This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
File:                     LyoPogODMyo_QU8FR1OgtgsluhA.mft (raw, json)
Hash identifier:          lCKz81bEO23w0CTZao47pfHE2RpphnINc0QMSGqA/gY=
Subject key identifier:   5C:8B:91:AF:86:6F:DC:C0:0B:50:9E:35:18:BC:DE:E3:DE:57:CC:A5
Authority key identifier: 2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10
Certificate issuer:       /CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
Certificate serial:       019BFBE55084BC0F4CCC76D90E58A0B80BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
Manifest number:          0651
Signing time:             Mon 26 Jan 2026 20:01:08 +0000
Manifest this update:     Mon 26 Jan 2026 20:01:08 +0000
Manifest next update:     Tue 27 Jan 2026 20:01:08 +0000
Files and hashes:         1: 0Abp-bYUiWE_QxdZ2fNs8j59Nf4.roa (hash: SrWvblZEWYAuXRKCnqyBmsmlPWM8xw8kb2qoOLFHdLM=)
                          2: 1Hng-4SN4PI86v1GEbcmAeM6xJU.roa (hash: +50ocMM94WO0B6nE4/tB75wRw5Xe9Z+nhF9cbV6gDrk=)
                          3: 6QujOxzf4C6K0r-hHQOFn_yfCUI.roa (hash: VpztrU2iFQ8Ah/D8jT+xPTLG0sW08bpvg3e6MmJ6Zdg=)
                          4: CnGC1xBcS_Hw0l7OYLlFgmMRghM.roa (hash: yl/TzXvizjcQkXaqTrcqSMtt/sGUH2HO4v5PSOx89k0=)
                          5: DlvqEbHES6ltEIxiAXhjM2CW4ec.roa (hash: Mj5DDW92tIkxs3VmT9Gs5UYbHsVDvGDo2+Bxg89LMQg=)
                          6: E9M1Pbo6cojKNq6aCzRN9lYK2TI.roa (hash: 6xlPlwiU6/vgt77UfvKPKbZAHPmxOxzp9UBEFyHwp2U=)
                          7: IBVzEPC10N6US5KaErFSedKeI1Q.roa (hash: RU5umX0s3T/s0oLhPcgLEFjXt2aMHfj/aPPYStVkbnI=)
                          8: LyoPogODMyo_QU8FR1OgtgsluhA.crl (hash: AIMYOXSR2PUYr3tyPIeeTWf1ZAv+KqYmPWJ8Wi3klAU=)
                          9: OLmArH5IwWhE4X1-1oyWlt70SoU.roa (hash: qoAN1qHyDfHOZo1EmYKxtK2xB81mzjXDuLB7f175zdw=)
                          10: SX294m--1vDxMY6Pvv6-ci7dNJ4.roa (hash: bzsnnZDkBTJaiqPd5qwvFscE5qs3E0+zYHYP17Yj7CA=)
                          11: VNhF9CeN5jHWH1tX5Wl26BrCyHA.roa (hash: 2KghxCrjmwflH1r/P5I8hjxMykiOshc6jpUIIxBQRpo=)
                          12: j24Xn1OVDzmRc0YHejjOlzAmgRk.roa (hash: /5EdM1LEZ2tK4zjsCtxS9n3mfLKzazy5AKKxuUfX/Lk=)
                          13: oLV5SKfY-zjLqIyOW6zU-bz_SA4.roa (hash: w/7dM9IZeNCiZ2By+1jxyO/EjmzKRQDY0Hhm0lNI5M4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e5:50:84:bc:0f:4c:cc:76:d9:0e:58:a0:b8:0b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f2a0fa20383332a3f414f054753a0b60b25ba10
        Validity
            Not Before: Jan 26 20:01:08 2026 GMT
            Not After : Jan 27 20:01:08 2026 GMT
