This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
File:                     zTlHV-FBYgKkAilW2_SNcHRYUgw.mft (raw, json)
Hash identifier:          VCOpErtVtrMgGb9luxBbtwoJN8ewJC2gqFaJtmfEJNk=
Subject key identifier:   75:21:86:AD:A2:9E:F9:B4:5D:BC:16:49:BB:BF:C0:39:83:74:FC:39
Authority key identifier: CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C
Certificate issuer:       /CN=cd394757e1416202a4022956dbf48d707458520c
Certificate serial:       019BF2AB29C4638ED435C100E75A2D1AD710
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
Manifest number:          1091
Signing time:             Sun 25 Jan 2026 01:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 01:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 01:01:02 +0000
Files and hashes:         1: 5GenFMQsSYDx9FcfiAXgf9Uomdw.roa (hash: 4H+3cPhJ7oDZNP6D43X5l+hl9KT5PURFIDgzFceABtg=)
                          2: 5Zndcb8EJc7nslqP_7KqvtkxJPw.roa (hash: ogNnDwO6cHFOhG9TbGz5GUJ2wMKx53CTMIlKdOAYy7U=)
                          3: zTlHV-FBYgKkAilW2_SNcHRYUgw.crl (hash: SiAKfxpHaj85XugQSJs7bQZ14ewFDIO2ZmadaYnyYkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:ab:29:c4:63:8e:d4:35:c1:00:e7:5a:2d:1a:d7:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd394757e1416202a4022956dbf48d707458520c
        Validity
            Not Before: Jan 25 01:01:02 2026 GMT
            Not After : Jan 26 01:01:02 2026 GMT
        Subject: CN=752186ada29ef9b45dbc1649bbbfc0398374fc39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:23:4e:eb:7b:a6:f2:e0:9d:0b:71:a1:c6:40:
                    0b:2c:ac:50:ca:f5:f1:26:47:32:79:b8:4a:99:e3:
                    33:7a:39:a2:87:c5:dc:4c:27:06:9d:33:e2:05:37:
                    07:9f:41:d7:09:19:be:96:1b:c2:46:66:72:14:c9:
                    a1:5b:67:f6:4d:92:ef:86:f4:36:fc:22:d9:26:70:
                    15:84:9f:ca:66:a7:3d:8c:b4:a1:b7:83:e6:c1:3b:
                    34:fe:0a:b7:82:d1:46:12:a9:35:55:10:7b:25:c4:
                    49:f8:f0:77:8c:76:b5:a4:10:b3:b6:08:f7:28:8c:
                    b0:cd:e4:09:f0:a8:04:fa:14:fc:db:33:dc:e2:2f:
                    e6:61:50:17:d4:2c:0e:c0:6e:52:d4:68:c3:1f:05:
                    31:a6:13:f2:6b:ee:76:11:c9:91:18:96:03:18:06:
                    e0:f0:c8:c0:9b:1f:28:95:c3:f3:68:62:30:76:9d:
                    3a:cc:e4:83:c8:65:60:77:7a:f2:5c:53:25:02:a3:
                    05:18:76:91:a3:9b:08:05:59:85:b3:72:b9:73:1d:
                    ae:1f:c5:85:f2:a8:f4:d5:30:f0:3d:14:73:eb:02:
                    dd:06:54:3a:7e:fc:e3:0f:93:16:fd:bc:9f:0e:c8:
                    bf:de:f1:d9:08:14:ad:ea:89:56:da:94:65:a5:85:
                    ac:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:21:86:AD:A2:9E:F9:B4:5D:BC:16:49:BB:BF:C0:39:83:74:FC:39
            X509v3 Authority Key Identifier:
                keyid:CD:39:47:57:E1:41:62:02:A4:02:29:56:DB:F4:8D:70:74:58:52:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zTlHV-FBYgKkAilW2_SNcHRYUgw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/975e4f-6c26-44bb-9ada-2fc6d17f8b58/1/zTlHV-FBYgKkAilW2_SNcHRYUgw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a6:4c:5f:95:c9:27:2a:f7:37:02:b7:d3:04:29:ef:c0:f7:
         a0:f7:72:4d:12:44:6b:03:e7:c5:79:32:77:3f:3b:73:94:e9:
         24:1a:85:db:d7:a2:cc:04:79:2e:cd:13:9c:aa:27:f5:73:e0:
         69:5e:31:10:f0:56:dc:e2:51:14:bb:dd:25:a2:20:34:b5:6e:
         96:de:93:d4:de:0b:0e:0e:ac:28:99:6a:67:a4:1d:7b:d9:b6:
         34:1e:5a:64:24:c0:01:93:e8:28:4e:49:07:95:3a:96:73:c4:
         aa:07:95:40:c4:94:ee:e2:be:32:9a:1a:32:09:4f:14:07:a5:
         d7:25:6b:80:f4:68:9d:c7:8f:09:c7:3b:0f:f1:57:04:6f:96:
         3d:8e:7d:a3:4d:86:c6:38:bd:e1:36:c1:e3:79:f7:d3:4b:04:
         c4:a2:81:ea:ac:f5:98:25:7c:9f:db:9c:6f:f4:59:49:4b:51:
         8e:73:b7:24:ff:2b:bc:9b:b2:f9:b4:96:83:3d:c8:b6:82:9f:
         c6:a1:61:c7:e8:71:f9:5f:5c:77:5b:9e:2c:6c:7d:45:41:ad:
         e6:0b:43:7e:73:af:4b:a0:bb:fe:a9:fb:6b:b9:33:29:db:80:
         33:da:f4:77:fb:1e:29:6c:80:72:10:b8:8b:6b:66:34:76:83:
         6a:d2:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:36:50 2026 by rpki-client