This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
File:                     Xw_ZDZhyl8td1OB76EDSgNHizEo.mft (raw, json)
Hash identifier:          ehJG2+ruzzlZiiEGpBqHecqXJPYo8y6uYQgS68isJ34=
Subject key identifier:   3F:B7:E4:F8:62:7E:6F:68:78:4D:95:0B:1A:A4:DC:2F:01:0F:40:2D
Authority key identifier: 5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A
Certificate issuer:       /CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
Certificate serial:       019BF79A948486FEFC3F36660F1A4F4B592A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
Manifest number:          0B43
Signing time:             Mon 26 Jan 2026 00:01:01 +0000
Manifest this update:     Mon 26 Jan 2026 00:01:01 +0000
Manifest next update:     Tue 27 Jan 2026 00:01:01 +0000
Files and hashes:         1: IGvyNAGkUwt5swY3ZPAsKMi4Y9A.roa (hash: 9R/m5HiUPddcgvtc69T2bzqCBkVGTvcPZN9UWeURM0E=)
                          2: XSXw8zz6wHnklahOljGNkkMK48Q.roa (hash: p4JyRpCAuLEOOG8JHAgwOmpcnmRpxW2S31rpM+z8Q1Y=)
                          3: Xw_ZDZhyl8td1OB76EDSgNHizEo.crl (hash: DD03BgOZaHJ3CGZaPhHHNMFLiji6+LcHIsqj12ezzxE=)
                          4: jfJDf-L9uOm-plysAb0D7Pwv-XM.roa (hash: /1wlo6BoLw4GajX9St+IqQx9/1PVrea3LjLhasyV+pk=)
                          5: jusKsFR2myH5y_SxmZdhc547TOU.roa (hash: FjWKJu5eJdLGQtzzBBkYvevz1z9xR9jrxtDvXtKd9FQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:94:84:86:fe:fc:3f:36:66:0f:1a:4f:4b:59:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f0fd90d987297cb5dd4e07be840d280d1e2cc4a
        Validity
            Not Before: Jan 26 00:01:01 2026 GMT
            Not After : Jan 27 00:01:01 2026 GMT
        Subject: CN=3fb7e4f8627e6f68784d950b1aa4dc2f010f402d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:97:c8:36:39:7f:78:e0:d5:4e:c1:44:ff:47:
                    17:f8:d9:ae:14:bd:a2:0c:32:a0:28:84:37:f2:cb:
                    55:70:1d:52:e8:a4:bf:39:1a:d0:84:bb:32:58:5a:
                    de:62:5a:3e:2b:41:18:17:b8:ee:10:ae:33:88:14:
                    20:83:c6:1c:6b:9e:14:2d:4e:5d:1e:14:66:2e:76:
                    80:cc:60:26:aa:c6:7a:32:0e:6c:14:9f:c5:26:39:
                    ca:4c:8c:ac:2b:29:7f:63:e5:0a:55:42:58:10:2d:
                    6f:61:30:51:4e:4d:5d:b6:14:d6:48:73:2b:98:26:
                    13:80:60:eb:b4:e5:0d:69:c1:03:f2:af:87:e0:cf:
                    74:f9:9f:ef:a7:a6:c7:33:d2:de:17:67:13:61:9c:
                    ff:08:06:4f:39:e9:ba:54:21:49:70:2e:42:aa:e1:
                    5f:cf:ff:fd:84:0d:31:9c:c2:44:a7:48:20:fe:07:
                    ed:c3:ba:bc:a8:46:2f:11:19:af:61:53:34:c2:ca:
                    19:ba:d9:2c:fe:b8:6e:52:6c:bf:24:e5:79:f3:cf:
                    f3:a5:b1:16:8a:0b:f5:fe:05:22:6b:b0:30:19:f2:
                    50:ac:65:b0:54:ea:5b:ac:73:e2:fe:ac:cb:a3:f1:
                    ec:79:0c:77:6b:43:06:ba:db:c5:0f:69:c6:30:f0:
