This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
File:                     0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft (raw, json)
Hash identifier:          gDJA4SHx6GWyxMRSAxSuje7joyt2O0QWL+k9n01y26c=
Subject key identifier:   CF:71:19:2D:3E:84:13:D2:BE:48:7D:9E:F1:25:DB:FA:68:00:56:65
Authority key identifier: D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C
Certificate issuer:       /CN=d3367dba3a220060e67d4ec680b0f99f247a872c
Certificate serial:       019BF2748EAD712D077B97D5986813064360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
Manifest number:          10CE
Signing time:             Sun 25 Jan 2026 00:01:23 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:23 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:23 +0000
Files and hashes:         1: 0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl (hash: Ac4WYnZta6PuykAopnOpNqWdcDZBUSRgxn6ysBGjCTo=)
                          2: f4oZ944cKaclf3H6nV0hXsulctQ.roa (hash: a37helEeh9rd8vAJtERuFqCFLk/+7T/8DDcBlfCEHS8=)
                          3: s44uN6WA03-69O83KoxBpdROnOs.roa (hash: m6tv0wnAPyB40bmbjEukGtEqHI9oybLvGh9JpX5oodY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:74:8e:ad:71:2d:07:7b:97:d5:98:68:13:06:43:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3367dba3a220060e67d4ec680b0f99f247a872c
        Validity
            Not Before: Jan 25 00:01:23 2026 GMT
            Not After : Jan 26 00:01:23 2026 GMT
        Subject: CN=cf71192d3e8413d2be487d9ef125dbfa68005665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:61:5c:36:29:2c:9a:dc:65:23:4e:f0:cc:3f:
                    b5:d9:ea:38:a1:83:9e:fe:13:8d:fa:3c:dd:09:5b:
                    d6:59:0a:09:ab:18:67:0e:ea:4f:fb:c4:a1:93:03:
                    f8:6a:5b:03:e2:61:32:9a:ee:01:eb:f4:66:03:9a:
                    e1:fb:a7:54:f0:c5:55:09:ca:66:c7:00:54:bf:bd:
                    b5:cf:9f:bc:c5:33:d6:5a:99:e2:08:34:3c:9a:6c:
                    d5:49:cd:ee:69:93:48:29:a3:6f:ed:70:67:d6:44:
                    5e:0c:14:31:cf:03:9b:58:76:76:e8:61:04:90:68:
                    bc:99:e2:d6:44:de:01:e5:7f:c1:95:88:cb:b6:8d:
                    a0:34:ea:e0:33:fe:04:d6:82:be:74:ad:e5:3a:f6:
                    67:a7:ea:e9:46:50:d0:2a:17:f3:39:88:a4:98:14:
                    af:fd:dc:e7:9d:17:de:99:d8:86:d1:43:f1:f4:4d:
                    9d:c6:3a:db:32:2e:49:ef:17:68:b5:4d:ae:36:d8:
                    67:77:08:2a:a9:01:99:36:80:45:4c:47:b3:97:66:
                    c8:9a:a0:0c:66:05:ad:b7:c7:18:65:fd:7f:03:a1:
                    a7:aa:f3:66:f6:ac:2b:99:f9:8c:3f:c7:f0:cf:cc:
                    50:ca:8e:bc:b8:d1:cd:75:c0:51:57:1c:99:5e:ed:
                    4b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:71:19:2D:3E:84:13:D2:BE:48:7D:9E:F1:25:DB:FA:68:00:56:65
            X509v3 Authority Key Identifier:
                keyid:D3:36:7D:BA:3A:22:00:60:E6:7D:4E:C6:80:B0:F9:9F:24:7A:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ac410a-49a0-4e38-ae3b-5ca5bf67e69d/1/0zZ9ujoiAGDmfU7GgLD5nyR6hyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f1:77:bb:c5:9e:79:6b:f0:6b:04:62:bc:86:31:c2:34:1c:
         dd:00:d1:da:5c:37:6a:b9:1e:c4:07:f2:da:70:6b:b6:05:18:
         0d:7f:a2:b5:1f:bc:5a:e2:a9:95:92:72:09:8d:56:4d:41:7b:
         5b:c6:4d:fd:f3:a0:a8:53:03:c5:1e:cd:0e:b0:11:5e:0c:99:
         4d:11:f5:92:8d:cc:e8:b4:90:17:2b:a9:51:95:a0:ba:38:3d:
         bb:d2:bd:2c:19:3f:3c:72:37:a0:3e:5e:33:98:40:74:e6:d8:
         1b:01:bc:4f:1d:5d:53:58:6a:31:cf:d0:e5:f8:e2:be:32:75:
         5e:b6:46:3f:c7:4d:64:25:13:f8:95:8d:1b:3e:14:12:bd:1e:
         16:42:51:67:91:d0:d6:0d:98:55:c7:f4:72:be:de:cd:93:e0:
         09:d3:01:ea:cd:a6:9b:11:cb:fc:f4:65:ec:7f:c7:b1:a6:77:
         21:5c:d0:b9:6d:b5:d4:82:ac:f4:57:44:3c:0d:4b:1e:55:c3:
         f1:d7:b1:66:e1:8b:f0:c0:69:46:09:a1:76:ab:dc:34:5e:fb:
         8f:cb:14:a4:f6:0c:f7:3a:ec:f9:00:9f:50:2c:66:58:a7:1b:
         ab:9a:c8:b0:7f:f3:d5:3c:f1:9d:bd:7f:24:99:9a:7a:36:12:
         9a:88:2e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:57:37 2026 by rpki-client