This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
File:                     Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft (raw, json)
Hash identifier:          FYnktbPSH2YDZbHh/V4o1KbRg3ygB+WjpA2xx4oYgbs=
Subject key identifier:   6A:E8:1D:B0:65:BE:D5:ED:20:44:E4:23:F0:2C:E9:21:4C:70:E2:D2
Authority key identifier: 0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13
Certificate issuer:       /CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
Certificate serial:       019BFA2DFE84F9DBFC0858A617DF43431589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
Manifest number:          1529
Signing time:             Mon 26 Jan 2026 12:01:16 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:16 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:16 +0000
Files and hashes:         1: 2fl4t7q00Z6Vf4-8yhmMEGkbkiA.roa (hash: hkD6ASs7Qj8pLvO0tARjKy3xlVzhv6xHuOxacyAQkNc=)
                          2: 39hneJOhhgQ3tuCJz5rk0Hahg8Q.roa (hash: 3hQnINDrkdh7j9/KioGKynE1ZZ9IVPMy4iOK1ZGZOvM=)
                          3: Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl (hash: hOsElOPUemMkjLKOmMmHa/1wig3C1f/4V10gCyhdabU=)
                          4: TBdPhr50EUWrOG4GNVNBnUdPRGs.roa (hash: OrQHqVNd59KyfREnmA/6Kz47GDMJkfTFfl+MAkyu4bg=)
                          5: s1fRzoLSNvV_vSYF8FK7qpyreHQ.roa (hash: L6hjH+xxHxV60LTIVIU/YS2Mb7ljdN9j8bKUQEJGgyQ=)
                          6: xlQewOWzzq7LozcT0cqTKn8iurY.roa (hash: muPAFPV5l9xlSoAgXyUhUa/d3koV/HrFw13eI9fUzHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2d:fe:84:f9:db:fc:08:58:a6:17:df:43:43:15:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a1d72ac0826e09bc0d17ddee8ba87d9731dd413
        Validity
            Not Before: Jan 26 12:01:16 2026 GMT
            Not After : Jan 27 12:01:16 2026 GMT
        Subject: CN=6ae81db065bed5ed2044e423f02ce9214c70e2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:69:9d:56:58:32:6c:a4:bf:2c:ad:35:00:
                    60:d8:de:56:cb:59:d6:26:e2:32:30:52:99:de:15:
                    80:78:c9:07:c3:e8:2c:ba:a9:53:89:d3:76:06:3e:
                    86:5c:93:4b:80:1d:26:ad:f7:7a:de:98:2e:39:96:
                    f6:0d:d5:16:ae:03:54:c0:b3:7b:b8:bd:aa:91:9a:
                    97:7a:2b:68:60:d2:82:10:a0:d6:a1:ee:13:ba:cf:
                    ce:d3:03:6d:d8:a5:1f:52:f7:ed:44:f5:e1:62:90:
                    ba:f1:7b:17:a2:39:03:e2:06:ca:ca:d0:78:9b:b7:
                    d9:d7:ad:7f:61:37:a6:f5:eb:92:6e:8b:ee:1c:eb:
                    96:8d:15:34:b3:29:29:6e:84:17:5e:4e:02:81:30:
                    25:5b:0f:88:0d:96:d6:cb:b5:52:2e:e3:ad:98:96:
                    d6:74:87:12:cf:af:96:3c:0f:0e:17:2b:3d:c0:af:
                    1c:8a:de:48:1c:73:d7:37:87:10:0e:d2:6b:ff:71:
                    3f:c9:74:bb:30:2c:50:a7:4d:a7:62:96:c3:10:57:
                    e6:ee:41:33:60:18:67:a9:d4:4b:25:75:16:01:36:
                    04:ae:73:2d:7a:ea:81:45:09:e3:17:bb:ed:56:f3:
                    ce:07:b5:0a:bd:2b:07:9f:81:0d:9c:3c:04:76:64:
                    0a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E8:1D:B0:65:BE:D5:ED:20:44:E4:23:F0:2C:E9:21:4C:70:E2:D2
            X509v3 Authority Key Identifier:
                keyid:0A:1D:72:AC:08:26:E0:9B:C0:D1:7D:DE:E8:BA:87:D9:73:1D:D4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/6341da-2b34-4d45-9c17-958112a489a4/1/Ch1yrAgm4JvA0X3e6LqH2XMd1BM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:fe:af:d1:b2:54:7d:d7:d9:36:d5:54:b7:4e:b1:fc:b1:dc:
         57:1a:30:f9:63:84:7b:b6:8a:7d:bc:74:a9:71:83:8d:45:a8:
         60:ca:ef:e1:e8:e8:b6:20:b9:de:2c:0c:a7:79:ea:95:98:1c:
         19:86:68:14:87:15:81:bb:68:66:2b:85:72:cc:e8:bf:b3:a1:
         91:a9:3f:0b:4f:ac:fc:0f:6a:32:d5:bd:af:ee:d4:bb:a1:a7:
         99:48:f1:0b:3b:60:45:83:fc:d0:3d:ab:86:6a:38:5b:8e:15:
         7f:47:d7:aa:6b:25:b3:5f:11:dc:9c:14:f0:00:69:db:3f:f1:
         6c:50:ad:72:59:87:25:4d:e5:0b:8a:c7:4c:2a:d0:4a:3e:c9:
         1c:15:55:05:5a:b8:b2:0c:ad:c6:03:11:c1:11:e8:4e:10:70:
         e3:5a:0b:bf:35:36:30:55:a7:28:f9:70:b2:86:c3:12:cd:72:
         4e:49:ee:e0:c2:09:45:71:41:73:35:b6:a9:56:fa:0b:92:6a:
         ec:69:f3:bf:a3:a5:3e:11:e1:09:b5:f8:81:9c:a0:b0:19:c0:
         1e:57:c6:ec:9c:5b:d6:96:8e:71:9f:b9:38:5a:aa:bc:ac:fe:
         a1:30:97:da:5b:34:44:5f:98:d3:f4:4e:92:be:42:68:5e:10:
         ff:24:41:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:00:55 2026 by rpki-client