This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
File:                     rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft (raw, json)
Hash identifier:          VdneFVP9kQQTgNR/YKv8FnpeD34Jag9lqZiULtoQ4js=
Subject key identifier:   3A:7F:ED:F2:A3:13:B8:7A:0D:16:9E:43:79:F0:91:A5:FB:ED:DF:C4
Authority key identifier: AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39
Certificate issuer:       /CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
Certificate serial:       019BF5AC4A7851AC0A5C90DD351FC4010637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
Manifest number:          180A
Signing time:             Sun 25 Jan 2026 15:01:07 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:07 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:07 +0000
Files and hashes:         1: 16oj0KN5oVRu5RHVQyd660OcQhs.roa (hash: TLQlSbdPdjZyztttOHY25ysKwRVnJ6KupToVN+WGfno=)
                          2: 3vf-Yp-2fomUCGxxsuFuZBkPGGQ.roa (hash: LZ4veM7bkOEXkp7bq57kS6QDZIvIWlhUv4Gp6OCzQzs=)
                          3: YbRyztzAYyU1EQ0U7vEJD7T7-GQ.roa (hash: lc8H8Or878nYqwgvLpQaR10DBBjaXOJCSgikSKNMpVE=)
                          4: rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl (hash: qh4Xj/At1QzUc6iAYOohavV2rwMOuEuA/DDNHMuRQsc=)
                          5: z-6NzODp7V-uHJv_U1uqHFUWgdY.roa (hash: Wpr01XsM6HL09hxowv58BJM3hnt+sJz/9fzPyIg61hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:4a:78:51:ac:0a:5c:90:dd:35:1f:c4:01:06:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add353933674a5608f6d1ee2dab4f64c8bff8f39
        Validity
            Not Before: Jan 25 15:01:07 2026 GMT
            Not After : Jan 26 15:01:07 2026 GMT
        Subject: CN=3a7fedf2a313b87a0d169e4379f091a5fbeddfc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:80:a3:f6:8f:bb:a3:b5:9c:e6:81:96:0f:d1:
                    08:27:a8:fe:24:26:94:49:58:e6:fb:f7:71:a3:39:
                    22:de:c5:0d:64:17:86:39:0c:81:92:bf:1c:13:d6:
                    69:66:43:86:a8:35:3c:f6:c0:47:e7:07:21:86:ae:
                    10:ea:43:e6:b5:48:5b:19:1c:60:88:76:8d:10:18:
                    b8:03:6a:e9:33:8e:6e:23:63:77:31:50:69:d6:ba:
                    14:28:42:66:c5:52:b8:11:ac:a4:99:ac:b3:55:2d:
                    45:cf:ce:88:86:a7:51:84:d9:b0:1c:3c:0b:a9:40:
                    ed:c1:12:35:5a:11:ee:6d:69:24:50:e0:62:64:51:
                    3f:b1:19:56:63:78:4f:af:48:fe:ae:f6:d7:ac:34:
                    8d:e2:8a:41:53:be:7a:7f:51:b5:d0:da:cc:c8:27:
                    25:69:4f:17:0d:e8:ce:12:06:04:2e:39:0e:b3:6c:
                    e7:5f:d7:ba:bf:72:b7:6f:ea:86:79:76:bc:6d:eb:
                    67:c6:69:49:ea:65:ab:03:f7:60:aa:ba:ef:3c:6e:
                    83:9d:52:65:47:4c:88:f9:fe:b1:29:46:79:30:77:
                    35:3b:f2:dd:f3:09:b3:a6:1b:31:5b:49:bc:65:27:
                    90:dd:65:eb:c9:fa:d5:4b:4f:0b:ec:de:62:ec:ec:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7F:ED:F2:A3:13:B8:7A:0D:16:9E:43:79:F0:91:A5:FB:ED:DF:C4
            X509v3 Authority Key Identifier:
                keyid:AD:D3:53:93:36:74:A5:60:8F:6D:1E:E2:DA:B4:F6:4C:8B:FF:8F:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/48b407-6d94-49ae-a3d8-72c83128761b/1/rdNTkzZ0pWCPbR7i2rT2TIv_jzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:cc:33:a8:cb:a2:6d:29:d7:f6:0c:c2:2d:cf:43:3a:11:ef:
         fc:0b:52:e4:4f:2b:ef:ac:64:d9:0d:73:d2:3a:d7:91:47:f8:
         64:9f:c2:9f:3f:86:71:b8:97:55:de:33:e8:74:b7:5f:5d:ee:
         ca:cb:73:c8:18:e7:a8:3a:8f:09:c7:cf:fb:ef:83:cc:0f:db:
         29:ae:ed:91:cf:a9:14:91:ed:09:bb:09:cc:55:bc:97:67:3d:
         38:3e:9c:2b:47:9b:80:95:12:a1:25:e5:5c:4e:fd:4c:1e:2c:
         5c:86:87:3c:10:63:72:d4:17:c6:b5:67:b1:35:45:73:5b:b0:
         e8:66:38:f6:3a:49:09:f0:88:d6:e4:80:27:5c:64:b8:d6:ff:
         5c:a0:c9:50:a0:eb:9f:44:db:f7:4a:67:7b:cd:ac:1f:6d:59:
         56:cf:ea:53:77:aa:f5:d4:e4:ea:d4:cc:7a:98:a1:fd:70:46:
         64:02:88:5c:81:a7:c2:53:61:e3:e2:2f:75:f5:4d:42:dd:c3:
         16:99:75:f7:d2:12:82:e8:ac:d0:a6:50:bc:bd:a9:77:bf:96:
         82:d7:1c:b8:80:01:26:b7:75:54:22:e5:3f:f6:2f:e8:af:d1:
         52:05:38:e5:21:dd:cd:40:0b:bc:46:3e:04:5d:dd:bc:4c:c4:
         c9:5b:09:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:02:29 2026 by rpki-client