This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          GAqUaVN+RaecnwY/2c4Fr6znEki5x3Zj30KWkAlAIUk=
Subject key identifier:   5A:F4:93:33:A6:F8:02:65:3A:FE:7E:25:A8:67:C7:D7:85:1A:24:79
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019BCF79D32ABA6FC5FD1701FE3D616D48AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          1800
Signing time:             Sun 18 Jan 2026 05:00:26 +0000
Manifest this update:     Sun 18 Jan 2026 05:00:26 +0000
Manifest next update:     Mon 19 Jan 2026 05:00:26 +0000
Files and hashes:         1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: a7f9ASGzt1JzEhwUjK7TVgO+uKx+drbDJSOS7wy76PA=)
                          3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
                          4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
                          5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 04:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cf:79:d3:2a:ba:6f:c5:fd:17:01:fe:3d:61:6d:48:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Jan 18 05:00:26 2026 GMT
            Not After : Jan 19 05:00:26 2026 GMT
        Subject: CN=5af49333a6f802653afe7e25a867c7d7851a2479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:0c:fc:3c:59:f9:85:7f:a1:13:e8:70:23:b5:
                    b4:32:78:97:c5:0d:63:4c:23:d8:d7:19:e8:47:ee:
                    f5:7a:a3:0f:66:48:30:0b:2a:02:e7:c6:25:ef:26:
                    6b:46:43:dc:1a:8d:d2:ac:ff:04:8f:35:b0:db:0c:
                    c6:d9:6c:4e:a3:e1:7a:f4:0a:8f:6c:c9:b4:03:39:
                    64:aa:8b:59:a7:b0:6a:6f:5e:a0:b0:6f:99:39:88:
                    55:54:35:c2:ec:11:70:34:8e:19:f3:de:71:ca:77:
                    7c:2b:19:f8:f7:78:08:9a:2e:67:fc:fe:32:f0:d5:
                    be:ce:0e:e6:02:0f:2b:3d:6d:64:e6:51:c0:9b:99:
                    a9:db:ae:84:a3:b9:46:7d:ee:55:32:23:9e:c4:a2:
                    5e:01:ce:00:16:70:a6:1b:df:a6:e7:95:ee:bd:ca:
                    04:51:f9:d6:30:02:82:ca:db:ed:96:4d:3c:c0:83:
                    e1:bf:30:f9:cc:0b:47:c1:c3:81:2d:b1:b9:b5:f6:
                    d0:18:1e:2e:8d:71:47:d2:46:b1:5f:91:31:fd:6f:
                    07:bf:ee:cc:4c:9d:55:33:73:4b:7b:79:71:50:3e:
                    83:01:55:0c:8e:53:4a:b1:36:ff:f5:51:5e:cb:25:
                    48:66:ed:47:d2:5d:e1:43:62:9a:06:9a:b2:2e:bb:
                    5d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:93:33:A6:F8:02:65:3A:FE:7E:25:A8:67:C7:D7:85:1A:24:79
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bb:8c:b1:48:8f:c6:58:b4:0f:6a:2b:5d:3c:4d:f8:aa:ba:
         60:8a:72:a5:37:74:42:1b:a5:57:15:3b:6d:0d:83:ac:43:fe:
         64:a3:23:82:ff:c9:bd:a8:f9:c4:65:f7:f5:4d:6c:a9:80:b5:
         51:b1:63:cf:68:60:ae:c1:fb:98:14:b6:5d:1d:32:a9:cd:8d:
         f5:cd:5d:a7:19:22:d8:df:d1:c1:f4:c3:57:ed:c1:eb:99:0e:
         5a:05:e1:36:bc:c9:22:4b:f9:b4:c6:ed:7c:ae:25:11:2e:f9:
         49:d0:56:47:6f:cd:e2:88:f8:90:8d:e4:47:b3:29:83:2f:0f:
         d8:f6:15:0e:58:bb:64:73:f4:45:3e:61:6f:b7:58:c4:d9:6f:
         6d:46:7b:fa:41:3d:c7:96:fe:20:0e:55:4b:18:31:7c:5f:ec:
         ea:48:ef:07:28:47:93:0f:00:be:f2:07:8c:db:8d:ee:6e:76:
         9d:66:04:b3:d9:4c:0e:7a:05:a2:f6:b8:88:a6:21:7b:e3:a0:
         6d:6c:8c:52:ef:fa:83:c6:17:b2:32:ae:12:87:6d:a2:cc:b9:
         cc:27:0e:ae:c4:21:fe:b3:70:ef:92:41:70:35:17:cd:d4:01:
         0c:ce:37:f3:48:58:3e:6c:d6:23:0e:d2:ce:0f:9d:4a:b9:d1:
         ab:9a:ea:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 09:53:25 2026 by rpki-client