This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
File:                     D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json)
Hash identifier:          G2dPFO4x+tjRWSpD9p8BSP7pBqdXMY87SzTaSWkyOZ0=
Subject key identifier:   AA:F9:91:DB:47:FF:F0:9E:42:FF:41:F5:C4:B0:3F:DE:42:7C:9B:61
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Certificate issuer:       /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial:       019C107E916CB9031CF5AA97670315FEF481
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
Manifest number:          1816
Signing time:             Fri 30 Jan 2026 20:00:55 +0000
Manifest this update:     Fri 30 Jan 2026 20:00:55 +0000
Manifest next update:     Sat 31 Jan 2026 20:00:55 +0000
Files and hashes:         1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=)
                          2: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=)
                          3: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=)
                          4: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: FluKwOLrWpxcpSoY7ezoEbbIYeC/PA0NL/ScYbOvWGo=)
                          5: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=)
                          6: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=)
                          7: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=)
                          8: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=)
                          9: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 15:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:10:7e:91:6c:b9:03:1c:f5:aa:97:67:03:15:fe:f4:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
        Validity
            Not Before: Jan 30 20:00:55 2026 GMT
            Not After : Jan 31 20:00:55 2026 GMT
        Subject: CN=aaf991db47fff09e42ff41f5c4b03fde427c9b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:02:4e:67:ef:4b:2a:57:d0:c5:33:c3:2c:e7:
                    d2:87:15:4b:dc:48:c7:90:a2:d6:67:f1:7c:f1:93:
                    73:a5:63:51:9c:90:2f:0d:7f:78:4b:7d:c0:42:69:
                    87:36:a1:34:c2:4e:7c:a0:47:58:a7:27:28:de:e4:
                    00:3d:26:53:88:18:b5:31:19:11:f2:79:48:f5:91:
                    60:69:ae:8f:26:52:6d:bd:c8:74:28:0b:b8:0d:e6:
                    b2:f4:ce:6b:be:18:68:89:fb:cd:94:2f:a5:0a:5d:
                    d1:28:d5:d9:5c:ed:77:c3:35:af:3d:58:29:b1:bd:
                    c3:76:9c:8f:28:61:c0:7f:f2:8d:a5:fd:bf:13:8c:
                    ea:2d:2e:6e:8f:72:08:c1:a3:74:36:ad:ac:a8:36:
                    d1:f2:80:bb:8e:7a:eb:5b:d2:58:c6:01:1e:e2:15:
                    92:c6:a6:d5:c0:d9:e5:1e:b2:77:8e:a3:59:a8:a5:
                    a3:f2:6e:5b:e5:d1:cd:20:2c:91:56:41:95:e3:9d:
                    2f:85:d9:6c:c2:e8:5b:11:31:b1:a2:8d:a1:cb:65:
                    35:c3:54:d4:9a:8d:0c:b9:4f:3f:c8:7a:a6:ac:62:
                    7a:b2:bf:3c:d7:e6:68:2f:6b:e5:91:c1:f9:f5:d3:
                    5d:1a:f0:04:80:be:a6:d9:65:7d:82:8e:08:86:69:
                    e4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F9:91:DB:47:FF:F0:9E:42:FF:41:F5:C4:B0:3F:DE:42:7C:9B:61
            X509v3 Authority Key Identifier:
                keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:a0:5d:68:ef:1c:d5:b5:4b:39:8f:1f:26:18:d2:55:22:
         1a:91:75:6c:3d:cf:1b:c0:ef:c8:4d:12:40:fd:b1:71:b3:d2:
         71:63:e0:8c:e1:a1:10:73:9b:f0:c0:12:63:ce:8b:3e:3a:6f:
         59:84:18:43:b2:9c:3a:64:36:f5:30:d0:f9:6d:74:4d:cd:de:
         67:46:f7:64:34:3b:b7:f8:3f:b4:e5:67:3b:6f:c8:45:63:06:
         5f:a2:6b:90:b6:75:4d:34:d3:02:31:f1:c1:2f:56:3c:76:3a:
         f3:33:c5:65:ee:60:32:91:55:a7:b2:bf:d1:c9:dd:cc:99:56:
         d0:66:01:dd:bc:63:c2:67:a0:d4:b2:ab:9a:18:b3:d6:9d:5d:
         b0:7f:25:d2:3b:fd:ff:66:50:89:71:d7:86:a7:ab:10:4c:a5:
         4e:fb:37:c7:a1:25:b0:a3:e0:fe:d9:e1:aa:4c:83:33:43:7f:
         28:e2:13:47:0a:25:61:cc:fa:53:f2:a0:a0:17:a6:2b:50:f0:
         36:ec:c2:ba:d7:93:b1:c2:46:f1:42:bc:5f:81:ce:4a:41:82:
         b1:da:38:b0:e4:a2:fe:3c:6b:12:82:af:19:ec:f9:92:f5:08:
         45:05:1c:88:4c:6f:7a:72:fb:97:59:fe:80:ba:6d:39:21:ef:
         6e:aa:cd:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 23:01:52 2026 by rpki-client