This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
File:                     RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft (raw, json)
Hash identifier:          DLXKEEUjcX19du9hP2V2cC/o/WXdBaxCLOzHD/+UU3Y=
Subject key identifier:   77:10:8E:2A:43:18:D4:26:E1:22:4B:51:31:28:FD:0C:C0:8E:F4:31
Authority key identifier: 47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A
Certificate issuer:       /CN=473163527e83542dce693b16d0aedcd126d3319a
Certificate serial:       019BF8AD6CB8361F05EA904F14A1BE84294C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 05:01:13 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:13 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:13 +0000
Files and hashes:         1: RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl (hash: koeHxUmuwfBVou0Su9NmvJlY3mbqlBTvEeYgVtwM49k=)
                          2: pFkI7meix8Wvnh8I7pdS5zO5VAs.roa (hash: IiBaDlI4V6mbfD8AaxYpOFH+8BQ1zVQO5KQlE9ThC6Y=)
                          3: wIc-Rh6w6YDK1W-UeGedBj1DHzA.roa (hash: AHq1ZvIykr30MtwSSGLXsUeCsh/Ryu5hRBrmdW7qIMI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:6c:b8:36:1f:05:ea:90:4f:14:a1:be:84:29:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473163527e83542dce693b16d0aedcd126d3319a
        Validity
            Not Before: Jan 26 05:01:13 2026 GMT
            Not After : Jan 27 05:01:13 2026 GMT
        Subject: CN=77108e2a4318d426e1224b513128fd0cc08ef431
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6b:85:4b:4b:ea:da:04:e9:b9:67:39:36:54:
                    2e:1b:1b:88:12:04:19:ce:4a:08:73:f4:30:17:eb:
                    ce:f4:f5:b1:be:d4:a1:8e:f1:c7:9e:99:99:a7:49:
                    a1:70:ba:80:1d:4b:79:ef:80:79:df:cc:94:2d:7a:
                    c3:3a:fc:fa:fc:e7:21:1e:81:0f:38:a5:ca:a2:45:
                    ec:27:f2:80:cf:dd:61:db:df:48:dc:05:16:4a:49:
                    ee:92:87:dd:40:4c:34:de:66:f2:74:89:ad:4f:e6:
                    b4:ff:18:6b:c8:4f:c0:14:82:57:cf:9b:3e:ca:e5:
                    cb:4a:29:fa:c0:a3:4e:07:51:33:67:40:2d:29:38:
                    50:fb:5b:71:ba:58:87:2b:4b:34:5d:64:60:24:9a:
                    8c:28:40:7c:a5:d7:36:0f:43:15:a3:02:89:cb:f1:
                    63:ea:6c:28:7f:6f:ca:11:a8:36:c2:f6:ae:aa:5c:
                    37:05:42:ac:2f:ea:c4:19:7f:36:bd:fd:cc:e5:e7:
                    8c:c5:de:c3:5f:f3:5d:3b:3d:7f:21:6a:d5:6a:de:
                    c3:44:93:f2:66:cd:81:47:7c:c5:71:61:96:87:0f:
                    b6:48:f3:85:3c:67:34:d0:ba:2f:96:bb:27:d0:1f:
                    cf:84:82:4e:c3:9a:4f:ba:80:e0:59:7d:9c:32:a7:
                    00:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:10:8E:2A:43:18:D4:26:E1:22:4B:51:31:28:FD:0C:C0:8E:F4:31
            X509v3 Authority Key Identifier:
                keyid:47:31:63:52:7E:83:54:2D:CE:69:3B:16:D0:AE:DC:D1:26:D3:31:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzFjUn6DVC3OaTsW0K7c0SbTMZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ab2389-8d36-43fe-af42-9a3841967181/1/RzFjUn6DVC3OaTsW0K7c0SbTMZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ca:fe:2c:05:3b:2d:78:90:99:d3:09:90:ca:7e:6a:14:37:
         d7:90:c0:75:a2:6c:8d:f1:c7:a7:72:bd:87:d9:af:e8:9c:c1:
         ee:da:96:82:26:c0:43:45:2e:ba:ee:da:d1:60:6f:9d:b9:d6:
         1c:92:8e:71:de:c9:0f:ea:22:29:68:eb:93:b2:ee:d2:1b:85:
         8a:34:fb:da:69:22:d8:27:49:52:20:08:06:3e:f2:7e:ff:42:
         33:ec:18:4f:bf:e2:fe:e4:26:a2:df:3c:3d:b3:e7:68:00:d1:
         ff:3b:4f:61:09:23:a6:9a:ac:98:f1:9f:43:41:5c:7f:55:8d:
         16:63:de:c1:7d:04:89:7d:1e:a0:6a:09:b7:e5:d2:af:12:33:
         06:06:9d:fd:f7:5d:46:99:15:4a:f5:df:9c:27:c3:a2:7e:fd:
         e6:30:bc:86:54:45:cb:d7:27:5b:df:bd:be:c3:1f:a7:8b:d8:
         30:bd:e4:7f:ad:87:02:e9:98:97:f1:37:a4:e4:23:fe:59:c0:
         c4:89:87:e1:92:6a:42:9c:68:66:2f:07:7e:c8:6a:b7:29:cc:
         07:c5:40:09:4c:07:6e:64:9c:cf:15:57:27:18:2c:a3:48:5e:
         48:63:4a:35:f5:9c:d2:f3:84:21:94:48:b6:27:3b:aa:21:57:
         f2:b3:c5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:05 2026 by rpki-client