This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          m379dqGEG0JTkxL0T33/tGZKDGQGSShcMfmUOF1qy+I=
Subject key identifier:   91:05:CC:15:29:4B:C6:D8:0B:AD:B4:D6:16:4C:EB:F0:46:5B:02:B8
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       019BF95209E92BE828DF61570A2FC49B3565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          181B
Signing time:             Mon 26 Jan 2026 08:01:01 +0000
Manifest this update:     Mon 26 Jan 2026 08:01:01 +0000
Manifest next update:     Tue 27 Jan 2026 08:01:01 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: ZjEANQzXWKDdD3jlvwYsQR42TKa6x7GeiBvrh69tz+E=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:52:09:e9:2b:e8:28:df:61:57:0a:2f:c4:9b:35:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Jan 26 08:01:01 2026 GMT
            Not After : Jan 27 08:01:01 2026 GMT
        Subject: CN=9105cc15294bc6d80badb4d6164cebf0465b02b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d4:f1:68:3d:09:be:e4:e1:66:82:60:de:b4:
                    13:93:c7:31:c1:a8:2d:8b:35:dc:f6:ba:95:01:dd:
                    39:96:60:23:c2:17:7d:b5:2e:0b:1a:b8:45:ad:14:
                    ee:da:de:38:d6:f2:23:87:df:ef:d9:fc:a0:1e:13:
                    23:e4:3d:c4:e0:27:32:8a:83:39:78:8c:1b:bb:5d:
                    e0:d3:ad:48:5e:39:9c:c1:d4:e8:b2:03:9c:8f:44:
                    ee:19:56:fd:5b:b3:4a:f1:80:16:eb:c1:95:5d:6c:
                    92:24:a6:19:07:f8:0e:c9:d5:ba:ef:9f:e2:df:ab:
                    c4:33:2f:c4:b8:b4:cc:0e:83:74:ea:ed:89:38:54:
                    df:b1:14:58:b0:e8:2d:54:92:2b:1c:8b:7f:4f:69:
                    6b:18:27:8a:f0:35:a0:74:9f:d8:53:a1:97:f9:24:
                    1d:b8:d0:08:86:eb:b2:c0:0f:3e:3f:10:00:bc:91:
                    d2:f1:d1:b5:56:0a:04:2d:d5:e1:c1:01:92:00:9c:
                    6c:d8:dc:b4:fc:73:fb:7a:75:d4:14:fe:db:05:e1:
                    ce:98:d8:87:e0:1c:f8:64:5f:b7:df:68:b6:8a:08:
                    58:4b:dd:39:64:55:95:ad:62:16:9b:a7:fb:9d:04:
                    53:68:6e:75:93:a6:ec:0b:cb:3d:7a:e4:a0:28:e5:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:05:CC:15:29:4B:C6:D8:0B:AD:B4:D6:16:4C:EB:F0:46:5B:02:B8
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:94:22:ae:8b:fd:96:3a:de:bb:69:3e:25:cb:c8:25:b5:62:
         eb:e3:57:8d:fd:0c:f0:ed:9c:9e:6d:49:5f:ee:a3:ab:29:c0:
         12:9b:28:77:8d:1b:33:84:3c:28:8f:e4:fe:35:e5:77:0d:90:
         45:2d:40:a2:3d:91:5d:0b:f6:b9:d3:88:19:c6:6f:6a:f8:d9:
         e5:0b:48:f0:72:07:2b:cd:a6:76:87:cc:36:56:d1:a9:72:e2:
         68:fe:1e:1f:0b:04:21:85:eb:0a:63:15:fe:60:cb:a1:f6:c8:
         94:b7:0b:23:98:97:b1:b6:4a:2c:56:80:98:9a:e0:c5:7b:87:
         7d:7e:95:f2:e3:a0:35:5f:23:92:14:e9:d0:3c:2f:fd:3e:7a:
         bd:c6:a3:23:07:02:dc:69:64:60:db:75:17:65:82:dd:b3:dd:
         1f:b9:f2:7e:9d:11:19:49:c4:12:92:02:70:04:d0:5a:95:da:
         a4:9c:c5:19:12:42:55:0d:32:ef:a1:23:cd:f3:36:85:3a:0e:
         9a:58:f5:81:d4:b0:bf:01:e2:3a:41:80:18:f2:7c:1b:08:38:
         88:d9:15:05:44:d1:dd:3d:b2:2f:35:66:a9:a4:9f:6c:ff:29:
         20:73:30:93:9b:9e:f6:08:ca:c1:6f:4d:12:16:af:3b:e3:b5:
         fa:d1:9d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 15:39:58 2026 by rpki-client