This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
File:                     FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json)
Hash identifier:          shbvuBOlXL7svKTS2yYGcqrbwzrrFlm2GPpC+874Z2Y=
Subject key identifier:   BA:D8:F0:1B:AD:A3:5C:DE:04:97:42:90:05:92:06:12:A7:52:6D:F4
Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD
Certificate issuer:       /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
Certificate serial:       019BF8AD31C942678C2BC5D6CEC9869FE1D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
Manifest number:          177A
Signing time:             Mon 26 Jan 2026 05:00:58 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:58 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:58 +0000
Files and hashes:         1: 6y0QRmdd9vlcIIW6C7nugFvCC0A.roa (hash: ikMvBUt9Qqg8UkAC082IOH3H4LL2KZQEJOhKFoOmr2o=)
                          2: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: z2iXN6Wk7X3swhg+R+ScXksn3LsIVZImRpzgH8UJzcM=)
                          3: uKqc7_GARDcKUuHyu7JV-TTdnCk.roa (hash: 7UOe0uId7LA9u86n+Afj6gW8cLWQbInKlp+hLepKp6Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:31:c9:42:67:8c:2b:c5:d6:ce:c9:86:9f:e1:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd
        Validity
            Not Before: Jan 26 05:00:58 2026 GMT
            Not After : Jan 27 05:00:58 2026 GMT
        Subject: CN=bad8f01bada35cde0497429005920612a7526df4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:11:59:ca:32:ae:15:2a:9c:9e:b5:31:ed:
                    63:df:a2:66:d2:ce:0d:fc:55:11:a5:65:c9:64:53:
                    4d:a0:39:a2:a4:ca:f5:fb:c7:25:f1:7e:57:a0:bd:
                    7b:4b:e0:47:c6:90:a7:5c:47:c1:92:80:92:26:f3:
                    00:58:2d:72:5d:a2:6d:44:fd:a2:4e:67:4d:f4:d2:
                    85:17:b7:ad:b0:55:00:ae:45:72:0b:03:3b:25:c6:
                    9e:0c:ff:63:8b:dd:31:df:9c:b0:86:04:bc:44:31:
                    92:55:88:96:b2:68:f0:ce:e2:c7:40:5b:d5:db:74:
                    7d:2c:50:b4:b4:0c:7a:c4:0e:20:e7:72:89:c5:46:
                    d7:e4:15:96:66:b5:31:5c:dc:58:5e:85:0d:3e:1c:
                    6f:79:bf:8d:22:e0:b6:c8:56:45:8f:fc:a1:fe:14:
                    6d:d6:9b:31:25:23:6d:ae:78:7d:26:2c:f6:3d:11:
                    cb:bd:0a:af:85:b8:e3:b4:96:ea:33:6e:13:42:69:
                    bc:af:8c:64:8c:43:bf:a9:c3:4a:89:97:9c:1a:4a:
                    18:85:23:19:32:69:11:6d:fb:de:fa:2b:1f:87:4a:
                    b3:1d:5c:de:5e:08:c4:99:69:28:12:53:6d:2e:be:
                    72:93:7c:dd:ff:1b:b1:e2:f0:95:0b:90:cc:a6:12:
                    73:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D8:F0:1B:AD:A3:5C:DE:04:97:42:90:05:92:06:12:A7:52:6D:F4
            X509v3 Authority Key Identifier:
                keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:7e:40:c9:13:fe:8b:d6:27:e3:57:59:0d:b4:ab:fe:27:6d:
         d6:97:90:46:7a:2f:90:08:ec:c9:fd:2f:d2:61:1c:d9:86:40:
         90:5a:02:fa:23:61:f5:9d:a7:0e:7b:97:4d:ca:df:8a:45:f4:
         7a:75:fc:4e:07:95:1e:63:42:a2:f8:dc:03:98:f0:f6:c0:44:
         8d:25:be:6f:d0:b8:aa:a8:60:0e:0b:61:8e:93:4b:4f:99:dd:
         67:b8:45:02:66:4d:c3:84:ab:a9:fc:63:f9:07:54:43:e4:75:
         5d:ec:e8:8f:60:aa:29:45:fe:54:2d:fe:41:63:7b:c5:5d:4f:
         55:ca:06:c2:11:d8:c3:21:6c:63:4f:7d:26:16:0a:0e:ca:58:
         b2:b3:aa:3d:cd:da:60:7f:49:a5:51:4a:4c:ed:6a:ec:46:94:
         57:2b:85:60:f3:b4:a4:18:35:36:65:50:19:0c:97:24:f9:ab:
         ae:d6:54:35:ff:44:7d:bd:19:0f:bf:a1:02:cb:e4:09:c6:3a:
         0b:f7:62:ae:7f:e7:a0:7e:c6:5c:31:1d:06:df:1f:0a:71:26:
         8e:fc:89:75:90:45:51:7d:8a:35:f0:6f:d1:ec:73:cc:71:5e:
         91:4e:be:55:47:01:e5:a5:d0:6e:44:b4:8d:5e:5d:6a:ff:c0:
         ce:ce:25:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:45:17 2026 by rpki-client