This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
File:                     P2U3Wk029crhof4kWKOAUmz-22o.mft (raw, json)
Hash identifier:          vu+N1OkPWvOow3ALjyRdPmp0okvKmOvuFxWJaerpsyk=
Subject key identifier:   A3:7F:D4:57:50:55:D6:3B:47:15:BF:6A:04:62:3B:8E:1C:C6:9E:40
Authority key identifier: 3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A
Certificate issuer:       /CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
Certificate serial:       019BF574EEC69F0997113379DF3C512EA8C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
Manifest number:          0346
Signing time:             Sun 25 Jan 2026 14:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:39 +0000
Files and hashes:         1: 8WGCMkLHivRZtBn2lCr7Peb5fB8.roa (hash: Lec00BWr1FDj5Se46w/SW9Oe5vFyDVib4D6WgGcoj3Q=)
                          2: P2U3Wk029crhof4kWKOAUmz-22o.crl (hash: A278bz4jDhbb3aua1HtV8il1yNftZqTiJKkgkHpr/MI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:74:ee:c6:9f:09:97:11:33:79:df:3c:51:2e:a8:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f65375a4d36f5cae1a1fe2458a380526cfedb6a
        Validity
            Not Before: Jan 25 14:00:39 2026 GMT
            Not After : Jan 26 14:00:39 2026 GMT
        Subject: CN=a37fd4575055d63b4715bf6a04623b8e1cc69e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3d:08:6f:42:6c:0c:64:2d:6d:53:f6:50:21:
                    9e:5e:d1:71:32:5c:3a:e8:a2:94:e7:a8:3d:ed:96:
                    89:18:21:51:00:73:11:c6:59:13:bf:d6:24:27:35:
                    dd:d0:61:27:8c:29:17:74:61:fa:80:67:e6:5b:eb:
                    91:8d:30:58:0c:8f:14:05:8a:cb:8c:07:68:f9:5e:
                    93:e3:db:74:a7:93:30:b9:c0:da:69:b3:2f:2d:54:
                    98:7b:bb:76:0f:16:65:e2:97:b1:d1:51:15:ac:ea:
                    ba:bc:76:62:5a:d6:ff:60:7c:38:b2:ae:85:65:fe:
                    87:ac:96:af:ab:8b:3a:17:b1:e1:a7:75:88:9e:44:
                    35:96:c9:fb:6d:74:bd:99:c4:5c:47:8b:2d:ea:f1:
                    2b:e9:28:b3:02:4c:31:3d:fb:ac:9d:75:8f:4b:c8:
                    b9:f9:60:dc:95:1e:51:dc:fc:de:68:b6:c6:51:93:
                    c3:2c:29:bc:7a:5e:1e:c3:cd:31:08:ad:69:b5:bf:
                    d4:63:b8:88:28:e8:40:ce:54:9e:73:cf:c9:32:b6:
                    b6:91:4f:ad:85:0e:9d:66:9e:69:e4:10:91:5a:4f:
                    da:ed:08:5c:ca:31:f4:77:e2:af:ca:96:f7:5a:2f:
                    ac:94:b7:d9:a7:9b:97:1a:8f:50:e6:bc:69:08:f2:
                    30:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7F:D4:57:50:55:D6:3B:47:15:BF:6A:04:62:3B:8E:1C:C6:9E:40
            X509v3 Authority Key Identifier:
                keyid:3F:65:37:5A:4D:36:F5:CA:E1:A1:FE:24:58:A3:80:52:6C:FE:DB:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P2U3Wk029crhof4kWKOAUmz-22o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6d1930-6815-487f-abe9-e2816ee6ba56/1/P2U3Wk029crhof4kWKOAUmz-22o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:37:1d:27:40:87:b2:7a:bf:7b:85:f2:0a:d2:38:ed:2e:4e:
         d4:43:46:c4:a5:7e:cb:02:0d:e2:00:80:73:46:cb:9e:f5:82:
         fe:08:c5:7d:9b:29:dd:53:15:03:00:ee:b7:ea:48:26:dc:fd:
         30:35:96:74:ff:f7:02:25:c9:c6:c8:c4:1e:89:fc:60:18:b7:
         26:b2:69:f2:60:35:0a:84:33:f2:42:3e:2a:bc:65:79:74:e2:
         68:b9:f3:d3:37:98:ad:e3:e8:cc:e7:5e:23:dc:45:d2:6e:e2:
         4f:40:49:8b:dd:5a:00:20:3d:c2:4b:e3:2e:b0:47:7b:19:fe:
         92:d3:9e:50:36:44:e6:ed:81:87:43:b7:a1:64:8c:e2:0e:61:
         ea:a8:e8:23:72:30:c9:a2:aa:e1:92:a1:61:e1:08:0a:bb:3c:
         f1:f7:4a:07:7d:63:1f:30:5f:09:5c:3f:ee:83:6f:08:a0:83:
         db:5f:1d:37:95:dd:67:f5:48:97:60:5d:00:4c:2b:4e:71:19:
         9b:e2:43:78:35:5c:08:93:e1:b2:f9:c0:f8:b2:2a:47:f0:98:
         77:26:f8:45:55:56:5e:e8:0b:92:4f:b7:ed:b1:a1:46:31:cc:
         4e:10:d5:f6:a6:fa:87:55:1d:c2:f7:b7:54:1b:05:52:de:09:
         5c:2d:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 23:55:23 2026 by rpki-client