a6ba-ae05-4524-84d1-222ceb6c344c/1/rUyDCxEmFIOmK2aWpMNyDorYig0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:1f:21:de:fc:2b:1c:ca:eb:c8:54:5f:da:b3:b6:01:bc:5e:
         6d:8e:aa:2d:9f:83:94:02:f3:ec:18:05:21:d6:ef:3d:ac:52:
         13:7f:5d:52:29:74:ce:3e:ff:a6:6b:63:72:7e:b3:a5:88:d7:
         21:41:42:4f:1e:26:e6:2d:87:2e:b6:ba:73:9b:f6:73:27:2a:
         5a:29:bf:1c:43:b8:9c:4c:8c:fe:af:1d:e6:18:a9:8d:71:a5:
         1f:31:e4:89:21:1b:5d:07:d9:cf:1a:37:62:4a:e5:5b:a1:13:
         81:cf:0a:13:3e:c3:f0:6c:b5:16:d0:f2:b5:40:29:1d:b3:46:
         76:c2:10:12:9e:dc:fd:1a:01:aa:47:02:bc:07:66:c4:51:6c:
         20:04:47:4c:82:e8:70:cd:65:aa:e7:ba:69:54:87:ed:6c:63:
         37:83:ac:bb:cb:5e:2a:c9:b3:52:34:c7:67:be:2e:9d:39:2d:
         be:6e:6c:a1:36:cf:1d:c1:da:cb:57:43:75:d9:94:05:9a:dc:
         e7:8f:49:96:ed:c7:84:68:1c:d7:48:62:3a:25:37:c9:63:ba:
         17:08:1f:25:f5:74:4e:f2:7d:e7:de:85:74:cf:a1:f1:55:98:
         1d:fa:a8:60:1b:c9:4e:6d:87:1a:b5:75:37:c7:9c:5a:02:f0:
         f8:12:e0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 00:09:36 2026 by rpki-client