        Subject: CN=5c8b91af866fdcc00b509e3518bcdee3de57cca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:13:20:6f:33:35:37:7c:8e:9e:ed:40:e8:
                    a2:04:1f:c3:4a:1f:99:3a:e2:84:a2:4a:6e:b1:8b:
                    d5:5e:97:67:9d:1e:3d:81:2c:56:0f:86:9b:d0:02:
                    59:26:70:24:40:b9:53:ca:e1:a5:13:13:55:76:fa:
                    4e:f7:45:d9:43:28:18:82:69:db:cd:d7:e7:d5:3c:
                    a7:e9:de:99:5c:82:a3:e0:53:e7:c9:ba:7f:e2:3d:
                    ea:e2:c2:2b:d2:e6:f7:3f:6a:61:4d:fe:3b:de:09:
                    6a:f4:80:8c:b7:fc:d4:ab:48:64:7a:5d:55:fa:a7:
                    2e:5d:7b:be:9b:ff:06:ba:f0:01:b2:05:b8:ef:0e:
                    33:d3:e4:06:76:d0:16:ce:b1:c6:a1:96:be:ef:29:
                    13:af:f7:9b:6e:3a:36:91:b0:9d:4e:0b:96:d4:bd:
                    4d:40:56:72:e3:c5:d4:63:c4:9c:2a:a1:49:8d:3a:
                    13:35:70:03:71:88:c3:94:58:58:fa:df:c9:1d:3d:
                    c2:57:d7:de:db:13:1b:ab:47:c3:7b:cc:4f:37:15:
                    84:4a:99:7a:b6:58:30:9d:fc:2b:80:51:a8:44:bf:
                    f6:e5:70:df:51:eb:8d:68:40:64:0f:b8:28:a5:49:
                    84:9d:d2:76:e9:ba:1c:74:1a:d0:f9:ce:76:67:da:
                    cb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:8B:91:AF:86:6F:DC:C0:0B:50:9E:35:18:BC:DE:E3:DE:57:CC:A5
            X509v3 Authority Key Identifier:
                keyid:2F:2A:0F:A2:03:83:33:2A:3F:41:4F:05:47:53:A0:B6:0B:25:BA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyoPogODMyo_QU8FR1OgtgsluhA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d6d30b-0b9b-429e-8413-55a930fc0c71/1/LyoPogODMyo_QU8FR1OgtgsluhA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:49:fd:02:4c:27:54:d0:3c:65:11:cf:f3:1b:d3:0a:0c:ed:
         bc:65:f3:ad:77:da:32:95:b4:5e:56:81:32:19:8a:ba:96:3d:
         f8:78:36:a7:49:84:ac:60:02:25:cd:4b:f9:39:c1:15:bb:0a:
         8e:95:79:16:80:b6:b2:8f:3a:ca:36:47:d7:ba:6a:61:15:ec:
         1a:83:5d:c8:b1:9c:4c:1a:14:d8:29:37:a3:e8:71:2b:27:7f:
         ff:db:80:f1:9c:10:52:de:ee:1a:52:04:65:eb:d5:37:96:cd:
         de:90:aa:09:03:f2:43:44:4f:9f:93:3f:b6:31:66:56:71:6e:
         87:a0:8a:d0:a6:26:9a:69:6f:96:c8:55:af:40:63:18:88:1e:
         79:b5:f3:2a:9e:70:77:71:16:b0:20:8a:54:5f:c1:c0:ff:a1:
         05:40:f6:8d:19:bc:da:8f:e6:52:75:d1:6f:51:0a:9d:67:e5:
         2b:75:fe:d0:8c:3a:8b:b7:f6:46:92:96:cf:21:01:9e:11:ae:
         4d:e6:3c:ab:bf:de:ce:c2:e8:4c:6b:50:df:b0:98:da:35:e4:
         37:0f:35:c2:bc:82:65:bd:9a:52:ab:02:b8:83:79:e2:e7:80:
         eb:85:5c:b0:6a:2f:e1:a4:1c:5f:bc:27:43:14:fe:cc:16:e6:
         30:9c:96:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:46:26 2026 by rpki-client