This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
File:                     aDLDLSJZATmRJg1TDZEgAxqu_NA.mft (raw, json)
Hash identifier:          M3F3cVzxX51YXlLoBF1SCIA0WYwqC04X94gOJNlFMgk=
Subject key identifier:   C7:4C:F1:91:AC:3E:30:EC:3F:45:B5:AA:6F:0D:E2:DC:C3:15:A2:0E
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Certificate issuer:       /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial:       019BFAD24FAFBBF94221F84552778C37EF8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
Manifest number:          0D8A
Signing time:             Mon 26 Jan 2026 15:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 15:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 15:00:45 +0000
Files and hashes:         1: 1Tm2hPBeR1kXuJC_4Fma0BVc6y0.roa (hash: 35XdWo4luyHs/r4M0v09FZDvmJqVi1do4bqp1mYQ5Pw=)
                          2: 6wUOIPFBERkUTQmc4fru_-px0Tk.roa (hash: 7k1O0fB7z/MoZhbw4RMzyFvLT3i7T+rSfTUmJTBuUb0=)
                          3: 8X1MbgOMIwknV4MmtDYmE5qDStc.roa (hash: iDajWrT7Xa/OjKcrbaBjth1q58FOp4dSGG2W+uY6n74=)
                          4: RZmHPxWG1eG5OdGo7lu-NRY4OOo.roa (hash: fJe3A82QUUbsCDZaJ18DGBV5KL4R4D79bKgtsdebCe4=)
                          5: aDLDLSJZATmRJg1TDZEgAxqu_NA.crl (hash: uW8ieddOvMR1fwz9ux6vt0YOC+8+RM2YBUvryMSXQbE=)
                          6: wmpzrrH0hwjqK1WwD4GdrmaYCUg.roa (hash: 6KWLhzkyOVFvgoeR3KoD0mL0PNh9zo2iMVG0SXir0QY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:d2:4f:af:bb:f9:42:21:f8:45:52:77:8c:37:ef:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
        Validity
            Not Before: Jan 26 15:00:45 2026 GMT
            Not After : Jan 27 15:00:45 2026 GMT
        Subject: CN=c74cf191ac3e30ec3f45b5aa6f0de2dcc315a20e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:ed:b5:1b:f8:b4:d6:53:65:1a:1c:13:51:
                    40:7f:c5:3b:25:87:0e:c1:82:31:a5:c2:15:ad:1d:
                    c5:b0:4e:d4:ef:fb:24:fb:24:9e:2a:f5:ca:62:1d:
                    67:50:73:10:51:62:71:32:ca:7b:bf:45:48:f5:97:
                    13:b6:6f:57:ce:cd:2c:0e:e6:b7:6f:7c:c6:54:52:
                    92:ee:eb:88:bc:0c:35:b5:9a:61:b4:41:1d:19:7c:
                    ba:1f:cb:ba:55:e2:f6:22:1a:8c:83:6e:ac:a9:b5:
                    aa:91:57:d1:6a:db:62:47:8a:df:77:c5:08:8d:55:
                    79:a9:13:fd:9f:8b:51:3c:de:0d:f0:86:4f:cd:23:
                    4c:b3:bf:91:47:cd:bf:83:b1:18:d9:e3:1f:91:3b:
                    13:2f:4f:c3:a8:af:62:ec:5b:df:c2:a5:fc:5d:0f:
                    fc:ec:4f:db:a7:32:41:15:75:05:3f:87:7a:a1:aa:
                    ba:66:8f:2a:53:9f:a8:2d:a9:b8:72:31:42:fd:8b:
                    93:9f:3f:a7:ae:89:1f:ec:4b:28:9f:0e:13:59:42:
                    c4:54:8f:36:ca:3d:e8:f7:51:16:34:97:95:90:89:
                    ff:3d:7b:a0:6c:e3:cd:68:92:f3:60:6b:d5:3d:54:
                    34:10:7a:a6:fb:37:0e:94:fa:12:88:e5:ea:96:ad:
                    ba:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4C:F1:91:AC:3E:30:EC:3F:45:B5:AA:6F:0D:E2:DC:C3:15:A2:0E
            X509v3 Authority Key Identifier:
                keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:15:6d:62:81:71:67:65:69:56:03:c4:1f:54:0e:a5:45:74:
         44:7d:6a:10:e7:c4:ad:8d:9a:e6:7b:e2:ef:ff:af:19:57:cd:
         4d:cc:b2:23:4a:14:ed:92:42:27:1f:87:da:0d:25:b4:69:5f:
         47:d6:0f:bb:a0:af:82:3b:c9:46:94:49:7b:5d:38:fc:b4:8a:
         1c:ec:20:28:36:aa:82:5b:b7:02:87:1d:2e:4a:a4:94:65:67:
         55:bf:37:a3:0b:83:ae:bc:e7:53:2a:e8:2f:c5:dc:3b:eb:7e:
         28:f8:ad:0c:07:fb:72:1b:40:73:fd:f0:fa:eb:40:7f:5a:3f:
         13:0b:49:e9:62:a6:60:71:bd:d7:70:1a:cb:8e:ac:37:56:f1:
         1c:24:17:44:8e:0f:99:5e:6f:b8:ba:52:c3:1f:32:d2:6a:13:
         57:cf:49:80:3b:24:ec:d2:f7:0a:1f:4a:ce:bc:6e:5d:0f:73:
         47:80:68:88:ed:75:7a:30:99:f9:b6:07:38:36:b4:bd:4c:2c:
         22:00:6f:9d:bd:84:67:55:75:e0:0a:21:f5:a3:8f:71:7f:80:
         8d:c3:2a:f7:10:48:ea:c7:da:47:78:57:f5:5c:cb:e7:ca:7d:
         28:c8:35:37:5c:12:4f:61:90:22:4f:15:5c:a2:75:86:2d:3d:
         a9:5e:90:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:35:59 2026 by rpki-client