This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          luL/9RWDTJWI4rsPDosJjNsGtfGuSp/YI2khpLunA+o=
Subject key identifier:   39:44:AF:BA:A8:72:51:1D:C3:2B:7B:52:91:32:8D:EF:66:48:7C:27
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       019BDEEDB1CCBFFE67EB9E98AF964EBC075A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          1808
Signing time:             Wed 21 Jan 2026 05:01:18 +0000
Manifest this update:     Wed 21 Jan 2026 05:01:18 +0000
Manifest next update:     Thu 22 Jan 2026 05:01:18 +0000
Files and hashes:         1: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          2: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: 9GaCm0bhM2harFf7ZD+QUXUzyHWlEHVLqVVyaqFyv1I=)
                          3: UVZSH-qjnUODxApJvnuBt-EAJoY.roa (hash: qEeNRBoEnR3OhUU2I8brudlBLMuFLZh8jyPrCOjJSRQ=)
                          4: eTMmIm9zv_0o9KEz3EHntctKzoc.roa (hash: tXT+SzZWIzmmd4kK5abXulIyd/8wtzj4Rs+S9xwYZIg=)
                          5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:ed:b1:cc:bf:fe:67:eb:9e:98:af:96:4e:bc:07:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Jan 21 05:01:18 2026 GMT
            Not After : Jan 22 05:01:18 2026 GMT
        Subject: CN=3944afbaa872511dc32b7b5291328def66487c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:c4:30:23:09:99:08:4c:59:0b:32:89:19:
                    4a:b0:21:80:3d:c5:b9:86:9e:53:46:ee:20:03:48:
                    d1:68:1b:55:eb:39:39:ba:97:78:85:e2:e9:6b:aa:
                    ea:8d:8e:8a:58:ae:45:ec:dc:3a:18:bd:9d:28:0e:
                    5c:b9:1f:76:35:b5:c5:b6:44:5c:1e:1d:41:a1:70:
                    d6:ee:9d:43:c9:c8:34:5b:3a:65:a7:21:ad:cd:ea:
                    8d:ac:92:b0:d1:4c:f6:0c:25:6e:f7:df:bc:98:d1:
                    88:b9:9d:a0:f2:6d:90:1c:da:82:af:b9:a0:3b:5b:
                    4a:d4:b6:47:0d:a0:bf:21:32:7f:a7:a5:ba:dc:90:
                    89:be:81:76:2c:b6:52:4a:15:b8:fd:84:28:fe:60:
                    1d:c3:00:93:0c:d6:67:2a:6c:bf:ae:45:83:a5:87:
                    59:48:a0:69:3b:b1:50:3b:fe:e3:6b:d7:0c:74:f4:
                    d4:f7:00:80:dd:f4:06:5f:fb:60:f8:32:5c:89:2f:
                    34:38:a7:d3:2b:1e:94:91:2c:a9:05:87:7a:95:76:
                    1b:37:35:74:51:c5:84:d1:cd:f5:3c:d4:a0:9e:72:
                    08:66:26:9a:b7:d3:05:97:da:e6:ad:fe:fb:d5:94:
                    9d:ac:07:a0:b7:b0:b8:16:1b:5c:57:86:33:11:de:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:44:AF:BA:A8:72:51:1D:C3:2B:7B:52:91:32:8D:EF:66:48:7C:27
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a9:72:6d:b4:81:57:9a:a9:4a:f2:41:ac:02:5b:fb:7c:69:
         19:c8:4c:bd:5c:29:d3:0d:6e:77:5e:e8:93:61:ae:4c:e7:46:
         27:0b:dc:c2:ff:49:c3:be:87:3b:72:d8:19:a9:89:db:87:12:
         5c:1e:ba:16:01:4b:8f:be:5e:f3:2a:32:49:6b:13:8d:30:d0:
         0d:57:e7:76:44:2e:ac:89:8d:34:10:77:c1:4f:e1:84:ac:eb:
         4b:6f:97:f0:63:60:83:eb:6d:3b:55:f2:51:07:81:d9:3a:c3:
         0c:cc:0f:7f:b6:46:9b:0d:58:44:c3:a2:2e:78:5e:e2:2b:59:
         62:04:b8:12:1b:71:49:02:db:e1:b0:f0:5a:d4:0c:55:1d:16:
         75:15:49:cc:36:8a:8a:1f:d5:83:9b:63:65:dc:12:f5:6f:76:
         ad:2c:70:49:f8:8b:7a:31:ce:22:22:47:49:67:99:12:8d:3b:
         f7:0e:2b:64:b6:b3:28:a8:f2:14:f8:ef:2f:b3:8f:76:54:9d:
         90:e8:77:1f:99:0a:74:b4:d7:30:cc:34:f9:80:1b:08:17:d9:
         2a:50:75:5e:a7:62:ff:40:26:73:58:7a:d5:7f:cd:4b:29:5f:
         28:d2:40:f4:99:77:66:17:10:67:79:04:3b:f7:c5:8c:66:4a:
         a0:84:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 10:52:28 2026 by rpki-client