This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File:                     r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier:          nvmoHOIsWUhozwMrTfWeWXDkfXop4OGPEtE9YOwTPzQ=
Subject key identifier:   5D:36:88:B9:E7:40:5B:26:C9:D6:C6:9F:F6:E3:BD:DE:1A:AE:01:CC
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer:       /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial:       019BF687A7AB84C641070F3B296884349E05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number:          1854
Signing time:             Sun 25 Jan 2026 19:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:43 +0000
Files and hashes:         1: j53A_1kF9aSNXUc59y7aaNnJTIQ.roa (hash: OEN7haodJOJY7ysf6XgmF/7hfw+3ZMgQrirEKvY0HS0=)
                          2: pBY-m3fTvRgCKA2fhrrC18yYXXo.roa (hash: rEOIvVPIx9D8zhJT04AIosT1AdrWPH4fBg2A4YDwjlQ=)
                          3: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: Z9BCK4mLV12XLtzwmn0UyBVwrIgOvQOwE6tiMeyFByE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:a7:ab:84:c6:41:07:0f:3b:29:68:84:34:9e:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
        Validity
            Not Before: Jan 25 19:00:43 2026 GMT
            Not After : Jan 26 19:00:43 2026 GMT
        Subject: CN=5d3688b9e7405b26c9d6c69ff6e3bdde1aae01cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:63:ec:ff:23:6d:ed:5c:67:9a:01:19:da:
                    f9:65:2f:90:06:b6:43:56:53:2e:58:99:18:ba:a0:
                    bc:c1:78:2a:4d:60:70:05:c8:4c:f4:55:14:d9:db:
                    d2:9a:56:de:d9:80:45:11:83:c5:59:78:bf:6e:3e:
                    7a:30:0a:b0:24:42:27:70:27:8e:ee:b9:45:e8:ad:
                    75:4b:60:8b:b5:90:10:19:a0:dd:9b:5b:fa:ae:53:
                    b6:a4:d4:d2:84:dd:72:9e:bf:d8:4c:0e:c5:3d:85:
                    ca:ea:22:e4:dd:8a:a7:4f:d6:41:1f:28:b0:dc:34:
                    93:3f:8a:40:3a:d2:7f:51:d1:6c:b3:3e:4b:ff:50:
                    92:8b:2c:b6:26:36:1a:a4:d6:ce:65:f5:85:f8:09:
                    c0:e1:dc:b2:21:f1:d2:d3:65:8c:6d:87:e9:32:35:
                    6d:25:c8:36:cb:02:b9:e2:e8:e3:04:b4:19:96:bb:
                    e0:83:88:1c:a6:1d:75:70:98:3d:7b:ec:27:4a:ec:
                    7a:2d:f5:19:ca:99:98:d3:1a:62:8c:a1:d7:e4:0d:
                    c2:3a:90:b2:e4:80:c7:ab:2a:9d:37:bd:31:ca:12:
                    64:fd:8c:42:ad:ec:f2:aa:e1:84:30:f5:ed:de:19:
                    c0:96:9a:0e:69:da:9b:df:12:ab:b4:41:b9:0c:c5:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:36:88:B9:E7:40:5B:26:C9:D6:C6:9F:F6:E3:BD:DE:1A:AE:01:CC
            X509v3 Authority Key Identifier:
                keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:c5:53:68:0f:af:8a:0f:39:76:00:36:99:c5:e4:2f:f8:67:
         dc:8b:79:be:cb:b8:a7:91:99:c3:58:81:3e:20:31:5d:c6:7d:
         e0:4b:67:59:6a:79:97:79:2c:be:84:17:47:2d:27:b3:04:37:
         e1:46:a6:ce:69:3f:ea:4e:0f:cc:92:c6:11:7f:a1:32:28:6d:
         73:f2:24:60:01:54:a3:5e:19:68:5b:df:fe:de:16:09:b4:3f:
         3e:52:b5:c5:ca:3e:34:97:30:5a:61:6d:2a:ad:b3:04:d3:32:
         0c:bb:43:3d:bc:fa:39:58:6e:da:07:af:1d:2d:4c:86:98:ee:
         a5:13:72:c8:92:4c:b4:c5:10:ac:a2:7c:14:9f:a1:fd:66:b6:
         66:40:f1:96:d1:df:b4:c4:d1:b9:a9:23:7c:b2:19:1e:67:17:
         d8:eb:5b:0a:9f:b4:fa:6f:7b:1e:48:26:c7:c6:14:0a:39:df:
         89:a2:63:66:b0:47:89:bb:f7:38:9f:e2:b4:34:73:03:d3:e5:
         41:02:39:8d:0c:6a:e7:d1:04:02:7a:83:bc:a7:b7:2f:8d:5f:
         0c:1f:77:bf:30:d2:e7:ea:d5:6a:7b:74:e5:9b:b3:f8:40:c1:
         40:56:9c:6f:13:3d:e8:fb:af:c4:10:92:b9:df:c5:38:e1:b6:
         40:e3:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:40 2026 by rpki-client