This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
File:                     dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft (raw, json)
Hash identifier:          G2wE5I2U4RkDqZM+Gk9qgZWPnoKYQWyRNg/EcNY8hGs=
Subject key identifier:   CE:05:6A:2E:2B:E9:D4:00:94:4A:58:AA:52:FC:24:15:1B:14:45:84
Authority key identifier: 75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED
Certificate issuer:       /CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
Certificate serial:       019BF4D0DBF88085D3344223CB633CEF51B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
Manifest number:          3B
Signing time:             Sun 25 Jan 2026 11:01:27 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:27 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:27 +0000
Files and hashes:         1: 5vgf_9aZThkj_7VAzPV1SdycQ9s.roa (hash: WWuwQNMz2jPS1Lz9ZyTa8kKgvLVWvH3DolJRQpBYZVw=)
                          2: ZUFdt76XEIRqjB1ZsCU8KDPIIeE.roa (hash: +22Qmq4Y9pNmDRsynGIXRX9EtOmlc0lMrcEc8jeBxvw=)
                          3: dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl (hash: ePsdM+u7IkRwwtsVldHJiCA/d33LX2jzw+LsTfLhwfM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:db:f8:80:85:d3:34:42:23:cb:63:3c:ef:51:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=759c7a4a7a0eae488137739bec71a2b32470f8ed
        Validity
            Not Before: Jan 25 11:01:27 2026 GMT
            Not After : Jan 26 11:01:27 2026 GMT
        Subject: CN=ce056a2e2be9d400944a58aa52fc24151b144584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:89:dd:32:c9:2e:c5:8b:e7:ed:b8:d7:7a:40:
                    ea:c2:40:8f:22:f2:ef:32:8c:da:ed:ce:13:9d:3d:
                    5b:cc:18:10:31:9d:33:8b:81:94:a4:70:db:f1:f7:
                    ab:af:b8:b1:8f:f2:4e:ab:62:ec:c7:1b:95:67:2b:
                    ba:d8:76:df:52:fc:32:f8:1f:15:d2:af:89:1c:9f:
                    65:3f:e2:b3:ed:7a:a8:f2:31:81:fa:e3:c8:e4:0e:
                    21:fb:d4:4f:ae:00:65:5a:ed:bb:02:21:03:96:8b:
                    2a:a1:48:a0:29:8b:b8:02:a1:a5:dd:dd:7a:64:b9:
                    fc:25:4d:90:48:1c:2b:35:25:51:f4:11:06:14:68:
                    cf:98:1e:85:16:53:ed:f0:3b:f8:fa:f9:17:3d:c8:
                    9d:88:1d:01:29:cd:ad:55:eb:35:71:b1:60:4e:fe:
                    6e:24:8a:a1:e3:eb:dd:c8:02:e1:2a:07:68:59:6f:
                    e7:94:08:c1:b4:6a:bb:be:ee:06:75:93:7c:56:48:
                    ca:7c:82:1b:27:f8:f4:df:03:aa:85:2e:95:48:e9:
                    3d:0b:d2:54:3a:e9:9e:cd:72:df:9a:0c:f7:58:43:
                    eb:86:bc:95:49:ef:fc:e9:2b:63:27:38:b1:84:73:
                    bc:12:ee:d7:ab:46:5f:ed:b1:9e:dd:aa:ac:0b:de:
                    75:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:6A:2E:2B:E9:D4:00:94:4A:58:AA:52:FC:24:15:1B:14:45:84
            X509v3 Authority Key Identifier:
                keyid:75:9C:7A:4A:7A:0E:AE:48:81:37:73:9B:EC:71:A2:B3:24:70:F8:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZx6SnoOrkiBN3Ob7HGisyRw-O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a5e8d5-3264-46b2-8026-a39a9c775a50/1/dZx6SnoOrkiBN3Ob7HGisyRw-O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:9e:4c:da:b6:ec:b8:90:70:8b:1a:a5:66:bc:38:51:cf:a2:
         e9:e6:e6:f7:25:82:1c:2c:ae:2c:79:dc:00:b5:68:c5:97:7a:
         8f:10:a4:da:00:7b:43:7c:63:87:a7:fa:2a:7c:9c:04:90:75:
         4e:d5:48:24:22:4a:ee:30:9c:fe:d9:21:28:bd:7d:5c:6b:cd:
         1d:a4:8a:23:ed:0d:42:36:4a:c0:84:f1:d6:71:d3:ca:06:27:
         a0:7e:27:99:79:75:4e:5f:cb:55:73:a8:21:b7:1e:f2:d3:57:
         7a:76:80:bd:30:ed:b6:b2:a0:86:38:db:49:a2:63:50:d3:ea:
         6a:fd:91:9b:64:09:e6:8e:d5:40:99:8e:f6:5b:86:5e:a3:a7:
         14:aa:0c:ac:30:1b:8c:ca:fe:1d:97:14:c4:77:80:af:9d:4a:
         e4:f2:f8:11:35:63:f5:be:e1:f3:99:69:d6:52:c0:c6:7b:8e:
         c7:b1:43:47:e8:95:1d:3e:af:99:6a:1a:c6:62:6a:e5:0b:b4:
         fc:6d:89:5d:53:5d:90:3f:9a:20:a3:ab:39:89:11:2c:f2:6b:
         36:d7:41:2d:98:45:83:88:32:1b:b0:5c:4c:05:bf:f1:33:2e:
         e1:70:e7:36:16:2e:ba:ed:6d:95:1c:3b:b3:06:5b:4e:e2:8f:
         e0:7e:69:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:11:37 2026 by rpki-client