This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
File:                     dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json)
Hash identifier:          w9DiJBlIO1kgVE+AesuBihvy+M37SR9ZtrsCDmX4ckc=
Subject key identifier:   67:8F:BF:52:4B:61:D8:A0:6C:99:08:90:C5:EE:FA:74:1D:0B:10:77
Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F
Certificate issuer:       /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
Certificate serial:       019BFB408A3C0334FB9C0F37950B784D6C8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
Manifest number:          102F
Signing time:             Mon 26 Jan 2026 17:01:09 +0000
Manifest this update:     Mon 26 Jan 2026 17:01:09 +0000
Manifest next update:     Tue 27 Jan 2026 17:01:09 +0000
Files and hashes:         1: 17ayZmNEJZqZL9fR72OT6qkcxjg.roa (hash: 7/2bDZui8dv75HjOV3Tw5e3oUnpjj3RxmUGlZrheZ/M=)
                          2: 3NOrjUUXoOBps7g76eT4cBgMn0c.roa (hash: XqkosB51AijOWz9MHvqZ12a9zCU3hBMKLZ1zDiSsIVU=)
                          3: 3tKmiO3AB99F4oo_sIAeCKAChbU.roa (hash: wGU6+rI5qSflyKTBPmryjTsvgXOgOM1GCVxGEevXa3U=)
                          4: 50L_y2Po6eEsoeGvry_taJvDBX0.roa (hash: mpYZCpfdMs5jqO05oZt8S0HlKiKU/E905LHVJxSXJok=)
                          5: 9ETxZG0VBRgBzZGB8Sjo_vrg63c.roa (hash: GyUu2wOQUFnrDKF0G67V204ZlO4p7Oj4uBl6X8D6ukM=)
                          6: Bf6zJAjVcnEbsggDOHSn-Adu8Rw.roa (hash: kJxtKQ0cIH7Fwj0H7soGA/9iLqSCTYHUXjbBG7ge8gY=)
                          7: Flj6e_40vv2hIMilXbTeMjaLJ9M.roa (hash: FFtPail5XJ1JID4imN53ILfVsmsWYjketJKtJLfX3Rw=)
                          8: GFN0Xfo0hQlgS0ud4l1upE2EzNg.roa (hash: y777qRGEhPwlWpAtzq0goRcn8bZ+BbeZhZ9OTAaKg5I=)
                          9: JEeGJlJzDZv7X5-PTEcchFlbpzM.roa (hash: 4jWqLUKBrgm7XTmYBRKBp3tw/IpbzhhcNF/Uo33+quQ=)
                          10: LyRifAfOL53Q_lOTFatmtsAvU8w.roa (hash: W/Nz1bHj+HEPoVEqjViZMxBGg1i0sa6Onp82zcQ8NAU=)
                          11: T9ukIpeE8FQqySiWWIvM8tmpTMI.roa (hash: ibkl+Urb1bu42K9P8KLmWW1X4v+Ewa8euGPZaFBg1oM=)
                          12: TJ4d2WYpIjH4mLA1Jef3zbs5h1w.roa (hash: bvpYF9UPs3HZjo44Cry+9B0U6H15yPL3VjfGpzCMqks=)
                          13: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: P+4WTrKjunj2pl4QlzJuGFFt3G6grIbOF4y6jkvLMqg=)
                          14: kKZw2NkvgOYIk1IkYRQ8k9C-eyo.roa (hash: 7bjk9DIjv1/p8D5/L/JVXvNXm2hIMbNO/Bknu6ms2kc=)
                          15: zxlNoz3rzQ3-dAnhy_jjif6hTJc.roa (hash: J8qFyCD+0ZUlnXfOJKaFx3pu76rmJ2d6yo1rgVv/jyk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:40:8a:3c:03:34:fb:9c:0f:37:95:0b:78:4d:6c:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f
