This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
File:                     RusRr5NV2porXfc-zdf9CWektYw.mft (raw, json)
Hash identifier:          j3uKK5pb8Wg5a/c3Hy3Ga2hzvOWl5LOqEXWFEa1SgC0=
Subject key identifier:   A3:D9:A4:E6:42:3A:31:C0:95:CD:28:C8:0D:CE:44:2B:00:A4:1B:75
Authority key identifier: 46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C
Certificate issuer:       /CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
Certificate serial:       019BF5ABCA1625C708483846B1E4E2B081D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
Manifest number:          17EF
Signing time:             Sun 25 Jan 2026 15:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:34 +0000
Files and hashes:         1: CBWD_Gg6jndH-l0lM7DiQCVG12k.roa (hash: bubSKRJET0AOhipZBjbkVYrFDX2PKN6HdmciWmyFV4U=)
                          2: RusRr5NV2porXfc-zdf9CWektYw.crl (hash: 8JgIVy2dWoxFlDWxXKuDymqcdo6u/y2jQoPT022O6cc=)
                          3: p4Qr1o_GUP493TOzGiHvqAvpKvw.roa (hash: c+UryGANglbxgDwdQW/A1l8yeFJXbMxh9x0ZlreWqlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:ca:16:25:c7:08:48:38:46:b1:e4:e2:b0:81:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46eb11af9355da9a2b5df73ecdd7fd0967a4b58c
        Validity
            Not Before: Jan 25 15:00:34 2026 GMT
            Not After : Jan 26 15:00:34 2026 GMT
        Subject: CN=a3d9a4e6423a31c095cd28c80dce442b00a41b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8f:19:ee:7c:91:c5:e2:00:59:47:af:c0:aa:
                    0b:7a:90:cc:94:e9:59:c4:92:32:86:28:72:c1:d0:
                    2d:94:fc:ed:8d:42:ac:bf:22:3a:cf:7e:36:7c:ce:
                    23:b8:a8:b2:63:fb:25:6e:57:02:5b:b9:86:2b:67:
                    9e:a9:d6:fb:5f:2f:cb:5a:12:07:be:02:68:98:e3:
                    44:d5:ec:b1:f4:db:72:0d:00:9a:98:52:bc:61:d6:
                    6e:a1:6d:49:61:12:d7:7e:17:75:da:63:96:25:d9:
                    3a:41:a8:15:ea:53:64:d4:f2:ec:0c:db:a0:4b:89:
                    3a:83:15:c3:31:40:2b:fb:81:0e:d4:5e:14:0c:2c:
                    df:37:2b:3e:48:7d:4b:b4:f7:2d:0f:8b:03:af:05:
                    19:a4:ac:db:1f:6f:71:97:64:85:29:a1:e5:38:3a:
                    e2:a0:30:42:ce:2a:4c:2a:06:0b:48:23:83:6c:6d:
                    d6:7d:e4:d8:83:c8:41:55:e5:b7:17:d4:74:55:c6:
                    33:67:08:83:52:63:20:0c:46:b1:43:a1:4d:64:19:
                    ed:cf:7f:d5:fd:38:b9:84:8c:82:c3:d6:6d:b7:53:
                    86:b6:48:b8:3c:73:ab:8b:89:46:f3:7d:c5:d7:b3:
                    ae:4e:7a:b6:72:d3:de:76:81:2b:2c:a7:16:b8:31:
                    5e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D9:A4:E6:42:3A:31:C0:95:CD:28:C8:0D:CE:44:2B:00:A4:1B:75
            X509v3 Authority Key Identifier:
                keyid:46:EB:11:AF:93:55:DA:9A:2B:5D:F7:3E:CD:D7:FD:09:67:A4:B5:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RusRr5NV2porXfc-zdf9CWektYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1a43f0-c027-4fdc-8515-45f496f2fe75/1/RusRr5NV2porXfc-zdf9CWektYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:d3:02:5a:76:cd:6e:ea:6d:32:4c:3d:1d:c5:d7:25:b6:79:
         14:9f:4e:92:ca:79:09:61:3a:92:c9:cd:02:9e:94:e2:7b:6c:
         3b:38:f2:0f:54:20:e7:06:47:6e:c3:b3:bc:cf:96:c4:d7:cd:
         b4:3c:75:c0:a1:f3:c0:04:61:11:ec:42:98:57:5a:d0:2f:34:
         a3:f3:24:28:3a:4e:79:0d:49:91:fa:9d:e9:8e:09:74:1d:86:
         cb:01:00:06:39:b4:87:bc:ca:d7:e0:a6:63:5e:37:c7:48:ee:
         dd:41:01:56:58:15:01:22:86:27:61:56:e4:a1:42:65:65:89:
         f6:99:54:ea:ae:3b:57:78:e0:e3:2f:24:2a:d9:5a:16:3a:b2:
         db:79:90:04:db:cb:b9:9e:0f:c6:37:5a:1e:25:43:c7:c5:1f:
         fb:23:86:81:76:58:73:ab:cd:b3:81:6c:57:02:77:ed:91:a6:
         20:3c:42:ad:b3:72:f7:5c:dc:e2:17:6e:f4:06:f4:fa:b7:ab:
         30:cc:b0:27:bb:de:f3:78:56:2e:50:39:8c:ba:47:90:89:c8:
         0f:1b:94:3b:bc:7c:c0:e3:b3:71:21:62:84:3c:a5:ce:40:7e:
         a9:ac:5c:d1:24:bd:3a:dd:3c:70:e7:09:4a:ba:1f:10:6f:54:
         e2:88:f1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:37:05 2026 by rpki-client