This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File:                     pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier:          Lc9gI3xH3xCw/b1GmOGaLqOlnNrxDJNA8aEBe2+TWF8=
Subject key identifier:   7D:E5:32:50:E0:50:E4:80:E4:20:52:3C:6E:A2:5A:84:E1:AC:02:68
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer:       /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial:       019BA1215DADEBE41FA4C1017C3F7E046697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number:          176A
Signing time:             Fri 09 Jan 2026 05:01:16 +0000
Manifest this update:     Fri 09 Jan 2026 05:01:16 +0000
Manifest next update:     Sat 10 Jan 2026 05:01:16 +0000
Files and hashes:         1: M9txyYUbtIY2bU_7w-QiEZhq8VU.roa (hash: l+NeQPZSmMfrXax1REFn/9J5sM7uq4E8gECJINtI4w8=)
                          2: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: vVw7u4q4Z33+D9Ohzpe5FXT/EDMI+kNZh5jraqWqH58=)
                          3: vrjp4UC1_-klQk8a0d2Jw7eUkDk.roa (hash: 7yocnWrpE0HRuW2D4A9hX7dSDx4fCoT0LRXrI0miZIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a1:21:5d:ad:eb:e4:1f:a4:c1:01:7c:3f:7e:04:66:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
        Validity
            Not Before: Jan  9 05:01:16 2026 GMT
            Not After : Jan 10 05:01:16 2026 GMT
        Subject: CN=7de53250e050e480e420523c6ea25a84e1ac0268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d0:f4:1d:b4:25:c5:ae:00:4e:2e:5b:da:0b:
                    b3:db:a8:b1:11:d2:0a:1a:28:1b:02:11:5b:02:12:
                    7e:3e:a3:f6:65:a1:23:6b:81:63:17:0c:c4:c6:76:
                    69:36:a9:6c:91:e6:7c:25:48:0c:c0:66:1c:ba:ba:
                    d6:15:9f:7f:5e:56:a0:2c:19:ff:23:d5:04:c0:16:
                    4b:0a:46:e5:df:e4:6d:92:ec:8b:6b:4d:35:96:ea:
                    8b:ed:61:81:0e:95:db:d8:42:07:3f:67:fd:39:ad:
                    6a:f0:52:37:17:ae:0e:3c:0e:31:a1:79:35:dd:2c:
                    3a:a7:f6:ab:19:8b:f4:c2:fc:54:77:30:81:77:ae:
                    b7:24:c0:6c:2c:4f:78:8c:87:f2:b8:3e:2b:9d:9d:
                    96:1b:9e:f6:66:0c:f3:76:5c:6f:22:fb:0a:eb:c4:
                    5c:9e:0c:e1:60:c6:43:91:24:56:95:b8:0c:bc:93:
                    64:a1:04:1e:4f:9b:bd:c2:f0:cf:51:46:c3:a8:33:
                    8f:e9:f3:12:01:a5:4c:c2:24:29:5e:86:3b:2c:c2:
                    98:da:97:04:6b:8e:72:87:60:24:fc:0c:e6:e2:1b:
                    eb:92:85:57:a4:db:50:fe:d8:cd:b2:1b:9a:69:3e:
                    9f:f9:c7:c2:bd:bd:63:96:71:75:3c:45:f7:65:80:
                    ae:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E5:32:50:E0:50:E4:80:E4:20:52:3C:6E:A2:5A:84:E1:AC:02:68
            X509v3 Authority Key Identifier:
                keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:8a:54:94:f9:17:5e:60:c1:94:b2:2d:8c:c6:ab:bd:d8:1d:
         28:73:2a:b8:3c:ce:4d:c9:04:d3:ce:18:ab:04:54:9b:ad:40:
         78:1f:37:b8:d3:e9:46:9c:01:7b:f3:58:c2:3a:a5:20:ae:9b:
         da:38:ea:14:18:29:93:3b:75:17:2e:f3:7e:b5:0a:f2:c1:fa:
         8d:ce:b5:38:b9:d0:20:55:e7:89:1b:eb:4c:d3:d9:7d:2d:7c:
         07:27:c8:4f:3b:62:4b:ee:b1:1c:01:f4:82:ba:23:53:f8:ba:
         86:df:56:d1:dd:8e:51:ee:ab:6f:71:b3:a0:e2:7c:d9:16:ef:
         2f:f8:ef:d8:8b:df:7e:0d:18:04:a1:46:d1:b3:21:df:c4:14:
         72:e9:cb:20:72:d5:6b:5f:42:03:00:40:73:a7:89:dc:21:78:
         d4:35:34:21:93:e6:02:17:21:ae:fe:e3:f5:34:ad:0b:49:22:
         0c:5f:69:1b:55:9f:a0:13:e8:56:e4:73:bb:d2:a2:e0:eb:ea:
         2c:39:dd:ff:97:9c:29:35:77:ff:a5:f2:03:cf:03:55:a6:be:
         d1:a3:5e:82:65:d6:34:6b:e3:b1:d0:17:03:3e:c8:30:58:fb:
         a8:1e:ce:43:4f:af:63:88:81:48:f5:8c:55:37:b8:5e:74:86:
         dd:12:36:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 9 09:16:16 2026 by rpki-client