This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
File:                     RZYC1698NIyVqxHt1hMgVnU-q7k.mft (raw, json)
Hash identifier:          0tqhuzIvEcicN1SsYiNRLwZXE6GkHVHqaLgmM963f/g=
Subject key identifier:   32:3A:6D:5B:D4:B0:96:10:13:BF:88:BB:E0:C3:FB:23:91:85:9D:A1
Authority key identifier: 45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9
Certificate issuer:       /CN=459602d7af7c348c95ab11edd6132056753eabb9
Certificate serial:       019BF462B57ABAE5216B47842B8151064F66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
Manifest number:          06EF
Signing time:             Sun 25 Jan 2026 09:01:08 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:08 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:08 +0000
Files and hashes:         1: E1pbuAs0YIsb_NHX10DXbAlC7Ao.roa (hash: YbvP3v40Ns0CMzp0EfER4SSVddpNpcNY/qpj79hgKwo=)
                          2: RZYC1698NIyVqxHt1hMgVnU-q7k.crl (hash: g6tEWh10j/F18lD7QLe8Kj3ueGt8bX/YW2hRh1vrytM=)
                          3: gdALt1EsV4NvlgV2yxYIdca1ayo.roa (hash: 1BHCRTj4G0aKa1OuMorpbkBpZTlNNcuSVgMkG/YEguo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:b5:7a:ba:e5:21:6b:47:84:2b:81:51:06:4f:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459602d7af7c348c95ab11edd6132056753eabb9
        Validity
            Not Before: Jan 25 09:01:08 2026 GMT
            Not After : Jan 26 09:01:08 2026 GMT
        Subject: CN=323a6d5bd4b0961013bf88bbe0c3fb2391859da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7a:43:d6:80:a0:de:8f:d0:a8:39:05:d2:fa:
                    f3:f0:2d:54:82:ff:33:9f:a8:d0:18:e3:6f:32:82:
                    5d:e4:cd:2e:f6:51:e7:b3:ae:2e:f5:61:af:b9:68:
                    a2:78:98:2b:ab:25:56:8c:c3:13:9b:52:03:14:fb:
                    81:1a:2b:2c:0f:c5:f6:40:f5:fb:a3:36:77:6f:98:
                    ed:c5:17:89:5d:39:8b:20:38:ec:ac:21:fa:6a:0c:
                    a3:8f:5f:1e:f9:4d:3f:3d:ce:88:86:b0:5f:b7:a0:
                    00:7c:49:be:bf:b0:98:05:93:1d:e4:80:d2:fb:8c:
                    22:a4:5d:f3:d8:9a:2f:6e:01:4c:3e:59:ea:76:cd:
                    50:2d:2d:fe:4f:10:7f:9a:80:c9:46:e0:62:34:5b:
                    e7:ed:2e:1c:de:a5:a0:74:51:19:cb:3b:01:c1:02:
                    47:a8:90:cc:2f:10:26:be:5c:a2:95:39:bc:d8:67:
                    ae:b6:3a:92:2f:79:4b:d8:40:a8:46:22:15:02:c3:
                    e3:fe:da:41:2d:ca:6e:1e:df:16:4f:5f:e5:75:0b:
                    4d:da:86:8d:82:6c:a6:60:bf:0f:31:89:6f:4e:99:
                    d8:d9:cd:6a:92:3f:2e:9e:5a:5f:f1:86:a9:d6:e5:
                    1f:42:e3:7a:81:ec:eb:d3:76:d9:ff:fe:be:1d:d7:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3A:6D:5B:D4:B0:96:10:13:BF:88:BB:E0:C3:FB:23:91:85:9D:A1
            X509v3 Authority Key Identifier:
                keyid:45:96:02:D7:AF:7C:34:8C:95:AB:11:ED:D6:13:20:56:75:3E:AB:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZYC1698NIyVqxHt1hMgVnU-q7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/40862c-93af-4b26-825e-656c162fb24e/1/RZYC1698NIyVqxHt1hMgVnU-q7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:71:c2:81:3f:98:67:5c:1e:f6:9a:d0:6f:4e:54:27:85:77:
         36:84:dd:2e:26:ea:6a:ce:03:d2:59:4d:f2:14:29:b2:a8:42:
         e7:d1:95:a7:ae:2b:42:20:03:fe:b7:ae:ec:71:89:69:a2:b3:
         59:97:79:a3:9a:d3:eb:01:ed:b6:57:50:59:0c:9c:69:85:59:
         46:63:28:49:fd:66:dd:b6:a0:43:64:b2:44:70:eb:a4:56:88:
         48:de:29:22:00:44:1e:6f:f9:a0:09:29:90:02:b0:cb:48:b1:
         36:6a:69:20:c6:41:d9:48:20:58:9b:ee:d1:a1:9a:0b:56:58:
         c0:0b:cd:0e:2e:fa:32:1c:d3:5f:92:50:27:43:13:33:0a:2b:
         3b:62:38:08:12:fc:2d:a5:e0:77:81:90:96:6f:83:08:f7:01:
         2a:15:f0:7c:5e:40:38:72:be:6a:5c:9b:fc:b9:1b:77:66:f6:
         a1:2b:27:68:cc:e3:95:91:74:23:c2:6b:2c:ba:ab:cc:a7:9e:
         1b:95:bc:04:a0:d8:50:69:62:d0:52:01:39:d8:f9:67:6e:2e:
         2d:80:b0:f2:51:01:54:23:27:29:db:9c:f8:91:05:f9:51:fb:
         da:3c:39:70:70:f1:e3:c5:a8:83:75:0c:8c:27:98:ab:e9:14:
         6d:2f:d8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:30:50 2026 by rpki-client