This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
File:                     ZnWfeo-QZy6oNTr00R1qxen9ggY.mft (raw, json)
Hash identifier:          2xv87DFzm8oLIYrmyi9dfmewtijRHMXYF/0EEhjFmPY=
Subject key identifier:   FD:E5:54:FC:40:C3:D0:30:AD:73:E6:D2:63:49:8F:2E:66:0D:0E:68
Authority key identifier: 66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06
Certificate issuer:       /CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
Certificate serial:       019BF4D0B64411967BCF510D84BD4702C5F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
Manifest number:          0761
Signing time:             Sun 25 Jan 2026 11:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:17 +0000
Files and hashes:         1: X6aOcNp7OaJ0X_ZT-du_LuU0TCE.roa (hash: r5fWgTPjjmB31St0AmzLTssy0JP6/zDB0uGldcQoQt0=)
                          2: ZnWfeo-QZy6oNTr00R1qxen9ggY.crl (hash: bnaEs+sGbxaa65GmSMVvvh+5UsCxjuWl3n5YY3kLglk=)
                          3: tU70CLv_FnaoDz0xj6FPiJvGn-k.roa (hash: G4YFrMOaB3YYQfWSQNKXIK2SLKAYNELC+w3hU94N7bI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:b6:44:11:96:7b:cf:51:0d:84:bd:47:02:c5:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66759f7a8f90672ea8353af4d11d6ac5e9fd8206
        Validity
            Not Before: Jan 25 11:01:17 2026 GMT
            Not After : Jan 26 11:01:17 2026 GMT
        Subject: CN=fde554fc40c3d030ad73e6d263498f2e660d0e68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:04:4e:df:81:0d:85:ca:17:5f:ef:b3:a6:f2:
                    1a:19:94:b9:71:4d:01:4a:3f:5e:8c:1f:bb:0b:59:
                    42:45:2b:96:c1:10:60:f5:09:b6:72:fb:d3:28:7c:
                    c3:1e:52:44:60:b2:c4:a9:c6:96:6a:15:80:98:ef:
                    e3:62:e0:3c:6f:e4:89:0a:0a:17:62:e2:24:61:5c:
                    45:3f:dc:e1:27:62:4d:25:1a:17:e1:b6:8f:2d:10:
                    92:89:14:c7:a6:0e:98:5d:10:ce:72:24:25:aa:9e:
                    d0:17:8b:8a:f1:46:a5:13:ab:b9:e7:e3:23:3d:2a:
                    09:78:8e:0e:3f:51:a6:5b:3d:31:41:f0:4b:eb:ce:
                    d5:84:e8:ae:bf:3e:f7:c1:a1:6f:82:7d:85:f9:fa:
                    30:c6:3a:fd:12:7a:12:d2:9a:80:59:cd:e3:2f:70:
                    10:d7:d2:0d:62:a6:a1:5a:cc:52:5a:6a:fb:c4:6e:
                    0d:9f:c4:61:10:9c:91:59:f7:e6:78:13:69:61:c7:
                    b3:db:76:2c:4d:e4:aa:b8:46:36:73:fb:36:7e:f2:
                    2f:3e:16:93:45:8e:1c:7a:2f:d8:af:4b:ce:c4:87:
                    08:dd:a9:f4:4a:3b:40:c9:ff:77:3a:47:ae:d0:e0:
                    50:ba:01:78:c0:54:2d:ad:89:aa:fe:ce:d6:65:04:
                    36:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E5:54:FC:40:C3:D0:30:AD:73:E6:D2:63:49:8F:2E:66:0D:0E:68
            X509v3 Authority Key Identifier:
                keyid:66:75:9F:7A:8F:90:67:2E:A8:35:3A:F4:D1:1D:6A:C5:E9:FD:82:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnWfeo-QZy6oNTr00R1qxen9ggY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/178b02-948c-4624-97b8-e4e17e4b5180/1/ZnWfeo-QZy6oNTr00R1qxen9ggY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:63:7c:eb:0a:51:c3:83:ac:cf:e5:e2:f3:6a:80:4b:8e:3e:
         c8:f7:c6:7e:79:47:e5:a2:fe:b2:29:83:c2:bf:0d:a6:8c:c7:
         eb:03:24:0a:14:dc:f9:1b:92:6a:7b:2f:9c:b9:8d:32:27:da:
         c8:1f:13:58:fa:11:e4:af:38:75:40:81:9f:bb:d8:6d:e4:79:
         83:7c:89:06:2f:9c:e1:59:37:68:85:09:68:77:73:e9:6b:02:
         69:c5:65:e4:16:82:d8:11:2f:14:4a:b5:a7:f1:dd:77:bd:25:
         5a:bb:b3:9a:6d:eb:a9:cc:19:2a:da:f0:24:a0:85:06:ab:7f:
         48:ff:f2:d5:a1:b7:59:10:f5:2c:11:f1:be:a1:fa:bd:60:56:
         7f:69:b7:8a:20:0d:36:08:0a:9b:ac:4a:e1:b1:33:8c:0f:d5:
         81:00:eb:05:15:0f:66:23:c6:79:23:6c:e0:32:b9:fd:fc:98:
         1b:1d:97:9a:1b:dc:c4:00:d1:ec:60:18:2e:d0:42:dc:ee:5a:
         c7:83:3d:12:a0:4c:b6:cc:80:9c:99:41:70:67:08:4c:bd:b7:
         71:35:b6:c0:51:9f:d8:a7:34:fa:e2:a1:01:c2:d0:df:0d:99:
         f9:7d:30:6a:a7:21:b9:d0:05:58:d9:b5:6f:07:60:d6:6a:df:
         63:e4:a6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:17 2026 by rpki-client