This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File:                     akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier:          ERbYxdgoTh4GfjUCsX3Xe16KqAPsWmiLlw1lqunQnk0=
Subject key identifier:   45:AB:50:23:93:52:14:B6:30:EA:7B:5E:E0:B6:FA:20:99:C5:A6:C4
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer:       /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial:       019BFD65875620B196A737553416549B5728
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number:          1805
Signing time:             Tue 27 Jan 2026 03:00:47 +0000
Manifest this update:     Tue 27 Jan 2026 03:00:47 +0000
Manifest next update:     Wed 28 Jan 2026 03:00:47 +0000
Files and hashes:         1: YMR3GJbdXql7Jsh3dxWjcUeP48Y.roa (hash: gHL07vUFK2CcIqukSRDsmHNwBcuxDAA0OST3BzCeGt0=)
                          2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: vpXYecRN0JMEUuAp2eclXciFttiaky1aar9AYRPqO0M=)
                          3: uYoTXFQQP3pJz7Mg1yRumrwJMY4.roa (hash: NKUUkF68wcAdT8G2mdJxZKykA/h3XcBsr6zGW1P8l6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 03:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:65:87:56:20:b1:96:a7:37:55:34:16:54:9b:57:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
        Validity
            Not Before: Jan 27 03:00:47 2026 GMT
            Not After : Jan 28 03:00:47 2026 GMT
        Subject: CN=45ab5023935214b630ea7b5ee0b6fa2099c5a6c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:6d:3c:bf:d5:6f:8e:99:3c:03:21:e0:19:55:
                    52:80:9e:d2:39:2c:c4:20:55:3f:6f:d8:88:25:72:
                    19:c9:21:99:bc:7a:ab:bc:17:2b:88:c0:c3:5f:24:
                    93:ff:e1:15:29:7f:e2:8d:f0:44:50:64:62:c9:7d:
                    23:ba:49:ce:2b:55:92:c2:60:f7:c1:87:18:58:3a:
                    a0:12:f7:2c:9c:c6:0d:e8:29:2d:59:80:db:ae:55:
                    c8:31:64:3e:62:ca:01:26:4c:b9:95:8c:5b:df:0b:
                    5f:3f:c4:d5:35:27:d6:5e:11:db:68:1e:ec:61:0c:
                    0d:23:d3:1d:8e:d4:69:de:d3:de:79:1f:31:d3:7a:
                    34:56:77:ac:96:a3:25:91:2e:ee:6e:7c:7f:53:ea:
                    03:cb:46:6c:f6:78:6a:a8:1a:bb:d8:b7:88:d3:49:
                    44:ec:3f:62:17:46:6e:59:ec:a0:1f:ec:70:d6:ff:
                    68:43:09:17:0e:01:72:84:25:1d:8a:49:8d:d9:91:
                    6e:71:d9:2c:06:57:cd:2d:ab:7a:be:df:ab:91:e6:
                    32:f9:7f:8a:6e:74:75:04:67:6d:43:1a:76:e1:46:
                    a5:55:c8:53:61:4d:28:9d:e3:20:bb:0a:95:a8:5d:
                    5a:c1:36:47:c8:0b:0c:0b:9d:50:a6:59:6c:ca:31:
                    45:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AB:50:23:93:52:14:B6:30:EA:7B:5E:E0:B6:FA:20:99:C5:A6:C4
            X509v3 Authority Key Identifier:
                keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:03:64:6e:e8:e0:3d:d2:cf:ca:c6:e5:24:d5:5d:bd:b0:e1:
         d7:b9:f2:2b:0d:c1:42:23:73:47:3d:83:d6:71:ef:ac:46:18:
         5a:94:56:43:be:5e:b8:aa:a3:a0:0e:81:3c:c8:2c:da:30:4e:
         80:79:31:17:61:0b:15:b2:f6:07:a7:66:83:60:59:f1:58:9c:
         7a:7f:af:d7:36:20:a0:f8:66:d2:ae:79:5e:dd:44:a3:d2:01:
         7e:3c:b6:2c:c4:e5:68:e8:99:b9:10:b6:38:a1:a0:8e:bf:7f:
         2b:75:8c:db:46:5a:c6:f9:74:b5:e8:eb:e5:df:98:ff:73:54:
         40:ed:0d:30:c9:c1:33:44:0c:3b:18:6f:d2:46:3b:9f:81:54:
         c6:5b:29:32:4b:64:b8:c2:49:ce:f4:f3:a5:e8:35:9e:00:b0:
         de:1e:38:b0:42:2f:51:cd:89:03:cd:a2:78:e8:96:fd:0e:93:
         30:aa:89:b4:19:a8:a1:c2:4d:18:3c:22:42:de:43:22:bf:4e:
         1e:82:8e:f0:7d:51:17:0f:37:68:e6:d4:7d:f6:5f:28:5c:ab:
         53:71:ef:08:1c:6d:a4:05:81:95:91:ae:3f:fa:d3:fd:4f:f1:
         58:ca:c7:b7:60:a1:e5:53:0f:a1:07:5b:1f:28:74:49:7e:c8:
         dc:c5:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:24:29 2026 by rpki-client