This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
File:                     3ywVz3L824WWt8ZImxWmtyDBTrU.mft (raw, json)
Hash identifier:          qFkBteadw9dqRrQMGYvYalwzS/DJrzgiIMFfkQ1FURs=
Subject key identifier:   E0:41:06:CD:C0:AC:CD:EE:EF:5C:33:ED:F9:16:7A:3E:C1:D1:2F:3F
Authority key identifier: DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5
Certificate issuer:       /CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
Certificate serial:       019BF989694D6141EFA2141209215AED3BAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
Manifest number:          069C
Signing time:             Mon 26 Jan 2026 09:01:30 +0000
Manifest this update:     Mon 26 Jan 2026 09:01:30 +0000
Manifest next update:     Tue 27 Jan 2026 09:01:30 +0000
Files and hashes:         1: 2_Re3XPmHbqwQevIlHk3K2Ib58o.roa (hash: G7sli3P16OqI4s/T07KZbiz3ETP37dP3OKGPQLFIAa8=)
                          2: 3ywVz3L824WWt8ZImxWmtyDBTrU.crl (hash: SUPBZDV8Ae0RmHpfP9n+blsFPYFO4ks/xvVoEC7Ht6A=)
                          3: 40a6M8tU6s4tn1NCA5ZdC5_m5gQ.roa (hash: CaFW3lfKILssomy79H34gG68DVwJTZhuMZ4iATT6r/U=)
                          4: BfCf-SMP3jmpeBtSI6o8IcluZCE.roa (hash: U2GctbA/MKZUCV7DffODMpc1KtrAElXDTLg8lh43VyU=)
                          5: e6JVQCho1M40yxVb2Gu6VcadGA0.roa (hash: FJxO6PzvxDCHwBfDPlTBvclm1dkIcL8jnZ2ToA3feWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:89:69:4d:61:41:ef:a2:14:12:09:21:5a:ed:3b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2c15cf72fcdb8596b7c6489b15a6b720c14eb5
        Validity
            Not Before: Jan 26 09:01:30 2026 GMT
            Not After : Jan 27 09:01:30 2026 GMT
        Subject: CN=e04106cdc0accdeeef5c33edf9167a3ec1d12f3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f8:b8:c1:13:82:2a:b6:d4:57:f6:d6:c7:16:
                    da:bc:0e:1c:b0:59:7e:27:70:ac:e8:be:99:4d:d1:
                    bf:f6:1c:3f:7d:84:3d:00:f4:ca:9f:12:10:d3:ad:
                    d8:d1:06:04:37:82:af:a2:f3:7b:25:cc:bd:1c:c0:
                    e7:24:c4:c7:0b:83:08:6e:ed:0a:2f:d7:3e:e6:45:
                    9d:fd:5b:49:ad:29:68:2e:2d:26:b3:68:86:f0:55:
                    a1:f2:5c:b9:83:bb:e5:4f:98:3c:32:6e:60:79:6c:
                    43:9d:89:9a:c0:d7:74:85:f4:f7:01:c1:bb:46:e5:
                    77:1b:16:d4:de:1d:66:1e:e0:94:bf:34:73:30:84:
                    e2:8f:96:9e:c7:3a:34:59:04:dc:9a:8a:e4:c8:5c:
                    ab:a1:e5:de:51:20:5b:f8:15:fc:25:7a:f2:3e:9b:
                    67:8c:9f:54:2d:8d:e8:6d:0d:cf:cc:aa:80:85:71:
                    48:7b:04:bc:a1:68:42:9e:8d:0e:68:ac:2c:fc:0e:
                    23:70:be:60:f7:c6:96:48:68:66:7c:62:cc:ac:21:
                    43:71:96:ef:57:14:3f:3f:1f:c2:f3:37:44:b8:f4:
                    9a:e3:6e:1d:3f:cb:d3:44:0e:f3:4b:5f:7d:7b:1f:
                    cd:38:dd:36:a0:67:28:e3:ba:7c:6f:cb:8a:a0:c6:
                    83:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:41:06:CD:C0:AC:CD:EE:EF:5C:33:ED:F9:16:7A:3E:C1:D1:2F:3F
            X509v3 Authority Key Identifier:
                keyid:DF:2C:15:CF:72:FC:DB:85:96:B7:C6:48:9B:15:A6:B7:20:C1:4E:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ywVz3L824WWt8ZImxWmtyDBTrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9cfea1-d82a-4755-810e-f1853d10e610/1/3ywVz3L824WWt8ZImxWmtyDBTrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2b:aa:8e:db:0f:b8:51:fa:22:d2:de:1a:19:38:69:3b:2c:
         4c:1d:40:71:e7:57:d0:ab:6d:33:94:b4:bf:bc:91:e6:5e:47:
         1e:7e:0a:3a:a1:ac:ea:46:10:16:12:56:37:1f:fc:03:fa:9c:
         24:79:23:43:dc:77:00:e1:72:b3:bc:a6:f4:2c:44:18:85:b0:
         e4:1e:14:a3:07:24:43:1a:f0:b1:03:3d:c0:bc:20:21:96:f8:
         f7:ba:86:de:32:4a:0a:4e:9e:d5:60:00:e6:31:70:de:12:2c:
         9c:18:95:96:68:0b:1f:67:01:6b:fd:b9:32:60:c8:50:56:36:
         54:a8:29:4d:7e:67:a2:d3:2c:80:2b:05:c2:23:ba:38:19:6d:
         48:54:fd:06:12:99:e1:9f:3f:c6:f4:22:e5:48:52:89:09:3f:
         a9:e8:3e:0a:87:92:54:34:7c:72:1e:0e:0d:a5:6d:9c:c0:3d:
         85:23:d7:b0:56:0b:9d:3f:ca:98:20:0d:f3:67:ee:d5:94:c9:
         3a:1a:71:c6:6c:26:72:17:18:8d:94:83:22:ff:dd:da:72:f0:
         73:16:4d:23:04:df:05:96:2e:83:46:5e:cb:d9:00:f7:81:0e:
         87:c9:da:f4:27:2c:86:53:80:1c:9d:8f:2a:2c:73:58:de:48:
         02:23:dc:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 11:42:49 2026 by rpki-client