This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
File:                     R928ziYovwn65r8EQhjGV-i9PG4.mft (raw, json)
Hash identifier:          nGZWyB16OlxrufLw5frG5dDD6e+WNWR3LW5NMW+tneo=
Subject key identifier:   AD:02:7C:84:45:4E:18:B3:9A:4B:AE:3E:C4:5F:DB:89:A2:88:7E:6C
Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E
Certificate issuer:       /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
Certificate serial:       019BF83F160EC2F7CF034A35B6064B9EA031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
Manifest number:          06E9
Signing time:             Mon 26 Jan 2026 03:00:42 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:42 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:42 +0000
Files and hashes:         1: 46QaHVMJCGlRapFTukwuml2I-vg.roa (hash: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA=)
                          2: R928ziYovwn65r8EQhjGV-i9PG4.crl (hash: MNw0yP/QPhzs/GcF7Nj36tDE4EDOWjTFS2lDndHSsCU=)
                          3: qbVKuMc3qB9H7JsM6QLi1MH84nI.roa (hash: 5WbQ32xI+VCAQSLoaOvgZDqFQUif0qEkfApaleROee4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:16:0e:c2:f7:cf:03:4a:35:b6:06:4b:9e:a0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e
        Validity
            Not Before: Jan 26 03:00:42 2026 GMT
            Not After : Jan 27 03:00:42 2026 GMT
        Subject: CN=ad027c84454e18b39a4bae3ec45fdb89a2887e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:f6:b4:78:3a:31:40:48:f6:bb:c0:10:1b:
                    dc:94:6a:2a:d7:78:81:b1:77:ee:5f:39:05:b2:6c:
                    b3:32:0d:dc:4f:95:b8:5b:60:5d:f1:34:c3:33:c0:
                    5a:9e:fe:48:b2:ce:40:2c:ad:e7:c8:99:79:20:c4:
                    f5:ec:71:fb:d9:bd:1c:18:94:dd:18:c0:23:3c:9d:
                    34:8d:c2:c6:e6:b8:d7:54:17:a4:c4:88:da:ae:e3:
                    1b:e0:de:5c:f6:b7:32:a3:76:c4:70:41:14:85:66:
                    81:7e:06:85:10:01:e1:48:27:8b:65:e0:f1:65:75:
                    d8:d4:d3:af:95:d6:a9:26:f2:a7:3e:7b:b3:e8:47:
                    42:ea:c7:94:e8:5d:87:25:8d:2f:75:1e:ec:e7:63:
                    a0:f5:31:20:ed:1c:96:48:c8:d9:0e:a4:3c:cf:a7:
                    d0:a4:5e:07:47:9a:e6:69:25:27:b0:b4:78:2c:f4:
                    5b:11:bb:3b:a6:3d:25:ea:fe:f3:40:c6:e1:92:31:
                    63:1a:36:79:e7:aa:ff:d4:be:34:c1:be:08:78:e0:
                    2f:a1:f9:3c:60:f0:a9:6c:51:57:c2:a3:2a:e5:aa:
                    c6:28:81:46:dc:a0:bb:a2:3f:04:9c:ff:1d:75:f0:
                    2a:21:52:09:5c:a9:9b:26:99:12:39:ff:d0:88:92:
                    f7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:02:7C:84:45:4E:18:B3:9A:4B:AE:3E:C4:5F:DB:89:A2:88:7E:6C
            X509v3 Authority Key Identifier:
                keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f5:03:f5:33:97:35:5f:1f:58:88:d2:8b:90:fe:09:46:66:
         ed:8c:3d:eb:79:ed:71:e0:c8:9a:e4:fb:11:39:13:80:45:0c:
         d7:08:45:dc:0a:67:0b:f6:d0:2c:14:1c:ae:83:19:f8:1e:53:
         bf:bd:4b:22:ff:84:13:3a:97:d8:c8:b7:7e:63:c8:d8:34:be:
         28:1c:84:38:b1:bb:a7:f1:35:7f:47:d3:bd:6d:8c:3b:73:d7:
         a5:8a:da:48:58:57:c0:30:14:be:0a:75:70:15:88:f3:fc:4c:
         68:65:e4:e4:13:68:25:58:3d:56:f0:fa:5f:6c:3e:ca:7c:3c:
         31:db:1d:3b:1f:a7:82:d5:2f:c1:e7:d8:d1:6f:35:cd:18:fe:
         20:f5:04:bf:97:1f:be:d2:99:56:9e:91:d1:db:ac:9a:b2:b3:
         33:36:28:73:17:50:9c:04:61:73:fe:4f:e0:0b:0f:c8:ef:c1:
         72:94:ee:df:73:6e:e4:6c:4e:8e:45:74:e9:65:60:e9:27:8f:
         8f:12:bc:43:eb:21:b7:14:1d:9e:16:28:d4:ed:50:9f:65:f3:
         b1:51:14:85:11:05:79:0b:6c:a9:cb:e1:95:79:a8:a4:06:e9:
         b8:dc:08:ca:2c:e6:8c:79:5d:20:16:e4:32:84:2a:6f:19:90:
         24:5c:99:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:39:02 2026 by rpki-client