This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File:                     RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier:          Mtn4vvTtSbAuUqk4JrpnneSbSQdb827bJB96E24JiO8=
Subject key identifier:   59:6D:B1:3B:1F:A3:9E:39:CF:1F:A3:7D:D9:82:87:5F:07:A2:B4:15
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer:       /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial:       019BF80888EA89CBA857E36849A6783B09F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number:          030D
Signing time:             Mon 26 Jan 2026 02:01:07 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:07 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:07 +0000
Files and hashes:         1: DhnVxA5epBkWnt3PDulS5ypiRRE.roa (hash: cV+0Z4XARQ4usZE3nfMuQg0VGiGEUn16U9an0D+YjNU=)
                          2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: QD17njV2MbOHJHVKP80SKfmm1+Rd19qwrRiUs+6j8Xc=)
                          3: nPQEua1epz0cHI9DgWit1pT4HvM.roa (hash: 2TASnepXL6UFnC6iWgWqqNkaqCw4gJaGRhAGHMOAfig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:88:ea:89:cb:a8:57:e3:68:49:a6:78:3b:09:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
        Validity
            Not Before: Jan 26 02:01:07 2026 GMT
            Not After : Jan 27 02:01:07 2026 GMT
        Subject: CN=596db13b1fa39e39cf1fa37dd982875f07a2b415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:ca:de:dc:58:7e:72:ef:44:f6:f7:9c:93:
                    d4:7e:fa:ea:fc:44:28:12:b6:45:72:5e:54:9b:7f:
                    14:f5:34:6f:de:0c:92:f6:b5:e9:f4:29:ca:e1:65:
                    3e:51:69:1d:1e:fd:b7:64:39:99:57:00:71:68:2c:
                    e6:25:cc:48:94:a9:cf:7a:2a:ba:4a:3d:3a:23:ac:
                    46:c7:56:78:2a:26:d8:1a:f8:96:65:d4:ea:f8:57:
                    f4:c9:93:70:4f:ab:f9:b4:58:f5:23:f0:5c:b8:cf:
                    76:86:d5:f7:9c:7f:d8:fd:c6:a8:15:bb:3f:25:cd:
                    eb:e6:89:92:8c:08:25:80:a7:48:54:07:fa:8a:39:
                    1e:6a:fe:9a:97:8f:2b:bd:40:93:cd:f8:2e:d0:57:
                    60:00:70:b5:76:ad:e9:ca:9a:6d:90:4c:0e:15:82:
                    4d:ba:41:9e:5f:12:70:06:21:ae:5d:31:b1:7d:18:
                    c8:89:9e:34:2d:6f:95:d3:95:85:80:bb:60:6a:d4:
                    53:62:ff:e2:33:f2:23:4e:82:26:5c:e6:db:3e:05:
                    62:6d:f8:b3:95:2e:d4:1a:10:57:fe:1a:d2:b4:9b:
                    f5:01:f6:4b:23:96:cc:2b:98:8e:84:40:1f:a9:64:
                    a0:35:9f:44:43:5e:c8:d8:43:33:68:f5:dc:f5:c4:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6D:B1:3B:1F:A3:9E:39:CF:1F:A3:7D:D9:82:87:5F:07:A2:B4:15
            X509v3 Authority Key Identifier:
                keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:3f:ca:7a:7a:b8:94:77:d0:96:52:1f:85:66:a6:68:b3:
         95:21:f6:41:a9:1a:69:4b:c7:ec:e7:74:22:58:38:c4:fd:89:
         e5:63:c4:79:6f:6d:d6:34:89:ea:ec:9d:a9:ea:05:39:34:ba:
         6f:11:3a:f8:8b:16:6b:dc:12:fb:fd:ed:0f:6f:ef:2d:b5:26:
         ea:c1:5b:d2:9f:48:5f:be:6a:07:b0:3d:ec:66:06:6f:0e:a7:
         5d:1d:8c:de:9b:92:92:a3:00:a5:33:8b:37:29:65:12:ee:d3:
         a0:2b:a7:e9:e1:b9:1a:00:df:68:fb:09:0f:ac:d7:be:4d:e7:
         76:ff:aa:3b:a1:5c:c3:af:d2:d6:58:da:b4:74:c8:7e:49:1b:
         79:b7:f9:89:3b:ef:8f:7b:5d:c8:c9:92:f9:48:95:7d:15:71:
         f0:15:38:ed:b3:3a:62:fe:ab:e7:df:ba:37:e2:08:e3:b5:98:
         7e:4a:c3:77:90:cc:a5:a7:3f:10:27:6e:7f:82:d1:45:e9:7b:
         de:a0:63:b4:05:33:88:ee:d0:38:c7:18:af:d8:6c:1d:98:a5:
         a4:ba:2e:e2:06:19:59:1b:cb:05:7a:00:96:26:f8:c5:83:0d:
         1f:48:50:a7:5c:93:25:1c:7b:b3:e6:69:69:6a:13:f5:3c:57:
         34:90:9c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:24 2026 by rpki-client