This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
File:                     7DpjPvLAglGlhgNWLlaqbvqT7CU.mft (raw, json)
Hash identifier:          34xtjmnYllSYDM+RAtZUbqg7i7dzKbSRUPVyRJPmCHM=
Subject key identifier:   A2:DE:56:7A:D0:A0:3B:2A:B1:A4:E8:2A:9B:5F:80:33:1E:7E:85:D6
Authority key identifier: EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25
Certificate issuer:       /CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
Certificate serial:       019BD8471EDC5EBA19EDE692AB33514787FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
Manifest number:          1237
Signing time:             Mon 19 Jan 2026 22:01:38 +0000
Manifest this update:     Mon 19 Jan 2026 22:01:38 +0000
Manifest next update:     Tue 20 Jan 2026 22:01:38 +0000
Files and hashes:         1: 7DpjPvLAglGlhgNWLlaqbvqT7CU.crl (hash: vw64VbTeXoqk8NRg04m4bInv1lFyuVNQsINCmY63/28=)
                          2: Swf3FFLXHYfQ6NVyQRwDIxCz49k.roa (hash: WjJASBXtMbMx6UjFd1CviKnEyJIaLn92uMYlDMFmvww=)
                          3: bmiicfROGlo9yf7zWdyA9ISaaIk.roa (hash: 1eggDeotMzuLMDhclZE88i2+/VDlsW1ydjGiJvLTfSk=)
                          4: lx-y9PtQp55g9e257pFIFA6PrMk.roa (hash: 3zWuaGtosieGRl8uoqyXPsU0RM4EJfQrxujvT6qUxD8=)
                          5: vOmtSoi-0VnTRfrdo0vo947Kkjo.roa (hash: YDH3N/wQDGDdiYRYpU2cCSEAou9IYJQNs0umXr6ibys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 18:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d8:47:1e:dc:5e:ba:19:ed:e6:92:ab:33:51:47:87:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec3a633ef2c08251a58603562e56aa6efa93ec25
        Validity
            Not Before: Jan 19 22:01:38 2026 GMT
            Not After : Jan 20 22:01:38 2026 GMT
        Subject: CN=a2de567ad0a03b2ab1a4e82a9b5f80331e7e85d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:95:d3:eb:f2:ad:bb:cd:5b:ed:94:b2:90:b3:
                    83:b9:44:b9:04:bc:d1:6c:57:b7:7c:3e:69:07:64:
                    6f:ce:be:5f:c5:b3:94:07:16:40:b1:f5:83:d9:c5:
                    ca:11:ad:81:70:8c:9b:1b:ee:fc:ef:62:fc:3b:19:
                    f6:b3:56:1c:8c:97:20:d2:83:9e:8d:e5:e1:b7:20:
                    d5:94:6e:05:f9:24:d1:78:a2:96:1e:6b:a7:84:5a:
                    ea:8b:1c:11:62:71:ef:d4:8f:a3:eb:2d:a9:40:19:
                    5c:62:f3:4c:79:7b:c5:6d:51:37:59:3a:a9:0e:7f:
                    7e:92:eb:71:3c:11:cd:22:cb:a3:db:a3:c0:6e:18:
                    1c:59:2f:9e:57:2e:0d:05:45:09:6e:7c:ac:29:62:
                    fc:7c:d8:a8:98:66:1d:84:d2:05:64:a7:ea:37:36:
                    2f:2a:ab:aa:ac:fb:86:37:45:a3:55:9a:b5:dd:72:
                    fe:3c:c7:04:d6:a6:3a:54:af:32:a9:3e:0a:7a:a4:
                    87:54:4d:d6:9a:3b:5d:3d:ef:62:fd:9a:a7:de:64:
                    03:94:03:eb:39:0d:2f:21:f5:f6:b2:53:5d:86:fc:
                    34:cd:b7:e1:c8:42:25:21:79:6d:47:53:cf:ef:bd:
                    4c:e6:10:79:f9:a5:d4:43:93:44:81:6a:9c:82:61:
                    71:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:DE:56:7A:D0:A0:3B:2A:B1:A4:E8:2A:9B:5F:80:33:1E:7E:85:D6
            X509v3 Authority Key Identifier:
                keyid:EC:3A:63:3E:F2:C0:82:51:A5:86:03:56:2E:56:AA:6E:FA:93:EC:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7DpjPvLAglGlhgNWLlaqbvqT7CU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c1b1f0-234f-45d5-8595-f7c2c2a91bc2/1/7DpjPvLAglGlhgNWLlaqbvqT7CU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:eb:f2:f8:09:8b:b1:8e:0a:75:b6:03:01:21:6b:77:33:
         63:96:21:4f:25:04:de:b3:1c:4e:a8:b1:6e:8c:2d:c9:95:c6:
         4d:09:de:16:cf:34:d0:44:b3:9e:ea:ce:6a:50:57:4c:f1:4e:
         3a:c5:c0:5a:17:87:f0:f3:40:fe:00:9a:0b:37:86:1d:0b:81:
         ae:db:f5:0e:5a:83:08:22:c7:c1:d7:a6:17:6e:38:76:98:00:
         75:e9:fb:24:33:e8:cd:a2:71:45:38:bd:51:df:d1:0c:c9:a7:
         6f:b1:20:a8:a2:39:3a:60:7b:9b:6c:7b:ca:75:f1:5a:1b:29:
         2c:4a:9a:7b:41:ad:e5:0c:eb:68:96:3b:b9:19:b7:a2:5a:3b:
         06:c8:ab:82:cd:ea:5c:c5:39:3f:ff:cf:53:c7:26:c8:67:67:
         ba:b5:e3:26:ac:63:df:20:5a:52:52:8a:10:87:42:46:6c:3b:
         0e:5d:16:8a:7b:ed:61:cd:9d:a5:b8:31:66:d1:24:44:6b:9a:
         94:7b:67:6c:9b:f6:c5:04:e8:97:a2:86:de:b9:65:4b:6f:3e:
         74:4c:99:4e:68:94:e2:49:fd:d0:fe:73:db:85:84:b3:14:56:
         bf:a9:49:19:17:6c:35:93:8b:dc:6d:a0:19:89:2e:54:7a:62:
         88:9a:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 03:01:54 2026 by rpki-client