        Validity
            Not Before: Jan 26 17:01:09 2026 GMT
            Not After : Jan 27 17:01:09 2026 GMT
        Subject: CN=678fbf524b61d8a06c990890c5eefa741d0b1077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:b8:a4:cd:d1:ed:4e:22:d1:83:7d:80:d1:
                    ec:30:43:b5:09:0d:6e:92:09:42:f0:9b:88:2d:68:
                    b8:87:52:40:98:5c:fa:88:9d:90:01:85:41:8a:18:
                    55:52:30:7b:cc:d1:ca:e7:89:9c:50:5a:8a:dd:0f:
                    4b:16:ac:94:4e:f3:2a:34:3e:0b:77:39:09:72:eb:
                    49:95:1b:bb:c7:7b:51:58:9d:53:ec:60:c2:24:47:
                    48:f0:28:78:5c:52:40:f0:b3:47:58:ec:b7:ad:d3:
                    5a:f0:c8:31:24:8f:2f:5d:72:0e:74:5a:5b:0e:0d:
                    c2:cd:ca:47:dc:21:38:b3:4f:1c:9b:90:99:02:43:
                    81:e8:22:d4:10:2c:a5:62:3c:e4:64:5b:d8:83:23:
                    8c:76:c5:5d:b1:fa:4c:8b:96:9f:44:89:2a:78:4a:
                    91:0d:42:b8:02:29:5b:d4:a2:8a:32:24:3e:17:20:
                    71:35:5a:47:a8:96:67:ac:52:c1:7e:d2:b2:9a:4e:
                    5a:64:0c:38:3f:62:c5:f5:19:5f:9c:e1:dc:ff:b0:
                    b5:84:02:d7:67:a8:e1:ba:06:1c:2a:e0:cd:1b:50:
                    ab:6a:a8:29:c1:a0:6b:e7:ae:56:de:0e:0f:aa:e4:
                    67:7c:a5:63:22:c3:98:7c:00:f8:b3:de:db:0c:91:
                    c9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8F:BF:52:4B:61:D8:A0:6C:99:08:90:C5:EE:FA:74:1D:0B:10:77
            X509v3 Authority Key Identifier:
                keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:9a:06:3f:d4:8d:ee:fc:a4:d7:c7:08:56:58:c7:8c:ee:3d:
         f2:1f:1b:40:41:69:90:af:86:cb:fa:7c:01:f8:e6:66:f6:94:
         04:1b:3d:57:83:dc:ed:2e:db:3c:4e:d7:b9:83:81:b1:26:e3:
         79:05:43:5d:d0:a7:de:2d:8c:9b:ac:f1:de:cf:fe:d4:18:d3:
         56:d3:9b:50:cf:41:87:80:b4:a1:79:39:46:af:03:cf:cf:b4:
         85:43:21:3b:60:71:c3:3f:ad:bb:99:26:57:83:15:5f:f3:00:
         88:e8:e1:0f:a9:28:a8:99:34:2f:d4:84:13:de:86:02:2a:7b:
         53:8d:da:bc:eb:b5:ea:d4:f0:b3:7c:3d:f4:88:79:9e:36:c7:
         14:55:b7:e7:4a:ac:cd:c3:44:75:72:c2:de:a9:3c:11:b5:15:
         64:26:07:97:fb:d8:dd:e2:46:20:4e:95:c5:f3:75:b5:9f:8f:
         ae:03:c2:ef:fa:4f:95:c7:74:01:e6:01:3f:c9:ad:ce:f8:9f:
         f7:8e:be:d5:48:7e:35:64:bd:68:28:fd:36:40:f2:76:63:1b:
         91:c1:a3:6e:52:c5:fe:0a:9e:3d:ed:3a:37:13:81:b2:f1:89:
         48:62:0c:7f:fc:2d:e8:76:5e:bf:a9:18:9f:7b:55:39:5f:ef:
         b1:bc:b9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 22:40:24 2026 by rpki-client