This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
File:                     2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft (raw, json)
Hash identifier:          I4LDgKCbttNsPYz03mHJW/yDYUFMvtzbCrszkc/MoJs=
Subject key identifier:   58:98:FC:0A:8B:E6:13:96:DA:D3:AC:06:B7:5C:1A:28:B6:AC:98:0A
Authority key identifier: DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96
Certificate issuer:       /CN=da0589dce63981870a1850906c8c2d1d96740096
Certificate serial:       019BF5E3C1BF658022DCF6D4FD6D64AD7E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
Manifest number:          0CEF
Signing time:             Sun 25 Jan 2026 16:01:42 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:42 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:42 +0000
Files and hashes:         1: 2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl (hash: 0c5kdWN2vLb5uGWCNcGqhHN6bOra1x5xor59FQXaBhE=)
                          2: AJnTsJ9Hsdz9FRUZmoA2pnIaA0k.roa (hash: aMrXNnfsfrFl0TcjMNjetoIVnMeF1PUboeHt3ruERME=)
                          3: MFAY7_OLyA4recGDb-cluDo0Fy4.roa (hash: gbxISH9PotemB1t2Fhr1XbKqizGCUJkHo7eezE3JciE=)
                          4: cP1lvMExnryf8cpW14P-YTW6oFM.roa (hash: 1i/eVOAe4LzQ+ZGAHO4PSAx1yAI1zK27WYnYn0/9SC0=)
                          5: n05zwG4en5qxsV4GyAoEqt3PxQo.roa (hash: DEEJbhVIGe6qAKBZrDnj7vjpDliiIkF68Xjg5C7PX58=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:c1:bf:65:80:22:dc:f6:d4:fd:6d:64:ad:7e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0589dce63981870a1850906c8c2d1d96740096
        Validity
            Not Before: Jan 25 16:01:42 2026 GMT
            Not After : Jan 26 16:01:42 2026 GMT
        Subject: CN=5898fc0a8be61396dad3ac06b75c1a28b6ac980a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9c:cd:6e:56:6f:df:17:9d:82:c5:55:3b:3f:
                    1e:00:e1:21:20:70:ed:0d:db:e2:9a:3f:4f:83:1e:
                    42:74:a8:cc:24:b6:fa:f3:44:48:f5:77:bb:4c:59:
                    b8:df:a0:22:89:0e:63:3e:f0:85:bc:56:f9:23:c9:
                    87:0f:d3:4a:61:e7:6a:e6:36:a9:25:2a:2c:2c:cd:
                    2b:cd:50:e4:e9:68:bc:db:10:b0:f0:0f:b8:fa:6e:
                    d0:a8:92:11:54:2a:e2:36:6c:bf:09:cf:c2:ea:94:
                    7b:58:53:68:b5:34:b1:32:72:81:8e:45:2c:56:fa:
                    9b:44:3a:70:30:fd:53:7e:64:de:d0:e1:db:33:bd:
                    29:71:94:cb:66:d8:5c:96:d3:7b:ec:3d:b0:6a:f0:
                    19:4d:b9:32:d8:b0:98:a0:f4:d3:06:3c:39:35:48:
                    c1:82:5a:da:11:5b:b4:de:86:30:7b:39:68:b6:b8:
                    2c:ab:3c:a8:f3:f5:29:4d:e2:d7:1c:1f:95:42:24:
                    20:3e:20:4d:18:36:1d:04:07:bf:41:db:52:cd:1f:
                    d5:f4:e2:40:ff:15:33:36:08:71:b0:f5:71:b8:69:
                    b1:07:4c:aa:61:a9:1b:7a:98:5b:d8:ca:35:d2:15:
                    fe:19:db:be:9d:be:4d:2a:74:35:c1:1d:cf:2c:57:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:98:FC:0A:8B:E6:13:96:DA:D3:AC:06:B7:5C:1A:28:B6:AC:98:0A
            X509v3 Authority Key Identifier:
                keyid:DA:05:89:DC:E6:39:81:87:0A:18:50:90:6C:8C:2D:1D:96:74:00:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6326bb-ba33-4339-b8c6-14e3c2017969/1/2gWJ3OY5gYcKGFCQbIwtHZZ0AJY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:db:09:94:7b:45:e0:57:64:d2:5b:41:dd:b1:2b:d9:e1:37:
         3a:db:8d:44:0f:74:88:98:c3:7c:02:b5:ef:a9:27:41:83:85:
         19:5b:65:42:32:e8:77:83:59:aa:23:28:3e:c4:ed:d7:e5:13:
         47:2a:e7:8d:66:9e:be:ee:3f:a0:74:24:09:c4:d7:8f:ef:ca:
         b0:64:85:22:7b:b8:21:bf:41:ca:7b:69:9d:ef:a4:90:a3:79:
         05:55:0b:93:51:c4:87:74:ff:b7:71:53:58:d3:44:f4:ee:11:
         14:15:53:3e:6a:98:58:c8:8b:cc:62:97:0d:25:e3:14:10:df:
         9e:38:37:3d:82:0b:8d:5e:26:61:8e:46:22:56:c8:14:b3:4b:
         53:4f:d8:48:88:b6:62:d5:7d:6a:43:81:0e:ee:2a:4d:18:c3:
         fb:ff:20:44:e3:53:10:7e:53:53:1c:1d:a0:d6:ee:3c:c1:de:
         e8:68:ac:65:70:38:0b:d8:61:bb:3f:55:32:a5:1e:cd:10:63:
         de:63:65:32:55:e3:9e:8a:e5:c7:f2:9a:79:37:80:69:8f:3e:
         28:6b:79:88:c9:77:b8:44:78:56:d0:d7:03:3f:6c:31:5c:20:
         e3:fe:76:49:ba:85:ca:8e:31:8b:91:9d:b7:5c:ee:87:de:b1:
         a5:2f:41:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:35:45 2026 by rpki-client