This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
File:                     PhrhW-husMTZp2TMeo9lmVv4yQ4.mft (raw, json)
Hash identifier:          GoDM6coBj3n/DCpWwHCEOgsEIpaZdXdaxhA/MetqcEk=
Subject key identifier:   92:37:CF:5A:98:2E:A2:09:B1:56:AB:4F:04:CE:75:DF:B1:A1:99:79
Authority key identifier: 3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E
Certificate issuer:       /CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
Certificate serial:       019BF79A776F0A1309D928C8652943D6FEA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
Manifest number:          0FE0
Signing time:             Mon 26 Jan 2026 00:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:53 +0000
Files and hashes:         1: 8kiAQtkav2NHfFCJtiBA0ERhqIA.roa (hash: F/EijD7R25vjZwA9wYF9LplNamhupuIHanpPILz4ls0=)
                          2: M_79XQ2SXAKWIFy3HNmBFX2YRgI.roa (hash: PQS0FU2tcc2qRmlqMUo4a/MCLdHlPpwQ5M9eqNDwavA=)
                          3: PhrhW-husMTZp2TMeo9lmVv4yQ4.crl (hash: zVDDgTN3uW75FYZoLOBTb5xZe7gW1EzFu2KsyBCr0kI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 00:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:77:6f:0a:13:09:d9:28:c8:65:29:43:d6:fe:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e1ae15be86eb0c4d9a764cc7a8f65995bf8c90e
        Validity
            Not Before: Jan 26 00:00:53 2026 GMT
            Not After : Jan 27 00:00:53 2026 GMT
        Subject: CN=9237cf5a982ea209b156ab4f04ce75dfb1a19979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cb:43:d6:d6:bf:c0:85:47:75:5b:a1:da:ac:
                    53:5b:bc:57:39:42:20:13:43:3d:43:4a:90:fd:f4:
                    43:73:d9:f4:e0:c9:54:50:e1:2a:63:54:a7:ac:77:
                    56:c1:4a:df:1c:50:7b:85:3a:83:23:96:cc:82:54:
                    06:86:5f:03:06:54:44:41:98:be:66:b0:18:63:13:
                    bb:ee:be:f9:a8:06:ad:cf:ea:60:5c:28:7a:9f:52:
                    0a:3c:1a:12:a5:06:1e:6e:85:7d:97:61:e8:8b:e0:
                    7a:47:5d:d3:4f:fe:1b:8e:55:4d:a9:71:fc:53:89:
                    c4:d5:5a:d8:bd:5c:9b:51:3c:53:62:7b:90:77:da:
                    ec:81:5d:f2:41:5f:f7:9c:72:d9:ea:de:7b:18:99:
                    41:93:9b:f9:05:0a:7b:11:b0:58:bc:85:fc:00:a4:
                    ee:b7:06:8e:d5:8e:3d:f9:0e:5a:7e:15:c7:f5:8b:
                    56:09:52:60:23:b2:2d:86:b8:2c:5f:a1:d1:31:f3:
                    12:9a:69:b2:50:ea:c9:c4:0c:26:f7:98:14:3a:9f:
                    45:b2:96:38:f0:04:ed:ec:1b:15:82:a3:19:5b:35:
                    3a:f4:ce:68:76:3d:1a:1e:88:ad:7f:3f:ba:7f:8a:
                    7d:a8:60:82:1d:63:6e:77:78:72:8b:ba:31:45:14:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:37:CF:5A:98:2E:A2:09:B1:56:AB:4F:04:CE:75:DF:B1:A1:99:79
            X509v3 Authority Key Identifier:
                keyid:3E:1A:E1:5B:E8:6E:B0:C4:D9:A7:64:CC:7A:8F:65:99:5B:F8:C9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhrhW-husMTZp2TMeo9lmVv4yQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/73f23a-e977-41c3-922d-b27c3412426a/1/PhrhW-husMTZp2TMeo9lmVv4yQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:88:e8:de:e9:61:2c:2d:47:1e:23:5c:cf:dd:4d:1f:11:26:
         29:15:1f:33:58:10:6a:00:35:99:0f:4f:a4:12:bd:0d:10:b7:
         55:cd:89:56:76:9c:58:66:2a:45:3f:81:14:9f:e5:f8:a8:d0:
         0b:88:46:25:b9:1d:5d:b4:07:cb:ba:61:ee:42:06:80:5e:1a:
         fd:74:3e:88:22:8b:ac:d2:03:37:1f:f2:09:41:50:73:3d:de:
         ba:55:d9:fe:f5:b0:b7:d4:70:32:bd:40:99:87:f2:70:54:ac:
         fc:f8:81:cf:89:06:99:9b:65:9b:7d:7e:ca:77:e2:9b:1b:52:
         ec:1d:be:be:6d:37:0f:7c:b7:8d:1e:ee:34:82:12:c0:8e:f5:
         04:b5:c0:97:0d:0a:6d:eb:2a:94:5c:e5:89:35:de:91:a7:d4:
         18:bf:09:d9:2e:51:ea:a0:4f:d8:05:99:0a:ce:3d:5e:55:63:
         dd:49:70:d6:65:ee:e2:93:29:b2:6e:75:df:1c:77:a5:2f:13:
         6f:7f:c6:a8:db:90:d8:ac:50:3e:c6:d6:bc:79:d3:3f:71:9c:
         de:50:2b:c1:e5:0e:46:8a:cf:4b:61:5f:a0:c8:af:05:44:f6:
         c3:57:17:66:60:8e:1f:ac:98:dd:a3:91:9d:35:b0:5f:79:66:
         4b:01:67:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:51:54 2026 by rpki-client