This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
File:                     zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft (raw, json)
Hash identifier:          4cLiy7CsPwIKV+s0gv6h5Zg1bJh3fzWUE60crjWegGY=
Subject key identifier:   BA:6D:BF:3F:61:3D:D7:B0:67:79:F2:4A:F9:88:02:F5:A2:CE:42:50
Authority key identifier: CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5
Certificate issuer:       /CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
Certificate serial:       019BF5AC4AAF46E331FE7DEB6673FD22A053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
Manifest number:          0AAA
Signing time:             Sun 25 Jan 2026 15:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:07 +0000
Files and hashes:         1: 84ShoK67lkAzxpq5fgwmHF7-Mug.asa (hash: M4b3tLPWFgypK3mWPPB8dw2tRn1bXCTWo2xZXTLHO8o=)
                          2: t0dGBmIzKFz2m-0nItqUpSGnPvE.roa (hash: F3xHHtxal7b1JwY+HhEoPYWSBKP1WW999+m78/U1kN8=)
                          3: zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl (hash: 1ullnL9NMQXlPVIveU26LAN3qQr2cp0egMYoMNfNhTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:4a:af:46:e3:31:fe:7d:eb:66:73:fd:22:a0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd6cba10ab465cf0ee3e76025c67f8554d2d01a5
        Validity
            Not Before: Jan 25 15:01:07 2026 GMT
            Not After : Jan 26 15:01:07 2026 GMT
        Subject: CN=ba6dbf3f613dd7b06779f24af98802f5a2ce4250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:44:dd:0a:d0:32:55:6f:c7:a4:7e:87:90:
                    07:1a:43:e5:01:cb:b9:19:d1:90:e0:df:03:cc:a9:
                    e8:9c:37:3f:db:35:bd:94:ae:c0:87:62:cf:7b:88:
                    6b:02:60:d4:48:ae:57:50:ef:8b:dd:94:46:bd:f4:
                    5e:88:cd:c8:a7:ab:3b:36:88:62:81:7e:37:02:4f:
                    58:60:83:70:bf:d9:0e:4c:17:82:13:51:82:00:88:
                    c8:c2:8b:b7:38:18:71:ce:6c:c5:4d:12:49:4f:be:
                    42:4b:2f:fe:96:b1:40:bb:a6:3b:8d:73:61:48:b3:
                    81:de:76:64:45:e1:6e:8e:21:23:f6:2a:a9:e3:20:
                    65:37:8a:0f:8f:66:fd:6e:56:1a:5f:2b:27:00:30:
                    92:c7:a8:c3:aa:88:aa:12:4e:16:07:d6:97:d9:78:
                    61:e6:d4:ad:13:ae:26:a4:75:4a:ff:55:ba:60:95:
                    cc:6c:c5:a7:11:b0:bc:d8:52:d7:00:ba:a4:df:67:
                    c2:dd:91:f1:f4:20:8b:b2:9e:5f:c2:c8:5d:85:26:
                    5d:69:05:b7:79:61:ae:06:3c:16:37:9a:64:cc:ff:
                    f7:af:0a:66:09:52:90:7e:ed:21:9b:a2:77:d5:d0:
                    11:75:7d:f4:49:32:01:15:7f:53:cd:6c:a9:2d:6d:
                    c1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6D:BF:3F:61:3D:D7:B0:67:79:F2:4A:F9:88:02:F5:A2:CE:42:50
            X509v3 Authority Key Identifier:
                keyid:CD:6C:BA:10:AB:46:5C:F0:EE:3E:76:02:5C:67:F8:55:4D:2D:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWy6EKtGXPDuPnYCXGf4VU0tAaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/51dd21-9db1-4224-9aac-56afc3cbdf4e/1/zWy6EKtGXPDuPnYCXGf4VU0tAaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:40:ee:64:1e:9b:3e:c1:90:2e:a6:19:fa:a5:75:88:54:07:
         0c:ab:ca:85:cd:74:5d:aa:9e:b3:96:af:40:c0:58:1f:d8:d9:
         c9:06:5a:c8:9c:9c:28:11:ae:39:ab:82:ec:87:37:94:ce:20:
         09:0b:1f:55:5d:4b:a3:73:5d:c4:fe:38:65:fe:ed:ef:81:2b:
         0b:81:21:7f:83:57:fc:9b:0b:5b:fe:72:97:1f:47:53:ef:eb:
         64:ff:6a:7a:c2:32:9d:b2:53:cc:65:ac:c3:a1:6a:e9:59:f0:
         12:66:bf:64:c6:de:09:d9:dd:11:82:48:94:c3:59:4d:44:9e:
         55:4c:76:97:63:f1:1b:94:cf:7d:c2:01:7a:75:a1:28:44:cb:
         97:4d:ee:90:5b:15:80:f2:06:17:a8:ee:77:33:7b:66:a6:43:
         b7:1b:ea:f8:7c:07:2f:90:96:a3:a2:f1:ee:c0:a6:f0:bb:b5:
         4d:bb:18:c7:d7:14:ef:07:24:f2:9f:10:61:ee:61:78:c0:7a:
         ff:8d:7e:80:ef:6a:97:02:2d:df:25:9a:f4:47:ca:af:c6:be:
         ef:07:ca:63:9b:d6:64:ef:6c:4d:71:a0:c5:58:d4:88:0a:12:
         64:bb:55:14:2e:e5:95:bb:1a:ae:cc:b9:b2:90:78:7e:5e:82:
         e4:d1:30:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:08 2026 by rpki-client