This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
File:                     ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft (raw, json)
Hash identifier:          gVrCDwqLETmn/tKvuI4pzTb46pYx+3DrhQRRTLwBsUA=
Subject key identifier:   B5:44:B1:43:02:8F:FF:0B:68:E0:05:C7:67:31:58:23:0D:9C:53:70
Authority key identifier: 66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22
Certificate issuer:       /CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
Certificate serial:       019BF7D17F64A99AAECAFEE50DC5C18123AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
Manifest number:          13E6
Signing time:             Mon 26 Jan 2026 01:01:00 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:00 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:00 +0000
Files and hashes:         1: G2vY-XyuXPEnGT50VL_DR2MGs8Q.roa (hash: FvP89IRchdhDOJHirpo71l3u2H6iIX16MtsmawYXGPM=)
                          2: ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl (hash: RVpyoutaQucUUfgtbmF/ttM5uQW3+qAmfZAq/j8GNh4=)
                          3: qGKXqkQ2oiJ9zvb8d_lurIkeU6E.roa (hash: wXMPkR08yI/8IECW5Ighi7GQrII+Bv0ovubrEn3k1cs=)
                          4: wBsX-GYO-aEIdD-OnXmUqDDMdy8.roa (hash: rlyJ+Y0bf63UimFOrSGhNhA9pMMoo7xQfy3KPHlY1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:7f:64:a9:9a:ae:ca:fe:e5:0d:c5:c1:81:23:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6689c3995e2461d5a52fd4f1000782f99a4d4822
        Validity
            Not Before: Jan 26 01:01:00 2026 GMT
            Not After : Jan 27 01:01:00 2026 GMT
        Subject: CN=b544b143028fff0b68e005c7673158230d9c5370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f4:94:88:da:ff:ba:59:bb:80:73:81:ac:ae:
                    51:b6:95:d8:bf:4a:c4:c6:d3:92:f1:b3:87:03:48:
                    ae:2d:74:57:bf:04:bc:f1:db:01:51:15:64:f6:bd:
                    e2:46:1d:7e:02:15:90:9b:3b:70:54:56:41:13:b7:
                    ac:4e:4c:06:5d:10:a9:fd:3a:03:b7:96:22:8e:45:
                    5e:f9:0e:0e:5b:a0:02:85:c7:ca:d1:f1:3b:dd:47:
                    b3:ff:9f:be:72:db:90:06:e9:ea:2e:f3:32:ab:1e:
                    4b:fa:15:01:61:64:a4:c6:e3:1d:72:f2:06:84:86:
                    06:9c:f5:e2:f6:39:14:f5:29:35:7f:05:29:9f:d5:
                    c4:a1:9f:16:86:c9:e0:5b:09:4a:24:04:c7:9c:70:
                    e8:47:33:e9:8f:68:a4:53:8b:a0:af:c9:32:c0:c1:
                    17:af:74:08:98:51:67:4a:3a:57:63:fe:a7:1e:dc:
                    bf:00:9a:bb:bb:28:78:85:17:91:99:e2:18:9f:be:
                    25:c4:c8:04:a6:d6:11:7e:11:30:b4:fe:83:4c:81:
                    8f:d9:55:df:cb:c0:2a:f9:6b:25:a3:c5:08:76:c6:
                    13:f9:aa:be:bc:ad:c0:60:a6:3e:8d:12:e9:de:e8:
                    14:e6:61:80:a5:47:7c:79:81:c3:45:7f:ed:60:8f:
                    25:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:B1:43:02:8F:FF:0B:68:E0:05:C7:67:31:58:23:0D:9C:53:70
            X509v3 Authority Key Identifier:
                keyid:66:89:C3:99:5E:24:61:D5:A5:2F:D4:F1:00:07:82:F9:9A:4D:48:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/346966-069a-40b0-b143-41eaa1fde11b/1/ZonDmV4kYdWlL9TxAAeC-ZpNSCI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:33:12:bc:8a:94:40:46:82:50:85:5e:94:6c:b0:69:9f:ce:
         a7:85:ae:7b:a0:a0:72:ef:d8:5b:41:59:e7:50:cd:10:81:65:
         d5:7a:12:d1:e2:15:9f:23:04:bc:99:7a:ca:b2:63:4c:bf:65:
         ed:7b:f6:77:cb:fd:dc:a5:68:f9:e9:31:c6:0f:77:53:96:02:
         2e:04:0e:8a:cd:05:ff:8b:2f:a2:52:ef:9e:cd:82:15:85:8b:
         e3:fc:5e:b0:f6:98:fe:c6:de:49:89:b4:e3:db:b1:5d:ed:56:
         03:78:e0:e9:ee:1c:f5:11:d8:f9:77:85:51:d6:0b:a1:78:42:
         71:3f:f4:4f:df:19:6b:64:cb:eb:1a:77:7a:73:3e:05:6d:ca:
         6e:59:4d:f1:aa:b3:92:99:be:51:1a:07:96:cb:d7:80:f0:91:
         6a:37:98:82:69:b7:85:24:03:68:40:e0:8f:2d:9f:54:74:58:
         c0:fa:b7:3d:38:09:64:83:c2:83:0c:90:d8:6d:1e:f9:6a:90:
         8a:5b:76:3e:f8:23:c0:29:54:8b:3f:63:d2:41:fe:c4:45:17:
         d8:35:c4:f8:7d:73:d5:af:58:cf:64:c9:6b:40:9d:54:13:c2:
         72:07:c3:93:e7:3d:cf:66:31:8a:a3:25:aa:6e:27:5c:8d:54:
         d1:89:e5:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:36 2026 by rpki-client