This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
File:                     Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft (raw, json)
Hash identifier:          JOE49B4QK6esyq4cvc0MO8ULIGsBk0fqYUA6VJFk92M=
Subject key identifier:   29:F6:30:2A:C2:65:A6:B7:2B:C5:A5:3D:79:FE:20:F1:3E:31:F7:76
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Certificate issuer:       /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial:       019BF5AC65F71B58FA435D6EF353544268D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
Manifest number:          11E6
Signing time:             Sun 25 Jan 2026 15:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:14 +0000
Files and hashes:         1: 1m9vhqXwy7CGqJjqRjUuXJx7INY.roa (hash: qE04gkM/s7vX8p51u5m0unnrB0JoxCvsTSSShhmlhmI=)
                          2: G-RbIUzq1PlvE-q3SCybhunvJKI.roa (hash: opq2WoRARYg0RhIa4g9HMBvHxIPBPs39AMNusR3Lt3w=)
                          3: Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl (hash: RpaZ9121FCLwMoPtcH/OhEFKIiy5v3KANdBdFv6D/5s=)
                          4: SSSB_UVGJCKdh7PPz0qaSyXW7lc.roa (hash: CRGt/HquFvCmfw30kehUPdqDR7YReCJJSXwsQnL4oU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:65:f7:1b:58:fa:43:5d:6e:f3:53:54:42:68:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
        Validity
            Not Before: Jan 25 15:01:14 2026 GMT
            Not After : Jan 26 15:01:14 2026 GMT
        Subject: CN=29f6302ac265a6b72bc5a53d79fe20f13e31f776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d4:4c:0a:cf:58:e7:7a:3f:89:fc:b3:2a:f1:
                    03:c8:dc:4f:b7:d4:61:24:bf:07:a3:fd:38:dc:59:
                    81:77:09:5f:07:a5:a5:33:77:76:37:ae:c7:fc:1a:
                    b2:4f:96:d5:3f:3f:34:da:3c:47:dc:da:b6:0b:52:
                    ce:7f:f4:d5:a1:9e:ac:0f:91:30:17:b5:ff:a8:2d:
                    a3:18:29:1e:9e:32:13:97:c3:87:7b:56:f0:05:89:
                    d0:3e:fe:59:a5:d5:9e:47:d9:be:9d:9c:93:b2:c7:
                    81:82:83:bc:4e:d8:a8:b2:29:80:06:0e:3f:7c:50:
                    90:3a:b6:91:35:ed:17:6e:82:b6:43:f6:91:e4:30:
                    7b:dd:09:6e:a7:56:e2:87:92:a4:c6:e2:ed:61:50:
                    4d:17:c9:07:a9:08:60:2e:95:dd:46:4f:8e:5f:62:
                    81:bc:34:86:6a:9a:63:c5:63:16:f8:2c:91:e1:31:
                    8e:b5:6b:70:40:9f:83:b9:74:9b:e3:92:44:e0:f9:
                    2f:b4:c6:b9:e3:97:31:2f:f4:32:32:25:aa:07:36:
                    d2:b3:e4:2e:6c:73:fe:cc:cf:5d:fa:ce:bc:3d:80:
                    cd:89:07:81:8b:ee:99:57:16:6c:ba:21:e3:cb:6e:
                    bd:c7:23:05:ab:34:cd:6f:14:fb:23:0b:71:3d:18:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:F6:30:2A:C2:65:A6:B7:2B:C5:A5:3D:79:FE:20:F1:3E:31:F7:76
            X509v3 Authority Key Identifier:
                keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:fb:e4:cb:68:13:ca:9b:23:49:99:57:60:b8:35:df:81:73:
         ce:14:16:74:29:b6:82:6d:9b:b3:8e:ba:c3:0e:20:68:a4:03:
         15:b6:25:a8:ce:b4:9b:c0:56:13:b1:ac:8d:5c:50:ea:0b:4b:
         fe:f3:12:95:33:98:ef:39:a6:9b:8c:1d:87:2c:20:c4:04:ee:
         0a:05:e1:61:10:7a:f7:e1:5e:2b:bb:f0:3c:3f:4e:23:c6:4e:
         a3:2d:80:66:2e:11:d1:9a:e4:d9:fe:c7:93:88:d4:f9:9d:34:
         77:05:30:fa:03:5b:8f:db:6a:90:7d:7b:e5:d7:c8:c0:23:66:
         af:2c:e4:ef:66:83:ad:8f:7a:06:35:43:f9:23:74:b6:0a:56:
         88:ec:a3:65:a3:cc:53:40:3e:10:2b:93:c7:5a:dd:29:c8:ea:
         be:02:db:e0:07:1c:2f:ab:fb:db:43:ef:8c:ce:3a:17:1f:46:
         2c:8f:65:75:13:a2:44:90:b0:f4:67:24:26:c3:65:54:ec:dd:
         58:90:2f:fe:cb:74:fc:45:df:76:ed:a7:ac:02:2e:32:e0:b8:
         7e:ba:a3:30:44:6e:e2:98:30:fe:03:1c:76:90:a4:a0:6a:e6:
         f3:a1:cb:97:4b:6e:53:da:10:ed:e0:21:dd:16:74:c5:d4:52:
         cd:f8:6f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:47 2026 by rpki-client