This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
File:                     ZHVxhUcvFtU-62ihQONRP6McMdg.mft (raw, json)
Hash identifier:          f6m64gc1t3CQHjAVZKtZHffRmSi5imdRbanOjRWzcfE=
Subject key identifier:   94:E2:69:F5:5C:97:A6:EF:D0:1E:55:1B:B8:2C:4D:06:00:E5:A1:9E
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Certificate issuer:       /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial:       019BF8ACDE2EF6C19C2126C9DA30A3C45FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
Manifest number:          10C4
Signing time:             Mon 26 Jan 2026 05:00:37 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:37 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:37 +0000
Files and hashes:         1: FIc01Lo1yeWxE-xTe7CiddAVpBk.roa (hash: hMcJ6OK+PeXHDyYgCQtCCTDn1eungDLXByvXPV4zXXA=)
                          2: ZHVxhUcvFtU-62ihQONRP6McMdg.crl (hash: A/0e0z2bEuYFZTTPz8Rsbl1iLqS8HT15uoXectlEWrE=)
                          3: n9G4PwDSvg3JXpVqBL9fxfextGk.roa (hash: ISD2QN6R10mZDVwEXSrMdj+oKlZVAdmDz7rQAXDL/g0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ac:de:2e:f6:c1:9c:21:26:c9:da:30:a3:c4:5f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
        Validity
            Not Before: Jan 26 05:00:37 2026 GMT
            Not After : Jan 27 05:00:37 2026 GMT
        Subject: CN=94e269f55c97a6efd01e551bb82c4d0600e5a19e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8d:e3:a4:2e:5e:2c:ff:58:af:af:44:d1:c4:
                    a5:4f:7a:60:66:6a:0b:c7:86:84:30:5d:75:61:85:
                    4c:84:62:60:10:cb:e2:63:a1:bb:b6:ca:20:35:86:
                    78:32:79:92:9c:88:6f:91:a3:f3:44:40:4d:1e:48:
                    fb:03:ca:b2:9e:08:54:6b:af:a1:b5:11:cd:c2:80:
                    8a:18:74:85:74:c1:f5:c9:34:da:6f:03:6b:c5:8c:
                    6a:57:27:ff:0d:94:86:69:eb:dd:31:59:35:58:7f:
                    52:f3:f9:97:11:69:7d:e1:06:3b:3a:c9:24:00:fe:
                    0a:b7:fa:e5:cd:af:cf:ae:05:97:23:70:ec:b8:54:
                    23:7c:8b:d9:43:0b:bc:36:3b:e8:77:ba:66:e1:32:
                    97:3d:fc:f2:7d:27:63:5b:75:88:d3:8b:a4:4d:a0:
                    51:05:9f:22:40:a5:6f:8b:81:64:21:db:b5:56:9a:
                    2f:90:9d:06:5b:54:2d:65:51:6d:b4:12:cb:30:f6:
                    04:e3:1e:13:4f:36:f7:8a:03:ef:54:a3:0c:7c:e0:
                    f5:b4:7b:33:74:5c:02:f1:1f:00:e7:45:72:e6:81:
                    7b:c4:5e:93:58:a2:cf:2f:d3:d0:56:3d:1f:93:59:
                    5b:dc:89:29:89:af:8f:1d:ef:21:f4:09:40:42:e6:
                    54:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E2:69:F5:5C:97:A6:EF:D0:1E:55:1B:B8:2C:4D:06:00:E5:A1:9E
            X509v3 Authority Key Identifier:
                keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:da:4a:d0:86:c1:c3:d0:6c:88:22:d0:11:71:ef:e3:31:50:
         88:37:56:01:22:75:cb:1c:0e:12:76:95:35:00:a2:60:ed:93:
         89:c2:76:10:a6:c5:e1:5f:fd:f0:95:ad:9b:28:e9:77:65:79:
         7c:18:10:69:f5:d6:8d:ef:db:c3:09:f1:d7:c6:8a:70:e6:32:
         38:71:a9:27:ff:31:62:b2:bf:eb:cc:6e:10:04:b8:a3:07:92:
         41:ed:65:8d:6f:61:9d:bc:a8:e3:ef:37:a6:ff:74:a6:64:f3:
         2b:99:d5:f0:7d:9c:5c:6a:97:8a:f7:40:7e:aa:0a:06:86:e2:
         72:1d:40:75:cd:02:30:c3:4c:36:7d:aa:bc:c9:29:c0:21:4b:
         e9:b3:21:22:cc:1a:88:e5:30:67:c9:e8:69:d4:82:da:1e:be:
         86:6a:e3:ad:60:41:b4:a5:77:9f:46:70:73:b1:66:c1:77:bf:
         e0:81:c3:b6:8d:d3:7a:d5:c8:ee:30:48:49:ab:9c:d8:57:63:
         4e:28:dc:76:35:aa:0f:ac:06:35:f4:c1:0e:d0:c1:8a:46:26:
         dc:97:3d:8a:b3:0c:c6:b7:7d:54:15:39:02:82:f3:04:dc:47:
         cc:50:1b:06:b4:a7:9b:05:e5:1f:14:4a:79:da:f5:44:bb:0d:
         0d:48:40:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:48:07 2026 by rpki-client