This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
File:                     p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft (raw, json)
Hash identifier:          PJpiG0+X+4EuckYEFqYP7IPaV0HbazDQ8P0gAEBInFI=
Subject key identifier:   AA:7E:CF:78:58:66:86:24:FE:E1:8D:3F:D6:A7:A4:43:21:97:9E:24
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Certificate issuer:       /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial:       019C1F83E3DB44058A0FE5C056E360D068EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
Manifest number:          181D
Signing time:             Mon 02 Feb 2026 18:01:03 +0000
Manifest this update:     Mon 02 Feb 2026 18:01:03 +0000
Manifest next update:     Tue 03 Feb 2026 18:01:03 +0000
Files and hashes:         1: 0dMJhsxjgnbAU5WFa10AoRaFilA.roa (hash: NPvcwvLEK2kbpEIl+DIrK18I+jAsrx0zSuGH2P9GkC8=)
                          2: 4KJ_GXRCZJ3i3re64jPbmY6CJmw.roa (hash: 6+nSknm5d3GJFxravLBFWrmCmG8ueiV1lwzdyLMLzvU=)
                          3: 4lIeViGYyAArH6xFgAXuF1KY8oo.roa (hash: 3sNxRj68ViMu808j4OAwb7vp2hEV9aYGZZ0Iae+xOYY=)
                          4: 6B2lYvT2dR81hzkQQELDn_duJcs.roa (hash: iYcBuEVmeXmfUIJkWbTRCIrfpwO2+UiKD6lHoQfEoI8=)
                          5: 8JeUl0gwKBaZ43vH7iblm5PR0rs.roa (hash: 1jsQ41jOwm0SLnU0Qv592bRuhGGbd2WMpr/SEYaEF9o=)
                          6: AxjWYbGGpT5pCJ414siHagIrYv0.roa (hash: Les+tBn+kJ+j2Lvoi/D4UE+2fwFt8YnrHjntjr+jnck=)
                          7: P7tnseevFfgmSuKuIWR7T1-giX0.roa (hash: ojvJdnjtgDrfvRMQCYPhOeHhRoL/uCyx9OSh7NhorVA=)
                          8: WlvzyTdODs1w5g16wAD9se0N5yc.roa (hash: ktIjwIA9pXx7a9RtBAHAvE+KFHxUcF6PaLm5AvCzXO4=)
                          9: X-pw--7v-eVKOMCYhEoBqMvv5i0.roa (hash: IUeZVsSUCXBqLM3lYzGREGoTqzMuBKPxlh2jySadCOY=)
                          10: ZYdv2S3m7eXPESVok8yxYTapz-4.roa (hash: hWVgkj4Hxb1fm9VqiSs0akAtvRlafZPuNGm7c0XMuPM=)
                          11: c4gKUGJIMgEyuId7ul08tWyPN-I.roa (hash: chucr3d4TvCMayMn3vPGpeF00MZgFV7fyC/x5QhhCZQ=)
                          12: mlVDqzsr0onFPunz8cRb0CxctTw.roa (hash: FmoWfiTgv6hVPqkJlMC8O0NyKtvBDx0DatsEpxV/8NY=)
                          13: p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl (hash: BIqVlXjiO+2FM0mGCVa4viHowiLK4qWPgGqQoI30vMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 15:35:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1f:83:e3:db:44:05:8a:0f:e5:c0:56:e3:60:d0:68:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
        Validity
            Not Before: Feb  2 18:01:03 2026 GMT
            Not After : Feb  3 18:01:03 2026 GMT
        Subject: CN=aa7ecf7858668624fee18d3fd6a7a44321979e24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:ba:03:06:e3:39:12:2d:43:20:e8:fd:0c:
                    6e:6e:f6:45:40:3f:2d:59:1c:8b:25:7c:1f:f3:e6:
                    86:85:1d:cd:7f:6c:55:97:90:b2:bc:ee:59:7e:98:
                    d7:1f:8b:06:ce:8f:99:21:67:d7:78:1a:4d:b7:6c:
                    68:db:a0:07:1c:8c:69:4e:0f:af:2f:0e:22:c6:17:
                    7b:40:53:54:89:9d:53:28:85:e0:89:d0:cb:21:da:
                    23:1b:52:dd:ef:a0:68:3a:8a:3a:25:b7:61:97:87:
                    fb:9c:63:1d:5a:48:d0:38:7d:be:29:ff:b7:a0:11:
                    d6:b9:8a:59:d3:68:2e:ba:b5:63:c9:56:4f:53:f8:
                    55:46:38:00:b5:33:19:4f:58:cc:7c:9e:fd:a6:41:
                    ac:02:6a:67:7e:fa:79:36:ac:d0:71:a3:42:4a:4e:
                    42:59:64:90:b3:aa:a8:09:a6:63:9e:9b:b4:f6:a2:
                    fa:5b:1d:45:13:34:18:9a:65:ab:ca:a8:24:a4:aa:
                    79:e0:ad:a9:6c:0f:2d:4a:15:8d:bf:fc:0d:49:ad:
                    fd:53:02:0a:80:e1:7d:71:eb:3a:b4:aa:67:0b:63:
                    bb:09:a6:58:3d:48:7e:36:14:ab:05:85:aa:76:45:
                    82:06:8a:33:0d:fb:7c:a7:80:0e:3f:64:74:8c:93:
                    43:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7E:CF:78:58:66:86:24:FE:E1:8D:3F:D6:A7:A4:43:21:97:9E:24
            X509v3 Authority Key Identifier:
                keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:48:c5:14:8a:1b:96:88:a6:77:47:d0:a4:1c:ab:37:f6:3b:
         f0:94:ea:fc:4b:bc:ff:6f:ff:c3:b6:c8:2d:86:1a:c1:68:7d:
         74:f5:35:ce:6e:7d:d4:ef:03:60:d4:99:9f:f9:34:87:35:b4:
         a7:3e:1a:04:72:6e:8f:18:38:42:f8:ca:6a:6d:0c:a7:9a:5d:
         00:1c:fe:bc:ef:01:da:c7:0a:b0:04:bf:a8:33:88:8a:aa:7e:
         c6:e9:4a:e6:85:bb:8e:5c:d4:a0:21:3d:aa:2d:f6:13:61:d3:
         14:84:0f:94:6f:24:e7:de:ef:4e:00:a0:54:da:fe:81:43:7b:
         8f:74:48:21:76:78:5c:2e:c4:e1:41:6d:1e:ed:a2:78:60:c4:
         42:e3:89:06:6c:9a:5a:d3:e1:3b:e8:dd:5a:f3:8c:8b:b0:ad:
         7e:31:2c:9d:54:a8:1f:31:d5:0b:85:00:4c:9b:2a:7a:e1:42:
         89:a8:be:ee:b3:b3:0c:7e:19:73:26:5d:09:d4:62:8f:7e:ed:
         85:52:4c:fe:4f:41:b9:5d:58:55:8a:f0:14:0f:b8:83:9a:1b:
         fe:69:18:90:aa:f1:9e:04:07:e9:65:8a:1a:ca:88:44:48:52:
         5a:19:c8:be:3f:c9:b9:b2:6a:5e:51:93:d8:5a:53:ec:5a:3f:
         8e:a6:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 3 01:52:44 2026 by rpki-client