This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
File:                     ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft (raw, json)
Hash identifier:          G/73FPiZol/Q5kcaLwAzOT8wj5oWVudfw65XSFw+dBo=
Subject key identifier:   D4:C0:AE:41:CF:B0:CE:46:1A:AB:03:E8:10:59:9D:96:5C:D8:9B:FB
Authority key identifier: 64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3
Certificate issuer:       /CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
Certificate serial:       019BF876A0C6C1077712DC311E708604FD6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
Manifest number:          0721
Signing time:             Mon 26 Jan 2026 04:01:22 +0000
Manifest this update:     Mon 26 Jan 2026 04:01:22 +0000
Manifest next update:     Tue 27 Jan 2026 04:01:22 +0000
Files and hashes:         1: YDyC5kBhNI8thKV1LynCzapFE7Q.roa (hash: QeALQ6HX+21WYDZockRGHmyT4aXfggw6UzIeai2uvuw=)
                          2: ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl (hash: qEbrMO8/T6T1yJduPojr96Kg9SvB/RNFYsi/iJlFP4g=)
                          3: uhkofDxDROlcHCvXKtjXZmbwMcM.roa (hash: VNaYu0cLAzaNZcXisiMMcDQwN9FyAi7e1kpMVNW8PJk=)
                          4: v4c0sHmxAwTKfvbI0ce_dZkGZqc.roa (hash: HE5E+h78gyc1LIpKVk4+W1mq58iu0Ssx5TmwVEIggic=)
                          5: wOkpHSGw-U8KI9tK8aag-rxFIFI.roa (hash: eMuVT13Zj6Uew2bZcSNq7VO8ffPMy9zKzbd96LA2Eac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:a0:c6:c1:07:77:12:dc:31:1e:70:86:04:fd:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6417b1e13d32ed3a64a7c3522751623eefabe5f3
        Validity
            Not Before: Jan 26 04:01:22 2026 GMT
            Not After : Jan 27 04:01:22 2026 GMT
        Subject: CN=d4c0ae41cfb0ce461aab03e810599d965cd89bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6e:51:bf:81:82:3d:1e:9c:c4:af:bd:9d:bf:
                    60:41:b4:fa:79:b8:9c:0a:7c:ad:ae:63:7e:1a:71:
                    e3:3c:ed:08:52:dd:d3:1c:e1:c8:57:a6:42:ba:72:
                    bd:e5:60:95:62:b0:d4:91:d7:7a:d0:69:4a:cf:c6:
                    e9:85:18:bc:f9:51:84:f7:de:bd:ee:ff:8d:07:3f:
                    7e:94:85:cc:3c:4c:8f:7a:ae:81:ad:24:d8:a7:7d:
                    cd:29:e3:33:4c:57:80:d6:85:27:1d:de:81:77:26:
                    b8:ed:ad:99:25:15:ec:5d:17:7e:9b:62:b6:e3:d0:
                    92:9a:dc:32:47:0b:a4:e7:51:b3:e2:ff:ed:f6:33:
                    82:fe:0d:b9:8b:91:05:1b:66:50:f8:76:7d:36:10:
                    1e:73:6a:29:82:19:af:dd:79:04:b0:9a:73:85:ca:
                    f7:7c:2d:bb:20:32:7f:f5:1a:4d:d1:0f:21:bb:5f:
                    97:49:76:ad:2e:f4:c9:e1:70:b1:20:00:1c:fb:21:
                    3c:9b:80:d1:1c:75:55:b8:58:d9:b6:f2:95:b2:15:
                    6e:05:c0:0f:d1:ea:5d:31:e2:44:a9:f0:77:2b:d1:
                    8c:6c:42:6f:83:f6:77:c4:e0:ce:e2:12:9e:7a:8b:
                    e5:27:11:8a:f0:ba:cc:bb:a2:27:20:89:fe:ea:05:
                    96:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:C0:AE:41:CF:B0:CE:46:1A:AB:03:E8:10:59:9D:96:5C:D8:9B:FB
            X509v3 Authority Key Identifier:
                keyid:64:17:B1:E1:3D:32:ED:3A:64:A7:C3:52:27:51:62:3E:EF:AB:E5:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/445228-b442-4e16-ad69-8ffddb5e3c26/1/ZBex4T0y7Tpkp8NSJ1FiPu-r5fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:6d:5e:04:91:ab:ea:1d:0a:65:46:fa:1f:5e:87:f6:6f:54:
         6f:b3:3d:32:cc:7b:f1:5b:9d:49:de:ab:28:9c:95:5d:f3:a7:
         62:c8:c6:54:8f:e0:09:49:b5:c8:5e:01:b3:0d:04:bd:79:fe:
         0f:f3:be:60:5e:e8:1d:0e:e3:8d:b7:93:cd:18:54:72:8f:cf:
         95:8f:76:17:9e:57:53:87:fa:ce:43:93:45:95:db:bd:fc:fa:
         de:cd:2b:4c:59:a9:f8:75:1e:92:27:cb:c6:f8:3d:c2:9f:d4:
         01:22:fb:db:85:6d:81:43:d2:c8:64:51:5f:22:43:c1:f6:bc:
         2c:d6:a6:4f:25:c1:92:4e:53:92:9e:b2:5d:27:41:8e:51:a3:
         d4:01:c3:cf:c4:83:02:a6:16:2c:e0:e7:8e:0c:f1:7f:2d:a2:
         20:35:7c:c3:2a:c2:47:ff:45:3b:ea:e1:de:d8:f6:90:e1:6a:
         5d:a0:5d:6c:53:d6:98:99:5c:75:e9:d9:f0:d3:53:28:51:8b:
         42:71:3f:e4:68:12:33:70:d8:2b:dd:2a:4e:7c:f9:43:46:56:
         1d:d5:f0:61:9f:3c:f4:77:6f:06:4f:96:12:91:7b:f9:ec:cd:
         e1:96:f9:97:11:7f:cb:c9:75:48:32:c0:ef:59:7f:c3:4c:60:
         80:74:20:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:39 2026 by rpki-client