This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
File:                     r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json)
Hash identifier:          LRziFqMN5nTS1pRtKEEdaoXhiwfoRf++/5kW/8CSx3Y=
Subject key identifier:   9D:4D:3B:16:F3:B8:EB:99:A7:8F:31:DA:9B:4E:EB:E7:5B:BF:B3:79
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Certificate issuer:       /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial:       019BF53EDE472B463C3D5BD328E53C0340C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
Manifest number:          11C3
Signing time:             Sun 25 Jan 2026 13:01:36 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:36 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:36 +0000
Files and hashes:         1: 1-IJx4nelfGjFuMYLqOK7id9irxU.roa (hash: b5aVl1cJIc1BC2UfHdl9ea+y66xvZtqK+4BK5mmAqH4=)
                          2: CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa (hash: I2lPd7hD8IUUjVTMDWiwz4fKXB1nPb5e6pLyv73hBK8=)
                          3: Lkpu54v6ux0vfrMmr2dvF4EUmIY.roa (hash: 2lIxKAyj2wAnIHlH+oCwYSCBBNm4zlmBFuipn6Ti/Cc=)
                          4: N_Jp-G27wqAqsqkajDg53k_oUEE.roa (hash: NpaEZ0EEykOhPXCywjsGGExbKvpF7O0B2ojyn6pZCPc=)
                          5: NlmgJH7T2Nyh5LwtrU7zGve9sZA.roa (hash: 3Wjbtflt/jjOunqkUKEb+3Cki8OMoGu4zLrIQR/qwZo=)
                          6: cUb3XTogvovrYjpVGeHi0SpRJUA.roa (hash: LdHfjZ1stTUnmvHrBTIHeQNXmr3GpKVFfzvqxr7MXf8=)
                          7: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: n9wMavT+msug8CEARnsW3Ej6l+ygfwuAUXFP5MKi7fw=)
                          8: w83Lz7bG7qWOCKPvzC-7J-e6eIQ.roa (hash: K0HhmDqy6GK1v3887SfyLFxrwfrFJjolkhIBVfrw66c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:de:47:2b:46:3c:3d:5b:d3:28:e5:3c:03:40:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
        Validity
            Not Before: Jan 25 13:01:36 2026 GMT
            Not After : Jan 26 13:01:36 2026 GMT
        Subject: CN=9d4d3b16f3b8eb99a78f31da9b4eebe75bbfb379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9c:d0:a6:73:f8:ac:4d:2c:9e:0e:7c:3e:66:
                    08:8b:37:18:24:c9:8f:25:2b:ba:57:a5:1f:7d:4f:
                    09:63:07:a9:86:7c:2e:8d:37:1f:e1:90:75:22:49:
                    78:21:e6:1f:11:d4:ca:55:4c:92:65:e4:42:7a:98:
                    6e:2f:ee:11:00:d5:e7:50:5b:07:f2:54:29:ad:94:
                    a2:f1:d8:4a:49:f2:e7:d8:34:6d:fc:42:70:11:c9:
                    67:a1:a5:25:57:3b:54:bf:06:bb:df:e6:7b:3a:2d:
                    17:06:d3:99:6a:d8:79:75:0d:5e:4e:07:0f:7d:86:
                    18:b2:b0:af:ea:dc:d8:09:9c:0c:78:fa:c3:48:9b:
                    d7:b2:3c:9f:3e:df:31:d5:c7:67:b6:52:47:95:5a:
                    83:f5:47:3f:d6:71:a6:38:96:53:14:56:f7:ee:c2:
                    68:d9:e3:23:d5:cd:2e:a1:7c:83:6d:28:c9:f7:ab:
                    a1:8f:3b:df:d6:3e:af:d5:5e:43:c0:36:76:e9:6a:
                    01:66:33:f6:64:18:fd:c3:3c:c3:2c:5b:09:b3:4f:
                    49:3f:61:23:b7:2b:d9:77:e1:ca:b8:7a:c2:bc:ca:
                    e3:72:9a:9a:e8:70:97:d2:cf:6a:f8:6b:73:5f:35:
                    00:f9:a7:10:2f:84:78:2c:76:87:15:62:58:64:d1:
                    29:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4D:3B:16:F3:B8:EB:99:A7:8F:31:DA:9B:4E:EB:E7:5B:BF:B3:79
            X509v3 Authority Key Identifier:
                keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a4:80:f2:42:d3:e3:16:bc:70:9a:51:59:00:1b:f0:10:da:
         14:1e:13:42:2d:0f:61:ac:44:1a:fb:0b:00:88:db:17:e1:1e:
         cc:b6:17:78:47:bb:29:ac:a5:03:2d:5f:5e:e3:26:e8:e6:de:
         e1:02:93:25:7d:22:62:0b:02:46:b4:dc:2c:3d:b5:b7:c7:48:
         d7:2a:c6:8f:53:ea:5d:9b:bc:ce:3b:cc:77:f3:e5:92:3f:58:
         a6:dc:3f:ef:fc:26:dd:c5:96:c4:df:1f:1f:f5:e9:16:01:80:
         f3:43:c8:43:a9:09:76:33:a5:d9:b4:ae:4d:bf:be:10:e9:b8:
         8a:73:42:77:5f:2d:fc:57:bd:32:b9:d3:9b:86:ae:c9:0d:4b:
         2f:63:4a:51:a2:64:94:dc:ae:62:ca:47:b1:d3:ba:de:29:89:
         31:70:03:8e:b4:70:8a:85:21:d0:8b:fa:a4:25:a5:d5:48:79:
         58:bc:db:70:f8:cb:35:e0:9c:4d:ae:83:96:7b:4f:b9:46:9d:
         83:96:cf:5d:58:17:ba:b2:33:6e:bc:a4:e2:b7:e4:05:33:da:
         bb:6a:5c:54:cf:52:e8:18:c2:4c:3f:21:01:23:8c:17:a1:ae:
         eb:32:03:c8:d4:aa:17:69:a2:15:b9:97:27:1b:c1:83:8e:e9:
         3d:67:34:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:05:38 2026 by rpki-client