This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
File:                     v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft (raw, json)
Hash identifier:          ShxSXQmwBMht1vHPAShloxTezKZvPUXonN/GtFTODH8=
Subject key identifier:   7B:96:01:BA:3D:BC:30:AB:96:8F:BD:C9:24:BF:D4:F7:3E:EC:B5:97
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Certificate issuer:       /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial:       019BE90391B9628DB46575781DAE2A754432
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
Manifest number:          0679
Signing time:             Fri 23 Jan 2026 04:01:23 +0000
Manifest this update:     Fri 23 Jan 2026 04:01:23 +0000
Manifest next update:     Sat 24 Jan 2026 04:01:23 +0000
Files and hashes:         1: 9ZdSuNqBRLsGSu6hC_4e7raJH7A.roa (hash: mNbbXsq0W6rmhlFh2C+o75ACap1sxUNcDIoCLgizCJE=)
                          2: Wwry0pTyAtK1A6b2shrM5APPbZI.roa (hash: CHi4AVwGvGrl5tChQ0TUYjHIVyCz1akOxd1fug9TFQ0=)
                          3: t6bgWVBAMnQHsK5r2oTi3Pvzdkc.roa (hash: npSTfZdobLVhOzYXz8kfeVJLC+pGSFhlOf01bVaK1r4=)
                          4: v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl (hash: Rnxl53bwcWInVSudlxCFY2XuvIiIPzATH0JHKCPNOT8=)
                          5: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (hash: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg=)
                          6: yMmwHig-aW9aKe8GJ1B_bLaro4A.roa (hash: UhUuy69f206H3E2T1ttVi7af/r7Upfzr8zd32Tx5i7M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 04:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e9:03:91:b9:62:8d:b4:65:75:78:1d:ae:2a:75:44:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
        Validity
            Not Before: Jan 23 04:01:23 2026 GMT
            Not After : Jan 24 04:01:23 2026 GMT
        Subject: CN=7b9601ba3dbc30ab968fbdc924bfd4f73eecb597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:9b:a6:09:50:4c:51:b4:62:54:5e:68:f3:ab:
                    8d:c2:bb:6e:c6:3c:41:d6:af:01:63:7f:50:c0:a1:
                    f4:c6:88:92:5b:50:02:b8:a5:f7:70:a2:f5:04:ec:
                    54:9c:59:eb:5b:1f:bd:f9:53:3d:db:27:04:4d:9f:
                    12:11:8d:cb:7a:97:09:70:ca:8f:a4:9d:f4:45:8b:
                    0f:30:ae:5a:92:99:ce:f6:02:72:22:72:bb:39:55:
                    e7:10:fd:fb:27:87:e4:42:b5:e6:1a:71:b7:a9:5f:
                    78:ff:a2:9a:17:28:74:b6:d6:cf:a5:e8:d0:32:f4:
                    35:a5:91:8b:06:ba:87:a0:91:46:50:63:4b:c7:f2:
                    b3:cf:39:3b:d0:20:81:58:eb:d9:7b:61:5c:4a:b8:
                    dd:4c:a8:02:41:41:13:fa:f1:49:fd:47:e1:4b:2f:
                    cf:50:2c:65:d0:ae:23:5f:de:51:48:60:78:a1:7b:
                    88:46:2d:2b:5b:b0:a9:0a:33:ab:d9:9f:5f:ea:a6:
                    05:70:fb:ff:9a:90:80:6b:09:d2:7c:1e:af:68:d5:
                    46:44:53:76:27:0f:7d:e3:38:77:11:5e:f1:32:58:
                    9d:90:57:2a:47:db:e9:a7:73:63:1e:e1:27:d0:45:
                    08:d9:b9:fe:ca:e4:6a:72:fa:96:a0:96:1a:a8:be:
                    76:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:96:01:BA:3D:BC:30:AB:96:8F:BD:C9:24:BF:D4:F7:3E:EC:B5:97
            X509v3 Authority Key Identifier:
                keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:2f:79:1c:33:38:7b:23:52:47:9e:0e:7b:5c:c0:23:75:
         42:81:6b:e1:29:33:94:ac:c3:70:49:52:d1:9f:57:d1:16:e6:
         11:69:be:09:5f:40:12:db:5c:cb:df:cd:55:85:79:7e:92:f2:
         96:1a:50:e8:41:4d:9b:a3:4f:e0:76:f1:c4:66:f7:ca:cc:36:
         0c:09:2c:79:31:54:42:47:c2:26:2a:ee:b1:b2:a8:26:22:49:
         c0:59:44:40:25:da:9a:e6:73:db:6b:74:93:67:d9:f7:c7:e7:
         36:fc:e1:dd:48:18:52:af:a2:bd:66:32:db:b0:d6:b5:38:a9:
         f1:2d:de:c8:6e:01:5b:a6:37:7c:e6:ff:41:5b:c8:3a:66:29:
         df:71:cc:73:3a:b8:4d:81:63:0d:96:3b:9f:06:4c:c1:ad:8d:
         5e:92:83:35:76:4c:5a:bc:d1:23:a5:f8:43:98:28:f0:60:9d:
         4b:7e:3e:64:73:ca:05:98:39:3e:df:8d:2d:63:58:c3:0e:f9:
         f0:ed:9b:eb:8a:ed:82:c3:86:2b:81:bc:91:d0:9a:f1:00:5f:
         7d:47:2c:ec:09:6d:d5:11:13:a1:8a:8c:3e:c8:c2:2a:4e:f8:
         2c:b3:c2:d5:52:e8:af:ed:57:95:d2:5f:d1:2c:8d:d8:fc:a3:
         fc:77:d1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 12:51:47 2026 by rpki-client