This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
File:                     CiINqbbilYVbYn_qYQ4cthZGiUs.mft (raw, json)
Hash identifier:          CZMGsF00kThlbuCYXQiW5JHoGd8HtRuPICoDWrZvmv0=
Subject key identifier:   1C:25:07:16:17:2A:98:BF:0C:81:F0:A4:52:64:0E:5F:CB:6A:A1:7E
Authority key identifier: 0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B
Certificate issuer:       /CN=0a220da9b6e295855b627fea610e1cb61646894b
Certificate serial:       019BAE014A7E30359A43A4CAF4B0FD0F09AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
Manifest number:          1343
Signing time:             Sun 11 Jan 2026 17:01:18 +0000
Manifest this update:     Sun 11 Jan 2026 17:01:18 +0000
Manifest next update:     Mon 12 Jan 2026 17:01:18 +0000
Files and hashes:         1: CiINqbbilYVbYn_qYQ4cthZGiUs.crl (hash: 5J11jRlSrWM2C2Y+SogMYFZdA1T3Z0GAqGh3NxNzEg8=)
                          2: rXLqqCZ5hf5h4ak7-J87ANzm0Nk.roa (hash: mVE+xG0sJPMu7e4f75e+8AtJaA+JDEMEjzG8yFMRLQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 17:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ae:01:4a:7e:30:35:9a:43:a4:ca:f4:b0:fd:0f:09:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a220da9b6e295855b627fea610e1cb61646894b
        Validity
            Not Before: Jan 11 17:01:18 2026 GMT
            Not After : Jan 12 17:01:18 2026 GMT
        Subject: CN=1c250716172a98bf0c81f0a452640e5fcb6aa17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:db:cb:f6:38:d1:17:8f:4f:05:16:eb:b2:6e:
                    98:36:d9:ed:fa:1f:20:74:08:5c:a5:33:9f:79:ea:
                    da:7f:17:9d:db:24:02:4f:69:88:20:02:c6:62:a4:
                    29:cf:84:ad:5b:45:ee:44:7e:fb:25:ee:98:ce:bf:
                    61:43:1b:57:ce:01:8a:f6:a5:e1:fd:0a:72:06:5c:
                    e6:2e:fa:73:90:0d:58:6e:00:2d:3d:9f:1c:7e:60:
                    3c:b2:3e:64:bf:32:03:e9:2a:33:c6:0f:0c:d0:5a:
                    95:87:65:4b:ee:76:46:a9:77:07:e4:1c:a1:dc:71:
                    8a:b9:c8:cc:f5:c5:26:24:4f:d8:a6:ff:2e:32:cd:
                    1e:26:0e:1c:1b:cd:26:d5:11:b2:39:85:d7:8c:46:
                    15:d7:d6:d7:b3:96:62:94:d0:50:e0:bd:b6:bf:9d:
                    c9:c3:3e:70:29:99:d0:f5:75:95:c6:cb:6c:5f:4e:
                    f5:d1:b7:89:f5:fc:b1:5c:fe:85:23:d1:04:ff:43:
                    e7:6c:46:93:f8:6c:b3:bc:9f:65:1c:29:29:4e:93:
                    78:40:67:3d:81:6a:66:00:8b:3a:bd:69:3a:1d:47:
                    49:eb:9d:e4:79:53:80:ee:17:a2:bb:3c:d4:da:e2:
                    73:3c:aa:d8:9b:f5:ec:d9:41:4c:48:c8:78:24:60:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:25:07:16:17:2A:98:BF:0C:81:F0:A4:52:64:0E:5F:CB:6A:A1:7E
            X509v3 Authority Key Identifier:
                keyid:0A:22:0D:A9:B6:E2:95:85:5B:62:7F:EA:61:0E:1C:B6:16:46:89:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiINqbbilYVbYn_qYQ4cthZGiUs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/981839-9dfa-42d3-acb1-6218828ed896/1/CiINqbbilYVbYn_qYQ4cthZGiUs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:22:77:e3:16:ae:c2:e8:3d:18:39:d0:89:2c:eb:92:bd:ed:
         31:13:be:2a:dc:cd:70:47:12:4c:78:09:ac:77:d8:b2:81:f5:
         ff:3b:a2:a5:28:9f:ee:df:e2:0c:66:d1:46:59:87:9e:fa:dc:
         93:da:2a:18:94:62:6f:66:28:6f:de:85:82:68:5b:85:20:31:
         e5:7e:eb:bc:a9:b1:74:33:54:2a:24:49:22:f9:cd:84:d2:5b:
         20:bc:cd:cb:a6:94:6a:c4:77:8b:b5:ea:3b:62:2d:da:be:ac:
         77:ee:8a:0c:ed:5e:66:4d:f3:99:a3:7a:c8:e3:1c:5c:cf:7a:
         79:18:1a:89:5b:6a:ae:13:9d:12:2a:9f:59:11:28:c7:f7:ab:
         5f:a6:cd:c1:20:58:43:ab:f6:59:a0:29:a0:66:f1:79:6d:06:
         56:f9:d2:35:81:29:84:5f:69:e3:26:cd:db:2a:94:3b:87:6d:
         d5:79:a6:53:68:51:53:3f:53:ab:30:85:e3:10:19:98:cd:9f:
         78:c0:04:5e:ee:3e:6e:a1:93:13:b0:76:00:12:14:05:0d:19:
         99:7b:76:b4:bf:25:9a:2f:9c:b9:26:5d:34:35:43:a6:2a:c3:
         1d:d8:17:6f:98:16:97:b2:88:27:b0:47:31:bc:cd:1a:0c:cf:
         b3:70:d3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:56:40 2026 by rpki-client