This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
File:                     Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft (raw, json)
Hash identifier:          McPhydM2gL+d7+GHEGPWwqAl65Patclog2Vv6Bessso=
Subject key identifier:   78:E1:1E:EA:91:6B:CB:D8:04:52:7F:A6:A0:64:1C:7E:54:B5:E6:BE
Authority key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Certificate issuer:       /CN=464dcfa96399716692d245a804887c09da451f8f
Certificate serial:       019BF72D079F195F384460C5C9FAC163AC64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
Manifest number:          167B
Signing time:             Sun 25 Jan 2026 22:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:21 +0000
Files and hashes:         1: L3204t5xqv_RGAUaDjepK8F4Hqw.roa (hash: vbMIqhNdM6+SVCu/75ex+GgHrK58xyd+mi2MfbKpNh0=)
                          2: Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl (hash: Js35ecMSdL6+aDV7WYo8mbJAQuu3SQzifSb++fP2sQs=)
                          3: gItssa-B0b0X--YWiS_dUYtbwpY.roa (hash: iVUV0DWttepgFWqqg65SaE3OlJIh4Ep6A/pLvMT4l8I=)
                          4: zaxUFs8PKz63DcmFdYraCxRfiEE.roa (hash: 4CQKxUpCXQe15Tn5oz096GbfGTrdGscUPd0TFy2Ky9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:07:9f:19:5f:38:44:60:c5:c9:fa:c1:63:ac:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464dcfa96399716692d245a804887c09da451f8f
        Validity
            Not Before: Jan 25 22:01:21 2026 GMT
            Not After : Jan 26 22:01:21 2026 GMT
        Subject: CN=78e11eea916bcbd804527fa6a0641c7e54b5e6be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:80:5e:11:9d:28:67:9b:cd:c9:1c:fd:dd:
                    e3:bd:8e:03:3a:2b:1c:0a:b1:57:3b:1a:bf:e0:53:
                    38:58:fa:63:49:1b:00:44:d3:9b:50:6f:20:2e:71:
                    e4:02:18:70:70:b1:40:d9:4d:28:a7:56:ac:dc:97:
                    9f:fd:5a:87:1a:4f:d2:38:c7:d7:6d:a0:b2:77:8d:
                    be:ca:0c:42:d5:69:a0:30:45:36:57:ee:e8:d9:7b:
                    48:29:22:e7:1b:35:cb:3d:7d:5c:15:2b:e5:bf:98:
                    a2:78:c2:68:cb:5e:50:6a:f7:a5:09:df:cb:af:68:
                    53:cc:8a:6f:09:a0:c8:54:a9:8b:04:b1:d1:c7:08:
                    6d:98:f9:35:b5:2b:43:af:32:2d:f6:93:de:7c:09:
                    2c:69:58:97:1c:30:ed:9c:9f:73:ef:8a:cb:34:6f:
                    78:bc:fe:1c:f4:31:a2:0f:c2:40:80:85:e4:2e:80:
                    b2:b3:23:81:d0:9b:05:45:de:46:04:b6:cc:02:66:
                    c2:29:12:b6:78:2f:8c:9d:ef:d5:68:70:37:99:e6:
                    69:1f:ab:d1:8f:c8:64:cc:55:7f:dc:b8:5c:6f:61:
                    d4:7f:ae:9e:38:c8:42:7f:bf:d5:e2:1e:7e:72:d1:
                    30:01:90:0d:8b:a9:d9:5c:c1:d8:cc:c9:39:ba:d0:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:E1:1E:EA:91:6B:CB:D8:04:52:7F:A6:A0:64:1C:7E:54:B5:E6:BE
            X509v3 Authority Key Identifier:
                keyid:46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:3a:84:66:2a:6d:fa:76:4a:f7:4a:17:ca:a9:84:36:4e:4e:
         e0:89:b6:94:37:08:c1:3f:f0:e7:70:e1:d1:92:a3:e7:b4:cf:
         28:cb:de:4f:c5:2d:ca:c8:91:50:b0:c0:f8:d3:d8:8f:a1:3f:
         02:75:10:d3:5b:11:8f:98:fd:36:96:b1:65:54:c3:d2:2b:3d:
         d2:ca:d8:27:50:ff:70:fd:db:ac:e8:d9:a9:82:56:c5:eb:13:
         9d:69:6e:1c:d7:a2:1d:1c:34:26:de:6b:89:2f:79:54:d9:80:
         72:ea:21:71:a5:48:36:c8:9d:5f:c6:6a:f9:bc:1a:40:eb:9a:
         e0:92:a5:ec:9a:61:04:69:ba:93:ff:4c:ff:06:6d:df:68:f0:
         d0:e6:54:08:9c:e6:f5:29:e1:68:04:99:67:88:cf:6e:b2:5c:
         ea:94:67:ad:4f:5a:b6:77:75:14:c9:7e:65:21:93:2a:a9:e7:
         e5:43:cd:3e:f9:45:2a:57:76:e9:ea:07:56:5e:da:fc:0f:7d:
         30:18:34:0a:39:75:18:b1:d5:22:f4:98:3f:94:ed:48:fc:de:
         be:0d:ae:54:3e:7d:c6:be:60:ea:71:58:9b:ff:12:d8:3d:c1:
         d9:33:e5:78:c3:bb:49:2d:41:78:e0:f4:00:6f:db:26:43:2e:
         82:06:bc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 02:25:52 2026 by rpki-client