This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          gDAmMyXLSIc+Emk1ZXCE7xCWLrWhZEWbZifvQjFkeT4=
Subject key identifier:   C1:FD:66:30:C6:8C:DD:61:3B:9D:63:FC:7D:FD:C7:32:5E:25:5B:07
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       019BFC1C79C8CDDC1D4B7DCC51CA0D97DB6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0F10
Signing time:             Mon 26 Jan 2026 21:01:23 +0000
Manifest this update:     Mon 26 Jan 2026 21:01:23 +0000
Manifest next update:     Tue 27 Jan 2026 21:01:23 +0000
Files and hashes:         1: 8x6YocXhEAE4EUV764wUI2PKiKU.roa (hash: yeyp7+DYbQfuSd5MS8n2WSRAshm6pVInjHRluL8iOew=)
                          2: a_FCKCt6dnU7F2M3SMQI1J1wlrw.roa (hash: AtVF3QXcvO4VESZ6rn9J2bX+Ej+cAO1z0o2Qbw21J8E=)
                          3: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: ldDexhfNtbBVSIOvRo4ynu/w6IiNis/Dj02SPgre0TM=)
                          4: oG6E9ZToy7RTlQOkPq4zuV7XG0U.roa (hash: 2JYfuKBfp+nWk/czqBEKKIWfjScVuKeSQovGMXxQmwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:79:c8:cd:dc:1d:4b:7d:cc:51:ca:0d:97:db:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Jan 26 21:01:23 2026 GMT
            Not After : Jan 27 21:01:23 2026 GMT
        Subject: CN=c1fd6630c68cdd613b9d63fc7dfdc7325e255b07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:af:42:1d:3b:30:db:d4:96:5b:f7:c9:75:31:
                    29:29:86:66:1a:7a:8f:80:10:5c:99:8d:0b:3b:f8:
                    45:04:58:5d:13:1e:2d:76:9e:dc:61:19:3d:e4:b2:
                    e7:fe:e4:3c:c8:e3:98:28:61:c9:a6:1c:9a:63:8a:
                    39:c9:35:8a:4d:59:f5:59:7c:00:f3:8b:48:04:fe:
                    b8:99:30:f7:50:4f:ea:8f:42:c4:64:f3:6d:ac:32:
                    ef:82:fb:b6:6a:12:fa:5f:ad:17:f5:91:84:8a:e0:
                    d5:50:dd:17:07:89:ec:dd:66:64:b0:7d:4a:1b:33:
                    70:da:b3:42:2e:0f:0d:3a:66:f0:46:d2:6c:85:ea:
                    d9:73:2d:55:67:ad:99:20:85:1f:01:80:f4:24:96:
                    49:8d:b6:48:ea:39:14:f4:76:63:55:0d:c8:98:f8:
                    bb:57:a8:57:36:d2:e6:21:b8:8d:0f:75:09:32:33:
                    0d:a4:5b:b3:f8:67:8b:d3:14:b4:d4:2b:ac:21:35:
                    13:1b:c4:75:23:13:5e:20:eb:be:62:93:c3:fb:ca:
                    78:a7:81:80:84:c3:fd:b1:16:ca:74:c8:44:00:de:
                    ca:84:6a:6a:44:f8:9e:fb:d0:83:93:34:0d:00:77:
                    42:85:a0:ae:f1:31:7b:99:d5:06:f9:0f:77:2f:7c:
                    1a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FD:66:30:C6:8C:DD:61:3B:9D:63:FC:7D:FD:C7:32:5E:25:5B:07
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:c0:bd:7d:1b:35:2b:5d:10:13:a0:56:49:5d:ac:e1:fd:75:
         e0:6e:aa:61:f3:89:21:65:7f:d4:ca:fe:c1:a5:8b:aa:48:2f:
         f8:63:17:8a:35:8c:c7:bd:1f:c1:89:57:2d:29:06:9b:2d:c9:
         98:b1:3f:81:dd:16:e2:49:4f:77:67:04:40:fc:bc:b3:d1:e3:
         1d:ee:63:82:21:c1:90:95:f3:3d:24:e5:be:f5:5d:d0:62:9f:
         34:6c:c0:32:dd:13:d9:12:ed:f7:26:7f:a5:e2:57:2b:b6:88:
         b5:35:22:c1:6c:f4:9a:ee:44:f7:68:ab:5b:bf:c7:e0:41:d6:
         d7:e1:3a:54:5d:51:b3:3e:2a:88:25:bb:d8:8b:b3:29:ac:da:
         b9:c9:ba:a8:a1:26:cd:e7:cb:76:2e:ff:3d:a5:ca:7f:ab:8f:
         7e:5c:10:d2:18:8c:2f:f5:33:21:fa:dd:3f:db:4e:1c:63:fb:
         c4:2e:f0:cf:ae:29:50:02:e8:44:c2:83:d1:8f:4d:d1:52:2e:
         02:47:7d:c1:1e:3a:b8:d6:7d:56:1e:64:2e:cb:0b:0d:4f:26:
         2b:25:67:76:a3:c0:af:7c:cd:91:c6:7b:b7:6f:05:c7:3d:d3:
         4d:6e:1d:d7:f9:91:6a:89:1c:1f:a0:83:d5:af:60:cb:0a:61:
         cc:bd:27:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8HHnIzdwdS33MUcoNl9trMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1
Mjg1ZDEwHhcNMjYwMTI2MjEwMTIzWhcNMjYwMTI3MjEwMTIzWjAzMTEwLwYDVQQD
EyhjMWZkNjYzMGM2OGNkZDYxM2I5ZDYzZmM3ZGZkYzczMjVlMjU1YjA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA969CHTsw29SWW/fJdTEpKYZmGnqP
gBBcmY0LO/hFBFhdEx4tdp7cYRk95LLn/uQ8yOOYKGHJphyaY4o5yTWKTVn1WXwA
84tIBP64mTD3UE/qj0LEZPNtrDLvgvu2ahL6X60X9ZGEiuDVUN0XB4ns3WZksH1K
GzNw2rNCLg8NOmbwRtJsherZcy1VZ62ZIIUfAYD0JJZJjbZI6jkU9HZjVQ3ImPi7
V6hXNtLmIbiND3UJMjMNpFuz+GeL0xS01CusITUTG8R1IxNeIOu+YpPD+8p4p4GA
hMP9sRbKdMhEAN7KhGpqRPie+9CDkzQNAHdChaCu8TF7mdUG+Q93L3watQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMH9ZjDGjN1hO51j/H39xzJeJVsHMB8GA1UdIwQY
MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt
ZjJiYjY5ZTc1ZTc0LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0
LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMC9fRs1
K10QE6BWSV2s4f114G6qYfOJIWV/1Mr+waWLqkgv+GMXijWMx70fwYlXLSkGmy3J
mLE/gd0W4klPd2cEQPy8s9HjHe5jgiHBkJXzPSTlvvVd0GKfNGzAMt0T2RLt9yZ/
peJXK7aItTUiwWz0mu5E92irW7/H4EHW1+E6VF1Rsz4qiCW72IuzKazaucm6qKEm
zefLdi7/PaXKf6uPflwQ0hiML/UzIfrdP9tOHGP7xC7wz64pUALoRMKD0Y9N0VIu
Akd9wR46uNZ9Vh5kLssLDU8mKyVndqPAr3zNkcZ7t28Fxz3TTW4d1/mRaokcH6CD
1a9gywphzL0nLA==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:46 2026 by rpki-client