This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
File:                     zs05HGYMPlfFO4fAtS7A0vL0J3U.mft (raw, json)
Hash identifier:          vjXllt4Ht5Jj0F/M6dK4qJvX6roR1x6NUOwjScKdhBg=
Subject key identifier:   AD:93:F9:5D:0D:28:47:21:2D:73:3B:C4:C7:1F:FC:DC:3D:17:A3:00
Authority key identifier: CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75
Certificate issuer:       /CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
Certificate serial:       019BFA2E1F24968613EF2F8161D26F136276
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
Manifest number:          07A3
Signing time:             Mon 26 Jan 2026 12:01:25 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:25 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:25 +0000
Files and hashes:         1: K1WYHWxT9hUhyCzFRd3qp6J1SRo.roa (hash: ofCgYNoPNZP6vNBlI2XsxCW6wFsFBZey/s584doB1q4=)
                          2: nNBG6JVVM3hu0P20Vu06-SMt-9I.roa (hash: M+TeIwkxE9H/4NhfymMWaPcB1L3//0ChdU6G+C5A8KM=)
                          3: zs05HGYMPlfFO4fAtS7A0vL0J3U.crl (hash: BMVmZ7DUFXDN7MmP9t9j8mWSL7HMgAsD87Vww9lX4Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:1f:24:96:86:13:ef:2f:81:61:d2:6f:13:62:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cecd391c660c3e57c53b87c0b52ec0d2f2f42775
        Validity
            Not Before: Jan 26 12:01:25 2026 GMT
            Not After : Jan 27 12:01:25 2026 GMT
        Subject: CN=ad93f95d0d2847212d733bc4c71ffcdc3d17a300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:46:4e:05:94:73:56:9f:a6:84:6a:ce:00:ae:
                    d2:46:cf:49:38:9a:6a:1d:20:96:5b:e2:f7:d9:fb:
                    53:46:20:32:3f:91:10:16:d0:24:85:68:65:c7:81:
                    2f:18:cb:1a:37:aa:34:2e:e4:21:b2:e9:b8:8b:33:
                    4d:a1:7f:d7:83:3a:83:85:ac:3e:f4:64:79:cb:84:
                    e8:5e:9a:e4:63:87:a2:41:a9:7e:76:98:ff:f5:03:
                    de:a4:18:b8:b5:0e:d5:7c:56:e2:0b:6e:7b:c3:18:
                    ac:b0:19:c8:ac:b6:ea:e3:6d:81:8a:e0:a9:c9:d7:
                    8f:ad:4d:3a:15:16:3e:99:5f:e5:e1:a4:29:bc:55:
                    02:43:36:b6:cb:14:b6:c5:64:e8:e4:9b:e9:fa:eb:
                    ce:9d:b1:24:73:45:99:c4:8e:b7:cb:e6:61:03:94:
                    35:16:5c:78:80:12:07:54:cf:c0:d5:cf:5f:c3:4e:
                    a8:3d:ee:8f:a3:48:8c:b8:18:dc:72:1b:1e:8c:d6:
                    8d:b5:04:88:8e:5b:c9:6d:43:eb:6a:ad:c7:a9:bb:
                    08:a0:9b:7f:c2:d6:82:e0:8e:fe:fa:c6:54:df:6d:
                    d3:8f:fe:c5:1b:4e:7c:88:85:eb:24:23:dd:40:c1:
                    f0:ce:14:05:e3:b1:29:3c:33:26:39:1e:1b:b3:91:
                    67:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:93:F9:5D:0D:28:47:21:2D:73:3B:C4:C7:1F:FC:DC:3D:17:A3:00
            X509v3 Authority Key Identifier:
                keyid:CE:CD:39:1C:66:0C:3E:57:C5:3B:87:C0:B5:2E:C0:D2:F2:F4:27:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zs05HGYMPlfFO4fAtS7A0vL0J3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/0a2e01-9aa6-48c9-b79a-a4d359d91251/1/zs05HGYMPlfFO4fAtS7A0vL0J3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:fc:00:41:6e:ec:3a:cb:d6:f8:02:14:2d:ee:90:f4:19:b4:
         73:f5:db:b4:04:a4:26:18:d0:12:fd:ba:3e:36:1b:d9:80:93:
         24:b7:83:e5:d7:d4:9f:37:f8:fb:ff:2b:f6:66:bd:93:00:d5:
         a9:d6:80:47:2b:63:c7:fb:85:c0:e8:c5:3c:34:6c:92:c9:29:
         72:49:0e:2b:15:78:8a:6a:c9:05:a2:f0:2b:dd:71:e3:22:2a:
         80:79:9e:a4:8a:03:08:3d:27:3f:e9:fd:74:04:d7:40:f4:2d:
         59:9d:d9:95:c9:df:1e:b4:79:7c:98:95:0d:a2:61:94:c5:8e:
         cd:0d:5f:bb:ed:9f:a8:7d:10:40:e1:21:46:3a:b3:19:fe:ad:
         07:ef:25:0d:ab:66:9b:ac:52:1b:6b:b0:c5:7c:c5:4e:78:95:
         39:09:32:23:66:5d:27:5b:f7:e2:d0:0f:6c:d0:a7:3d:1e:80:
         d8:2a:dd:5d:0c:8c:90:3b:c6:97:9d:2e:48:09:95:e6:79:db:
         f0:ef:2d:96:10:fc:cd:dd:18:9e:ba:20:70:c3:62:58:39:78:
         14:dc:2a:59:4f:0b:f3:31:10:10:d0:d8:8d:be:2a:7e:ac:f5:
         ff:69:f9:8a:6e:3d:6e:45:f4:d4:69:df:b1:89:36:81:33:38:
         53:ff:f5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:11:34 2026 by rpki-client