This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          u7F21J5HkvPmmdPx3r2LOOkTIV307hturrix6e4vFV4=
Subject key identifier:   0D:93:66:D7:BB:90:40:B4:B3:19:8C:4D:33:6E:F2:3A:AB:78:8B:74
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       019BF206DF8A035C50B8D9B0C06417EAE762
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0A72
Signing time:             Sat 24 Jan 2026 22:01:35 +0000
Manifest this update:     Sat 24 Jan 2026 22:01:35 +0000
Manifest next update:     Sun 25 Jan 2026 22:01:35 +0000
Files and hashes:         1: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          2: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          3: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          4: HktbNW43fd7Vb_ZaaGeNajH2WG8.roa (hash: 79snjSjI8SfzcKH7jhMDnbs8i4IW+WhI3UKxVBjwHBI=)
                          5: JqdskFuFmziaPGBY-7Tw9Pq4w38.roa (hash: aCu+I3qlWKZ9XlpWlRNcOlsLioSGa9tu6gGY+pIX418=)
                          6: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          7: OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa (hash: Nh/1DT2PYHL73mgdwju8HsKlz3EXBSwiw8LM7YgOmrc=)
                          8: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          9: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          10: Z6Q4KeAqCeUZBMyI5LZnxQHmUaY.roa (hash: QHGhTNF2b+j3X0I7mApfXWLpTEdb1W60sJaF7U5ztFs=)
                          11: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          12: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: GulOWNLzeQsiwqZ27nFY9TFV1NVX/6WOkkiCCxUeI6A=)
                          13: ZiIjQFIjZ8j8nup9nB6UTnphCHE.roa (hash: QLs1jSzP7n9jTZ9LffNdrzXR3/pn3Ze2DppBtoqxG3s=)
                          14: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (hash: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8=)
                          15: _ufCZrY4TTbi8Cz0nPgq82cNiQ8.roa (hash: BF3dwTjI1MgTJaLrGrPoxVSylxBpdMOVtLESfSrh5fE=)
                          16: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          17: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          18: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          19: lpiAPcG-y0T3SU8uNdvS5kp8DZM.roa (hash: Zn9ohDV7x7BReNvSf6ZPjELNU8R1XmIaR5qai19gH9A=)
                          20: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          21: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          22: xfA0_z8nF9jogJTt8JvDJWiwKd0.roa (hash: 4UoytCa8mc6+13s7j6+TJjXwUJP2qWBxDCO/3czDtbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:06:df:8a:03:5c:50:b8:d9:b0:c0:64:17:ea:e7:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jan 24 22:01:35 2026 GMT
            Not After : Jan 25 22:01:35 2026 GMT
        Subject: CN=0d9366d7bb9040b4b3198c4d336ef23aab788b74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6c:2e:07:2e:f3:3c:e6:c6:2b:a2:05:bc:64:
                    0f:27:21:81:87:92:dc:5d:33:74:bb:14:c1:fd:a6:
                    8d:64:73:68:44:18:15:b9:85:27:b8:f8:9b:0f:a3:
                    1b:bf:bb:d6:f0:d7:e9:24:50:7a:70:02:3b:f0:57:
                    77:82:73:e2:1a:62:33:da:20:bf:61:42:92:d4:4d:
                    db:5a:ad:e2:ae:83:26:81:0e:d1:a4:87:bb:85:fb:
                    00:8f:f4:11:7e:d4:08:a1:0c:ac:1e:1e:1e:8a:35:
                    ca:0b:b6:25:a7:e3:a1:d1:cb:62:78:01:92:dd:b8:
                    60:b8:ca:d8:e7:51:7f:d8:43:7e:22:e9:b8:c9:7e:
                    6e:4d:63:b2:8e:64:91:f7:a0:58:a4:04:1b:e4:c2:
                    ea:f7:86:99:40:03:4c:3b:2b:38:fc:aa:59:f3:2b:
                    04:e1:0f:bc:47:26:6c:b2:29:93:3b:8d:48:0d:bd:
                    90:3e:86:2c:2b:28:2f:ac:86:05:db:c1:e8:ca:15:
                    a8:4a:fb:00:b4:d7:a5:e4:1e:4a:83:76:a2:a8:b4:
                    5c:15:a2:4d:0c:ef:cc:ff:54:1c:97:1c:78:f9:44:
                    3d:4f:50:46:c8:21:8e:74:2d:b6:ee:e2:de:c6:10:
                    c1:82:78:4c:1e:a9:8a:5f:16:5d:52:e4:3b:b1:22:
                    5a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:93:66:D7:BB:90:40:B4:B3:19:8C:4D:33:6E:F2:3A:AB:78:8B:74
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:60:e6:71:98:d6:ab:c2:46:eb:0f:f2:6f:75:f0:41:6a:1c:
         15:f6:8b:91:b9:1d:ed:ac:24:c9:e3:c3:e5:90:5f:72:46:cd:
         27:ef:51:cc:51:d6:bf:ab:3c:6d:7c:e0:a1:c9:1e:ed:79:99:
         1f:e8:f8:c1:a7:6c:89:17:0d:9a:55:6c:cf:06:21:54:c0:5a:
         6d:51:50:d4:a5:cc:a2:58:6b:42:be:45:df:08:af:bb:96:eb:
         03:e1:02:b5:14:00:39:c9:34:ce:c3:aa:80:e8:41:66:b9:39:
         ef:ac:34:06:3c:89:eb:17:9f:eb:e0:24:88:f2:32:07:8e:de:
         6a:9a:55:7b:65:58:e6:b2:5e:0b:96:a6:a7:34:e9:8f:b8:d5:
         50:33:3c:da:1f:0b:51:f1:37:63:46:82:a0:8a:a5:e3:73:18:
         00:ec:9e:59:61:8f:b2:96:24:f3:dd:d5:46:7e:df:b0:33:fe:
         26:63:6d:6b:e0:5a:9c:14:1c:69:4b:58:2e:2b:c6:8d:67:5b:
         8e:eb:8e:0f:d0:d5:64:65:6b:52:3f:6f:4e:93:18:97:19:49:
         f9:40:9a:fa:1c:9f:d0:a7:6a:99:95:f4:c9:a8:51:0b:81:b6:
         5a:40:fb:8c:fb:91:b1:95:c5:f3:4f:82:16:ec:0f:c3:0c:44:
         34:32:0b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:47 2026 by rpki-client