This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
File:                     zB3F-g22wmfAudluTecJSzFWYvg.mft (raw, json)
Hash identifier:          8ygsMJoBQzU+SSQYf3iMpc96aSgi/VGkDcbPyz4vGyE=
Subject key identifier:   22:8B:96:F7:DF:99:CB:23:63:B3:64:62:53:D9:9D:7B:6C:60:2C:13
Authority key identifier: CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8
Certificate issuer:       /CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
Certificate serial:       019BF6519775B5225002DA93863BF1EF366E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
Manifest number:          33
Signing time:             Sun 25 Jan 2026 18:01:40 +0000
Manifest this update:     Sun 25 Jan 2026 18:01:40 +0000
Manifest next update:     Mon 26 Jan 2026 18:01:40 +0000
Files and hashes:         1: 9GzN_HKP_WWThvHhjhRJAGhf8ns.asa (hash: f8fwofMZM08xkZUiIxhpRhPluVGD+4+qwgtz4Dalacw=)
                          2: MVjU4gy_hBbM35wNK4KUfvSGtL0.roa (hash: G8eoXQHfmyT8ey2XBjyQ/4arEt1c8Z8snoeJI0FyEH8=)
                          3: zB3F-g22wmfAudluTecJSzFWYvg.crl (hash: d9HqZvdT+Rv5zh2DPYXoGdGnboT+KsxxM/+CrwvzMKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:51:97:75:b5:22:50:02:da:93:86:3b:f1:ef:36:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc1dc5fa0db6c267c0b9d96e4de7094b315662f8
        Validity
            Not Before: Jan 25 18:01:40 2026 GMT
            Not After : Jan 26 18:01:40 2026 GMT
        Subject: CN=228b96f7df99cb2363b3646253d99d7b6c602c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:cb:b9:49:0b:5b:20:a2:46:7b:24:c1:bc:
                    e5:0b:63:e7:75:48:d8:b5:c9:dd:49:99:1b:89:fc:
                    36:eb:73:e4:84:61:3e:8b:6f:08:07:8c:b1:ed:4e:
                    8f:be:89:52:93:4d:fa:15:0d:f8:26:4f:18:ba:c8:
                    ae:9f:c7:dd:b1:d7:fe:aa:3b:17:17:15:81:82:11:
                    fd:43:a8:32:4e:4c:18:a2:82:ec:fb:e5:de:2d:94:
                    3d:06:35:e2:71:81:d1:3d:f8:ab:9d:dd:4d:8b:f3:
                    53:7a:28:0e:6e:b1:68:1e:46:4f:93:24:bb:8d:34:
                    e1:e9:c7:0c:5f:38:6f:83:77:ce:d4:2c:4c:4f:44:
                    db:3e:a4:e7:ae:73:16:cd:3c:67:35:4c:8d:2c:01:
                    5b:be:04:44:22:8c:b1:9b:ef:bd:ca:c7:e2:42:35:
                    d2:4c:3e:48:02:59:d6:ba:31:98:36:c9:02:0a:b2:
                    d8:e5:a3:b7:f3:53:3a:ee:0b:78:a9:a7:d4:27:e6:
                    f9:ad:5f:5e:9b:5e:74:63:cf:ec:dc:dd:3d:2a:89:
                    89:23:12:ee:3e:d5:fe:40:9c:66:c7:53:59:e0:f4:
                    a2:dd:0a:a6:17:7d:cd:14:33:14:ff:bf:1a:4b:89:
                    5d:f5:03:7c:8a:8c:f5:9b:00:2f:4d:0d:f9:c5:8d:
                    04:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:8B:96:F7:DF:99:CB:23:63:B3:64:62:53:D9:9D:7B:6C:60:2C:13
            X509v3 Authority Key Identifier:
                keyid:CC:1D:C5:FA:0D:B6:C2:67:C0:B9:D9:6E:4D:E7:09:4B:31:56:62:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zB3F-g22wmfAudluTecJSzFWYvg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8dea72-6e11-471e-aae2-d8fc6147b504/1/zB3F-g22wmfAudluTecJSzFWYvg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:d3:ba:2c:ec:ad:56:7b:3f:05:23:ee:c8:b4:4b:1c:a7:78:
         d8:ac:7b:bf:21:a9:ca:8b:e9:6c:dc:b5:18:fb:2a:14:f6:94:
         9c:30:20:6f:4c:d7:5e:b8:39:52:7b:33:30:bd:42:74:60:08:
         3e:f0:fc:05:a3:26:2c:ba:72:e2:ac:2c:1f:ca:34:12:38:87:
         87:f0:b2:06:67:da:8d:20:8c:ff:2b:87:61:4b:0e:6c:95:ab:
         fe:2c:b2:5c:59:1a:14:c0:bd:0f:67:d9:85:64:1f:98:44:27:
         bb:69:10:1a:a6:b5:bc:51:99:fe:ab:9d:45:05:2b:ce:1e:95:
         68:0c:06:10:13:7c:2e:67:68:93:c5:f7:fc:61:73:c0:1f:44:
         bb:c1:df:c3:68:38:61:3e:b1:d1:fc:11:35:5c:35:01:90:9c:
         6d:30:7b:0e:88:7c:48:91:27:ba:02:11:ed:e6:3b:47:8f:53:
         a8:b3:60:1d:af:dd:b8:dd:7e:82:28:97:57:fe:ec:53:23:73:
         3b:d2:a2:af:a3:2d:fb:3c:35:4d:d9:8d:79:9e:a1:1a:23:12:
         fb:3e:6c:d9:2e:42:47:50:46:97:a6:d4:7c:9c:62:d5:4b:0c:
         5e:71:55:16:fc:fd:ee:ed:e3:b4:1d:3c:aa:b4:42:92:9d:e3:
         a7:c6:29:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:27:43 2026 by rpki-client