This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
File:                     34-WHG77t_nOdCF7HV27VOmBxvI.mft (raw, json)
Hash identifier:          dICbZOWzemsZ0CbVYyWVrACqPLY/9JAM639H8Jaqu0A=
Subject key identifier:   03:8F:4D:B3:9B:20:32:A0:57:2E:96:41:52:67:4F:12:97:68:07:F4
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Certificate issuer:       /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial:       019BF4D0A2C401EF32A33190EC7BFD5B23FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
Manifest number:          15F1
Signing time:             Sun 25 Jan 2026 11:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:12 +0000
Files and hashes:         1: 34-WHG77t_nOdCF7HV27VOmBxvI.crl (hash: QmYAhXAT9Eqvelax4BZC7QJiYMFe34KoiT/3mjXKKRk=)
                          2: CtXB1y_WiGwg9xFRHui6XM2zZos.roa (hash: akg6U1CtXak5LkwHmU54KWXlOWQ+wwDwzm5wZMHKxY4=)
                          3: e6PpS1e5NlOWchpSmQTjpUAhjek.roa (hash: VTTrgOOXJ+TNjub4/DbQZh7PcZakQyvp5nrmcjU97tg=)
                          4: nhHb3BbrnrJ7gnySXYLgpTF0_N4.roa (hash: 5BeBHQUGbG/OpKaLkyfVStYZf7js8qtgIamUEyYDRAs=)
                          5: tFxjCwXyMaEt_QnMeC7XIYXxC2w.roa (hash: PxrGTWaTcjZcpK9gCVSwzRCuIdE/O6cOmfGjhOCu2XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:a2:c4:01:ef:32:a3:31:90:ec:7b:fd:5b:23:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
        Validity
            Not Before: Jan 25 11:01:12 2026 GMT
            Not After : Jan 26 11:01:12 2026 GMT
        Subject: CN=038f4db39b2032a0572e964152674f12976807f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fa:6d:01:50:05:0f:29:34:d6:ff:3d:39:09:
                    8f:25:e4:20:de:5a:c7:27:5a:68:9e:5a:3c:ca:8e:
                    e2:12:ae:d1:a9:7b:99:f7:de:04:22:a6:80:94:4b:
                    88:59:76:e2:03:16:85:4c:fc:23:58:31:de:d9:32:
                    5c:ae:9e:4c:11:89:f5:46:6f:86:ae:df:bb:7b:8c:
                    1d:78:61:bc:63:84:38:ee:ce:43:66:11:53:d2:71:
                    db:9b:a5:0b:fa:35:9d:8d:6b:7c:45:99:07:63:50:
                    9d:72:c0:85:ae:ba:58:5b:47:16:94:2d:ba:19:7e:
                    d9:0a:32:ac:7c:e1:3a:83:7d:55:31:2c:30:69:42:
                    bf:a3:65:cb:2d:ef:47:b7:30:2d:2e:73:ff:71:e2:
                    48:8c:5e:1d:71:15:c8:0e:be:11:37:97:d5:58:01:
                    0b:e0:df:98:4d:af:a9:4e:26:af:d5:57:1e:31:da:
                    79:69:cc:b1:92:b6:0f:be:94:40:7b:25:11:af:73:
                    f6:59:f9:1d:98:b7:c9:5b:0f:1b:7d:38:ae:62:b6:
                    c0:36:0a:52:be:28:ee:17:d0:e0:0b:ef:9c:3e:f7:
                    03:84:79:25:97:98:3a:ba:7e:0e:b4:2f:48:3a:66:
                    9c:e6:e4:d4:9f:ab:e4:02:e3:b5:4c:39:a3:17:28:
                    4e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:8F:4D:B3:9B:20:32:A0:57:2E:96:41:52:67:4F:12:97:68:07:F4
            X509v3 Authority Key Identifier:
                keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:68:55:13:d0:ec:79:c9:38:f5:60:94:15:b1:a2:92:dc:42:
         1b:83:01:36:5c:46:0d:e7:44:fa:3d:c3:c1:63:80:31:c4:6e:
         7a:dd:65:f5:61:95:fb:4c:55:5c:4c:dc:6b:9a:d7:3e:d8:c0:
         3d:d6:25:97:63:2a:ba:af:df:e4:54:6c:d0:d0:a9:57:fb:a2:
         89:81:60:af:5c:1a:ac:26:db:ff:30:31:01:27:e4:51:56:2f:
         19:c6:10:21:fc:ba:bb:14:fa:62:de:25:c8:af:c1:b9:d0:55:
         eb:4f:24:47:9d:e4:28:eb:4f:03:02:57:ac:65:92:55:2e:79:
         89:35:5f:5e:3f:cc:df:e0:d2:95:1d:8d:13:c0:62:a3:6e:bd:
         2b:6f:29:43:7a:d2:15:f6:07:f7:57:56:00:80:a4:8d:4c:95:
         0c:0c:1d:1f:04:e5:76:ee:55:fa:23:74:ac:f8:3a:53:b6:c2:
         0c:b2:70:31:e9:ca:a4:ae:18:bc:e3:ce:ba:40:db:9a:46:66:
         90:6c:aa:7b:ef:87:7e:7f:5e:9f:c5:7d:42:d7:49:51:e2:ed:
         84:bb:a5:8a:16:7b:ab:14:f1:23:d5:92:4e:ad:bd:c4:54:97:
         90:fe:a5:0f:49:73:91:8a:02:7f:6d:a5:94:09:72:57:48:20:
         6c:d1:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:57:08 2026 by rpki-client