This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          MYZQkyRBk4RjJJpMhg9MLnG8/vxUxk0cFFgAfdVrFEw=
Subject key identifier:   36:3D:0D:CC:00:2A:05:76:68:82:A3:B2:0C:37:5D:9D:75:18:48:48
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       019BF650D04C9A87E3956F2E9A638D8F5090
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          0359
Signing time:             Sun 25 Jan 2026 18:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:49 +0000
Files and hashes:         1: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: 5Fbea4vTuAdzovFdTKL7ftQrDiKXnaUVoFhlS+3JYRE=)
                          2: X4f6FdUM7-oxmTPyJDPnSjOJQjc.roa (hash: G+8NGrdkwPv6Os9FA75QeRzjamvnyvobATUloFoNoiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:d0:4c:9a:87:e3:95:6f:2e:9a:63:8d:8f:50:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Jan 25 18:00:49 2026 GMT
            Not After : Jan 26 18:00:49 2026 GMT
        Subject: CN=363d0dcc002a05766882a3b20c375d9d75184848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:05:27:44:3f:71:38:20:e6:ea:7d:45:63:
                    58:7d:e1:22:c1:6a:36:3e:8b:53:7f:22:d0:76:ef:
                    22:b8:d3:6f:0a:ea:28:cd:53:e6:f8:fe:4f:08:7c:
                    74:bb:01:d2:74:65:3a:2d:59:c5:1c:85:3c:7f:d8:
                    38:39:18:1e:ef:1b:fe:31:f7:22:58:23:8a:fc:9f:
                    8d:e3:4b:55:9b:14:bb:01:09:84:a8:11:3d:73:a1:
                    ab:90:e6:82:30:6d:a0:f2:cc:ee:6c:f6:72:42:8f:
                    af:84:7a:c4:39:07:33:71:5a:0a:d3:ed:38:42:ae:
                    c5:aa:ad:d1:f3:e5:7f:38:c7:67:d5:e6:c4:45:64:
                    e2:86:27:9a:52:b1:c9:8a:79:61:86:70:a7:b8:09:
                    e1:ab:53:c8:d7:86:d1:37:71:af:ba:96:e9:cb:c9:
                    fa:5f:49:a3:06:a1:19:6c:d1:77:7b:19:6a:e5:3b:
                    c4:af:8f:81:4a:26:af:94:4e:d5:4f:ab:4e:4a:34:
                    64:ab:13:12:95:96:30:8d:6a:35:ac:40:02:bd:c8:
                    81:0b:09:40:f2:d9:6d:2a:df:ce:fe:97:cc:9d:a9:
                    0d:2f:fe:3e:48:45:74:f8:5d:d9:fd:98:36:ff:a6:
                    0e:77:38:37:e0:bd:4f:ef:34:4e:e6:b9:41:15:2c:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3D:0D:CC:00:2A:05:76:68:82:A3:B2:0C:37:5D:9D:75:18:48:48
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:9a:c4:e0:1c:4e:d1:6e:26:9d:ac:1b:ef:82:d7:4e:a6:43:
         93:47:a3:15:3d:84:38:ef:7f:c1:f8:f3:1f:62:fb:5d:e6:34:
         c5:96:aa:6c:6a:4f:c4:0d:92:5a:d4:84:ad:9d:03:b1:47:e6:
         fc:99:8b:6a:01:83:6b:13:c5:17:b2:65:00:6f:fd:6c:6d:7f:
         1d:3d:13:ec:74:76:92:a5:82:89:02:e5:cc:d4:d9:99:28:60:
         51:43:7c:9d:3e:28:b1:e8:45:b1:ad:36:a2:51:c7:53:2e:b5:
         38:e9:dd:14:87:e2:8d:2b:3d:99:5e:40:49:4f:51:f4:c3:4f:
         f5:1b:02:dd:93:29:aa:0d:41:96:1b:68:a9:84:09:96:7f:9f:
         94:8a:3c:b2:b6:c3:df:5c:40:8e:39:92:d1:32:af:a0:ee:fd:
         9e:63:e8:9d:7f:88:3f:94:ef:2d:d0:3a:89:ff:f5:45:75:39:
         80:0c:dc:cb:d1:ef:58:90:fb:7d:f6:84:0a:e4:a2:28:d0:58:
         93:6d:4a:83:d8:2c:f3:14:5f:36:ad:39:42:e5:7a:2c:70:34:
         3a:6c:c0:94:56:20:98:ba:7f:25:0a:5d:eb:30:5c:d3:10:49:
         9e:d0:91:d4:72:fd:5b:3b:91:77:c8:74:80:ef:4c:cd:ee:3a:
         39:d0:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:26 2026 by rpki-client