This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
File:                     AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft (raw, json)
Hash identifier:          IXWm2WfDrYnNo0uhN+PuFdNoTmncg5P2scBPCqhEVJg=
Subject key identifier:   8D:9E:DA:94:5E:BD:48:9F:FC:66:F8:4D:D2:A6:30:48:32:75:FA:62
Authority key identifier: 01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE
Certificate issuer:       /CN=0195727f07b758f9868476c13cf977654bf380ee
Certificate serial:       019BF6BF2178A941FCCA8304BCE6CEE8DBCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
Manifest number:          0B4D
Signing time:             Sun 25 Jan 2026 20:01:19 +0000
Manifest this update:     Sun 25 Jan 2026 20:01:19 +0000
Manifest next update:     Mon 26 Jan 2026 20:01:19 +0000
Files and hashes:         1: 1vE6-KH4MdU7N2hv_um52mZD9OU.roa (hash: F9xU+2/qqKu1d965ooJJSZMmafwKTsHI7SAoZJI74E8=)
                          2: APfc6JNEU6PdULzFR5BxZMOlk6o.roa (hash: Hd78Iessw8olpkO1cT25elJbp1Ay+8DdMA34bYWrxMs=)
                          3: AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl (hash: 5cPAjQNcQ0CSsr1a1qEExgPKQ5UtVb4AFUAI/Ii4EDs=)
                          4: DELZK5MwczuVxzj3X4of5HLO9Vw.roa (hash: GLmFQqmMgF4LsrUkccEanCYe2QvwLzSjgMEN7Qp7IPs=)
                          5: L9GldWcZhP-VtwQ-IrVBJjRxbvQ.roa (hash: i/vLhAVFm6Bpc/WiiZN81LZdAjQFDptqMqTGBS6saY4=)
                          6: MO2X-hKSVMmkU2wdt5M6rkMSJsQ.roa (hash: qgMxb6qJVo4sk1tLNRwm1PF/2ClIOldHiE0/SLkAAbQ=)
                          7: frbnQVPA6AMYX2oD_gTcyZulwfY.roa (hash: N+i+LJivHuJoPXNh9pH2cdBw0saTiGMUT1bVhtTAkgs=)
                          8: pttNsriY8yChB9BrtVjJhNIJyPY.roa (hash: tXY2XaK++NV5rGr1J0Fs5zNa7PQ/vWbv79WLgy93nbY=)
                          9: z_HTT3a31vAkFtPvUQtcTev0iQU.roa (hash: +OTmOuEmOD6LWIpLkfhzeYNBT0QjMtJvvZDBWFxGkTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 20:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:bf:21:78:a9:41:fc:ca:83:04:bc:e6:ce:e8:db:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0195727f07b758f9868476c13cf977654bf380ee
        Validity
            Not Before: Jan 25 20:01:19 2026 GMT
            Not After : Jan 26 20:01:19 2026 GMT
        Subject: CN=8d9eda945ebd489ffc66f84dd2a630483275fa62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6b:ee:23:59:cc:dc:d7:9e:83:ef:a4:e7:a5:
                    bb:44:99:dc:5c:35:69:00:bd:1c:c5:0e:e4:bc:c9:
                    e3:86:4d:44:eb:44:35:69:40:d7:6d:b8:f5:0e:84:
                    df:7a:02:bc:a5:7a:ed:e2:8d:ff:b8:6a:4d:2f:0e:
                    5b:8e:e9:8f:24:46:53:a9:50:57:83:0f:d5:8c:61:
                    46:cd:ab:10:4a:df:24:e9:89:0b:4d:b0:68:5d:2e:
                    e2:3b:d4:0a:75:6c:74:5c:72:f5:c7:66:46:2e:5b:
                    79:a3:af:c6:14:9a:c4:c8:86:27:10:59:f8:61:bd:
                    6f:e1:26:fc:c0:e7:b8:7d:65:b2:0c:c2:9b:7b:79:
                    cf:35:3d:28:59:78:2e:78:96:48:5e:44:c5:25:60:
                    7e:79:f1:4c:4e:f8:c3:91:df:8d:01:ed:3c:f5:75:
                    2c:29:0b:c5:25:49:e9:d1:9a:c7:66:de:c9:12:e1:
                    f8:78:b1:a1:31:8d:3b:23:8f:0e:47:17:55:80:b7:
                    02:42:bd:7a:66:1c:19:2b:6c:55:90:f3:47:a1:5c:
                    b3:92:8f:f5:51:96:28:2f:e9:42:89:90:a4:50:1d:
                    15:94:87:31:3c:cc:7a:25:00:f7:d3:54:83:92:b9:
                    4f:9b:96:83:52:55:c5:11:21:26:3c:a5:6e:06:de:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9E:DA:94:5E:BD:48:9F:FC:66:F8:4D:D2:A6:30:48:32:75:FA:62
            X509v3 Authority Key Identifier:
                keyid:01:95:72:7F:07:B7:58:F9:86:84:76:C1:3C:F9:77:65:4B:F3:80:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dded95-cb8c-4335-aed0-64838df3977a/1/AZVyfwe3WPmGhHbBPPl3ZUvzgO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:3d:95:c4:5c:6f:ad:15:01:9f:21:86:2f:b0:cb:fa:c2:10:
         af:56:ef:45:8a:1e:e8:0b:99:d4:6b:84:6a:f6:d8:bc:25:74:
         d3:c0:df:fd:4d:c5:06:0a:e8:73:62:9d:b5:58:23:ae:13:e4:
         e9:c5:34:35:05:d1:d7:6c:ac:95:49:e7:1a:76:ac:2b:7b:ee:
         d4:75:38:4a:29:14:01:c8:46:50:71:cf:08:6a:27:3c:51:a4:
         4f:27:9d:5f:ef:e8:19:a1:a0:1a:5b:61:6f:21:47:a3:ec:6d:
         b5:10:55:51:d9:13:55:76:aa:8c:e1:2c:8b:f8:a5:f7:a0:1f:
         89:e7:cd:3c:df:bd:52:f3:af:70:e2:31:87:00:8d:59:d1:68:
         6e:44:7c:e5:07:50:af:4d:a0:2d:88:6f:10:07:8c:1d:73:2e:
         c5:d1:f5:e9:11:33:a9:b3:9c:2a:2a:7c:0a:21:cf:d9:32:0a:
         1f:2d:1d:13:d2:37:b9:98:52:91:e8:1d:52:c6:7d:60:4d:f1:
         2e:97:c4:27:7f:42:f9:98:f5:2e:e4:6b:43:c2:f9:56:d6:30:
         3b:d3:c2:b0:61:20:7a:8a:84:6d:cf:96:7f:25:25:cf:22:de:
         0c:52:34:ad:12:31:35:73:2f:46:76:b1:b7:a6:04:d1:6e:d1:
         a5:6c:85:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:10:49 2026 by rpki-client