This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
File:                     aYROE3TxxFgb-_etRjihEtMW--Q.mft (raw, json)
Hash identifier:          ryaFxLK2FIeqZCS5mWZjGN8qQBYWdCr6pQPFxzO0/nE=
Subject key identifier:   27:EE:D4:3C:35:CE:AC:52:CD:9E:5B:B8:E3:03:C2:3C:A3:56:1A:2A
Authority key identifier: 69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4
Certificate issuer:       /CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
Certificate serial:       019C0FA2CB90294A558D88C6C540E2322854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
Manifest number:          2F
Signing time:             Fri 30 Jan 2026 16:00:52 +0000
Manifest this update:     Fri 30 Jan 2026 16:00:52 +0000
Manifest next update:     Sat 31 Jan 2026 16:00:52 +0000
Files and hashes:         1: a2v9SOHMssdOBV5TIvYUulHSQ-A.roa (hash: ++gXD/wYDcY2Kck+wiBOMvJ9Vr196VDsB9uiIr+PufI=)
                          2: aYROE3TxxFgb-_etRjihEtMW--Q.crl (hash: lM4eHoe70sYjL0uQ0pxKhbHMJj2CfYg++ty3GGKkMG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:a2:cb:90:29:4a:55:8d:88:c6:c5:40:e2:32:28:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69844e1374f1c4581bfbf7ad4638a112d316fbe4
        Validity
            Not Before: Jan 30 16:00:52 2026 GMT
            Not After : Jan 31 16:00:52 2026 GMT
        Subject: CN=27eed43c35ceac52cd9e5bb8e303c23ca3561a2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:cd:49:b6:25:21:af:26:44:c9:30:44:f7:
                    f7:1e:f5:dd:7d:1f:76:fd:63:0a:51:59:d5:aa:37:
                    06:53:bf:19:80:dc:a1:36:07:b3:06:65:49:f5:a3:
                    f4:00:60:4c:12:37:3e:c4:8c:aa:34:0c:09:08:24:
                    94:10:e3:53:63:db:b9:e0:51:e2:ac:d8:ec:80:1f:
                    c3:d7:81:15:d5:6c:db:85:ff:5a:dc:50:94:6d:26:
                    25:5e:0e:1f:61:8f:a0:7a:db:b9:71:e5:f5:de:31:
                    31:8d:e0:8d:f4:2c:a5:3c:02:f1:21:63:77:83:9e:
                    85:77:ec:21:f1:6c:a8:65:b7:9a:1f:23:9b:d2:c7:
                    b0:b3:cc:4d:f1:b8:85:fb:21:fd:18:0d:84:0f:ba:
                    40:29:88:83:13:c7:ba:42:25:64:4c:33:6e:6d:03:
                    47:02:d1:b0:8c:6f:de:59:d7:b9:1b:9f:a6:a3:b7:
                    ad:da:c6:dd:ba:ff:c6:21:c0:6f:cf:96:48:6b:2d:
                    81:98:8b:aa:30:12:e8:6a:b8:14:52:c7:45:f8:a3:
                    e8:0b:06:63:df:0d:75:88:fb:c7:ee:a0:68:76:93:
                    ea:3e:f4:85:7a:4d:ae:f8:a9:25:53:cd:aa:07:77:
                    90:c5:f1:a8:ef:e4:08:bb:ee:8b:03:6f:84:d4:26:
                    a7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:EE:D4:3C:35:CE:AC:52:CD:9E:5B:B8:E3:03:C2:3C:A3:56:1A:2A
            X509v3 Authority Key Identifier:
                keyid:69:84:4E:13:74:F1:C4:58:1B:FB:F7:AD:46:38:A1:12:D3:16:FB:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYROE3TxxFgb-_etRjihEtMW--Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3d54b9-a763-4514-9467-8aaef76c2e98/1/aYROE3TxxFgb-_etRjihEtMW--Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:90:08:4e:6c:d2:44:a6:ec:e6:ab:01:ce:7d:5b:3b:35:ad:
         74:4f:9c:15:cd:c3:47:e9:37:03:da:59:b5:ac:0d:7e:6c:ff:
         33:6e:8b:2e:42:7b:c4:82:46:9c:e0:ab:74:44:a6:84:9d:0c:
         d2:e7:80:c5:0a:e7:4d:8f:dc:b9:27:ca:14:f8:83:a3:ad:78:
         ef:61:9e:47:eb:bd:a2:94:c9:76:f4:39:0e:c4:aa:f2:78:9d:
         04:bb:48:7f:5a:c6:87:d9:4b:01:a1:81:09:60:24:ee:b1:f3:
         49:bd:96:2f:95:90:8a:00:b9:2a:ff:6c:20:c5:9d:10:57:b1:
         9f:d3:32:d1:a3:10:7e:4a:a2:ed:97:b8:ae:ce:ad:53:b1:16:
         fc:f7:f4:11:a0:ad:c1:68:77:25:79:a6:79:64:27:b3:81:75:
         79:f9:7e:8c:6f:91:47:f0:aa:0c:26:8c:32:35:cf:2b:e0:31:
         f1:9b:3f:36:d1:14:a6:67:cd:ad:43:5c:af:15:f2:1f:75:54:
         fb:11:35:77:bc:f8:0d:0e:52:76:3c:00:b8:60:0b:b1:ac:46:
         62:0b:b6:49:c9:c6:21:24:86:25:63:51:2a:38:7b:fd:89:0b:
         82:af:2d:94:bf:79:ae:7b:bb:85:ea:c8:77:79:2a:1f:e9:29:
         2d:bf:c4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 19:34:29 2026 by rpki-client