This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
File:                     phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft (raw, json)
Hash identifier:          ZgkPGci0LFR7+X1Tg9vJlWiW1pIWA4sE4Gdl8LWP1Xo=
Subject key identifier:   CF:2D:6C:2D:10:73:49:FB:99:7C:3F:D9:DB:AD:42:75:EA:85:12:EB
Authority key identifier: A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA
Certificate issuer:       /CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
Certificate serial:       019BF4626C54D73B10CF61A0B9A9D9F9368E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
Manifest number:          030E
Signing time:             Sun 25 Jan 2026 09:00:49 +0000
Manifest this update:     Sun 25 Jan 2026 09:00:49 +0000
Manifest next update:     Mon 26 Jan 2026 09:00:49 +0000
Files and hashes:         1: R9yuRT4SpbFRYXwtoqgd5_GlTyI.roa (hash: kxhnGSSaFDIC1z6NUEjoYtqaLZRHrO86ZgnVJODeRiU=)
                          2: ZCmPNfqIdlxAM9m53SDv9GQZfCc.roa (hash: pdrlFcu3fc1loHOmCUjjHjU4v0K6/wgDY+DGkNkZZzc=)
                          3: phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl (hash: rIdmpCEsbQ8WkwP/9M7tkp/H8mAfMFNPLfSooOMLRUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:6c:54:d7:3b:10:cf:61:a0:b9:a9:d9:f9:36:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6162102e5a3c0aeeab63c21ed92a805826db7aa
        Validity
            Not Before: Jan 25 09:00:49 2026 GMT
            Not After : Jan 26 09:00:49 2026 GMT
        Subject: CN=cf2d6c2d107349fb997c3fd9dbad4275ea8512eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d4:21:e3:d9:41:ad:7b:48:d1:d2:1a:3c:9c:
                    2e:5a:41:eb:26:ad:82:e1:4a:56:23:59:ac:41:20:
                    e9:0f:7d:59:d6:67:d3:ab:70:85:bd:ea:28:13:d3:
                    de:fa:22:1b:c4:1d:a9:63:e9:19:84:84:98:49:28:
                    d2:8c:90:a9:99:80:c1:aa:3b:25:31:71:b3:0b:bf:
                    bd:5f:c0:38:1d:b9:3f:c6:89:39:cb:4b:47:e0:83:
                    ea:82:00:9b:da:a3:52:ee:cc:76:20:28:f7:a8:c8:
                    06:36:67:22:59:ff:d6:6c:b8:7a:99:ca:8d:ac:9f:
                    27:ea:f0:47:24:8e:1a:8f:47:8e:8a:0e:f2:2d:99:
                    da:ad:4e:23:16:fb:1f:69:5b:0c:57:c8:2f:00:fe:
                    02:c7:70:d2:91:c8:b3:e4:a5:bb:e7:92:ba:97:b2:
                    65:6b:d6:93:22:17:36:9a:b9:fb:45:2f:e3:0a:fe:
                    71:4a:78:e9:85:1f:81:db:73:f2:f8:07:34:b1:73:
                    3e:76:ab:73:80:5e:2d:ef:f9:e1:ec:51:a3:23:0d:
                    20:ac:25:66:95:10:49:88:56:89:82:84:aa:c5:0e:
                    9c:0d:53:15:c4:df:21:8e:52:0e:50:69:12:2b:2f:
                    c9:ff:85:fd:cc:3f:fd:78:d0:e8:5f:87:bf:1f:7e:
                    7e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2D:6C:2D:10:73:49:FB:99:7C:3F:D9:DB:AD:42:75:EA:85:12:EB
            X509v3 Authority Key Identifier:
                keyid:A6:16:21:02:E5:A3:C0:AE:EA:B6:3C:21:ED:92:A8:05:82:6D:B7:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/phYhAuWjwK7qtjwh7ZKoBYJtt6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7dd25d-a521-479c-988b-9cee77bc5222/1/phYhAuWjwK7qtjwh7ZKoBYJtt6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ad:a7:46:dc:3f:e8:5e:97:00:bd:a9:fc:19:28:78:21:4b:
         b3:05:9e:02:8a:f0:1c:02:c4:88:85:a0:61:38:5b:b2:a3:1e:
         d0:46:83:1c:53:24:cc:bc:92:bf:47:62:31:28:c1:9f:b7:62:
         bf:d4:ea:32:5a:dc:10:e8:bb:82:98:3b:cb:a4:ef:cd:43:a7:
         1b:74:c6:16:31:88:f6:5d:d7:96:64:71:3a:57:d4:9c:97:1c:
         90:91:1f:72:53:e2:9d:97:ac:17:97:01:b2:d1:7f:64:69:df:
         90:f0:14:d6:0b:57:03:af:c1:01:2f:92:d7:61:23:8b:45:26:
         79:f1:40:a6:77:c9:03:f7:7a:fa:e3:59:a9:29:25:5e:f0:f7:
         ec:9f:42:65:14:4f:a9:64:59:a5:68:97:be:3f:73:55:a2:e9:
         4f:b8:0a:f8:97:ab:71:50:42:57:23:74:53:e8:8e:9a:9a:75:
         73:87:6c:32:d8:1b:71:c8:85:02:7b:67:9a:36:e1:3c:87:9f:
         4a:6b:64:9e:2b:14:62:0a:17:9d:4c:59:e5:54:37:20:fc:72:
         0e:0b:d2:58:c0:0a:fc:dc:22:15:54:d8:43:39:5c:98:ba:d9:
         af:ff:32:6a:10:74:88:af:e2:eb:fe:fe:35:1c:ea:26:52:20:
         9f:4e:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:20 2026 by rpki-client