This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
File:                     iCGjmu2dpO46tmOdJEUI-h6NIPY.mft (raw, json)
Hash identifier:          A74UzM4b2oFjDYc8BqqWNkUGyMuGA9ogZsimTRFm7eA=
Subject key identifier:   2C:79:E9:9B:E7:2B:AD:D9:E9:BD:4F:59:6C:EA:E1:14:93:62:68:0F
Authority key identifier: 88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6
Certificate issuer:       /CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
Certificate serial:       019B9E8DE9681EC02640F3CD6AEF9257924A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
Manifest number:          14DE
Signing time:             Thu 08 Jan 2026 17:00:59 +0000
Manifest this update:     Thu 08 Jan 2026 17:00:59 +0000
Manifest next update:     Fri 09 Jan 2026 17:00:59 +0000
Files and hashes:         1: DoG1nIvAyF6Ofk7B7oBXD9fCbWY.roa (hash: 9biYSv6POYCwfleLHgkM4hjjkLE1P6h07qcPCt2vZ8Q=)
                          2: Ku186Y-Tu0woDCZbFinpqq7ZdFE.roa (hash: v4Tz8TXIdty6/ZjbJ1ivX2W0EU7wX33Cwf/C7mVCK74=)
                          3: _yFrTYVVOzem6SAvOPOzP_wE_MM.roa (hash: 5prdT05UIi7fhKfl8B0EiaHRzoodJuHLB7r7onONbos=)
                          4: iCGjmu2dpO46tmOdJEUI-h6NIPY.crl (hash: i79zO1yCuyA5GuaP0KbcTTP3OLiwYSZmErgzhLQNtk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:8d:e9:68:1e:c0:26:40:f3:cd:6a:ef:92:57:92:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8821a39aed9da4ee3ab6639d244508fa1e8d20f6
        Validity
            Not Before: Jan  8 17:00:59 2026 GMT
            Not After : Jan  9 17:00:59 2026 GMT
        Subject: CN=2c79e99be72badd9e9bd4f596ceae1149362680f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b4:ce:8d:45:0c:f3:ee:85:fd:76:97:8c:82:
                    86:f1:b5:c8:0a:d5:d7:3b:d8:d3:9b:f9:a0:cd:fc:
                    a4:28:69:30:94:b0:c7:6c:53:85:89:b2:87:5b:9b:
                    34:64:42:94:cf:c9:af:fe:ec:d0:24:0b:d0:9e:f6:
                    27:b4:a9:b5:06:d2:c8:09:c1:3c:58:9c:ff:da:c6:
                    69:34:c8:55:47:7a:e1:2d:06:d5:e4:91:e8:08:e4:
                    07:84:8a:fb:3e:22:1c:5f:34:0a:58:c6:fe:41:4d:
                    7f:bf:f9:45:2b:50:84:7a:a9:77:e1:fc:53:5f:28:
                    40:49:02:af:c6:24:ae:7d:a5:94:b5:51:c9:d3:9a:
                    5e:24:f3:7a:6e:37:a9:d2:03:80:f6:0c:8c:14:3f:
                    8b:fa:8c:20:be:68:21:bf:cd:cc:67:f6:bb:ba:9d:
                    78:4b:48:23:39:86:5d:92:da:87:f0:10:61:1e:32:
                    6e:f5:37:f1:5c:0d:af:a9:0f:58:c1:8e:4d:19:e6:
                    bb:54:2e:10:27:20:31:4f:30:89:98:b5:b8:3d:dc:
                    92:6c:f4:3b:09:02:3e:09:5e:9e:eb:e2:96:44:a1:
                    22:2d:0c:01:87:09:db:46:4c:34:14:cd:3e:3d:a3:
                    d4:fe:f4:84:33:5a:55:f7:81:ef:5d:6c:82:26:f4:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:E9:9B:E7:2B:AD:D9:E9:BD:4F:59:6C:EA:E1:14:93:62:68:0F
            X509v3 Authority Key Identifier:
                keyid:88:21:A3:9A:ED:9D:A4:EE:3A:B6:63:9D:24:45:08:FA:1E:8D:20:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCGjmu2dpO46tmOdJEUI-h6NIPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/iCGjmu2dpO46tmOdJEUI-h6NIPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:d5:44:0f:18:15:9f:4f:64:50:30:ac:5b:5b:44:98:e4:79:
         f5:84:6f:e1:b7:31:1e:da:69:6a:42:f1:b3:63:5a:c7:cd:80:
         dd:84:41:d5:45:da:fa:5e:95:d6:00:81:62:58:35:7c:a8:13:
         ef:15:c7:07:4c:7b:e3:e3:e4:73:07:a2:24:e0:21:e0:aa:b8:
         50:bf:a4:82:9b:01:52:3f:44:a1:17:62:2b:5b:36:08:52:ef:
         af:08:1e:e2:61:4b:e3:6e:7a:6d:d9:8c:e5:ec:16:ab:a2:3c:
         d0:93:d5:0b:31:81:e0:8d:dc:d5:33:0a:73:43:0e:71:06:ba:
         da:57:f2:50:0c:5d:f9:7b:17:6a:c0:cd:f3:2e:ab:28:a3:29:
         ae:04:49:27:e0:8d:a9:57:0a:d9:3b:d1:2e:34:70:ba:a8:3e:
         0e:2c:88:41:b0:74:db:7d:cd:33:0c:bc:13:ed:26:d2:a7:16:
         3c:ac:e0:94:be:7f:48:8a:a7:fa:83:30:d3:9c:de:10:74:de:
         15:6c:a5:a1:2c:ab:40:32:e0:f9:ee:5c:a0:52:15:cf:bd:e8:
         b8:82:3f:86:01:b2:0d:09:83:98:80:02:b2:ae:7b:5f:51:88:
         59:ad:46:99:95:bc:ca:32:c1:59:15:51:ff:57:08:f7:cd:17:
         7a:c6:8d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 01:35:34 2026 by rpki-client