This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
File:                     RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft (raw, json)
Hash identifier:          Iv0hV2t6fMSkEbcDLRW9GzpnaBmCTO21l2KdOkFe8C8=
Subject key identifier:   39:FB:41:3E:03:C1:66:BE:6A:94:44:0E:4B:4B:C9:6B:B2:F6:8C:A8
Authority key identifier: 46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D
Certificate issuer:       /CN=462767a7375f1ac546691aaf2a511fbb6277031d
Certificate serial:       019BF8086D873A42B63B260DABEF360B0BFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
Manifest number:          6A
Signing time:             Mon 26 Jan 2026 02:01:00 +0000
Manifest this update:     Mon 26 Jan 2026 02:01:00 +0000
Manifest next update:     Tue 27 Jan 2026 02:01:00 +0000
Files and hashes:         1: 0ppkgAkMVUZmtvxiis_JaRg_jKc.roa (hash: hmBjjzY/GLh0BaP+YN19dWeqC0F3ldt8pYexHB8bxW0=)
                          2: RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl (hash: qjOteuQC4kiZb+NNMDQNNy9c0I/eaQOxXfeeqT632J4=)
                          3: hvFmobLJgv_FtphUoy5jADPJJnc.roa (hash: jnuVvbpAgeJ1NUOXj3up5SgN82P8AgWr5+BqvtU3HaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:6d:87:3a:42:b6:3b:26:0d:ab:ef:36:0b:0b:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462767a7375f1ac546691aaf2a511fbb6277031d
        Validity
            Not Before: Jan 26 02:01:00 2026 GMT
            Not After : Jan 27 02:01:00 2026 GMT
        Subject: CN=39fb413e03c166be6a94440e4b4bc96bb2f68ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:29:cd:f8:27:ce:e4:c1:c3:4e:53:66:2b:19:
                    9b:8a:57:48:0e:be:0e:c4:a5:09:b7:a9:16:52:5e:
                    57:eb:e7:7d:d7:3a:7b:44:1d:13:79:d8:24:75:62:
                    b2:8f:0c:c1:48:87:b3:72:f1:50:24:c3:13:89:43:
                    75:31:5d:02:e5:d8:9b:d2:0c:6e:2d:c0:8b:d3:38:
                    a3:29:a3:e1:23:2d:a3:14:26:d2:7d:82:72:d8:85:
                    1f:f3:87:24:e9:72:97:4b:7a:df:45:98:0f:0c:b1:
                    fe:11:f5:02:fd:1d:6f:c1:c9:46:15:69:bc:06:f3:
                    34:ca:83:95:ad:29:80:1a:05:e8:4a:72:b5:7d:8d:
                    e4:44:b3:ed:b9:cb:44:8d:f5:0a:d5:f3:89:01:c9:
                    e2:c5:a2:a6:ef:0c:e0:32:48:c8:f3:73:99:ee:f4:
                    b6:84:11:5f:52:af:cb:bf:74:07:8b:5a:98:e0:4c:
                    a9:87:f5:89:66:81:67:8e:22:d4:af:8c:7f:1e:ab:
                    60:77:64:4f:09:d1:b0:6b:4c:9e:00:1b:43:96:71:
                    92:2e:b4:27:b1:17:27:16:21:bc:ec:bd:6b:7d:c3:
                    ac:8e:96:9b:87:07:9d:23:61:6e:a5:62:b8:a8:e5:
                    16:b0:8f:26:67:17:87:80:35:47:49:93:9a:fd:4d:
                    0c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:FB:41:3E:03:C1:66:BE:6A:94:44:0E:4B:4B:C9:6B:B2:F6:8C:A8
            X509v3 Authority Key Identifier:
                keyid:46:27:67:A7:37:5F:1A:C5:46:69:1A:AF:2A:51:1F:BB:62:77:03:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RidnpzdfGsVGaRqvKlEfu2J3Ax0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/a9024d-bbd8-4dee-a323-0050ea36c296/1/RidnpzdfGsVGaRqvKlEfu2J3Ax0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:63:8f:a4:f8:9f:e7:12:a2:5b:d6:1d:b1:4f:2d:95:22:71:
         80:86:85:4b:dd:31:a9:60:ee:4b:51:77:b2:cd:d3:6b:08:27:
         46:44:ae:2e:bf:f7:44:62:8f:b4:a2:a4:8d:67:35:63:64:5e:
         5b:25:f3:d3:5e:5e:0d:e1:2f:8e:a4:58:ef:ea:38:75:6a:21:
         6c:ce:e5:6b:06:71:10:af:e7:e4:69:48:87:1b:bd:bf:b2:f1:
         10:9f:29:59:d1:fc:27:a9:9d:ae:73:8e:f8:9d:ea:2f:e6:c9:
         98:b2:a0:46:c1:63:b5:e6:0e:55:97:48:96:8c:d9:4e:65:c9:
         5d:e4:07:cd:00:1f:26:f0:55:59:8d:33:d2:2c:a0:2a:39:f3:
         6b:d1:d2:dd:b4:81:05:d6:49:74:71:07:40:4f:86:de:64:c9:
         9c:35:53:3c:39:e0:09:69:16:9c:4f:d3:d9:c3:2e:f9:b3:53:
         32:dc:fd:9e:7e:5c:57:43:e1:15:4d:a1:2c:61:6a:af:38:41:
         ec:01:da:d2:d6:8b:0a:26:2e:21:e0:78:5d:0b:b2:67:ae:c4:
         ec:1e:fc:f3:8c:88:aa:d0:c8:56:e9:89:a1:7e:f3:93:cd:8d:
         6b:22:4d:95:29:6c:cd:56:99:4c:f4:b9:97:44:64:08:02:e8:
         ea:fd:ce:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:40:23 2026 by rpki-client