This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
File:                     ZcXa1UTfSXFghevoDb6C62iiCck.mft (raw, json)
Hash identifier:          tioq5QePUdJbb/SX9+vYoXQ0sClHKhBkSj/sfAfZ6ag=
Subject key identifier:   AC:67:4F:77:07:0E:CB:A8:74:3E:99:26:1D:68:61:9D:78:32:A1:96
Authority key identifier: 65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9
Certificate issuer:       /CN=65c5dad544df49716085ebe80dbe82eb68a209c9
Certificate serial:       019BF83F149A16EB9F4890DE26CCE1455B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
Manifest number:          1006
Signing time:             Mon 26 Jan 2026 03:00:41 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:41 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:41 +0000
Files and hashes:         1: SLxH_u9zeCm0sBzFGpjFyprUq1k.roa (hash: YHV8hHdigULABzb/Rh8IYMXXingzJr+tiIat3maLhrg=)
                          2: ZcXa1UTfSXFghevoDb6C62iiCck.crl (hash: /0AIhbeXPZIn2/mc++b6afzRIJnlSJ4/dWqxO7LCdG4=)
                          3: qWNtslR5VeuzsdBANHUyp5ZAUOU.roa (hash: rgvLkD6mm+PX1WOuRNNO3Ee9uRmn0UljGpNc3jlNEWI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:14:9a:16:eb:9f:48:90:de:26:cc:e1:45:5b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65c5dad544df49716085ebe80dbe82eb68a209c9
        Validity
            Not Before: Jan 26 03:00:41 2026 GMT
            Not After : Jan 27 03:00:41 2026 GMT
        Subject: CN=ac674f77070ecba8743e99261d68619d7832a196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:b5:8e:f7:2a:05:4d:6c:68:d2:9f:4f:7d:02:
                    b0:26:8e:db:b1:41:af:56:a8:a0:57:59:bf:a1:88:
                    15:15:86:23:30:9c:bb:93:a1:b4:2a:e9:94:5e:44:
                    40:6c:cb:04:84:2d:86:92:ee:d3:57:67:3b:af:21:
                    70:de:74:33:4c:60:be:44:00:ca:45:10:21:f3:2a:
                    ae:00:3b:d6:54:07:ac:bd:b3:ad:38:a1:8c:b3:2e:
                    d1:a8:ee:ab:24:28:cc:94:f9:14:2e:cf:c5:d1:28:
                    da:51:0f:7f:89:0d:eb:a7:6b:09:a7:a2:11:b8:ec:
                    ca:32:64:3a:a7:fc:96:a8:f2:ff:a1:7b:25:82:0c:
                    ff:81:f4:3d:9e:a5:d1:06:51:98:24:e2:6a:e7:90:
                    d5:6c:47:e1:78:aa:82:15:e5:75:b6:99:1d:d6:c3:
                    3f:70:f6:5a:9a:6a:b3:6a:29:51:64:57:09:42:8a:
                    96:0b:1c:da:90:89:56:fd:8f:c4:db:ec:69:50:63:
                    37:ac:db:4d:4d:db:39:3f:80:6b:3d:df:5d:1a:d7:
                    28:7b:28:cb:85:88:c1:ed:ed:fb:ad:d8:e2:f2:69:
                    b9:5a:9a:08:70:be:fa:75:87:88:74:8a:9d:60:9b:
                    a0:03:49:0f:51:85:11:08:c5:17:05:27:28:83:ef:
                    b1:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:67:4F:77:07:0E:CB:A8:74:3E:99:26:1D:68:61:9D:78:32:A1:96
            X509v3 Authority Key Identifier:
                keyid:65:C5:DA:D5:44:DF:49:71:60:85:EB:E8:0D:BE:82:EB:68:A2:09:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZcXa1UTfSXFghevoDb6C62iiCck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5cfd38-5e37-43af-a1b0-ad012aff5172/1/ZcXa1UTfSXFghevoDb6C62iiCck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:5a:10:4c:f0:54:45:e5:2c:81:f9:4f:e2:cc:c8:3a:03:21:
         b6:25:50:39:19:b6:2a:8f:56:c5:7f:b3:3d:bb:cc:7e:87:c2:
         a8:56:88:3e:2e:a0:26:b3:d4:e5:f4:70:f7:0f:67:8c:8f:f9:
         91:bb:05:11:7a:3d:07:8f:45:72:74:f9:35:01:a7:80:13:4a:
         5b:a0:9a:80:3d:c4:a4:95:c5:1d:03:b4:76:7b:2a:6d:75:87:
         93:f3:93:0a:45:71:5a:b2:b5:a3:4c:f8:7c:e4:e2:f1:7d:ea:
         06:43:a3:b7:64:3d:e8:c8:e3:e7:4b:9d:a2:98:93:91:76:1e:
         6d:89:da:ce:1f:58:c7:3a:78:5e:91:35:48:1e:89:7b:14:9d:
         19:a6:0d:0b:8a:0c:76:55:79:56:4f:4b:18:73:a3:c6:ef:f8:
         b1:2f:de:0a:4d:8e:b4:d5:17:7c:8b:d8:00:7f:e5:98:1b:8f:
         8b:e7:bd:72:88:20:71:e6:99:33:07:b5:ee:36:24:71:9d:ef:
         0e:26:a1:c1:37:36:c6:60:fe:21:e8:0f:ed:e3:04:5a:68:7a:
         32:57:7e:49:16:0b:9c:30:57:64:02:5b:e6:a7:1d:f0:b6:cd:
         d3:97:8d:2f:41:a2:33:0d:54:9f:24:52:18:3a:4c:7d:a0:d1:
         88:57:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 09:02:04 2026 by rpki-client