This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
File:                     P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft (raw, json)
Hash identifier:          X5nD/xb62UVLFr98e/aVOB+txsFUR0FeG/et1tO9Md4=
Subject key identifier:   AD:F0:F7:FB:81:56:67:48:54:71:ED:DE:CC:0C:B4:12:E4:5C:78:E5
Authority key identifier: 3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4
Certificate issuer:       /CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
Certificate serial:       019BD9229D4E318419B16F231A06F7CF9B2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
Manifest number:          0804
Signing time:             Tue 20 Jan 2026 02:01:22 +0000
Manifest this update:     Tue 20 Jan 2026 02:01:22 +0000
Manifest next update:     Wed 21 Jan 2026 02:01:22 +0000
Files and hashes:         1: P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl (hash: uufZWWpVdl6YSJVp7EhxPbNULc+Yf3Dk/iYZ2HmZaww=)
                          2: chpnAXFJwcK5gPySDUqDwv2KJTQ.roa (hash: d6pR8bXGH3hR06eFSNsTttirZQu9Egnz7/1ylze2N3g=)
                          3: w1VM5LXh7FEfVyRRuosBCx58msI.roa (hash: 80uaSD8iAl9E3bi1bc+SHSLnshKOTiNv4svzxGeVOX4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 02:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d9:22:9d:4e:31:84:19:b1:6f:23:1a:06:f7:cf:9b:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fe14329b6c1e695011a82406f7af48f4bb10ad4
        Validity
            Not Before: Jan 20 02:01:22 2026 GMT
            Not After : Jan 21 02:01:22 2026 GMT
        Subject: CN=adf0f7fb815667485471eddecc0cb412e45c78e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f0:2e:18:91:27:b5:df:51:a9:39:76:87:59:
                    5d:c7:96:6f:a3:30:6d:1e:c1:1f:28:14:fe:cd:d5:
                    81:7e:f6:94:af:14:b8:b8:84:3d:1c:d0:65:ee:c7:
                    93:d9:49:bb:0c:c6:d0:f9:68:1a:72:e7:ec:b4:9b:
                    a2:6a:04:41:31:be:ae:65:eb:e0:4f:06:71:4c:5a:
                    62:b3:59:18:92:99:cc:d3:69:74:d6:76:b1:d4:d8:
                    55:16:db:94:9b:d7:9f:93:0d:9a:f0:74:df:35:a7:
                    d8:7b:28:76:4e:6e:ac:9e:fb:55:1f:10:fa:b2:83:
                    b4:0d:44:04:9c:c2:05:ab:88:5b:f0:eb:e0:d2:ab:
                    4c:b3:c0:ee:8b:ae:db:fd:13:b9:7a:f7:0d:70:c3:
                    bd:81:ab:67:53:3e:9f:52:fe:7f:2d:a9:41:12:88:
                    c3:26:27:b0:21:34:bb:73:c9:b0:d8:86:de:2e:f3:
                    73:93:3f:56:4d:b3:c5:1c:0e:2f:2d:61:50:02:5f:
                    bf:b5:bc:06:46:36:b9:f9:7f:c6:40:0c:8f:15:eb:
                    5e:8a:15:f1:52:bd:95:29:77:f4:c4:59:92:c8:f9:
                    48:91:a8:c6:27:d6:99:e0:e3:ec:dd:96:33:d0:c8:
                    4e:54:dc:17:5c:6d:23:c8:db:7c:91:08:ea:2c:34:
                    aa:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F0:F7:FB:81:56:67:48:54:71:ED:DE:CC:0C:B4:12:E4:5C:78:E5
            X509v3 Authority Key Identifier:
                keyid:3F:E1:43:29:B6:C1:E6:95:01:1A:82:40:6F:7A:F4:8F:4B:B1:0A:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/00c6c4-ab28-4405-b694-c3d57e2387ca/1/P-FDKbbB5pUBGoJAb3r0j0uxCtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:d3:d4:49:05:28:dd:9c:5a:3a:13:85:f4:9b:30:b9:31:16:
         87:7a:d6:cc:61:9c:b5:f2:9b:1b:2e:23:69:d3:c8:6b:b8:74:
         80:61:d0:6d:99:25:85:93:43:29:12:ea:4d:8a:0b:b3:c6:c4:
         fc:a2:7a:66:1c:ae:ca:eb:95:ad:85:fc:ad:8a:9a:ec:c3:f1:
         65:8b:fe:26:4f:9b:0a:e0:c8:2e:9b:44:1a:39:bc:43:11:ff:
         f6:e6:21:a7:ff:cf:6d:f5:6a:59:01:0d:83:2a:5a:45:58:e2:
         13:71:5e:0e:a9:54:34:5d:d3:76:21:bd:4a:25:e9:f8:17:79:
         44:56:54:c3:b3:70:3f:32:da:61:8b:55:0b:b7:74:08:38:99:
         e5:2a:a5:b2:b3:3c:70:f6:81:14:65:48:f0:ff:ee:00:85:cd:
         a4:51:94:65:20:15:2a:2d:1c:6e:10:2c:00:94:cb:0b:c3:62:
         c3:29:ec:a1:bd:9b:78:d6:97:7c:4f:a7:d1:23:1b:10:31:f3:
         b1:ba:71:90:e1:2c:97:84:8b:f7:04:24:c8:1f:fb:a4:38:78:
         f0:30:b5:f7:de:9d:22:a7:fd:a5:99:ff:e4:6b:43:64:02:2b:
         43:d4:e5:52:cb:d8:70:15:42:94:68:7e:79:31:c6:97:35:e1:
         65:cb:80:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 08:23:02 2026 by rpki-client