This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
File:                     RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft (raw, json)
Hash identifier:          mNDunmylNyNRqyj/wUQPuQzdEKEux9hBElRfBmVem9c=
Subject key identifier:   EA:7A:36:75:C4:C8:75:21:02:27:3C:58:8A:3B:7B:AF:98:19:B0:61
Authority key identifier: 45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA
Certificate issuer:       /CN=45d58323e7d4f91c37297cd1926566033b3f8aba
Certificate serial:       019BFE0A2084D1705273571CE323C8071D56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
Manifest number:          06DB
Signing time:             Tue 27 Jan 2026 06:00:35 +0000
Manifest this update:     Tue 27 Jan 2026 06:00:35 +0000
Manifest next update:     Wed 28 Jan 2026 06:00:35 +0000
Files and hashes:         1: RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl (hash: gb5g2pQHriyZehY6eNVm71FESm5h+r/ZWvLZ0PqdYhA=)
                          2: lJ9R5Dh_kyvQTqID5Ptu3Jzlprg.roa (hash: GdaCvKcF3hhpCqRpHUMph71fNwvXQ4kAIUixuBm8+iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:20:84:d1:70:52:73:57:1c:e3:23:c8:07:1d:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45d58323e7d4f91c37297cd1926566033b3f8aba
        Validity
            Not Before: Jan 27 06:00:35 2026 GMT
            Not After : Jan 28 06:00:35 2026 GMT
        Subject: CN=ea7a3675c4c8752102273c588a3b7baf9819b061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:56:b9:f6:51:8a:81:19:27:ee:02:62:52:
                    99:35:09:59:e2:10:f3:7e:fa:d0:fa:2f:b3:b4:eb:
                    99:ce:26:ef:c5:3a:6a:a9:e1:90:66:47:c4:70:79:
                    1b:ba:c8:85:69:c3:c7:82:36:01:6b:82:e3:49:50:
                    68:56:42:ac:76:37:fd:29:a8:7d:92:e7:2d:58:60:
                    60:d7:fe:34:4b:00:01:df:bb:03:ec:45:e3:5a:fd:
                    49:26:24:ba:16:5d:0f:fa:76:9f:2a:2e:36:58:21:
                    93:42:04:11:c0:ce:bc:fa:2e:61:64:db:73:58:26:
                    3e:be:aa:83:68:71:9b:32:00:ff:cd:f8:8e:ab:e5:
                    8f:41:1d:06:18:f6:a7:a9:9f:ae:9e:a3:37:b4:f9:
                    21:3e:de:b2:03:7e:13:8f:71:de:90:03:20:3f:f4:
                    6c:3c:be:86:25:f1:15:97:16:18:9c:4e:18:6c:89:
                    3a:d7:8f:57:6c:81:6e:d9:a3:c5:57:97:2a:fd:9f:
                    f4:02:8b:5e:eb:ac:13:6b:f7:ad:12:02:2d:f4:a7:
                    0b:7a:4f:78:c7:0e:9d:3e:da:18:ea:86:cf:3a:12:
                    92:1e:cd:46:85:86:05:15:4a:46:1c:8c:f0:98:57:
                    31:f6:0b:b6:64:8f:63:9f:c6:0d:32:3f:96:89:89:
                    8a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:7A:36:75:C4:C8:75:21:02:27:3C:58:8A:3B:7B:AF:98:19:B0:61
            X509v3 Authority Key Identifier:
                keyid:45:D5:83:23:E7:D4:F9:1C:37:29:7C:D1:92:65:66:03:3B:3F:8A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RdWDI-fU-Rw3KXzRkmVmAzs_iro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ec2833-bb0f-4924-8517-f3df6177a2bb/1/RdWDI-fU-Rw3KXzRkmVmAzs_iro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:14:96:9c:14:bb:db:ea:34:3c:77:14:30:36:65:e3:d3:15:
         90:1d:52:72:6a:9d:63:c9:03:ae:1c:39:44:af:4b:86:b7:e9:
         64:70:d6:04:c9:a5:db:ce:eb:a4:01:c3:ff:15:b5:d2:f1:f3:
         92:8b:4d:71:20:6c:53:35:cc:47:3c:df:98:aa:00:ed:23:22:
         b9:10:04:a8:87:65:6b:3b:8d:26:84:77:3a:6e:9e:92:6c:54:
         26:09:87:58:35:4e:57:03:0b:6a:91:bf:54:17:57:d4:44:84:
         76:b3:cd:77:ec:74:12:ab:9d:06:5b:c1:d8:a2:17:b2:84:23:
         c6:77:75:9d:11:64:4c:08:59:02:79:85:44:d5:3b:dd:f4:72:
         2d:d5:3a:c2:82:ff:36:74:86:6e:3b:15:87:2d:ca:b7:d6:19:
         79:49:73:95:f1:a8:0e:30:71:df:13:89:44:1d:5a:07:71:2a:
         07:e9:70:09:b1:0c:38:d2:e4:2e:10:b4:56:27:af:fa:31:9c:
         24:7b:b6:b2:66:43:87:ee:a1:98:9d:ab:86:ef:3e:94:4e:69:
         06:ca:1d:94:1c:82:2f:93:03:c0:67:3c:95:7a:d3:8f:5e:b8:
         08:29:24:7d:1d:28:9d:e0:f6:df:10:5e:ac:c1:13:f4:7c:1d:
         e3:e0:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:33:04 2026 by rpki-client