This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          HifDFxV0g3ptAmxXPlkhOqozdkVg60DDuHRQcui33yM=
Subject key identifier:   CB:8B:DB:B0:E3:FD:BB:18:F2:F9:1B:AB:B6:D1:EA:AC:E4:FD:09:05
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019BF83F6558B14EA0179C7A8279EFFA31D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 03:01:02 +0000
Manifest this update:     Mon 26 Jan 2026 03:01:02 +0000
Manifest next update:     Tue 27 Jan 2026 03:01:02 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: jVg323IWp0bUPDCmWE/YjNo45c9icAIqRtjEavvuLJY=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:65:58:b1:4e:a0:17:9c:7a:82:79:ef:fa:31:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jan 26 03:01:02 2026 GMT
            Not After : Jan 27 03:01:02 2026 GMT
        Subject: CN=cb8bdbb0e3fdbb18f2f91babb6d1eaace4fd0905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:ad:de:c9:66:31:f1:e6:6b:6c:a7:4c:55:
                    cd:6c:e2:8d:0f:53:93:de:47:bc:cd:c2:37:97:c1:
                    c5:93:fc:b1:74:5e:1d:2f:64:80:06:56:51:eb:97:
                    d1:b8:4e:3d:0e:1d:34:0c:cc:2f:a9:11:e1:83:e5:
                    2e:4c:6f:bb:10:6c:8a:91:6f:90:51:a7:ef:44:2e:
                    1d:05:d9:60:0a:42:1e:92:a8:3d:fa:27:ac:e7:ff:
                    19:3d:52:dd:8b:3a:ee:7d:4f:c5:7e:78:46:8b:e0:
                    28:c5:40:4e:b5:c2:c5:fd:df:43:8c:d5:d1:4c:05:
                    de:41:05:33:79:8d:b4:93:89:0a:f8:9d:e3:f8:c5:
                    18:16:05:cc:db:16:17:90:6d:be:1c:e2:d4:40:78:
                    91:d1:2c:04:3e:35:8c:e5:b3:4e:28:b4:47:78:9d:
                    e0:1d:8e:83:f5:14:a4:f0:3b:31:eb:5a:6b:d1:aa:
                    17:e6:9a:fa:35:71:ce:b2:04:9f:21:8c:12:0d:6f:
                    39:d3:77:c9:d5:f1:51:ee:f3:5d:52:45:35:1d:5f:
                    5e:98:5f:4f:69:6c:df:3a:7f:49:c0:d8:48:83:61:
                    8f:68:0b:e5:9d:9b:8e:fc:12:e7:6b:b6:0c:b3:78:
                    d8:4f:d4:f3:d8:7c:40:e7:b1:65:08:24:b1:f8:59:
                    e7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8B:DB:B0:E3:FD:BB:18:F2:F9:1B:AB:B6:D1:EA:AC:E4:FD:09:05
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:6e:ba:fa:50:ef:a7:1e:a2:eb:89:f0:a6:b8:ba:92:7d:84:
         ff:bb:13:a1:bc:12:07:b9:df:c8:77:34:31:6a:f3:d2:89:97:
         06:d9:b0:93:95:b3:b3:ec:ff:ff:de:f5:7d:b3:1f:56:60:f8:
         b1:1b:3c:a2:99:c1:86:a4:0d:b8:1c:4b:4b:a4:96:23:5c:d3:
         9c:21:79:52:c8:bc:9c:c0:3a:90:d8:95:a1:02:ba:62:e4:95:
         4b:36:70:54:91:aa:fa:7d:a6:e2:9e:77:5a:f1:24:90:d5:57:
         20:c1:b9:e0:fe:80:8b:2d:eb:c3:d2:0c:8f:3a:50:9d:20:55:
         d1:b7:6d:56:64:8a:84:fa:99:17:4e:28:02:05:5f:17:5b:04:
         d6:94:e8:ce:aa:35:49:20:1b:36:5f:cd:34:d4:1a:de:ed:76:
         0b:b7:17:c1:d6:29:6a:0d:1b:81:b3:9d:91:5c:5d:b5:1f:ef:
         60:67:8c:3c:95:ad:dd:50:10:ac:87:f3:9f:83:fd:42:73:d9:
         4e:85:a4:7f:4a:40:ba:5f:4d:27:8f:17:9b:30:8f:c3:6f:c9:
         e0:31:e6:77:84:df:8d:bf:7e:06:fa:82:2d:50:fe:af:f3:18:
         b1:f0:fb:42:34:1a:d6:17:e5:4a:6b:d5:03:5d:ae:db:e8:23:
         be:50:a6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:10 2026 by rpki-client