This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
File:                     Pgvo5I26B98hcRdFuGnjkRzpjiA.mft (raw, json)
Hash identifier:          348J/2n4I6l/c5V6sLzYpY9H5dfBolODGvyfNaa4iTA=
Subject key identifier:   3D:1C:E3:0E:B8:7B:C7:EE:9B:40:70:29:02:56:82:03:CE:A7:E4:7E
Authority key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Certificate issuer:       /CN=3e0be8e48dba07df21711745b869e3911ce98e20
Certificate serial:       019BF650F0FB9AD4D86B64C1DF913DFD10D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
Manifest number:          0F77
Signing time:             Sun 25 Jan 2026 18:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 18:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 18:00:58 +0000
Files and hashes:         1: 5_ZmoHurJKhnGZTZ0e5BJEp79YI.roa (hash: yn0cjymRjcdvSTfP5sKk/yNpbZCwsNTIyv7YD+9/xQw=)
                          2: Pgvo5I26B98hcRdFuGnjkRzpjiA.crl (hash: oIu8U3L8HZEVRe9NR6lm8jWFLT/tBsaWu2SbIJmY59Y=)
                          3: fEh5oYqMl6un1CqddPCoT_ARMo8.roa (hash: Tb4peDhjRpYaSjiNa80c9EeZGns/hNL9d77g3BKyBi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 18:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:50:f0:fb:9a:d4:d8:6b:64:c1:df:91:3d:fd:10:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e0be8e48dba07df21711745b869e3911ce98e20
        Validity
            Not Before: Jan 25 18:00:58 2026 GMT
            Not After : Jan 26 18:00:58 2026 GMT
        Subject: CN=3d1ce30eb87bc7ee9b40702902568203cea7e47e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:41:a6:c7:ca:c1:a3:37:8a:77:1f:fb:90:14:
                    f7:8d:8e:03:3c:0f:4c:15:bc:54:0a:2a:9f:cb:cc:
                    08:9f:be:62:e5:a3:b1:07:bc:75:79:de:17:d2:9d:
                    d0:45:43:61:9f:ce:ea:ae:fc:f0:7b:3b:46:0b:e8:
                    34:7c:f5:d7:84:ef:27:f9:ee:1a:38:bf:6a:8f:e2:
                    51:fa:30:dc:1b:05:b5:0f:75:ac:ad:6f:c9:4d:7e:
                    6a:2b:ad:da:ea:8a:f7:e5:6a:22:21:5d:57:e3:9a:
                    a3:b5:ea:ed:fa:27:1c:11:ab:d9:45:ff:7f:19:ad:
                    ae:7d:a9:1d:f4:a0:e0:aa:b8:28:0e:61:d5:3e:c9:
                    2b:d9:57:5c:9a:0d:74:78:11:24:b8:df:79:24:d8:
                    0a:07:83:86:27:de:a4:c0:6b:fc:e1:4d:ac:fd:92:
                    96:ed:aa:e0:0f:fa:a3:c4:57:4e:79:e6:92:37:f9:
                    c6:0c:2b:87:5c:0e:b9:7c:65:53:0d:6d:03:dc:a6:
                    27:76:08:d3:68:c6:0e:48:9d:a4:36:43:fd:7c:81:
                    71:06:de:26:75:8d:f9:70:d7:67:56:3d:9f:f6:11:
                    b6:a5:58:e9:bf:ac:a9:7e:52:f0:78:3a:77:db:d6:
                    53:a9:17:f0:e7:60:6d:87:09:d6:69:42:9b:05:9c:
                    00:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:1C:E3:0E:B8:7B:C7:EE:9B:40:70:29:02:56:82:03:CE:A7:E4:7E
            X509v3 Authority Key Identifier:
                keyid:3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:20:5a:3c:64:ff:c7:47:ad:e1:98:f1:88:6d:9b:4e:fc:f2:
         2f:6d:6e:10:53:80:0e:bc:26:33:d2:82:23:cf:bf:94:4b:7f:
         f8:e7:eb:61:a2:5a:25:fb:36:16:52:34:c0:6b:4c:cc:78:4f:
         73:31:66:a5:11:a2:04:66:06:01:90:45:b3:cc:01:1a:d2:b4:
         a8:cd:2c:d8:9a:31:52:51:a7:98:7e:f0:c4:78:ed:eb:42:65:
         ab:53:22:09:61:3d:3d:64:2a:8f:31:a1:76:50:c7:14:56:ae:
         18:57:2f:0f:7b:66:6b:fa:06:aa:92:2d:28:a4:ef:89:15:58:
         96:c3:db:52:5b:1a:8e:0d:7d:39:ba:2b:0c:c4:2b:9a:3a:81:
         10:1b:36:b7:13:d6:15:fd:d9:c5:08:a2:49:57:22:41:3c:1a:
         da:82:1c:4e:4b:16:8d:e5:a3:3e:0a:ad:f0:bd:55:f5:95:64:
         d6:d9:5b:36:9d:99:05:f8:df:07:45:72:d9:72:53:57:45:55:
         e6:d6:92:71:b1:55:c2:5d:8f:16:b4:49:eb:69:a3:04:64:6a:
         e5:5d:7e:09:37:e4:32:56:d1:4f:ff:7a:f3:35:0c:fb:ad:5b:
         c0:93:4c:ef:e3:26:e6:8f:18:fa:91:27:b9:15:0c:d2:b5:c7:
         c6:93:3e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:49 2026 by rpki-client