This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
File:                     ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft (raw, json)
Hash identifier:          Qy4kmxs544lj4U67jDJ4Aw6gfomsZFxFHXYmrKVFwmo=
Subject key identifier:   A5:05:04:6D:3D:71:1D:E1:DE:DA:06:A4:C3:30:0B:28:C9:76:F2:9A
Authority key identifier: A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67
Certificate issuer:       /CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
Certificate serial:       019BF91BED7EE3775AD4A223FC614400B9DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 07:01:55 +0000
Manifest this update:     Mon 26 Jan 2026 07:01:55 +0000
Manifest next update:     Tue 27 Jan 2026 07:01:55 +0000
Files and hashes:         1: IkWlnkMRYmmY0z6RsMt9nVHWTHY.roa (hash: HZyHDjW4LM4yDmwpXJyjj9r1XYcSwDmPu4g9chOA6fY=)
                          2: Nd1TnNt00oK2xr_oilTTzqexc7Q.roa (hash: +kz057WFCQ3qfR3EIzjNvOnka8S56ej02u7lcwgzBvw=)
                          3: fV79Senro57id6bOwy-8bI2dt7Y.roa (hash: MG+KbDbsLbpSzwp3gHCs1H8iXzaKkDKDQI00IvNa3Wg=)
                          4: ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl (hash: p9mlW0Q8ktE7iHzbf+EhWrUBluaqRCQILPoSfUWHmPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 07:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:1b:ed:7e:e3:77:5a:d4:a2:23:fc:61:44:00:b9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a694f005f5977c323ecdbea9c5f8cca369e65c67
        Validity
            Not Before: Jan 26 07:01:55 2026 GMT
            Not After : Jan 27 07:01:55 2026 GMT
        Subject: CN=a505046d3d711de1deda06a4c3300b28c976f29a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4b:d1:8e:00:83:1a:a0:18:00:67:21:b1:3d:
                    c9:c8:17:c8:5f:5c:36:43:8c:bf:83:ab:b1:65:ed:
                    21:fc:c1:b6:9e:a9:7b:bc:3d:14:f1:1a:21:cd:64:
                    91:5c:a5:e9:12:35:ed:32:ce:42:93:4b:e4:1d:b5:
                    90:11:65:4c:93:44:50:87:a0:d8:8d:5a:ae:aa:25:
                    1a:18:92:2f:40:94:60:a8:cd:89:8a:78:52:d5:9f:
                    43:4e:23:d5:66:a5:56:0d:b6:d2:bd:35:8e:72:fc:
                    43:d2:7e:d0:7f:f9:63:ea:8f:18:56:ca:bf:a1:6a:
                    a6:56:62:20:92:42:e4:1a:c8:66:71:3e:62:d7:1e:
                    00:90:ad:5e:75:85:ad:15:89:11:08:9b:b4:b8:49:
                    1c:6b:c1:80:4e:c7:f1:96:92:46:7e:4a:00:49:00:
                    08:59:71:4b:a7:75:ae:84:45:42:d8:96:07:b3:f2:
                    a7:f3:15:54:e2:2e:0c:9e:2b:fa:0c:bf:4e:f5:97:
                    11:8b:15:f0:0b:b2:f1:a6:8a:14:62:af:7e:00:72:
                    07:af:4d:cd:ec:75:06:10:12:41:56:58:a5:4f:f2:
                    94:23:48:26:be:6a:ac:6e:28:56:af:b0:e8:b2:a6:
                    0a:c4:5e:87:3c:38:cb:40:29:71:8a:cc:d9:82:c4:
                    29:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:05:04:6D:3D:71:1D:E1:DE:DA:06:A4:C3:30:0B:28:C9:76:F2:9A
            X509v3 Authority Key Identifier:
                keyid:A6:94:F0:05:F5:97:7C:32:3E:CD:BE:A9:C5:F8:CC:A3:69:E6:5C:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ppTwBfWXfDI-zb6pxfjMo2nmXGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/c79187-0d7a-490b-92b0-1b527ce16511/1/ppTwBfWXfDI-zb6pxfjMo2nmXGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:a3:8f:b3:3a:9e:c7:da:65:26:9f:f4:b5:79:04:e7:15:cf:
         23:b8:63:7a:f8:32:25:5b:e1:c9:d8:5b:29:22:23:8f:d5:57:
         ba:60:04:0b:3d:a7:e6:15:d0:5e:d9:bb:93:fc:79:12:0d:12:
         72:b3:56:1d:f6:27:2d:f9:cd:c4:ef:04:3c:21:e9:bf:f2:9d:
         65:af:da:df:99:00:66:44:c0:bf:d3:e1:30:76:30:51:6a:1e:
         cf:13:1b:cf:c3:5e:61:3c:de:bf:ca:a6:40:5f:04:a6:62:f6:
         a4:08:59:11:07:06:47:f9:09:db:42:f7:e5:94:e8:bc:fd:bc:
         e9:36:0a:df:f3:8b:c2:84:12:ba:74:bc:3a:05:87:93:d1:ae:
         bf:42:60:a6:54:40:2a:78:33:8d:66:4c:98:1a:7b:3b:76:d4:
         c1:95:5d:77:b8:89:d8:0d:dd:84:0e:82:80:12:6d:1a:7e:c2:
         89:ea:cd:81:19:c3:9c:34:77:bb:2c:fc:b0:15:b4:19:dc:a1:
         ea:15:15:94:e0:d0:52:4f:94:bb:d9:ee:97:52:8e:4c:f9:7d:
         fe:32:f9:29:24:e8:08:8b:2a:7a:4e:59:fb:45:0a:9a:12:f1:
         f8:8f:33:ed:2f:e3:cf:f1:78:9d:00:a7:fa:34:cd:39:cf:b1:
         95:4a:ce:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:44:04 2026 by rpki-client