                    7f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B7:E4:F8:62:7E:6F:68:78:4D:95:0B:1A:A4:DC:2F:01:0F:40:2D
            X509v3 Authority Key Identifier:
                keyid:5F:0F:D9:0D:98:72:97:CB:5D:D4:E0:7B:E8:40:D2:80:D1:E2:CC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw_ZDZhyl8td1OB76EDSgNHizEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f66ca9-3bdc-4294-ad62-7bcefa9f59e8/1/Xw_ZDZhyl8td1OB76EDSgNHizEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:d6:84:61:f1:e7:13:61:9c:7b:91:da:fd:1d:c4:f4:e0:e9:
         39:a1:91:02:a6:ab:72:51:26:37:74:04:c0:50:df:06:fb:14:
         cc:f6:73:9e:62:ab:a5:4a:7e:08:e0:42:65:48:de:5e:6f:a0:
         6b:8d:87:c8:4a:2b:03:5e:dd:3b:ba:3b:3c:31:8b:f0:bc:1d:
         34:63:74:5d:22:bf:9d:ae:82:03:bc:7e:46:c9:62:05:59:fc:
         54:81:fd:51:86:bb:b9:34:e3:f2:98:0a:88:f6:60:50:2f:10:
         b2:ad:85:48:09:ec:d7:be:d7:31:54:f0:9c:55:e9:89:94:3a:
         67:1e:ac:0e:84:dc:31:b8:1e:0b:39:c3:ad:14:b9:ac:ef:9e:
         a4:52:0e:11:09:75:7f:41:7b:42:16:2e:3f:4b:e0:7c:26:a9:
         73:f0:5b:15:07:cc:0b:d2:2c:27:61:ef:bc:5f:53:61:6f:a0:
         c1:07:2f:ea:e1:c2:0a:8b:08:d9:5c:c2:b7:1f:6d:4f:05:f1:
         4f:af:9b:e6:8a:79:ae:06:95:82:15:d1:05:26:e2:90:94:0f:
         4f:a7:c3:c7:2d:bc:19:83:f0:84:51:a2:18:64:d6:30:e6:e8:
         ad:81:fc:e7:cd:30:2c:37:5e:46:c0:19:c4:08:b7:82:78:b3:
         10:84:aa:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mpSEhv78PzZmDxpPS1kqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMGZkOTBkOTg3Mjk3Y2I1ZGQ0ZTA3YmU4NDBkMjgwZDFl
MmNjNGEwHhcNMjYwMTI2MDAwMTAxWhcNMjYwMTI3MDAwMTAxWjAzMTEwLwYDVQQD
EygzZmI3ZTRmODYyN2U2ZjY4Nzg0ZDk1MGIxYWE0ZGMyZjAxMGY0MDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5fINjl/eODVTsFE/0cX+NmuFL2i
DDKgKIQ38stVcB1S6KS/ORrQhLsyWFreYlo+K0EYF7juEK4ziBQgg8Yca54ULU5d
HhRmLnaAzGAmqsZ6Mg5sFJ/FJjnKTIysKyl/Y+UKVUJYEC1vYTBRTk1dthTWSHMr
mCYTgGDrtOUNacED8q+H4M90+Z/vp6bHM9LeF2cTYZz/CAZPOem6VCFJcC5CquFf
z//9hA0xnMJEp0gg/gftw7q8qEYvERmvYVM0wsoZutks/rhuUmy/JOV588/zpbEW
igv1/gUia7AwGfJQrGWwVOpbrHPi/qzLo/HseQx3a0MGutvFD2nGMPB/PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+35Phifm9oeE2VCxqk3C8BD0AtMB8GA1UdIwQY
MBaAFF8P2Q2YcpfLXdTge+hA0oDR4sxKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjIt
N2JjZWZhOWY1OWU4LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9mNjZjYTktM2JkYy00Mjk0LWFkNjItN2JjZWZhOWY1OWU4
LzEvWHdfWkRaaHlsOHRkMU9CNzZFRFNnTkhpekVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNaEYfHn
E2Gce5Ha/R3E9ODpOaGRAqarclEmN3QEwFDfBvsUzPZznmKrpUp+COBCZUjeXm+g
a42HyEorA17dO7o7PDGL8LwdNGN0XSK/na6CA7x+RsliBVn8VIH9UYa7uTTj8pgK
iPZgUC8Qsq2FSAns177XMVTwnFXpiZQ6Zx6sDoTcMbgeCznDrRS5rO+epFIOEQl1
f0F7QhYuP0vgfCapc/BbFQfMC9IsJ2HvvF9TYW+gwQcv6uHCCosI2VzCtx9tTwXx
T6+b5op5rgaVghXRBSbikJQPT6fDxy28GYPwhFGiGGTWMOborYH8580wLDdeRsAZ
xAi3gnizEISq9A==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:09:01 2026 by rpki-client