This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
File:                     rw3BKw8bUz2NBOxhF9a55RL8qp8.mft (raw, json)
Hash identifier:          d3ZJPRhn6m5LQwHssdcyZsF/G/IETm2oRTDJus+bcew=
Subject key identifier:   90:7F:A4:82:5D:6B:0F:40:AC:95:E8:00:CD:FB:1A:85:7A:ED:BC:6B
Authority key identifier: AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F
Certificate issuer:       /CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
Certificate serial:       019BF7D158D674734C263289B80DB2BC9404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
Manifest number:          1595
Signing time:             Mon 26 Jan 2026 01:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:50 +0000
Files and hashes:         1: JHlwQGDbvrC4juRVad57B3oI92U.roa (hash: oSK/eP8u/19D2+8PlzxQLpygFc07vdIXajuQXABfEZE=)
                          2: fomrS4dX5UyQctRbUOlEOReM51s.roa (hash: OwhdfcJ0K62trAYFFVz/ZuzwZmZiy8nl9/D+tMVNouE=)
                          3: rw3BKw8bUz2NBOxhF9a55RL8qp8.crl (hash: YB9qIH1E8PqrUfEdJIF+toTWrCFtWYgy6Qc/VKjTdYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:58:d6:74:73:4c:26:32:89:b8:0d:b2:bc:94:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af0dc12b0f1b533d8d04ec6117d6b9e512fcaa9f
        Validity
            Not Before: Jan 26 01:00:50 2026 GMT
            Not After : Jan 27 01:00:50 2026 GMT
        Subject: CN=907fa4825d6b0f40ac95e800cdfb1a857aedbc6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9c:17:06:26:4a:63:84:8d:a3:2a:6f:aa:df:
                    92:88:9e:20:5d:44:7e:46:cb:d2:d8:cf:9f:38:be:
                    e8:ee:07:50:7c:26:ea:d3:31:d1:c2:90:31:49:68:
                    c2:9d:66:0e:08:b2:13:99:b1:4f:d5:e9:32:2e:ea:
                    a8:48:d0:50:b5:ee:c5:ab:b5:77:52:28:55:8b:10:
                    5b:18:c0:24:37:01:2d:1d:70:95:a2:b7:08:fa:6f:
                    76:45:ea:62:fa:2f:f9:40:78:21:05:71:20:c5:1e:
                    a8:e4:e7:c2:84:bf:c3:d9:d4:14:45:08:8b:49:88:
                    fc:fd:62:de:97:5f:44:c6:5f:70:6d:e5:e6:09:31:
                    74:6d:9d:a6:97:42:eb:10:77:09:8f:e6:68:96:d8:
                    e4:15:62:55:6e:ba:2d:19:9d:5b:4e:3c:ef:d8:7e:
                    b1:c9:e2:06:fe:70:2d:b8:12:7b:fa:0b:45:65:b3:
                    b6:fe:fe:ec:ea:c3:b1:ac:a2:52:66:c6:07:30:8b:
                    7b:ec:b6:2f:b0:be:4f:43:87:62:17:d7:1b:77:fb:
                    98:7c:4b:87:0e:0b:09:b5:e7:47:85:2f:78:fa:af:
                    e7:31:5c:43:57:38:90:7a:e7:e5:b4:95:a5:f6:5f:
                    6b:9d:d0:be:1c:48:39:4a:b3:7c:93:f8:b8:0f:dc:
                    58:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:7F:A4:82:5D:6B:0F:40:AC:95:E8:00:CD:FB:1A:85:7A:ED:BC:6B
            X509v3 Authority Key Identifier:
                keyid:AF:0D:C1:2B:0F:1B:53:3D:8D:04:EC:61:17:D6:B9:E5:12:FC:AA:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw3BKw8bUz2NBOxhF9a55RL8qp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/rw3BKw8bUz2NBOxhF9a55RL8qp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ee:8c:e1:d4:26:50:3a:b8:08:0f:63:1c:c8:ae:84:41:cd:
         3f:39:a3:11:12:61:ac:a7:91:dd:f8:8c:f9:9e:ba:6e:02:6a:
         53:6d:9c:6d:62:83:d5:5b:64:07:e1:b0:7f:fe:af:d5:c9:2a:
         8e:65:26:53:f0:3f:38:47:e1:04:79:cd:68:db:34:65:46:2f:
         92:a3:a8:b7:f3:68:de:8c:40:3d:7d:2d:d5:16:01:04:d7:6e:
         27:c6:55:2b:40:72:d7:ab:82:fd:3a:a0:62:5a:d1:8f:71:37:
         a9:c9:c7:9b:eb:ab:ba:bb:1f:a2:48:c2:85:e8:15:7f:c4:06:
         a9:e4:68:55:36:81:a7:8f:17:04:69:36:4c:ee:c6:4d:b9:e9:
         ec:c5:e2:22:49:84:98:0f:c6:ef:91:89:99:bf:91:6e:c0:0d:
         19:d6:4d:69:fb:f5:a8:16:5d:83:49:91:b5:1d:57:a7:be:e0:
         97:b4:99:41:fc:0a:3b:88:c5:47:44:be:b6:8b:81:ea:f2:ec:
         a8:ab:6c:2e:5b:2c:1a:6f:aa:71:59:bb:31:57:ec:be:93:b6:
         84:59:34:ee:f9:37:8d:d4:6a:c6:62:a5:58:b2:1b:5b:13:f9:
         24:87:a8:08:91:1e:35:09:49:76:18:8e:5c:35:29:e3:bc:e1:
         f8:56:1f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:47:20 2026 by rpki-client