This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
File:                     fz4IdInuI6lCTVP6whbuS44BKA4.mft (raw, json)
Hash identifier:          PbmayZnINRPA9GZun03uwJ8VhTBiJHNd06tut4e9HSo=
Subject key identifier:   10:AA:76:F3:15:49:69:00:9E:4A:82:3B:C3:84:F0:3C:9C:07:F5:54
Authority key identifier: 7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E
Certificate issuer:       /CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
Certificate serial:       019BF8083C70540C51A396FB4B472D2759F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
Manifest number:          177C
Signing time:             Mon 26 Jan 2026 02:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:47 +0000
Files and hashes:         1: RO8EIzazCz5i9qCar0Fb-jUPsko.roa (hash: DUy255OTmG341QO1OT1MJtYrEowqoZ8jB65GBc6gQ8o=)
                          2: fz4IdInuI6lCTVP6whbuS44BKA4.crl (hash: Xs+Ko3zdFoM8hDADcs1F/YR6OVsGgHbX13UO18sPEWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:3c:70:54:0c:51:a3:96:fb:4b:47:2d:27:59:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f3e087489ee23a9424d53fac216ee4b8e01280e
        Validity
            Not Before: Jan 26 02:00:47 2026 GMT
            Not After : Jan 27 02:00:47 2026 GMT
        Subject: CN=10aa76f3154969009e4a823bc384f03c9c07f554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:52:c7:59:4f:30:c4:92:9a:0b:c4:3a:d0:81:
                    1a:fe:02:4a:26:e4:dc:93:72:77:9d:6a:7d:fd:98:
                    92:f7:4e:f4:ca:e9:94:71:12:b4:33:67:45:c8:03:
                    3d:71:fb:eb:b2:4e:bd:1b:22:e8:37:88:ea:3e:6b:
                    b9:28:95:4a:da:58:33:29:51:f9:10:8c:db:24:1a:
                    84:ba:1f:f8:8f:a5:1d:05:3e:f7:47:dc:4f:e1:94:
                    c6:d5:b0:10:90:b2:1a:ad:a2:4d:a9:1a:98:c6:89:
                    76:cb:cf:9a:ab:df:12:8f:8e:f1:52:29:44:e1:e7:
                    b0:c0:72:ad:31:9d:f8:e3:0f:32:90:35:d2:15:98:
                    90:db:3a:e4:d2:fe:03:08:60:d6:8c:a9:54:3f:37:
                    ac:66:00:03:af:0a:2f:aa:09:11:19:bf:8b:c2:a5:
                    c1:15:2a:6f:b1:41:e4:29:88:43:67:d7:d7:ac:6f:
                    f4:b3:a1:e3:a4:52:42:10:e1:f5:4c:55:4f:5a:0f:
                    7a:59:b5:44:2d:5a:23:df:d8:b4:c6:bf:ea:2b:63:
                    f9:74:8b:a3:95:19:1d:d9:07:cf:c4:53:2f:e2:b4:
                    9f:40:a3:31:1b:b2:16:32:59:f9:1e:19:25:4f:88:
                    ec:0f:82:0d:dc:af:fd:32:f3:10:dc:03:84:b1:ce:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AA:76:F3:15:49:69:00:9E:4A:82:3B:C3:84:F0:3C:9C:07:F5:54
            X509v3 Authority Key Identifier:
                keyid:7F:3E:08:74:89:EE:23:A9:42:4D:53:FA:C2:16:EE:4B:8E:01:28:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fz4IdInuI6lCTVP6whbuS44BKA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c2c99d-cf91-4dfb-94de-a7c63d562e56/1/fz4IdInuI6lCTVP6whbuS44BKA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:32:a1:11:ba:dd:cb:eb:dd:5f:4a:3b:3f:6f:3e:12:0f:a1:
         3d:e7:73:3d:e2:a3:1f:bd:b8:8b:70:4f:0b:2c:fa:22:72:68:
         ae:6d:03:bc:7e:ac:e7:29:85:66:3b:d1:b3:fc:2c:1f:48:18:
         de:c2:cf:88:bb:e1:9e:44:42:c9:8d:cd:98:b3:9a:b6:fc:f5:
         cc:7b:ce:58:96:72:23:f2:c6:83:13:5f:21:70:06:41:82:66:
         52:96:59:3b:af:13:4f:d1:d1:59:f2:c1:1e:fb:ac:1d:44:9a:
         35:79:c9:33:9b:cc:71:e7:b5:90:7e:86:63:5a:b6:4b:82:41:
         f8:d2:fa:1b:68:f6:d7:03:a1:72:60:f5:40:35:93:32:f6:3c:
         07:8b:1c:19:bb:73:fb:89:24:32:00:9a:ad:f5:ce:6a:04:3a:
         0d:42:2a:d1:f6:9a:57:57:a2:90:6d:ed:79:34:88:6a:89:db:
         3d:78:52:7c:0e:f0:19:fb:44:ca:a2:d1:30:ca:2a:94:05:60:
         0e:16:98:20:74:68:6e:44:76:de:d8:17:72:94:da:d6:48:70:
         3a:85:45:73:56:60:a0:36:57:f5:d9:69:e0:2e:4d:da:c7:2a:
         1c:2a:9e:d2:8a:bd:aa:ed:34:ff:81:b8:1d:7e:b2:e5:65:dc:
         da:47:a6:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:44:06 2026 by rpki-client