This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
File:                     xi18rB_7LD-94oRiW_GvTGuuaw4.mft (raw, json)
Hash identifier:          k3nAXAp3Hycvslzjm5n+cZphYyrcs2OkZpJwIwCprSg=
Subject key identifier:   77:D5:40:00:83:87:2C:70:7F:93:1C:14:2D:47:29:B4:CE:48:66:F1
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Certificate issuer:       /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial:       019BFC1C9DA44AECDCAF86DD62A049A0D697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
Manifest number:          0D9C
Signing time:             Mon 26 Jan 2026 21:01:32 +0000
Manifest this update:     Mon 26 Jan 2026 21:01:32 +0000
Manifest next update:     Tue 27 Jan 2026 21:01:32 +0000
Files and hashes:         1: brf91ENcAgUp0obWF-s4t0ccdXg.roa (hash: L3X4nsh8efFRGAeVZaXiM6ZqsZGp3bsgy9UCI0jKigw=)
                          2: lG6FMWT2cKO27fqSgyD7NwJGZic.roa (hash: 8vr9/y84LRaPCw3bPTcjeu/NXDEsRUvrX9EcTdM7j5g=)
                          3: xi18rB_7LD-94oRiW_GvTGuuaw4.crl (hash: 9Soj+NgSUWvP7w8d3coU2WVH8qoLpj5m6UVd8rN+vmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:9d:a4:4a:ec:dc:af:86:dd:62:a0:49:a0:d6:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
        Validity
            Not Before: Jan 26 21:01:32 2026 GMT
            Not After : Jan 27 21:01:32 2026 GMT
        Subject: CN=77d5400083872c707f931c142d4729b4ce4866f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1e:48:6b:27:9e:da:9a:9c:62:83:59:a1:12:
                    17:eb:a5:ff:79:39:79:ec:ef:80:d9:74:88:22:ff:
                    ec:46:d7:5b:19:ef:c3:71:a3:1c:e8:65:03:87:9a:
                    84:28:8f:a4:1d:10:b8:6f:cf:e0:8a:85:12:3e:35:
                    b0:dc:3d:21:c9:1b:05:ae:55:de:07:fa:57:32:48:
                    21:5a:3d:bf:07:a8:74:d6:95:0c:2e:3f:fe:24:64:
                    c3:67:f7:55:2f:61:6f:f1:dd:3e:ce:03:f7:cd:9a:
                    b5:cb:1d:4d:ae:d9:01:5c:14:e3:6a:2b:68:07:c4:
                    07:8a:39:17:83:b0:66:81:ac:95:4a:b2:26:48:10:
                    ea:24:fe:96:01:39:c0:0e:8c:54:2d:5b:ed:ff:c0:
                    db:1a:8c:72:73:5d:cb:73:5d:9d:2a:3d:0a:86:84:
                    38:ab:31:dd:ca:da:7c:6e:21:28:e1:78:3c:6d:f0:
                    d6:a4:f9:77:01:04:2e:80:92:3e:07:28:62:94:0a:
                    ff:1a:9c:81:15:c4:ab:94:82:4e:84:c6:11:d3:fc:
                    b8:3f:56:dc:b3:4b:bd:0f:f8:47:c3:b4:88:0d:04:
                    6b:58:ef:bb:d0:92:24:82:c8:ec:fc:15:b4:0a:4e:
                    cf:6d:7e:c9:73:56:07:9d:44:db:6d:91:d8:57:50:
                    5f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D5:40:00:83:87:2C:70:7F:93:1C:14:2D:47:29:B4:CE:48:66:F1
            X509v3 Authority Key Identifier:
                keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9b:e3:2f:ba:0c:ce:fb:b1:74:56:f7:3d:4b:f2:20:75:d9:
         a4:f5:25:91:47:76:39:17:ba:30:28:c4:b9:bd:d9:c8:e5:de:
         a3:a8:d5:08:1a:03:89:1b:0c:d3:1b:13:81:a0:87:12:65:4d:
         df:3e:42:9e:af:b2:78:b9:63:31:61:a3:df:2e:e0:f7:31:ef:
         8c:03:c6:04:d6:fb:97:c3:b4:22:92:30:61:4f:fb:17:19:13:
         ba:5a:41:9a:d8:73:4c:3a:31:cc:96:72:31:40:cc:7a:fe:ab:
         7c:45:a5:99:38:2d:fa:86:88:50:11:ae:50:aa:63:2b:ce:79:
         82:75:2e:c3:cb:28:7c:0b:9d:a2:00:72:55:d5:d1:38:f8:3d:
         31:4e:dd:96:2b:cc:2e:a7:ba:17:c2:85:63:39:ec:57:06:a9:
         14:ac:69:dc:dd:a7:ba:b0:2f:17:48:76:0a:b6:4a:27:0b:af:
         b0:62:b0:15:34:7e:9d:d6:02:5f:ef:0c:59:3d:bb:58:78:bd:
         fe:d7:85:9e:e7:f2:cc:5e:45:49:e3:8a:12:a9:7c:bd:53:23:
         ab:fa:3a:fa:0e:57:85:19:3a:c8:df:89:cf:0a:20:61:75:63:
         64:6c:1f:8d:c4:1a:5f:75:4e:fb:c7:d8:e4:88:2c:1f:cb:5f:
         2a:77:76:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 05:36:43 2026 by rpki-client