This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File:                     CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier:          vIGuaHd9MdoHyjjd83DT4Hn8tSUqQ2fAU9G99tpjjPY=
Subject key identifier:   15:3C:21:05:B1:99:23:50:E0:8E:65:13:2B:BD:11:CF:A0:84:02:60
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer:       /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial:       019C0AB388DA05B5C5C2E51C47BC28693057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number:          0C13
Signing time:             Thu 29 Jan 2026 17:01:03 +0000
Manifest this update:     Thu 29 Jan 2026 17:01:03 +0000
Manifest next update:     Fri 30 Jan 2026 17:01:03 +0000
Files and hashes:         1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: HE26mRRWkoLL5ekMYZZesXRZPbXri8T6dGvbl4Tr9R4=)
                          2: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=)
                          3: IcfiGiHhm-UnVbVbGBC_RtFqnfM.roa (hash: FGxn4dZpz1k+FXowXOdQoq7CmlfSlmu0geRbED6pnGQ=)
                          4: MWiV7graQLeuw4AYgJ4ZHIBAuZE.roa (hash: 5UScMx33ea6UI1n+yqJ+oTPgZkvCg216H08oUJCNoCY=)
                          5: d_rxJJRdc6lxglOZm6MPcxsRKVk.roa (hash: 09cxzd1TQUa9YcSDbUPMORsaaMIR6hUWI/wpDIjuvuY=)
                          6: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=)
                          7: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=)
                          8: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=)
                          9: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0a:b3:88:da:05:b5:c5:c2:e5:1c:47:bc:28:69:30:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
        Validity
            Not Before: Jan 29 17:01:03 2026 GMT
            Not After : Jan 30 17:01:03 2026 GMT
        Subject: CN=153c2105b1992350e08e65132bbd11cfa0840260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:61:3a:b0:08:b1:a7:63:04:c4:c1:49:81:e5:
                    00:35:a2:51:b1:40:13:05:5a:a0:2e:63:46:f2:f6:
                    21:ee:0a:0d:dd:54:f8:97:ba:5e:4e:12:2b:64:51:
                    80:49:17:af:47:b1:07:7f:46:9a:37:af:d2:a3:3d:
                    6d:1a:d6:5b:11:b1:ad:97:e7:df:ba:cc:fc:a9:79:
                    1a:07:6f:6b:23:9b:ca:63:8b:aa:b9:5e:eb:d8:58:
                    22:ac:cc:a9:55:1a:e8:c1:55:ac:17:4d:44:83:81:
                    3a:a3:09:7a:a7:4d:f8:ee:6c:dc:a2:b6:e5:67:ca:
                    81:3a:b9:09:d2:fa:77:a9:c5:ba:fd:5d:00:73:3c:
                    37:4a:35:82:6e:f0:a2:91:a5:72:ba:06:90:57:16:
                    68:69:9f:5b:70:91:a2:8a:1d:0d:c2:62:68:2b:f4:
                    7c:44:66:6e:00:58:c6:10:7d:b1:dd:17:42:73:76:
                    68:1d:5c:78:cc:a6:34:51:b3:10:50:24:8d:36:6e:
                    ab:4d:07:24:99:b7:2b:c8:7c:9c:37:fa:fe:35:9b:
                    ef:46:c3:b6:88:5e:08:33:65:eb:8a:ff:cd:6f:5f:
                    10:f4:96:4c:1b:61:b4:25:fd:d4:83:c3:87:c0:7f:
                    97:46:39:da:56:f2:49:3a:29:ee:5e:0b:73:b2:21:
                    a6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:3C:21:05:B1:99:23:50:E0:8E:65:13:2B:BD:11:CF:A0:84:02:60
            X509v3 Authority Key Identifier:
                keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:99:c5:cd:d8:5e:d3:6e:b5:81:ae:7b:6d:65:82:30:c5:4f:
         5a:65:26:a4:16:85:e5:f4:33:5b:98:27:11:bb:aa:32:f3:3b:
         e3:bd:4a:9e:e9:eb:17:8d:b6:34:3a:18:ab:32:77:49:7c:70:
         92:46:c6:14:57:47:78:e0:59:36:20:43:05:bb:48:e7:11:e3:
         6b:92:67:c1:db:be:4b:f1:39:09:41:e2:7a:f0:b1:38:dc:17:
         49:cb:8f:cc:d1:15:97:c4:c3:75:d8:0e:26:a0:23:5d:c7:38:
         66:b8:37:6f:0c:51:34:70:4c:5d:0e:f6:80:ce:e9:8d:ee:30:
         ea:78:64:20:91:0e:3d:28:cb:ee:fa:2e:79:65:ec:12:68:6d:
         64:e2:4a:3d:23:8a:91:91:7f:b7:cd:85:b6:ce:01:c0:76:9d:
         5a:d6:a5:51:c8:28:9d:ef:74:94:a6:ba:23:6a:e4:ae:bd:06:
         3a:e9:79:ba:1b:07:d6:56:c7:93:5d:ab:66:35:f7:9d:52:8e:
         27:2b:14:ec:76:3c:61:65:2b:f1:8a:bd:5f:e4:b1:9a:45:f5:
         f1:aa:f2:19:6e:04:5e:f8:ce:b8:01:3a:c2:c6:fb:20:61:48:
         14:c0:b9:4e:79:4f:b6:9e:f3:5f:fc:b5:30:83:a6:df:36:60:
         8f:ae:3e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 21:31:36 2026 by rpki-client