This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
File:                     P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json)
Hash identifier:          n5OC2IfPvJ4uSYCcdKyrZT2c6FEz2dBerSjnfzqSbV8=
Subject key identifier:   04:7A:EF:07:57:EF:0F:E3:87:32:CD:64:30:FE:1F:55:86:45:AB:5E
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Certificate issuer:       /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial:       019BF462C47E3455D9CE55FCF1C1B2C29521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
Manifest number:          180E
Signing time:             Sun 25 Jan 2026 09:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:12 +0000
Files and hashes:         1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=)
                          2: 4wMBnZXnbOtnzlZreBESG0005OE.roa (hash: skZKvqXWnRPa4nI3ThB/TrYjGRKVnazsk4dzqKlcPUw=)
                          3: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=)
                          4: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=)
                          5: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=)
                          6: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=)
                          7: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=)
                          8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: NzKR2mlNo5GeHBmZrQjgiL5Ao/rcHqUMFeEJE2yCLqM=)
                          9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=)
                          10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=)
                          11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=)
                          12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=)
                          13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=)
                          14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=)
                          15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=)
                          16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=)
                          17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:c4:7e:34:55:d9:ce:55:fc:f1:c1:b2:c2:95:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
        Validity
            Not Before: Jan 25 09:01:12 2026 GMT
            Not After : Jan 26 09:01:12 2026 GMT
        Subject: CN=047aef0757ef0fe38732cd6430fe1f558645ab5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:55:67:fb:d5:cc:5f:28:23:a3:ca:67:52:14:
                    3a:86:d4:53:62:ea:57:1a:1f:9d:88:e9:4f:4d:55:
                    61:da:e7:cc:b8:bf:df:b8:61:f8:55:ed:8d:1f:3a:
                    9a:13:9f:3c:df:23:98:8e:0b:04:81:e8:25:bf:6c:
                    da:49:9f:07:e7:41:35:c0:85:32:3b:06:c3:31:be:
                    03:2b:8a:5b:8e:ef:f9:7b:f8:e0:6a:6d:52:d2:62:
                    ec:22:4a:3b:96:e1:0d:d2:da:45:a6:aa:30:41:f6:
                    39:f8:1f:8f:c9:bf:d9:6d:3c:9a:ac:40:82:ad:82:
                    da:aa:a6:1b:7b:d4:06:e5:5d:75:0e:99:22:0c:03:
                    b8:9f:e4:b0:1b:2a:7c:16:7a:f7:0a:61:e2:07:7d:
                    de:2e:de:f8:08:0c:3e:1b:41:85:19:d7:89:9b:5b:
                    d9:04:8b:78:a1:bd:08:94:c0:de:2d:ac:46:57:16:
                    d2:70:e7:fa:d2:f7:a1:3a:a1:92:c1:3b:16:80:dc:
                    34:ee:8d:f3:a3:c7:f7:a4:f1:ec:05:9a:45:33:ba:
                    c0:95:3c:4c:48:e9:a7:31:7a:e1:f6:b6:85:94:d6:
                    17:16:8a:3c:6d:e6:ec:10:00:ca:84:72:df:5a:d7:
                    c0:3a:f6:96:e8:35:d1:e9:75:a8:6c:23:35:52:cf:
                    01:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:7A:EF:07:57:EF:0F:E3:87:32:CD:64:30:FE:1F:55:86:45:AB:5E
            X509v3 Authority Key Identifier:
                keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:22:fa:9b:c9:15:6f:0a:0b:ee:8e:aa:51:8d:7f:cd:9b:37:
         fe:cf:69:d5:81:7a:5b:9f:b9:0d:1a:f8:ef:3e:bb:83:26:e5:
         25:81:4f:70:84:75:4c:91:57:65:11:a8:37:a9:bd:e4:52:33:
         ed:6c:9a:d4:eb:cf:79:dd:04:1e:c6:fd:bb:c0:6e:3d:a3:46:
         e6:87:c2:b2:4c:e9:64:a8:f8:8c:72:05:a8:b8:37:63:b8:d4:
         e2:d8:3f:a6:82:15:08:b1:66:6b:69:41:43:ca:ec:25:4b:bd:
         a0:9f:85:1f:64:23:43:37:d1:a4:da:07:3b:32:be:bf:06:94:
         48:72:76:17:84:44:e2:86:38:70:ba:44:9e:0b:b8:7a:6e:d4:
         6d:a2:05:64:e9:ac:a0:c1:2d:06:54:da:8b:10:c8:0b:10:40:
         77:a3:5d:07:e4:85:90:79:95:02:11:e5:87:0f:7f:62:9c:79:
         fb:cc:04:47:e9:ea:97:a2:44:0c:45:b7:76:1b:e1:16:71:27:
         f8:bb:de:68:1f:52:ee:04:6b:94:1a:6d:e3:55:06:ef:40:1f:
         98:92:71:50:d3:4b:30:a6:1a:7e:ba:a9:8f:e6:51:28:03:dc:
         c9:2e:0e:c3:76:5e:56:9d:97:f0:42:de:1f:dd:c0:a7:5e:bf:
         b4:db:c4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:22:45 2026 by rpki-client