This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
File:                     PRH7pD9XqwRF5UL87suHaBZXzPM.mft (raw, json)
Hash identifier:          ab8H7fOPqBKIMPog9dFdA/RdMhExorlF0iinh8Z8xkQ=
Subject key identifier:   0D:95:E9:2F:8D:7B:D1:05:3C:4F:41:C6:35:25:56:69:92:AE:9F:B5
Authority key identifier: 3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3
Certificate issuer:       /CN=3d11fba43f57ab0445e542fceecb87681657ccf3
Certificate serial:       019BF619E2BA38A6ED6D42678ADA1A56980F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
Manifest number:          0472
Signing time:             Sun 25 Jan 2026 17:00:50 +0000
Manifest this update:     Sun 25 Jan 2026 17:00:50 +0000
Manifest next update:     Mon 26 Jan 2026 17:00:50 +0000
Files and hashes:         1: 9IdHCEJQuzKyxwFpT8ujYaesS9w.roa (hash: C3vAatIUJjp84Pk7IwDii/846WZ3p/AWV1sBtD8WSCA=)
                          2: PRH7pD9XqwRF5UL87suHaBZXzPM.crl (hash: BWGQSukSdmcXBCGzYSCazkf0j7KmEk4WZNv+Ju3LicE=)
                          3: dAsT8XG2mpyNIJ5hpWhJSc5415Y.roa (hash: 8hFFOmMnHAAA9ytOGH8EO+wUtjGfAGKJiyYhcntZJUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:19:e2:ba:38:a6:ed:6d:42:67:8a:da:1a:56:98:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d11fba43f57ab0445e542fceecb87681657ccf3
        Validity
            Not Before: Jan 25 17:00:50 2026 GMT
            Not After : Jan 26 17:00:50 2026 GMT
        Subject: CN=0d95e92f8d7bd1053c4f41c63525566992ae9fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:a2:08:77:9a:36:8b:6b:8d:8e:ad:4a:2a:
                    ee:aa:bd:8d:9f:91:e9:48:3d:a8:73:d6:e6:10:4a:
                    94:d1:f4:d8:31:45:fc:45:d3:e1:c3:07:86:37:b1:
                    8a:82:0b:cd:9c:85:52:c5:7f:dc:dd:b7:0a:89:99:
                    e2:f6:6c:00:a3:c1:e5:bb:12:dc:6b:bc:1b:23:69:
                    7b:1a:04:90:6a:b0:36:a4:a3:88:a2:47:aa:d2:8c:
                    91:f0:ee:d0:28:6b:22:4a:47:2d:e8:42:3d:41:8d:
                    e5:ef:30:f2:ea:30:43:d7:6a:c7:ff:5a:4b:e7:fe:
                    cf:1e:b8:be:cf:8e:13:41:d4:43:15:80:f2:95:6a:
                    f0:43:21:5e:52:a6:07:29:9f:38:3a:06:ea:d0:aa:
                    c5:e0:d5:38:c1:12:a0:ec:60:8a:8e:7b:12:2f:aa:
                    ea:49:0b:80:b5:af:45:d5:5e:40:7e:20:7b:3e:fe:
                    ce:c0:e2:56:3f:78:3e:6f:b7:25:16:31:10:b2:81:
                    d2:bf:2f:d9:0c:4a:4a:3a:77:94:57:9c:e6:21:84:
                    be:3f:21:53:72:a4:7f:ef:1b:29:24:f5:b2:d4:e3:
                    bc:ba:a6:fc:ce:6f:de:25:eb:33:4f:7c:c4:72:53:
                    f7:dc:6e:43:53:ba:79:d0:5c:2a:23:db:6b:b5:3d:
                    eb:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:95:E9:2F:8D:7B:D1:05:3C:4F:41:C6:35:25:56:69:92:AE:9F:B5
            X509v3 Authority Key Identifier:
                keyid:3D:11:FB:A4:3F:57:AB:04:45:E5:42:FC:EE:CB:87:68:16:57:CC:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRH7pD9XqwRF5UL87suHaBZXzPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/473ade-b504-4b10-aed6-c5dd3857a4d2/1/PRH7pD9XqwRF5UL87suHaBZXzPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f7:cc:a2:85:ff:85:cf:c5:2c:36:ae:7d:30:8a:59:7e:48:
         7b:78:db:f4:25:bd:2a:90:cf:d9:5e:8b:de:f5:47:4f:04:69:
         f9:52:a1:68:49:f0:8c:e2:32:39:f2:fd:9f:99:50:59:a3:af:
         86:6b:fd:da:f0:9f:ce:da:92:8b:e2:95:4d:c7:6d:8d:4a:56:
         13:00:fc:8d:76:70:cc:56:89:c9:42:19:5a:31:9a:e3:bb:ab:
         55:67:19:d4:10:e1:48:a2:96:2c:72:e8:a0:96:2f:db:4a:7d:
         dd:44:1a:38:8b:9b:9e:bf:fe:2b:52:3b:c1:ab:ee:fc:e7:22:
         76:b4:77:6f:c2:76:a4:55:27:b1:e4:44:a9:01:44:5c:46:9b:
         4c:2b:49:50:59:f2:c3:e3:55:72:45:57:39:4d:e4:9f:bc:14:
         cc:d8:08:bb:0b:a4:18:6c:13:2a:69:bd:c7:4b:c0:2a:49:ec:
         17:a2:0d:84:ae:30:98:7b:19:f1:22:ea:3d:28:0b:86:c0:b4:
         a3:e5:88:31:d6:95:73:81:00:84:f2:4e:53:97:79:6a:43:91:
         60:7b:32:eb:4c:93:96:41:96:ad:aa:fa:04:32:b2:71:fe:54:
         1f:af:65:de:fb:45:23:fb:ef:c3:94:2b:09:8b:5b:f5:ba:af:
         3a:45:9a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:24 2026 by rpki-client