This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
File:                     02AMuv0m_uUGT8ifMB38jjwdPKU.mft (raw, json)
Hash identifier:          0CECr/cYyE7cQuz/+oAAyXV1+ShexdMPiswiGgsUV1g=
Subject key identifier:   D9:DB:7F:AB:00:71:01:9B:26:10:8E:09:AC:95:E5:1D:5B:05:33:BB
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Certificate issuer:       /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial:       019C05565AB51AEB6DF0E2040D9FC89F3E02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
Manifest number:          1801
Signing time:             Wed 28 Jan 2026 16:01:11 +0000
Manifest this update:     Wed 28 Jan 2026 16:01:11 +0000
Manifest next update:     Thu 29 Jan 2026 16:01:11 +0000
Files and hashes:         1: 02AMuv0m_uUGT8ifMB38jjwdPKU.crl (hash: wSLaMRc0QJSzWtQNUEaV1YT82P5mDeQagcStFJ8koD8=)
                          2: 3KHb4LyjMb7GTQzfARliH9VGTGI.roa (hash: u+uDt3VaqBj8WsuUzznZC8YIOei+XhXe+h41yVBm6d0=)
                          3: 461xArYNzHoC1nVBFiDZR5u9vDk.roa (hash: 6q2TnpiTZXieMRIqi2VPrqkjbo1r/JTnD7UrhdGGs1c=)
                          4: 7uRg_T_oiggw4J55UfjOrhQbRRk.roa (hash: Zvntcukjv/uv2VGWPB49suxGMeRDIq3Yqb/Srhl+YdA=)
                          5: 8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa (hash: bgI/tjUhh3faNiwUz0lFyl3PrQvPxHShPGJ4WWbVK9U=)
                          6: 9uaqn-0k0V9eihEbl_1qKZiHOsI.roa (hash: lX7dZ9C+1SMN2ATw1cyM18wsI8aOAPBbMUKXBKlIvtI=)
                          7: EIEUE3ETjR42j8AzPFmGaM3QPUA.roa (hash: dke7pHoGAOXmMbmMcGhOKmr8OHRiGFf0Ci92knKXCs8=)
                          8: UPuwaOxvAn_WKqweTSAjA0k5KMc.roa (hash: 1l216jqafFRv6rwVNGY7SG/c/eKsgMl5lwtfNPrMUB4=)
                          9: lQGqNWtAEeW1v0ZoaLS6zM2cAKg.roa (hash: CWDgSSnIsyWB1Z7WNe/hpRHqTHPu2VcJNOHIRuOk0WE=)
                          10: sZ1Q72ClTj5f73HDar0G-SATsrU.roa (hash: jrtQOenli72Qacdq88MxRlE81nSBmCwOeAYmo/28Pbg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:05:56:5a:b5:1a:eb:6d:f0:e2:04:0d:9f:c8:9f:3e:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
        Validity
            Not Before: Jan 28 16:01:11 2026 GMT
            Not After : Jan 29 16:01:11 2026 GMT
        Subject: CN=d9db7fab0071019b26108e09ac95e51d5b0533bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0e:ce:41:5c:77:dd:1a:bd:9b:53:bc:12:55:
                    2b:6f:18:05:e0:a4:06:e8:d1:be:57:a2:a6:bc:39:
                    b5:9f:41:10:b8:1e:03:c1:33:54:1c:e3:69:9b:f6:
                    09:35:04:f6:f4:0b:51:83:7c:86:73:17:f2:83:53:
                    25:57:de:3f:c7:71:76:c2:45:f3:8c:54:4e:66:83:
                    63:c2:3b:77:e7:ba:f4:39:c2:4b:9d:73:b3:e6:9d:
                    a3:7f:46:5c:1c:45:85:53:63:d8:1e:ea:59:7f:82:
                    a8:b1:6c:41:40:40:8f:54:a7:4f:8c:6f:b2:3f:77:
                    98:48:a6:ae:13:fa:7c:f5:4d:5f:21:67:00:0a:60:
                    da:c0:14:92:bc:53:a5:ad:3f:82:34:99:93:df:b8:
                    c3:76:86:53:ca:ee:13:53:36:75:67:b3:e6:5b:e8:
                    45:47:1e:b4:24:cb:d1:01:47:a5:40:25:42:44:f5:
                    35:dc:fd:e9:40:da:5a:72:27:70:60:90:94:56:c1:
                    c1:0c:c6:cd:bc:76:81:e0:a3:d3:83:7a:f1:e6:15:
                    70:b1:63:32:e3:a9:de:d9:91:e9:6a:58:f9:40:33:
                    23:7c:ce:90:9c:80:de:88:ed:23:c3:56:a4:9b:8f:
                    d4:37:7c:f8:dc:6e:e4:98:d8:36:89:bd:b7:62:db:
                    c4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:DB:7F:AB:00:71:01:9B:26:10:8E:09:AC:95:E5:1D:5B:05:33:BB
            X509v3 Authority Key Identifier:
                keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ae:83:92:90:70:fc:96:b4:7e:30:73:01:77:6c:99:2c:78:
         ec:87:5d:6e:de:9b:81:2b:a3:f8:ef:ab:0a:83:f5:6b:37:4f:
         a3:20:bb:8d:ad:6d:8f:e0:60:f7:dd:cc:fc:2c:7c:fb:32:4d:
         52:b0:c0:c6:66:71:f1:6e:a5:22:c9:b5:e9:d4:f6:7c:5f:98:
         c9:38:40:79:dd:0d:f1:43:19:aa:d9:45:21:d8:81:5f:b8:c0:
         2f:0a:af:fb:be:35:ad:1b:2f:54:59:a8:9a:18:af:bf:41:6f:
         4a:2c:a0:8a:42:cc:d0:ca:97:82:5a:a1:42:53:eb:4d:c1:c1:
         11:cc:e9:3b:21:30:37:77:a4:1d:c5:de:f1:83:38:c8:a5:6f:
         d7:3b:03:55:38:2f:2b:13:02:10:a6:aa:ae:89:88:57:38:55:
         00:62:00:a6:c9:71:5c:10:04:97:f3:63:4c:81:d3:2c:9c:23:
         0a:3f:67:35:81:04:0c:9e:36:79:ae:46:66:c1:62:ca:4c:15:
         dd:32:f3:f8:17:f5:fc:c7:4e:2a:80:c3:b0:1b:6d:b9:b1:35:
         46:35:f6:e2:3c:81:ab:e8:ae:57:44:81:cd:88:eb:65:3c:86:
         4a:31:e1:72:7e:f4:e7:2b:fe:ed:1f:d7:b5:4d:9c:e6:b7:8b:
         49:e9:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 18:34:49 2026 by rpki-client