This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
File:                     zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft (raw, json)
Hash identifier:          WIPVZGKxTZIrOHCSs/WFz5UZ1KzB29T7zJj2N3DHj84=
Subject key identifier:   DE:9B:E8:40:9D:4D:16:7E:5B:6D:A7:B4:72:4C:B2:58:74:45:D7:11
Authority key identifier: CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85
Certificate issuer:       /CN=ce958f181fb507a0a2a821856b8be0d54b118b85
Certificate serial:       019BF462E28C290EF4BC5329B20272EB99DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
Manifest number:          1336
Signing time:             Sun 25 Jan 2026 09:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:19 +0000
Files and hashes:         1: 1-XBWrk39wjm3jro7FSlqvzI5eVI.roa (hash: Z3LaUQM+InNYUKwF+whvXLIvQsPhPPfm9Yl6XnItz/E=)
                          2: JJWtpXWJQlgQf2iNmRIQ-olIbmU.roa (hash: nIevIWHZnn6qTnX7U1mI+h/VSclaleHMr0m3T9yMnkk=)
                          3: i3dZrndLKOdAX4fmBKLNisvgCU4.roa (hash: AOIV+Iu3cvphLn4bbaPQNGarjwL1kFw2bCXNmN94Ucg=)
                          4: vug7WwjDcsLWq0B1sdDRxAnsvu4.roa (hash: oG3YV+PmdtG6CGV+zbw1qmHUtciH3fi68Ulc4xoYCJM=)
                          5: zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl (hash: 4+dLH6Z5RYOldwI1sYRTQkFMEP0GZL/yhWeZUePgmPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:e2:8c:29:0e:f4:bc:53:29:b2:02:72:eb:99:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce958f181fb507a0a2a821856b8be0d54b118b85
        Validity
            Not Before: Jan 25 09:01:19 2026 GMT
            Not After : Jan 26 09:01:19 2026 GMT
        Subject: CN=de9be8409d4d167e5b6da7b4724cb2587445d711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e8:30:00:8b:cd:8f:f2:c9:c2:9a:e0:e9:c2:
                    c3:17:4a:38:c7:54:c6:54:67:82:b0:31:40:1f:b2:
                    ce:79:26:e1:e3:c1:5f:27:7f:62:74:82:ae:96:5d:
                    1d:ea:6d:df:32:5b:4e:7b:69:64:ee:5b:45:60:3b:
                    de:5d:65:cf:3c:0d:4a:c3:11:a0:12:01:10:bb:05:
                    3a:28:3d:28:f0:20:8c:ad:93:2e:c5:16:db:52:12:
                    f6:fc:91:2b:50:c0:d3:76:05:1e:db:a5:d4:13:d4:
                    05:bc:54:57:62:3f:0a:8e:ab:35:eb:7c:ff:ae:2e:
                    a7:e3:97:ef:a6:3b:ef:94:bb:3d:b3:78:ea:ba:33:
                    d9:b2:54:d3:7f:67:6e:d6:49:b4:5d:9b:89:e1:93:
                    a0:27:ae:70:af:0c:27:30:b0:b4:0e:9a:51:6b:80:
                    2b:3d:b9:0d:6f:42:97:6f:4a:99:66:9d:a8:10:13:
                    41:04:1e:ff:3b:ec:fe:f5:68:37:7c:f4:aa:11:54:
                    74:b7:86:72:02:5f:af:a2:e2:b7:12:91:06:61:49:
                    2b:b9:97:e2:1c:43:72:34:f3:46:50:0b:dd:84:c2:
                    07:e7:ae:15:5e:4c:96:9a:3c:0e:03:cd:97:79:6f:
                    26:d4:65:b9:63:41:17:5d:80:2e:a0:fb:56:47:bb:
                    e7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:9B:E8:40:9D:4D:16:7E:5B:6D:A7:B4:72:4C:B2:58:74:45:D7:11
            X509v3 Authority Key Identifier:
                keyid:CE:95:8F:18:1F:B5:07:A0:A2:A8:21:85:6B:8B:E0:D5:4B:11:8B:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpWPGB-1B6CiqCGFa4vg1UsRi4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3d9bfa-cfd0-44a8-842e-0dbb3b8db15f/1/zpWPGB-1B6CiqCGFa4vg1UsRi4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:fd:47:74:96:60:0d:1a:d7:a4:49:f2:68:d0:c3:33:a0:0a:
         36:38:9c:be:86:29:ee:16:3b:ed:f3:f3:14:1c:6f:10:bf:17:
         9f:81:0a:87:e2:16:6c:20:c7:2e:d0:f5:e8:95:3d:83:ba:f2:
         0a:e1:52:cf:fc:1e:dd:54:2b:dc:f3:0c:65:97:18:62:b4:de:
         02:fd:65:fa:33:9e:ee:80:6a:ef:19:11:87:be:93:ac:c1:ec:
         8e:02:ca:69:7f:82:48:ae:17:25:6e:36:0d:6f:35:1c:dd:a3:
         26:31:be:43:69:0f:08:13:e4:38:e7:28:a2:88:89:27:6e:28:
         cf:93:f0:61:e3:b3:76:fd:f6:54:41:fd:b3:e3:eb:f0:81:11:
         bb:0a:92:f3:06:bf:40:15:64:82:0c:ec:9e:67:c6:4e:b9:dc:
         74:f6:8b:6f:ae:50:77:f6:12:17:24:e4:03:24:ef:0a:1e:9f:
         31:a1:d5:9d:ec:50:d3:b9:52:ab:84:3f:ea:06:e5:62:8a:79:
         cf:1a:de:9b:75:8e:bd:11:92:25:81:0d:b3:53:79:5f:88:c9:
         44:77:6d:c0:11:03:7a:f8:94:28:a7:43:32:e2:97:90:73:53:
         b0:10:34:cd:60:44:50:84:40:86:71:ee:8e:a4:91:86:df:29:
         d0:cf:a2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:51:42 2026 by rpki-client