This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          ozDk3kspiMQ+z5Z5Md6cvBgeanz0KB9nYuMOw1gBdTI=
Subject key identifier:   D7:F1:9A:39:22:D2:8E:CE:E4:A3:AB:40:A2:91:E1:3B:D6:0A:59:2F
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       019BF3BD6BEC9C852AD8C1459B602411A024
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          0FE3
Signing time:             Sun 25 Jan 2026 06:00:36 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:36 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:36 +0000
Files and hashes:         1: 1--457KV1-R-2AyDnu5gwQjLQg_o.roa (hash: 8N9wCT8kfIgyzoJcGZvHmJgv1bgcFxw3DbUmqgeqDIc=)
                          2: 4aqwAHha90l1eelclAQUVQR1I44.roa (hash: tcKMrTjhcN6vhODlC9CVcmb++R8Mkr/fDJOT6nlWeQ0=)
                          3: 9hzuEkfOLx6dbtvls8L-DK7YVvk.roa (hash: hKZSYd06joPWfMKvJuesIx8vrhQYzK0wkVb/y/gid8E=)
                          4: RBeFCjxIM7miAZu7QTFUMKs99XY.roa (hash: 632Ss4tpXpsH0DMtGlQw8IheEnppDKOHlGmiaPoTHgE=)
                          5: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: blme6q7w6p1ZSfqZN7qsAX0B+pJ8qSXz04oidbSDfZM=)
                          6: VQ1ZwOAbW4MS7xGndSVhitQi4Xs.roa (hash: oJkOn3Ta/qcPYaOJNNPCoBCLyVWoWrgC98ecap5l1lY=)
                          7: XmKu-2I9EccKqV84ztqSDMR-J2I.roa (hash: gKnGF5B+LDZV4EfMW7dOEXrS0a1zySfndm8GnHMA+Qc=)
                          8: gxpF5Ywmi9CVdy65UZl-VezFpFY.roa (hash: u4fV+dkW37+bQyCJf6mzLseCn34MI5XSnX8fv1o7KNw=)
                          9: jwno-855Ovj1-3M5zUJzR6aIImg.roa (hash: v10OVfxKZFL1KckYWItkzie2JuQkYgbQ7uuTgDSLZ4I=)
                          10: l6wS_VO91DxNt91DRsp0DvYwmuo.roa (hash: 22h/qy7HYLT12nuxMyq//AhQ3qbzsI+VO3MFY5icjPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:6b:ec:9c:85:2a:d8:c1:45:9b:60:24:11:a0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Jan 25 06:00:36 2026 GMT
            Not After : Jan 26 06:00:36 2026 GMT
        Subject: CN=d7f19a3922d28ecee4a3ab40a291e13bd60a592f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ee:73:33:a6:38:8a:4d:d6:6b:f4:e6:17:93:
                    c4:c4:95:fd:26:f8:c9:07:0c:be:df:2c:ae:90:cc:
                    8f:ae:e6:cc:26:55:1f:fd:5f:42:82:72:a2:10:ad:
                    f3:f3:9e:3a:e7:57:bd:1a:30:c6:e4:70:30:9c:df:
                    d5:aa:8e:43:07:4d:30:7d:3c:a0:2a:c5:f5:85:ed:
                    64:fb:3d:c9:6d:9b:63:5b:a9:e7:be:ea:7c:af:59:
                    ee:16:b1:14:09:49:12:b2:e0:0c:dd:70:df:52:88:
                    85:ac:8d:84:3b:cb:f7:ff:ba:cd:f1:6a:53:f5:45:
                    4b:e8:14:9d:b0:45:a8:17:90:b7:d1:a9:52:f8:ee:
                    61:12:1d:3f:cc:77:6f:6b:2f:00:79:4d:a0:08:70:
                    80:44:3f:81:28:0d:cf:31:19:79:88:bd:cc:9d:21:
                    84:2d:ff:fb:73:9f:34:55:41:55:2d:60:a7:a6:15:
                    14:33:37:e5:7e:04:14:72:7e:66:34:1d:00:75:f5:
                    89:38:0f:f4:63:76:ab:73:2c:ca:5c:b3:6d:14:10:
                    e4:2b:06:8d:69:02:e8:ad:16:08:84:0b:ee:03:61:
                    d4:32:18:39:1b:9e:ab:f2:67:d8:bd:47:d1:1f:4c:
                    83:bd:2e:86:7d:7c:52:6c:41:10:5e:ea:fb:e3:48:
                    c4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F1:9A:39:22:D2:8E:CE:E4:A3:AB:40:A2:91:E1:3B:D6:0A:59:2F
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:12:22:11:9a:30:17:3c:9f:ac:e4:a6:5e:52:f5:1e:5a:74:
         e7:4e:d9:58:13:be:25:b5:79:8d:05:6a:07:d6:7c:1e:26:db:
         36:82:3f:8e:02:1b:07:d6:34:ef:c7:6b:71:61:0b:81:d2:a0:
         12:2c:9d:6f:94:74:dc:2f:73:ea:39:ba:b9:31:0c:76:8a:35:
         b4:58:69:1d:dc:c3:21:22:8f:36:eb:77:1f:72:03:89:bb:c8:
         3a:59:3f:a6:2e:6a:c2:50:95:87:fc:0a:bd:4d:0c:0c:f9:46:
         ea:30:78:21:3f:8d:12:9d:ec:1c:ee:3b:28:fc:00:73:ac:6b:
         84:3d:3d:f3:ed:ca:95:6a:42:d5:dc:87:d9:6b:ad:3b:5e:94:
         1d:bd:34:a9:60:5b:cf:af:25:69:ad:23:b5:6f:46:85:67:33:
         97:20:7d:59:6e:2f:4b:3e:d2:51:1a:cf:45:44:99:8e:8b:31:
         43:49:8d:33:db:ff:04:ed:15:4d:4d:8c:b7:a3:84:4a:32:61:
         78:3b:8b:ee:db:c2:59:a0:d2:5e:6a:7c:24:9f:26:bc:86:6d:
         a0:6d:0e:b5:19:9f:24:b0:0d:51:43:31:8a:f9:81:68:54:ea:
         79:dc:e4:c2:13:bb:7f:4b:45:b6:9f:04:62:93:b2:2d:4c:4d:
         ba:e2:e1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:46:57 2026 by rpki-client