This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          edWaXKb/lbHQ+LiNbF52dSGfonvNK+IEBMKPeoponKg=
Subject key identifier:   8E:89:1B:6A:D1:16:AE:A1:C3:FE:19:0C:2D:32:06:62:BF:94:7E:07
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019BF34FAA87FA2298CC9E404A413B9C3245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          180A
Signing time:             Sun 25 Jan 2026 04:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 04:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 04:00:42 +0000
Files and hashes:         1: 515Io0N_PRO8Q-pXklsmJ8dstVQ.roa (hash: fAV6tT9V6Wz6gMnz+u8LHt7onJ7dpKdY56ucLBbJRGc=)
                          2: BuBIsW377edbkmu5ptF81PLF5Q0.roa (hash: 7usajOpcONduahe3A78W+zcY0T4iqrBLIw2pvsiXVhE=)
                          3: DjXJwzbl4W3XGaoLQo6hAmrBQG8.roa (hash: jl1YeEZePiNEtg2usgFbuFZ6hVw7XxXcZBL3CQj31Fw=)
                          4: JzDXwgyNq3RwLA7tKi4-_-T8gdk.roa (hash: 7tR3jHKaYMI4YerkPTTCvH1HxUUs2q6psxE9aCLDewY=)
                          5: KZG9N6fHM4sI4IJYGPS031GIMCU.roa (hash: tEyjCiPhn7zJ39mR5w03HcizEZWXp+RRquI3HmwwGD0=)
                          6: Ls9dhWOQVIXCZvTtIru43VwF3x4.roa (hash: bqXgyngEP1JKsREn71aJ9c+bjM49v5vA6K6imPid/2k=)
                          7: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: hZJE8ENL+dgWXZ/uH5XtccpbEF2ATUPc/KuBvX8Djqg=)
                          8: QRXUHF37F-opsyYWxXP7VgAa1i8.roa (hash: Rd6zDiWkrBTIuMj25R/o3LbSCqV2kuQDIEMGjWq9WXE=)
                          9: SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa (hash: 96JsC18JGLBW4IoziYCsWOr6Kg7mDOV+l3s14FX0t1Q=)
                          10: TS0Wx61i9egA7pWaq3HkRECgLz0.roa (hash: SjyYcyNIdnSwcs1YAu60PSJAfsxesQPRHQI14Gzp5n0=)
                          11: VKUDHCvlmcIYzEGkxwedlbEe9nQ.roa (hash: tFw/0Vxd694kI0nU/bUko3Cq/RqaULhTbo0IINuIfKk=)
                          12: maIlT2DilxhpvXDvDKP5lewC5Jg.asa (hash: kPqttGLIZcEb1QIFFS840yNbuoYOd9uwdsD7XHdRl3w=)
                          13: pTp4FJAMyldHwYadK3tw3d0ONec.roa (hash: LJ0x/Ion8T2uqGWKOSSqvMbLcTtZp6UhXx/m9d3ZpQQ=)
                          14: qJMajQpY1RrdeIv3dNt0UZtc0Ws.roa (hash: xPvcT7EUcmbpxxFoA5w+04TtfxdTTJmOd4iq0KhYG6s=)
                          15: yWaDK5srT5k2WUJDHHIexqT-SUw.roa (hash: ju3Pb68m0FKpSwBfTyj/2egCnhf7dZEhijFgYyPnrRY=)
                          16: zV6gwKizHJtPCmj9FYOUA9jeUek.roa (hash: EcadcbZq+piW+970GC+VLWi9HJJfXxoGsLY8i+apRPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:4f:aa:87:fa:22:98:cc:9e:40:4a:41:3b:9c:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Jan 25 04:00:42 2026 GMT
            Not After : Jan 26 04:00:42 2026 GMT
        Subject: CN=8e891b6ad116aea1c3fe190c2d320662bf947e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:cd:a3:d4:78:41:f9:a2:01:f3:1e:f8:f1:93:
                    29:ba:05:1c:55:17:1f:61:77:26:77:49:23:7c:04:
                    68:ea:89:88:94:41:d6:38:eb:2b:2c:51:40:21:c0:
                    55:56:da:5c:31:00:e8:2b:f5:66:77:be:9c:f8:60:
                    10:cd:27:ef:a9:57:3e:d8:a7:4c:fd:50:e0:87:90:
                    38:6f:51:85:7a:da:3c:db:43:46:4a:d6:d7:4b:cc:
                    51:df:2c:5e:f6:b2:50:22:81:2d:ca:63:82:40:28:
                    7f:35:b1:59:8f:98:dd:69:97:93:bc:57:8f:d8:c3:
                    30:d7:6c:17:9d:f7:6e:ce:59:b7:9e:4e:52:cb:69:
                    85:7b:84:2a:2d:da:f5:98:12:65:fa:0f:93:8e:fd:
                    8a:17:ed:ab:f3:ff:d4:fa:96:d3:a7:4d:2b:60:b1:
                    20:38:54:f7:f0:8d:31:d8:b6:79:cd:23:8e:b7:53:
                    af:40:00:bb:71:80:bc:57:8c:cc:b6:d4:b1:6b:a7:
                    5f:67:cc:18:99:ff:47:e5:da:2b:e7:96:a7:c4:9e:
                    45:d8:95:88:4a:39:ba:9d:b9:a1:f2:35:6b:83:9f:
                    d1:c8:b5:05:6b:4d:a2:92:de:2a:f2:c0:a4:98:fe:
                    25:a2:e7:00:1d:37:82:4f:ae:de:84:14:37:ef:dd:
                    06:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:89:1B:6A:D1:16:AE:A1:C3:FE:19:0C:2D:32:06:62:BF:94:7E:07
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:31:8d:d5:11:c6:a8:0a:db:f4:b4:cf:5c:34:d1:02:5b:3a:
         aa:41:b4:ef:d5:f8:ad:53:48:a4:db:4d:99:1a:ee:f7:cb:94:
         97:15:85:a6:2d:ec:cf:ea:51:d3:ed:47:6b:69:e5:86:3c:ef:
         52:c1:56:f8:31:3f:9d:e6:bc:7c:eb:12:1c:72:c4:1a:f6:c6:
         96:e1:e0:42:9e:c1:23:8f:b2:51:2b:70:8b:82:dd:86:dd:15:
         77:b4:cd:c0:ec:bd:ae:9f:3c:e4:23:64:b9:b2:24:16:81:60:
         b4:bb:ec:9f:26:40:f3:92:1a:0c:c4:3e:66:da:15:41:de:15:
         d0:78:20:a3:ff:58:25:b6:c8:68:67:1e:eb:16:36:84:fb:9f:
         f1:1d:18:60:a0:3b:a7:7a:a3:1b:a5:8b:c0:bc:8b:4a:92:0b:
         c0:f9:0e:44:4e:e0:81:c0:d2:ab:45:27:35:9f:80:6a:96:2d:
         41:23:4d:66:bc:32:e8:43:1c:53:8c:b2:d3:2c:78:7f:8c:00:
         74:02:b5:f9:d9:ac:dd:32:3e:d9:f5:ec:18:60:aa:15:4e:11:
         f9:26:2a:cb:83:3e:b1:3a:b4:35:72:f1:c3:c7:e2:d1:96:ce:
         c4:4b:a9:a5:dc:cd:f2:d9:7f:b9:9f:9b:8e:08:54:1b:9e:79:
         36:97:b6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:38:33 2026 by rpki-client