This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File:                     AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier:          WQLqxBl2thTQ8/7zHOwEdVA3NoESJvIq9TpWw5vv2iM=
Subject key identifier:   CD:E4:1B:69:11:7D:E9:49:CD:42:00:7A:18:40:29:ED:E3:9E:CD:57
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer:       /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial:       019BFC89D130DE345936512B1D7292EECB2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number:          0953
Signing time:             Mon 26 Jan 2026 23:00:48 +0000
Manifest this update:     Mon 26 Jan 2026 23:00:48 +0000
Manifest next update:     Tue 27 Jan 2026 23:00:48 +0000
Files and hashes:         1: 8ujYHAx1H4lhOYDDoA3cTzuZ1o0.roa (hash: IzeovJpSEL6TwVj5FewH6ox1OkLfK9+IYF8XYtp5rMQ=)
                          2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: AJAbHv6SvpcmCxmEhcCkgog9rNZCUe6Gxv6mDgPdwe4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 23:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:89:d1:30:de:34:59:36:51:2b:1d:72:92:ee:cb:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
        Validity
            Not Before: Jan 26 23:00:48 2026 GMT
            Not After : Jan 27 23:00:48 2026 GMT
        Subject: CN=cde41b69117de949cd42007a184029ede39ecd57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:96:41:96:38:75:f3:9c:39:79:57:f4:a7:
                    b2:b1:05:03:4f:f7:d0:bd:5c:e4:7e:80:56:7d:27:
                    3f:4a:f2:e2:3a:07:bc:53:c6:14:71:54:28:5e:a5:
                    a0:5a:9a:ed:22:af:18:42:19:d3:22:8e:a8:df:8a:
                    c8:83:aa:9d:fe:9e:e2:cc:7e:f2:48:be:d4:e1:80:
                    ae:95:ae:2b:4a:37:b4:ed:13:b9:20:2e:58:6f:fa:
                    37:ce:8e:21:ac:d3:5b:81:c5:70:7e:0b:c3:e7:60:
                    93:08:ef:9d:f5:5b:3b:e5:c4:15:aa:cf:88:9f:d8:
                    8b:1f:b8:bd:b2:c1:9c:c8:48:5a:91:b2:6b:11:bc:
                    4a:37:87:af:53:19:68:50:8c:c8:43:19:2d:50:db:
                    7b:b4:69:c6:7a:5d:5e:e3:6a:15:b0:9f:18:46:19:
                    d0:6b:22:77:5f:dd:1d:da:f1:36:49:3d:ab:c1:f2:
                    f1:82:57:68:40:51:3d:10:88:16:7a:65:07:da:02:
                    d7:dd:b9:2f:93:f7:c7:c5:6e:2b:89:0f:23:2f:82:
                    b9:4e:94:a1:a0:7d:bd:22:2b:b9:12:58:70:65:fe:
                    10:ad:11:3c:e9:58:13:0c:24:8a:b3:7c:1e:7e:c3:
                    47:a3:af:cb:85:a8:64:73:ab:6a:f8:7d:35:21:13:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E4:1B:69:11:7D:E9:49:CD:42:00:7A:18:40:29:ED:E3:9E:CD:57
            X509v3 Authority Key Identifier:
                keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:62:a6:bd:51:f6:08:70:0f:c6:45:58:b9:70:9b:02:84:97:
         04:46:92:f9:2b:4b:7e:c3:1a:b7:a1:0f:a8:b0:a6:f0:9e:32:
         16:2c:13:c5:c7:9f:ad:2d:17:b8:1c:15:da:29:21:80:29:c3:
         d0:8f:2b:23:46:3e:67:e9:a1:4b:9b:ab:e3:7e:31:d7:13:46:
         4b:41:86:8e:76:21:8b:53:29:77:96:4f:5f:60:ec:3b:2e:7a:
         2a:3d:c7:af:40:87:a1:22:62:35:00:ae:28:3b:27:46:3b:da:
         f6:c9:15:87:4b:25:b7:f8:73:03:e7:95:15:cd:b1:c5:c3:c0:
         18:1a:5a:80:2a:a8:62:38:07:01:0c:15:a3:30:aa:f1:d7:7d:
         bb:bf:cc:ed:7c:29:ff:c1:3d:34:43:f0:02:bc:ab:07:d3:99:
         c1:c0:4e:a9:b2:81:9e:ec:46:20:9c:89:69:39:b9:62:32:a5:
         1b:29:2f:7a:92:ab:ad:61:2a:41:5a:69:44:90:98:8e:17:b2:
         d8:04:0a:3e:47:3f:32:8a:55:e0:86:0a:60:1f:d2:bc:d1:ce:
         e9:96:5b:a8:63:5e:50:c0:e0:fe:d5:80:17:b7:e7:77:4e:46:
         f9:a6:6f:81:c6:83:03:0b:d1:f7:63:40:b7:9e:44:ba:f7:67:
         b1:fc:c0:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 08:29:14 2026 by rpki-client