This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          VcXEX6GhMfqqtrczOyd5OupVAnnU9BGoVpfdzXDGOew=
Subject key identifier:   37:20:FF:36:89:F7:4F:12:D2:08:0E:8E:17:2E:58:84:8B:D8:B2:05
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019C126D1C9BB83BC565364F4AA69B5F31B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          180B
Signing time:             Sat 31 Jan 2026 05:01:06 +0000
Manifest this update:     Sat 31 Jan 2026 05:01:06 +0000
Manifest next update:     Sun 01 Feb 2026 05:01:06 +0000
Files and hashes:         1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
                          2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
                          3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
                          4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: yRmlI89S7to4mi2JqSXEIm1Q+BwtrgNV7FNjsCVwlvY=)
                          5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
                          6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
                          7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 23:50:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:12:6d:1c:9b:b8:3b:c5:65:36:4f:4a:a6:9b:5f:31:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Jan 31 05:01:06 2026 GMT
            Not After : Feb  1 05:01:06 2026 GMT
        Subject: CN=3720ff3689f74f12d2080e8e172e58848bd8b205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:21:84:83:64:40:a2:2e:cc:3d:15:b7:86:37:
                    d2:69:c6:83:80:32:4b:c2:30:fe:bc:76:47:c6:11:
                    0a:d2:e6:e1:8c:f4:7f:a5:d3:5d:29:bc:c2:c7:87:
                    e6:c9:24:be:b8:1e:b9:b7:12:ea:f9:45:c5:12:23:
                    d3:08:64:21:5e:94:7f:2d:bd:c2:01:f2:6c:11:7c:
                    87:b1:6d:9d:38:58:bb:9e:5b:db:32:89:a6:6a:47:
                    0e:dc:0c:40:46:7b:59:41:31:f3:8b:38:e9:da:a0:
                    65:ec:b2:e2:c9:06:90:eb:3f:b6:d1:4e:8f:b1:86:
                    0a:1e:1a:bc:32:0d:57:ac:4d:1f:8c:f0:20:ba:d0:
                    68:86:fb:39:c1:a9:5d:8b:4a:07:78:61:c7:f2:bf:
                    b3:bc:24:f3:01:e2:a0:6c:78:8a:2f:8a:78:c4:74:
                    9e:09:65:59:16:26:b5:cb:cc:03:4f:5d:fc:d2:01:
                    d6:63:0a:84:1a:56:09:d9:5c:97:f0:a8:12:8b:d9:
                    72:75:93:19:35:64:e7:ea:97:47:4b:cf:00:c4:d6:
                    1d:82:33:7d:3e:c0:fd:c1:db:db:f2:6f:51:2c:c3:
                    b8:d0:7f:44:e2:76:fa:91:d2:99:91:83:a5:db:5b:
                    7e:25:2e:55:4b:78:dc:ca:5b:6c:8e:dc:f4:e7:73:
                    42:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:FF:36:89:F7:4F:12:D2:08:0E:8E:17:2E:58:84:8B:D8:B2:05
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:36:22:74:fd:c9:dd:80:2d:a7:8b:7c:0c:18:42:fd:c3:72:
         fa:d9:9e:47:8f:0f:cf:26:30:97:c5:f9:cf:c7:bf:40:af:3f:
         cf:56:59:2a:14:6f:37:58:21:59:79:0e:24:7e:7b:7e:36:e0:
         a7:c0:9b:78:aa:f5:da:1e:aa:40:ab:c4:7e:87:f2:bd:be:8c:
         9b:63:7d:ea:bb:2d:e9:b4:61:d8:ea:b8:0c:bc:4a:0a:ea:ff:
         78:cd:69:27:41:0c:62:5e:49:49:5b:fd:97:da:c4:63:0d:c3:
         c8:90:f5:d4:83:1c:05:33:b4:e7:d2:0c:24:be:74:65:59:89:
         77:57:2a:11:3b:31:ee:78:4e:5e:f4:f7:67:5b:d7:2d:e4:64:
         ff:f0:24:fb:14:f5:89:ad:6f:c4:b1:fa:29:b9:43:85:c1:5f:
         44:5f:6f:b5:0c:b7:4b:81:4d:3d:d6:d7:bc:3b:55:e7:3c:d8:
         07:f4:32:c6:ef:7a:89:12:2e:23:57:a2:c3:75:7b:ad:11:04:
         1c:c4:ff:6a:65:62:4b:c0:1e:fa:da:2b:d2:9d:55:4d:88:38:
         e4:c2:88:e0:f1:cf:9e:33:08:e2:6b:b8:77:ba:cb:49:91:3e:
         3f:9a:30:38:f9:16:8b:12:1f:22:19:e9:86:85:be:5c:99:ca:
         de:4b:21:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 09:15:27 2026 by rpki-client