This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
File:                     S-zMnRp26RRpy2OxK_cl1966-xs.mft (raw, json)
Hash identifier:          85dEmMgZ8xmxGV+u1p0O2MrP62XiPkIeTTrWg4cCzBg=
Subject key identifier:   A7:4B:66:CF:BC:74:7D:23:BA:41:B0:47:9D:70:8C:C7:2A:78:FF:82
Authority key identifier: 4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B
Certificate issuer:       /CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
Certificate serial:       019BF6518AF64648A49EB71D2B05DCD0E263
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
Manifest number:          0DF0
Signing time:             Sun 25 Jan 2026 18:01:37 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:37 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:37 +0000
Files and hashes:         1: 2_k_HZd8W3XpuxNJe50aSdmXyGk.roa (hash: fblUX67x5XT5dcCCQ4gbZ0xddj2udVIWNnjAZBdQkUU=)
                          2: 5w2GQsmluME7TY1nPdqfrlgiIhU.roa (hash: YsFPorWldlvTTXN7yy0IuoUUD15lyphFyE2sSDvKCEA=)
                          3: S-zMnRp26RRpy2OxK_cl1966-xs.crl (hash: D9OVRiT+IwRBbEHL9A92rWlCQg/T+LDvph0LU1tGBtY=)
                          4: SO3BlzN82wuSE26PkAHoL9gdWK0.roa (hash: 2lTdc7W5+lUgsLYun9vUAbt/KzErih08Dxdrvh4+kG8=)
                          5: lGdSHulI1aCQa7Y7_s7DEeMThKg.roa (hash: DuDTAKwJ9a+im27pqZxeXh7ZRg71UIpf2vEZIS5LbXg=)
                          6: xzU_R1urm6OQwv7-i4Miu0Lg7FI.roa (hash: 83vwjevGkm7TeLLNTTDiOn/v2zo45wBKwUV/hw2Ppgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:8a:f6:46:48:a4:9e:b7:1d:2b:05:dc:d0:e2:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4beccc9d1a76e91469cb63b12bf725d7debafb1b
        Validity
            Not Before: Jan 25 18:01:37 2026 GMT
            Not After : Jan 26 18:01:37 2026 GMT
        Subject: CN=a74b66cfbc747d23ba41b0479d708cc72a78ff82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:54:06:8b:ca:96:dc:47:ed:c5:a8:50:00:
                    d3:c3:4f:91:c8:3d:35:1e:f8:7b:6d:17:b0:83:3b:
                    89:f5:67:de:19:eb:a2:56:a4:97:0f:b3:13:b6:83:
                    d3:ed:f5:0e:96:d1:df:bd:c9:4e:2b:d3:e7:c4:b1:
                    d3:3a:83:0b:48:d7:10:87:60:c5:c9:40:83:eb:dd:
                    dc:3f:56:35:11:15:c1:d8:90:6c:55:93:e2:90:ea:
                    c1:43:da:ee:ed:54:c2:af:40:66:02:ad:50:ac:c1:
                    04:39:e7:9d:8d:c9:1b:97:4f:98:68:92:38:b2:04:
                    17:3e:ac:98:0a:8e:02:41:4d:cf:7e:08:dd:00:db:
                    44:83:43:a6:ca:4d:8f:26:9c:49:58:f9:88:82:68:
                    8b:13:1d:ac:8f:3f:7a:5d:91:a4:ad:cc:11:2e:40:
                    ff:7f:34:c2:6b:dc:cb:53:a7:d6:1b:11:ed:c9:37:
                    c6:43:32:5d:d3:a8:dc:76:1c:f7:fe:c4:f1:68:ed:
                    e0:81:e6:cb:de:b4:b6:82:62:a4:76:b1:d9:90:4e:
                    83:07:9b:4a:08:83:4e:9d:0b:d9:e1:6b:f8:ff:93:
                    0c:8f:51:3a:fe:51:02:d8:e4:ab:30:4c:95:b2:c2:
                    d7:81:1d:c9:4d:e9:d1:a8:a6:bb:4d:56:8e:f5:c5:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4B:66:CF:BC:74:7D:23:BA:41:B0:47:9D:70:8C:C7:2A:78:FF:82
            X509v3 Authority Key Identifier:
                keyid:4B:EC:CC:9D:1A:76:E9:14:69:CB:63:B1:2B:F7:25:D7:DE:BA:FB:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-zMnRp26RRpy2OxK_cl1966-xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/768f14-a721-46f0-9199-4f4b994e0eb2/1/S-zMnRp26RRpy2OxK_cl1966-xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:a4:23:e8:ef:f9:1e:22:ba:e9:ee:ef:1d:bf:c8:73:f6:
         d9:a4:93:2c:00:99:35:d2:39:c0:c6:5b:b6:ae:81:b5:1d:c6:
         3f:46:93:ce:cf:e7:46:a4:0b:a7:81:51:9f:35:97:95:e9:27:
         df:db:cc:ae:ce:7e:5f:5e:09:c9:91:3e:e9:0b:7c:ea:57:03:
         56:f5:ba:66:60:f2:b2:b0:59:d8:18:4c:55:74:ec:e7:c9:35:
         7a:67:15:e1:df:6e:cb:a8:95:de:74:e4:09:c4:3f:38:7d:45:
         e7:32:af:6c:4c:e3:6f:a5:64:2e:17:f0:02:4e:cf:73:1d:78:
         31:47:eb:a6:e1:c9:79:d4:d3:cb:c5:fd:9c:c0:04:c5:c4:00:
         d5:58:70:82:c3:85:07:e8:2d:c1:08:00:a9:5b:89:44:15:77:
         f7:ac:21:9a:94:ae:8c:f3:29:7f:1e:c5:a1:8c:37:10:f8:e4:
         bc:a1:92:0b:5e:e6:8f:2d:1b:8b:67:9d:fa:2a:17:d8:aa:85:
         42:0b:c2:67:55:37:0e:7a:6c:98:32:87:d8:8d:85:e4:c9:4c:
         a7:57:c8:b7:e2:e4:23:16:0a:d5:c3:a4:d7:f2:ed:54:63:e9:
         56:f2:13:d1:3a:2a:50:38:dd:9b:cc:6d:ed:d3:ec:16:d7:dc:
         63:23:9f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:52 2026 by rpki-client