This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
File:                     ArYQzUO6_O2RSA-r_cquggSfv3E.mft (raw, json)
Hash identifier:          DbVqiX86wD+GMicD1lhfwVFEfxTos4aB8if4mYuOjEA=
Subject key identifier:   6D:DC:8B:25:39:23:E5:04:BC:B0:B4:10:D3:85:B7:24:14:FD:62:2B
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Certificate issuer:       /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial:       019BA5A2D1B23D70B5E20B5466F405B5BD52
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
Manifest number:          17C9
Signing time:             Sat 10 Jan 2026 02:01:09 +0000
Manifest this update:     Sat 10 Jan 2026 02:01:09 +0000
Manifest next update:     Sun 11 Jan 2026 02:01:09 +0000
Files and hashes:         1: ArYQzUO6_O2RSA-r_cquggSfv3E.crl (hash: kFLwanYHAT13WT3xn/GNH2tOvCHAHXTZySlhVPxtXko=)
                          2: cX6Yew-a8YUF7vavg9BTxZRqe_4.roa (hash: 1ueNSCqqvjux7zZZsDYjg0VzkKE8OG5bTf0iOqV0bxA=)
                          3: dLEe-hpFpK3PFRGM9YsgzqZnVVw.roa (hash: A8Gw34BWQlcPCQ8+pvbsJ7XROVKk5nyiB7eyYgFiR4g=)
                          4: io2mF3E9gfP7892mcQBySWcc0wI.roa (hash: s9fn90wE9W/HoEf/IkcbrFOIhL596v/QWK9di592Y8w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 21:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a5:a2:d1:b2:3d:70:b5:e2:0b:54:66:f4:05:b5:bd:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
        Validity
            Not Before: Jan 10 02:01:09 2026 GMT
            Not After : Jan 11 02:01:09 2026 GMT
        Subject: CN=6ddc8b253923e504bcb0b410d385b72414fd622b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:48:c8:59:8f:b0:fa:ea:1e:b1:de:58:c2:3b:
                    69:df:35:f6:f1:a3:c4:b3:d4:98:63:91:0c:07:0c:
                    3e:bc:16:f5:77:1d:fb:33:ea:95:0d:03:9e:aa:31:
                    44:a4:a4:6e:dd:c8:41:f4:76:8d:5d:4b:78:e0:5a:
                    75:b2:08:3b:56:1e:34:df:38:ba:76:72:08:b1:35:
                    4c:5c:b2:35:fa:22:e4:c3:98:94:0c:ff:9a:fb:27:
                    6a:c1:fc:40:78:e1:99:5f:21:7d:f5:c9:6a:37:3b:
                    3b:83:a6:59:b2:9a:75:50:1a:80:70:50:79:29:e4:
                    6b:4f:ef:6a:16:a8:6a:e7:1c:98:1c:cf:eb:14:3f:
                    54:85:df:6d:34:65:76:f5:b7:a3:3a:31:c1:58:66:
                    36:56:2b:b2:73:1d:86:0f:41:ee:07:ed:28:6b:6b:
                    af:46:aa:56:c3:b1:f6:73:3b:88:44:98:6c:d7:d5:
                    06:81:ec:64:49:98:c5:48:c0:07:b6:67:6f:5d:63:
                    ea:65:ae:80:53:c5:a2:86:80:f2:9f:dd:bc:84:ff:
                    d0:4f:e9:a0:3b:0b:15:0e:eb:07:0a:78:5f:e8:87:
                    57:f9:02:fb:1f:1b:99:17:c6:b2:c5:40:3e:0d:2e:
                    71:94:7c:c5:b2:92:c2:09:f2:71:9a:a1:4f:63:d9:
                    32:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:DC:8B:25:39:23:E5:04:BC:B0:B4:10:D3:85:B7:24:14:FD:62:2B
            X509v3 Authority Key Identifier:
                keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6d:3d:db:1f:ee:38:6d:96:06:df:64:49:10:7a:2e:6c:09:
         62:3a:88:7c:21:b5:6f:35:4c:9d:67:19:d1:1c:cc:e4:21:3f:
         d3:07:cd:0d:4e:0f:5b:2b:9e:c2:f5:7f:4d:ee:e1:05:94:ba:
         85:9f:67:69:0c:b1:df:71:54:8f:8c:67:b9:62:bf:99:ad:8d:
         bc:5a:16:e1:7f:a0:37:9e:8f:14:f6:19:a9:8d:6d:19:b5:9b:
         86:8d:98:d7:c4:a4:f8:d4:82:65:57:05:b2:6d:80:f2:92:8c:
         05:36:97:b1:37:af:8c:db:be:85:d7:b1:ab:4f:68:ad:96:fd:
         fd:0b:33:84:98:65:e9:36:b1:86:7a:ec:b1:63:bc:24:e0:52:
         aa:12:1d:89:61:fa:12:7c:d6:72:e8:ee:1b:30:60:81:02:c9:
         8a:01:25:d4:e3:9a:a7:ac:39:ce:76:3a:ca:0f:f0:09:ee:08:
         57:97:0a:4d:ac:97:c3:29:01:b5:02:33:8b:55:3c:c6:a9:6c:
         5e:fb:3f:6b:24:99:1c:39:b3:10:87:bd:a6:20:04:5a:b8:ce:
         69:4a:86:fe:be:c1:5a:8a:0b:fe:cd:78:42:1f:ad:f0:7f:59:
         67:9d:06:bf:a9:36:8b:b7:ec:9c:47:67:67:9e:85:9d:b3:4e:
         f4:05:81:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 06:55:57 2026 by rpki-client