This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File:                     k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier:          +f4ahd/RVynF81091NJOK/JC7qSRCAAbQruvD/GVvgc=
Subject key identifier:   36:C3:31:91:4B:9B:1C:B5:51:27:32:4C:49:EB:F7:8E:E6:A2:BC:2A
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer:       /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial:       019BF687A60F1976F89CCA7A32C2CC6A448C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number:          07B0
Signing time:             Sun 25 Jan 2026 19:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:43 +0000
Files and hashes:         1: 2v9j4cmRBKthQd69OeXDYpcV_J4.roa (hash: JIWzi0oTuF2fjfMhf5T0o4dEjhsNJCahQ3YsDnDQF/k=)
                          2: hpn4nKhBKlsinaN3vVc_HD13KvY.roa (hash: bzhO685+Hi3OxhZho3Lpnq5Kf5KsQHXcp5yXWuPUGs4=)
                          3: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: R7Elt+g542pR0M/v58Bxpi+fIF9T2H5yxtvHvb0NgkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:a6:0f:19:76:f8:9c:ca:7a:32:c2:cc:6a:44:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
        Validity
            Not Before: Jan 25 19:00:43 2026 GMT
            Not After : Jan 26 19:00:43 2026 GMT
        Subject: CN=36c331914b9b1cb55127324c49ebf78ee6a2bc2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e0:9a:8b:99:fd:32:05:bd:2c:4c:b7:a2:00:
                    44:f2:a9:66:24:83:6f:52:07:38:2f:60:2f:23:0f:
                    69:1a:dd:09:c7:fd:e2:d7:f7:6e:0a:43:2c:4c:fe:
                    67:e9:2c:b3:a7:af:e7:19:76:c8:bb:0c:18:d1:39:
                    9a:9d:15:8c:e2:e2:32:d7:ac:10:64:7a:ca:23:3f:
                    08:0c:c4:b0:24:7f:b7:56:f2:50:55:99:ed:68:d9:
                    74:f5:5f:ac:b7:1e:ab:a0:24:93:09:9c:8e:80:12:
                    b8:0e:7d:e9:e8:70:f4:8c:2f:e2:4e:2c:e1:74:25:
                    37:5e:46:72:5d:e5:01:35:3c:23:0e:10:df:d1:60:
                    ed:ee:91:a3:0b:bd:4d:0d:50:0d:72:31:f8:bd:4c:
                    16:de:63:fe:8b:5b:a0:e3:26:e9:57:6a:29:6b:de:
                    d7:07:d8:a6:6a:eb:b9:0b:77:62:ce:ab:68:23:fd:
                    90:7b:ed:34:d6:f0:a2:d0:85:23:99:d4:fe:d9:6c:
                    bc:ba:e4:c6:a2:72:56:94:da:3f:83:a3:29:8a:7e:
                    5b:4c:bb:9c:0c:ec:b8:b9:0c:cd:9c:88:af:3f:a0:
                    eb:25:ec:85:26:e9:e8:27:3d:6d:37:06:72:07:c2:
                    d2:74:f4:47:72:cf:fd:be:d7:ae:ac:85:56:a6:88:
                    26:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C3:31:91:4B:9B:1C:B5:51:27:32:4C:49:EB:F7:8E:E6:A2:BC:2A
            X509v3 Authority Key Identifier:
                keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:d4:b9:9f:41:a9:08:07:44:dd:84:32:07:f9:56:c8:93:
         b4:da:c5:f0:a9:94:3a:b1:8c:17:37:01:d3:7d:5a:65:40:c7:
         25:80:eb:00:8e:d1:8b:17:83:42:ac:b1:e6:f3:a8:bb:28:ab:
         51:de:54:68:9c:13:39:66:d3:03:95:93:c8:20:c1:9d:f1:42:
         4d:0e:3d:f2:b9:58:3d:d4:1d:84:33:af:ae:95:7b:81:35:49:
         a0:20:11:87:c8:31:e5:9c:d4:8f:8d:ee:03:4f:27:d7:bb:7b:
         56:55:4d:65:a0:58:f2:30:15:ad:c6:cd:f3:c4:27:87:19:63:
         c0:f5:ec:6e:db:d6:4d:7f:a3:5a:2d:18:44:92:c4:0c:82:5b:
         24:87:5a:44:20:dd:bd:7e:e7:de:91:83:38:4a:49:e6:ca:fb:
         04:1f:b6:54:63:8f:13:01:ef:ef:53:b6:cf:ad:99:7d:ec:56:
         cc:1e:36:db:eb:34:de:26:59:0a:ed:59:7b:39:1a:a7:f5:18:
         c9:d6:02:69:4b:20:be:77:1b:25:13:2a:1e:2d:9b:f7:41:7a:
         e9:d9:c6:b8:42:51:70:7f:6c:4c:9b:1e:23:15:fc:40:82:59:
         38:9e:cc:46:3d:85:aa:11:2c:00:a9:97:fd:32:69:65:b6:b1:
         33:bc:f7:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2h6YPGXb4nMp6MsLMakSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh
M2ZjNDQwHhcNMjYwMTI1MTkwMDQzWhcNMjYwMTI2MTkwMDQzWjAzMTEwLwYDVQQD
EygzNmMzMzE5MTRiOWIxY2I1NTEyNzMyNGM0OWViZjc4ZWU2YTJiYzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruCai5n9MgW9LEy3ogBE8qlmJINv
Ugc4L2AvIw9pGt0Jx/3i1/duCkMsTP5n6Syzp6/nGXbIuwwY0TmanRWM4uIy16wQ
ZHrKIz8IDMSwJH+3VvJQVZntaNl09V+stx6roCSTCZyOgBK4Dn3p6HD0jC/iTizh
dCU3XkZyXeUBNTwjDhDf0WDt7pGjC71NDVANcjH4vUwW3mP+i1ug4ybpV2opa97X
B9imauu5C3dizqtoI/2Qe+001vCi0IUjmdT+2Wy8uuTGonJWlNo/g6Mpin5bTLuc
DOy4uQzNnIivP6DrJeyFJunoJz1tNwZyB8LSdPRHcs/9vteurIVWpogmiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDbDMZFLmxy1UScyTEnr947morwqMB8GA1UdIwQY
MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt
NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy
LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZvUuZ9B
qQgHRN2EMgf5VsiTtNrF8KmUOrGMFzcB031aZUDHJYDrAI7RixeDQqyx5vOouyir
Ud5UaJwTOWbTA5WTyCDBnfFCTQ498rlYPdQdhDOvrpV7gTVJoCARh8gx5ZzUj43u
A08n17t7VlVNZaBY8jAVrcbN88QnhxljwPXsbtvWTX+jWi0YRJLEDIJbJIdaRCDd
vX7n3pGDOEpJ5sr7BB+2VGOPEwHv71O2z62ZfexWzB422+s03iZZCu1Zezkap/UY
ydYCaUsgvncbJRMqHi2b90F66dnGuEJRcH9sTJseIxX8QIJZOJ7MRj2FqhEsAKmX
/TJpZbaxM7z3Og==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:59:59 2026 by rpki-client