This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
File:                     ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft (raw, json)
Hash identifier:          TIbwfx3wdEjusAfL/pZmYqpr/ur7Qgb2aJk86qTnCMI=
Subject key identifier:   88:BD:26:73:79:16:43:CB:F8:15:13:FC:95:92:5A:2E:15:65:78:7C
Authority key identifier: 65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41
Certificate issuer:       /CN=656cc25012e3a4c8b1626dd757c7b0510e457341
Certificate serial:       019BF50717F6081111E04CD41BD556A5DF1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
Manifest number:          17EA
Signing time:             Sun 25 Jan 2026 12:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:41 +0000
Files and hashes:         1: 6xuNTY_iWkHPPmX8ImnPUwpIICw.roa (hash: rki5JF3Dn8KF0wiQ0pOA5KuyYBjrNPOOlyoFXsz/Nw4=)
                          2: Obp19AVz-eUE_n6Z1_9dJ4EGDeM.roa (hash: /UOlw8R9RHBXRNf2pHB5ILY2/31tspmHrZEY8rczLws=)
                          3: ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl (hash: nJUFvhanlgBIAcF2LrAbAQxdfpOe3TM8vRMsPlfL50M=)
                          4: l6fGw5x0kwKbWm6qlO4Cb8mnozw.roa (hash: qIO5x+8uTr9xwt8GJiCJP0qK55Dhutv/sFwU3VkQhb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:17:f6:08:11:11:e0:4c:d4:1b:d5:56:a5:df:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656cc25012e3a4c8b1626dd757c7b0510e457341
        Validity
            Not Before: Jan 25 12:00:41 2026 GMT
            Not After : Jan 26 12:00:41 2026 GMT
        Subject: CN=88bd2673791643cbf81513fc95925a2e1565787c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:99:c4:da:d2:f8:c6:5b:66:2e:c3:87:e2:
                    c4:63:fe:fe:20:19:e8:41:73:0a:c3:4d:3d:23:ee:
                    72:7a:ee:81:6b:e4:c0:4c:8f:ce:ef:7b:8b:41:27:
                    b4:27:87:d4:bf:06:60:9f:08:5a:5b:5e:3f:2f:de:
                    9d:3c:fd:fb:79:c7:d4:c0:b8:f5:8d:85:f2:7b:48:
                    8d:0a:72:0b:d0:27:e2:74:18:c3:26:fa:de:54:ca:
                    63:a0:ba:29:e7:04:80:ca:e8:f8:b8:bc:37:06:c7:
                    68:93:a0:17:48:96:30:0a:7e:36:97:e8:11:9a:7e:
                    7b:be:fb:9b:0d:88:9c:3d:6e:69:df:be:8f:ec:9f:
                    0b:85:10:06:90:d3:57:de:72:56:ea:5b:3a:e8:18:
                    9e:c8:81:ac:3f:66:ac:a2:2c:ff:02:bc:b1:26:9c:
                    3c:d1:0a:03:36:1c:2b:d0:22:5b:95:c1:40:65:66:
                    b1:4a:d5:13:4e:da:63:ec:19:f9:af:10:04:d0:fb:
                    f7:57:53:99:73:58:e5:b7:fe:2b:70:fe:4e:2c:64:
                    dd:33:e5:a3:c1:56:50:07:61:a2:df:d5:5a:da:06:
                    df:6d:97:f5:40:de:d2:7e:30:7e:7a:b7:fb:1e:65:
                    b6:cd:d8:5a:fb:36:bd:09:ed:20:e5:43:6c:32:fa:
                    3e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BD:26:73:79:16:43:CB:F8:15:13:FC:95:92:5A:2E:15:65:78:7C
            X509v3 Authority Key Identifier:
                keyid:65:6C:C2:50:12:E3:A4:C8:B1:62:6D:D7:57:C7:B0:51:0E:45:73:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6db46d-bc2d-45d7-a279-820325f53ccb/1/ZWzCUBLjpMixYm3XV8ewUQ5Fc0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:98:f3:dc:24:e6:25:31:4d:34:3c:11:77:c9:64:76:14:2a:
         f7:1e:01:99:a0:69:c2:35:5f:32:0b:7c:13:fd:e4:6e:28:62:
         c0:87:c1:f2:ed:fe:24:c0:46:0c:50:68:7a:53:6a:c5:dd:e7:
         3b:89:df:3e:1b:10:7c:6b:d3:0c:04:0c:67:5e:f7:50:fe:63:
         80:dd:d6:a0:6f:4b:c9:c1:88:84:21:18:ed:68:69:13:59:d8:
         fe:71:ef:41:ee:72:9e:bc:53:88:71:66:44:95:1e:bd:a0:4e:
         cb:26:cc:04:40:05:16:2a:de:7d:4b:dc:ee:d7:c7:f6:9e:57:
         9c:ed:b6:11:84:c0:f6:5d:d4:8e:34:bf:b4:17:e2:22:ba:e1:
         e8:97:a1:c8:82:0a:4c:e8:16:4c:a5:84:0d:82:84:cd:c5:b8:
         31:e0:9b:8e:2d:a1:03:b5:df:c0:2e:dd:e1:87:bb:6d:37:c1:
         42:2b:90:69:0e:d3:5e:27:83:94:85:5d:d5:3c:91:a9:78:6f:
         09:05:99:a5:84:18:63:01:0d:39:75:65:e3:58:9f:8f:4a:e4:
         86:4f:e4:d4:cd:26:70:71:9b:96:31:86:3a:67:74:a5:cc:5d:
         08:3f:88:de:e0:fe:35:6e:36:d7:6d:a3:54:69:a3:9b:75:b5:
         60:88:a9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:45:08 2026 by rpki-client