This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
File:                     Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json)
Hash identifier:          T+c7duPauu3+d4XtIPDWrdrwieo2dQklGNVNdHjoPhw=
Subject key identifier:   D8:7F:28:A5:85:D9:AB:9F:E0:64:EF:DD:26:80:82:0C:AA:0D:8F:F7
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Certificate issuer:       /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial:       019BF61A497999EB873A4688A9BE244EC9BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
Manifest number:          1535
Signing time:             Sun 25 Jan 2026 17:01:16 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:16 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:16 +0000
Files and hashes:         1: AE9Lfl-4UbNnNijYfCBA7Dotnk0.roa (hash: 4272KJRiaDFrIJ1v9/e6Ri/6Hq4jjOw6FRmI0faWzNk=)
                          2: AjYgA83fEMBqjUVh5HogDvcF4y8.roa (hash: HmdReTlwO7q9dM9EymrF4uah3KgbjfgTzrb6znj83rY=)
                          3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: chWeYwXUAAZ3iBCLfOQcT9zPhv5kui24Z3/hIXR2yZs=)
                          4: Un6YiMPdPmnXJEAfLjnF4ejn4-U.roa (hash: Vvj30zXhMxPg9hIHuIBZfVJuw/gM4ZcLB86Kjx9twm4=)
                          5: UziBeF9vZhF9BgfMO9asPeRvxQs.roa (hash: b93bcZj29ys10OmZ+k4Z6n8bU3xxStbAH0qnq54JvrM=)
                          6: XRdK0Q38L08ZiH0X_7usVjWgOqU.roa (hash: NUYv2BvkNVVgRi3KArH9hMTA+2Ow1tmbVRQjMS4xPYw=)
                          7: kHpTZdJdGSTy5cL36tdDAiifHMM.roa (hash: t+ZN1J9Tad6u02+/g5NMqtaDNj7REzYTAjeN7U4LYyw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:49:79:99:eb:87:3a:46:88:a9:be:24:4e:c9:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
        Validity
            Not Before: Jan 25 17:01:16 2026 GMT
            Not After : Jan 26 17:01:16 2026 GMT
        Subject: CN=d87f28a585d9ab9fe064efdd2680820caa0d8ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c8:92:31:22:c3:48:72:35:36:01:fb:fc:d3:
                    80:7d:42:3d:5a:72:98:58:54:b8:c1:aa:82:45:01:
                    ee:b0:34:0b:be:cb:e1:aa:b9:47:0c:46:59:0e:74:
                    7e:63:79:2c:fd:e4:d0:cb:8e:4b:ca:2e:c9:4d:5e:
                    ab:c9:18:d7:db:7e:11:ad:94:a7:31:12:90:f1:bc:
                    2d:a9:81:f9:d4:4d:e5:7c:19:08:4d:3d:13:9c:3d:
                    fa:db:c0:31:9d:25:d2:74:2e:d2:74:c9:8a:fb:53:
                    99:48:ce:0a:e9:ba:fa:d5:de:d9:b0:4e:e4:d4:82:
                    1e:31:c5:0c:20:cc:15:f7:16:ac:fb:63:03:26:61:
                    f3:52:e8:b8:d2:5d:d9:5d:99:aa:ed:42:3a:88:ad:
                    c8:b0:08:69:af:ec:da:43:9c:40:ba:a4:00:9a:20:
                    09:0c:d9:94:f9:95:4d:42:f1:04:bc:40:a7:44:3e:
                    cd:37:62:d8:b6:13:ea:5f:6c:e3:5a:c4:4b:b5:44:
                    b0:7e:42:3e:56:b5:94:3a:ff:4d:e7:37:a5:6c:4b:
                    5f:c4:7d:20:8d:59:38:a0:d0:73:67:6d:2d:88:04:
                    33:59:07:a1:9e:cb:13:46:43:f4:07:02:23:8a:db:
                    39:f7:22:46:b0:ab:63:28:7a:8c:96:2a:34:64:c1:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7F:28:A5:85:D9:AB:9F:E0:64:EF:DD:26:80:82:0C:AA:0D:8F:F7
            X509v3 Authority Key Identifier:
                keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8c:93:3a:ec:f2:3d:21:ea:17:9e:01:30:18:d0:03:03:ca:
         4c:b7:b7:47:b9:01:26:c1:4b:07:fa:5a:b3:13:73:d9:5c:bb:
         3e:bb:0d:c6:79:2e:34:a3:55:73:76:ac:87:41:1a:88:72:c2:
         f1:a1:aa:50:c3:80:08:62:57:6e:7e:7d:70:97:a4:8b:d2:26:
         99:02:54:f9:a7:1b:6b:f9:d2:f1:8b:a8:37:e1:93:50:b2:fb:
         62:7f:12:a2:9d:fb:a9:46:98:74:fd:26:8b:dd:f8:28:05:c6:
         e3:47:d2:87:96:01:4d:39:08:01:fa:0c:c3:9d:25:39:d4:97:
         f8:89:32:51:b6:c8:f2:da:03:a4:58:9d:cc:6d:79:7b:e3:86:
         2a:a8:ce:17:ce:ce:ea:13:b0:db:5b:dd:9a:ac:dc:e0:a6:0a:
         5d:86:44:22:3f:98:08:6a:eb:fe:fd:44:9c:a8:d8:5c:48:bc:
         c9:9d:6c:43:10:79:71:a5:8e:2d:ce:71:02:83:df:b7:e2:5e:
         20:2c:fb:2d:c2:fa:de:2b:5c:44:81:1f:9c:05:fc:92:0a:87:
         e0:3a:30:b7:de:de:40:e8:87:e3:c9:e5:69:c2:31:56:2d:8f:
         dc:2b:1e:69:e8:3f:c2:80:d1:65:67:17:c0:c8:42:1b:fd:69:
         c4:e0:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:34:32 2026 by rpki-client