This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
File:                     PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft (raw, json)
Hash identifier:          vtDI1+6dMwLp1ltD2uxZq9NwQnjDJR1HDMKAy2d9VUg=
Subject key identifier:   C9:4C:B2:11:A5:58:DC:41:3E:E9:14:9E:55:16:76:56:26:F7:D3:3A
Authority key identifier: 3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3
Certificate issuer:       /CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
Certificate serial:       019BFD662AC0F11D6E427C9047C51E4C14AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
Manifest number:          075B
Signing time:             Tue 27 Jan 2026 03:01:29 +0000
Manifest this update:     Tue 27 Jan 2026 03:01:29 +0000
Manifest next update:     Wed 28 Jan 2026 03:01:29 +0000
Files and hashes:         1: 1-eiN7B-RFScdE21_gJKHIITSXjg.roa (hash: 1ehBu7W42prULVp42w/k9Sm9INGVI1W18EKu86GiRBg=)
                          2: PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl (hash: Q3RvlxCLgpYabmnalpcCophT6hziVwgLdScsgezMUV0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fd:66:2a:c0:f1:1d:6e:42:7c:90:47:c5:1e:4c:14:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2595f26659fc74db8832d5da23b0e9e367fcb3
        Validity
            Not Before: Jan 27 03:01:29 2026 GMT
            Not After : Jan 28 03:01:29 2026 GMT
        Subject: CN=c94cb211a558dc413ee9149e5516765626f7d33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:39:d5:85:05:1b:6d:03:6a:10:20:a3:0c:d4:
                    9f:d5:29:f1:8c:6c:9a:fd:1a:cc:22:4c:50:69:c8:
                    4e:36:23:ad:56:90:ea:d0:fc:25:8c:97:d7:f0:ab:
                    fb:a5:83:d5:7b:c6:ff:59:ad:41:00:66:39:15:ed:
                    fc:31:a7:50:55:55:b4:cd:f0:b8:e8:c1:bb:42:cf:
                    72:7e:6e:90:cb:45:a4:44:3f:db:42:b9:b5:e9:ac:
                    c7:19:43:d5:a3:b9:ef:c8:36:6f:57:df:31:f7:0d:
                    4f:b1:ff:50:a2:62:da:96:5c:99:8e:16:b5:59:e6:
                    a1:ec:ba:8c:5a:16:55:b9:cf:bf:4e:0a:0b:b5:11:
                    f7:b0:83:94:7e:49:4c:7f:dc:31:b6:0b:06:31:1c:
                    06:b0:c3:8e:8e:e2:53:01:58:0f:72:15:fb:f8:9e:
                    da:56:d0:46:9f:25:8b:af:2d:0d:b1:f0:85:f1:b7:
                    b0:93:39:78:a6:1c:79:9d:92:d3:a4:d9:6f:5c:fd:
                    66:2b:a5:c4:13:a7:83:0e:2f:15:56:92:e6:0f:21:
                    85:8d:15:24:7e:d5:d6:01:1e:2f:1b:5f:fb:af:18:
                    84:73:f2:9b:eb:0e:9b:ca:e2:2e:f2:b4:54:66:a6:
                    29:6b:38:91:fe:e8:77:e3:6e:3c:25:41:b5:ab:e0:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:4C:B2:11:A5:58:DC:41:3E:E9:14:9E:55:16:76:56:26:F7:D3:3A
            X509v3 Authority Key Identifier:
                keyid:3F:25:95:F2:66:59:FC:74:DB:88:32:D5:DA:23:B0:E9:E3:67:FC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/293cbf-cd5c-4ee8-b71e-f6666909dd4a/1/PyWV8mZZ_HTbiDLV2iOw6eNn_LM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:1f:80:10:78:47:23:2c:f1:7c:b8:29:08:76:e8:58:73:fe:
         64:0a:72:c9:34:15:78:a1:aa:4f:87:c8:bf:7d:7e:e4:19:9c:
         24:63:2e:14:cd:28:d5:bf:7b:ef:d1:c0:a2:cf:ff:37:e9:5a:
         02:46:51:b9:92:47:1b:a2:91:68:bf:b7:ab:43:a6:77:19:77:
         08:77:28:a8:7f:9f:2c:79:1f:b0:e1:1e:c2:04:02:a9:2d:6e:
         05:58:0c:45:00:42:a5:f5:e2:cf:a2:2f:25:85:ea:f4:c2:9e:
         03:22:ba:33:f8:54:a0:ad:79:aa:46:c0:5a:86:ac:ff:8d:47:
         cd:25:07:1f:8f:07:91:71:26:63:46:85:0a:c0:d1:fd:55:3d:
         69:35:5d:86:c1:02:59:a5:3d:cf:5a:1c:80:dc:0c:28:74:aa:
         67:4a:97:d7:86:70:c3:c0:e1:b6:7d:c4:85:f0:1a:9b:ce:8a:
         76:b2:ca:22:4a:ce:43:72:98:e9:f3:28:89:c7:a3:8b:e2:32:
         38:3d:65:69:b9:09:39:20:c4:2a:66:88:7e:1e:97:e2:c3:e1:
         14:c3:d7:01:ea:d7:e1:76:52:5b:5d:d9:6a:3e:48:ca:84:db:
         1e:46:be:6e:31:fa:e0:7e:c4:80:8f:e9:0d:71:24:a8:f4:05:
         3a:67:f9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:27 2026 by rpki-client