This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          iPmbw6dlXpQJB/FFTSijxc7GCx/VqSsx6I1ISnISJIA=
Subject key identifier:   71:0F:B1:8D:F5:6D:59:11:D1:91:78:E7:BF:B5:BC:33:E5:4E:80:18
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       019BF6F5F8FCE7F737475C5732A15176C4BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 21:01:13 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:13 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:13 +0000
Files and hashes:         1: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (hash: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4=)
                          2: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (hash: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: aamCuQoNkmJqber4MMSc9ong11xCFN/1wDqBkKaiNKg=)
                          4: l6fGw5x0kwKbWm6qlO4Cb8mnozw.roa (hash: qIO5x+8uTr9xwt8GJiCJP0qK55Dhutv/sFwU3VkQhb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:f8:fc:e7:f7:37:47:5c:57:32:a1:51:76:c4:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Jan 25 21:01:13 2026 GMT
            Not After : Jan 26 21:01:13 2026 GMT
        Subject: CN=710fb18df56d5911d19178e7bfb5bc33e54e8018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:75:d6:ad:94:48:df:8e:c5:e2:5e:45:de:83:
                    0d:4a:44:03:8c:85:f4:fc:f3:17:8f:e4:64:66:66:
                    aa:f4:b5:dd:90:a4:67:88:f5:87:f6:b6:65:16:ad:
                    0f:04:ad:bb:30:bd:13:9a:2d:03:20:bb:7f:6d:bf:
                    fe:02:04:65:32:88:a1:cc:19:06:7f:51:48:f9:f7:
                    94:86:aa:bc:97:ef:fa:29:7c:7e:1c:4e:d2:af:a1:
                    9b:71:51:ff:9d:39:40:f0:04:1a:17:cb:7c:2e:9b:
                    77:19:1a:9d:43:9d:87:34:f5:4d:63:59:f8:f0:3e:
                    ac:8a:45:49:ba:63:46:6f:46:d0:45:c1:ac:4c:d8:
                    2f:e6:2c:1c:3e:3a:e3:94:77:3a:94:c9:1c:24:5a:
                    21:59:12:90:3a:6f:b3:23:d4:7a:49:c0:ea:9b:aa:
                    ae:56:2b:d3:cd:1d:d6:27:5c:93:b6:12:98:f8:83:
                    d0:5a:30:9b:be:d2:c4:7a:ce:a3:2b:28:f0:a3:9d:
                    8a:e9:61:d8:dc:be:0f:29:c3:45:12:11:f0:0d:18:
                    fd:48:8a:8f:68:4c:2d:e3:0b:f7:2d:4d:97:90:09:
                    ea:0f:7d:95:9b:19:76:5e:fb:6e:6e:4f:a8:eb:dc:
                    09:9b:cc:96:c0:a7:51:2b:45:5c:a2:b2:8c:5b:f4:
                    06:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:B1:8D:F5:6D:59:11:D1:91:78:E7:BF:B5:BC:33:E5:4E:80:18
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:84:e0:97:41:03:6d:4f:33:39:a2:c4:82:45:e7:8f:54:0d:
         e5:c2:5e:69:67:91:d1:32:7c:ed:7b:8e:2d:c0:31:41:bb:85:
         ba:82:e3:3a:9a:00:4e:70:70:1b:8e:0d:a6:62:52:69:de:f6:
         3c:5c:54:3b:32:59:04:47:7b:fe:cc:68:e5:b5:57:d1:d4:9b:
         3d:3e:bb:e3:e6:c9:fc:56:c7:67:cc:0b:33:13:09:07:aa:57:
         76:e9:de:95:ae:06:96:c0:ac:78:1a:15:ad:09:e7:e2:d2:ac:
         a5:aa:a2:0c:c3:e8:e6:da:de:84:6f:67:de:b4:9e:f7:67:20:
         52:bd:57:a8:e3:56:59:66:73:6e:e1:5e:4e:aa:da:af:3b:15:
         62:9b:d3:91:ec:27:23:7f:c6:0a:fd:d9:cd:d4:18:1d:ec:a3:
         56:dd:c0:94:b1:dd:21:62:5d:f5:b3:6c:92:64:5e:ce:7c:39:
         71:2a:cf:be:e4:3c:29:ec:d0:1b:b9:22:04:80:0f:a1:1b:42:
         7f:bd:0a:60:73:e1:d0:79:3f:2b:59:fc:7d:25:1b:cb:58:3f:
         13:d2:7b:b7:40:78:f6:c9:8d:b4:26:31:35:19:f1:e4:b6:05:
         be:a3:2c:cc:e9:56:84:a0:28:e4:8a:f7:5e:4a:c0:52:e5:b4:
         1a:18:e6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:18:30 2026 by rpki-client