This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
File:                     dzalyFoI2AdJBBy5z6UX-31Ym6g.mft (raw, json)
Hash identifier:          59t8phOvzGJ5c+4zkAFEFjxwhfZnO8UVPY0X0rmVswo=
Subject key identifier:   5A:C2:5B:8B:BF:14:3A:E4:30:70:BA:A4:CA:CF:25:24:66:07:BF:BE
Authority key identifier: 77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8
Certificate issuer:       /CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
Certificate serial:       019C24736849A2C0C4B51A43353F42AD350C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
Manifest number:          180A
Signing time:             Tue 03 Feb 2026 17:01:08 +0000
Manifest this update:     Tue 03 Feb 2026 17:01:08 +0000
Manifest next update:     Wed 04 Feb 2026 17:01:08 +0000
Files and hashes:         1: F-CmXISe8_wy3eRoL0KRLsrxsXE.roa (hash: UCcyvZA9JM0sa9RbXSB/RJ7CyrNNZcFxjhxeu1LfJcA=)
                          2: FXk_8rHDZW44wqBAzw47VRvUwgY.roa (hash: ppp2g2xygFhlcOiu9iawm3EuDNyOEJ3cb42rhtyx3aI=)
                          3: PAja4hjsJ8MQANg3sK1YfTlvaJQ.roa (hash: FIbqd2XK2BTIGA9oFREaVlM92WRa45cXlUCU71SKJfk=)
                          4: dzalyFoI2AdJBBy5z6UX-31Ym6g.crl (hash: jjlusntshTo4rw/SfY0gVohPPe90v1G/b9ynp2ADTMI=)
                          5: gYsdgAs4KIaJroqJZMhZmwRNn38.roa (hash: t90AwEAZ729TPglZyxHbnIWUY3pMyQTtaWuzn+iV9DQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 17:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:73:68:49:a2:c0:c4:b5:1a:43:35:3f:42:ad:35:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7736a5c85a08d80749041cb9cfa517fb7d589ba8
        Validity
            Not Before: Feb  3 17:01:08 2026 GMT
            Not After : Feb  4 17:01:08 2026 GMT
        Subject: CN=5ac25b8bbf143ae43070baa4cacf25246607bfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:c9:c3:a6:f2:3d:3a:2b:0c:de:13:3b:14:
                    8d:20:cc:7b:33:a9:6f:a3:ea:f9:da:6f:26:46:53:
                    8a:f3:a4:00:9e:4e:4d:30:6e:dd:8e:4b:8b:ae:35:
                    83:c0:ab:bc:06:db:e9:46:2a:db:4f:7f:4e:38:83:
                    13:1f:74:ab:ce:3e:54:0b:be:36:52:e5:cc:4d:27:
                    24:e6:08:e9:7e:c6:b3:9a:60:81:51:d8:20:43:2a:
                    01:28:81:14:11:38:6b:cc:08:39:3d:7f:6c:7b:8f:
                    a7:1c:31:ec:ba:86:cd:f6:13:45:aa:06:55:4b:72:
                    40:e6:f1:a9:02:3b:ee:fc:9b:c5:a8:dd:16:4d:91:
                    46:fa:9d:6c:ab:ad:ff:e9:c9:7a:f8:be:d2:45:e9:
                    66:e6:d5:3b:16:55:55:b5:4c:54:19:50:c7:ec:9f:
                    13:2c:81:a0:03:41:d9:17:e9:7e:ef:70:7c:03:7d:
                    42:1f:c4:98:ef:2e:77:42:0c:2b:f0:92:0c:78:c4:
                    0c:11:ce:0a:27:49:c5:54:fb:62:38:d2:e9:d9:47:
                    fe:a8:ec:6d:9d:49:b4:6f:c9:0d:8f:c9:28:d8:82:
                    4b:92:c0:7e:8a:58:e1:52:2f:5e:28:a1:08:88:9e:
                    e0:9c:b2:c1:ef:73:a5:6d:a1:ca:83:d3:30:41:23:
                    89:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C2:5B:8B:BF:14:3A:E4:30:70:BA:A4:CA:CF:25:24:66:07:BF:BE
            X509v3 Authority Key Identifier:
                keyid:77:36:A5:C8:5A:08:D8:07:49:04:1C:B9:CF:A5:17:FB:7D:58:9B:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzalyFoI2AdJBBy5z6UX-31Ym6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da289-abec-49f5-a759-cf1f4c7c9222/1/dzalyFoI2AdJBBy5z6UX-31Ym6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:5c:21:0a:f5:d1:28:4b:dd:54:4b:57:f4:80:f9:1e:82:f4:
         78:c9:8f:08:ae:1d:57:8f:af:f0:2c:90:2e:00:5d:74:cc:fd:
         54:c4:9e:48:3e:3c:75:2d:e1:4c:99:0f:3e:8f:8c:a6:be:16:
         fc:19:68:2e:6e:af:75:13:30:9b:b4:b7:0c:3a:81:2a:1e:a1:
         6f:74:58:0a:ab:9a:49:e4:cc:e7:fc:71:e1:02:6a:ed:81:84:
         76:38:57:d2:9e:2f:8b:e9:4b:75:84:80:61:39:57:6b:d6:d6:
         57:1d:89:fd:c5:57:c1:b7:67:1e:a7:8e:bf:22:08:cc:c7:da:
         60:c1:fd:d9:f8:90:27:52:4d:91:ae:f9:13:eb:b0:c5:08:65:
         2c:b1:5f:f3:51:a7:ff:f9:8c:6d:97:64:88:47:cd:32:87:b9:
         02:5c:17:00:5c:19:d2:0e:20:86:2e:f8:de:a8:45:76:5a:30:
         07:0a:ef:af:e0:f6:3f:be:1f:c6:98:68:23:fa:fe:d0:4c:98:
         f5:72:5b:47:1e:c6:48:94:8e:52:1f:05:3e:8a:40:a7:ad:54:
         66:1a:57:4e:a9:4b:24:01:ad:a2:f0:ef:31:de:76:3c:15:34:
         23:72:00:c4:70:0d:8f:59:17:8b:36:1f:af:60:d2:65:93:31:
         2d:9f:bf:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:18:37 2026 by rpki-client