This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
File:                     z59vv-AKCFkre7Dt_cIAK_xytXg.mft (raw, json)
Hash identifier:          fi7enl5bw/Fz6nhIUtUQnuWd24TKCo6nhmKbi7ShyZc=
Subject key identifier:   A3:F1:56:A6:EA:42:C1:85:68:6D:2C:69:47:EB:B8:03:2F:99:74:96
Authority key identifier: CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78
Certificate issuer:       /CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
Certificate serial:       019BF87623FC6771FF4BF197405A3CC2ACEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
Manifest number:          03C8
Signing time:             Mon 26 Jan 2026 04:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:50 +0000
Files and hashes:         1: XUebERbWFz0VzzOPVclokPtH7ZI.roa (hash: etgcVhxSEjllJBOIBBKIy18UocYNVDG++pFKb9lFGWM=)
                          2: Y66UbTTLpbAqCBvMHynaZXB7I7g.roa (hash: YXu6+ED9r1lcgi1tW7PjncfqdS8ytXCfpiDpwPC9OQo=)
                          3: z59vv-AKCFkre7Dt_cIAK_xytXg.crl (hash: sF/drmnlbgpQ/qkII/Dq/kzZfJS3l+6PpVBzhuykdB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:23:fc:67:71:ff:4b:f1:97:40:5a:3c:c2:ac:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf9f6fbfe00a08592b7bb0edfdc2002bfc72b578
        Validity
            Not Before: Jan 26 04:00:50 2026 GMT
            Not After : Jan 27 04:00:50 2026 GMT
        Subject: CN=a3f156a6ea42c185686d2c6947ebb8032f997496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e5:7d:8a:05:d6:0f:86:f7:00:4f:5e:51:7e:
                    70:d3:4e:82:8d:85:35:f5:f4:6b:b2:25:40:48:a6:
                    28:fc:38:6b:a4:5e:d7:1a:8d:72:64:c9:4d:47:38:
                    96:ce:e0:52:e4:21:19:fe:46:df:31:50:d8:f4:d5:
                    1b:86:0e:88:f7:ba:70:09:8e:6e:90:f1:7f:a0:1a:
                    3b:a9:92:5b:76:47:c8:19:d2:d8:a5:af:c1:a3:8e:
                    9a:ec:13:8d:9a:13:af:a9:75:05:21:36:9b:91:ac:
                    dd:34:ed:cb:19:8f:17:10:cd:3e:5a:f8:29:bf:62:
                    fb:6b:73:03:4d:27:6e:f7:00:aa:ea:8b:31:82:93:
                    24:13:57:bd:1a:5d:dd:52:e1:53:df:24:5e:ac:e4:
                    82:fd:7d:03:63:2a:94:b9:60:a1:ac:50:64:bc:56:
                    98:e2:87:38:2a:3f:b1:6b:49:89:ee:f6:24:bb:96:
                    df:1b:a7:69:a8:6b:2b:db:b5:a1:da:b5:30:99:60:
                    fe:ac:64:26:76:17:10:69:90:6d:49:83:d2:9f:d0:
                    17:6a:26:ee:31:57:5d:ae:fe:a1:01:4d:b6:47:a6:
                    a3:a0:49:ea:23:26:97:f9:b8:0e:0c:10:2d:4a:08:
                    cd:fe:6a:40:e1:48:43:9a:fb:ea:d7:2d:44:3f:e7:
                    26:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:F1:56:A6:EA:42:C1:85:68:6D:2C:69:47:EB:B8:03:2F:99:74:96
            X509v3 Authority Key Identifier:
                keyid:CF:9F:6F:BF:E0:0A:08:59:2B:7B:B0:ED:FD:C2:00:2B:FC:72:B5:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z59vv-AKCFkre7Dt_cIAK_xytXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/733989-f131-45e9-9b75-342a9ee73d85/1/z59vv-AKCFkre7Dt_cIAK_xytXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8b:15:70:68:a4:98:fa:61:ed:52:a9:07:a0:77:a8:c9:68:
         ed:1a:98:a6:97:2c:0f:15:ed:1e:c3:fb:39:dc:17:0c:03:0b:
         04:3d:25:9a:86:8f:92:f4:85:6c:51:a5:0e:0f:7e:e4:e9:9a:
         18:8f:ed:b5:c8:35:3a:da:e6:e0:95:20:d6:ad:c4:e2:5e:67:
         74:3f:b2:da:f5:6b:5d:cb:f2:cc:3f:ec:05:a0:d0:e0:b6:18:
         e9:29:9d:5c:cd:dc:ed:3e:0c:7f:25:79:b4:02:6e:97:07:0c:
         f7:5d:5b:ca:73:c5:27:6e:90:e8:17:89:36:a1:ca:ef:f0:d6:
         dc:f4:84:fe:14:7c:b4:c8:ff:29:23:f9:d9:58:7d:02:91:0c:
         3f:c4:87:28:49:88:0e:8c:a4:a9:5a:00:6b:18:b8:d4:46:4d:
         27:05:45:d6:44:69:35:f2:32:1a:ed:71:96:8c:ae:76:08:5d:
         e9:fc:aa:9a:0d:16:d2:d8:ec:54:80:f0:66:67:61:e6:ed:97:
         71:98:7a:bf:e7:db:04:b7:85:2b:1c:87:39:dd:a0:99:8f:a5:
         55:26:10:d8:03:83:f0:23:7f:13:b7:96:6a:10:8c:1e:06:49:
         8b:1d:44:72:00:ef:98:3d:57:fe:55:9b:cc:48:49:28:45:bb:
         cb:d6:9f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:44 2026 by rpki-client