This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
File:                     zQYCONBmjUWgQWGKxd92f1mgxK4.mft (raw, json)
Hash identifier:          okXPRXtKLVLlra99MNU5BDbAGa8AEHD/1nkEq6eeES4=
Subject key identifier:   EB:85:DF:F4:EA:98:6F:6D:ED:4D:41:46:DB:B0:AC:0C:C5:CE:80:BE
Authority key identifier: CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE
Certificate issuer:       /CN=cd060238d0668d45a041618ac5df767f59a0c4ae
Certificate serial:       019BE0006D6FF094485E1F23FB1496B6C1EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
Manifest number:          0E6D
Signing time:             Wed 21 Jan 2026 10:01:22 +0000
Manifest this update:     Wed 21 Jan 2026 10:01:22 +0000
Manifest next update:     Thu 22 Jan 2026 10:01:22 +0000
Files and hashes:         1: B0xeJ6OlptEzuwHkDKb2uLt1U_4.roa (hash: 0mnm00N6t5GT0+PQLMuChkiPF3X09nPjo6FNCsIiX9w=)
                          2: DHWxwhm5BstgQrswTpmXlNRqB68.roa (hash: U4MLvKfxIOpMtW85VWgOrj7JclXnEEYGlYHrxV44rNY=)
                          3: zQYCONBmjUWgQWGKxd92f1mgxK4.crl (hash: oD6YqcZTn+u6oT5VJ/9W1XtjN7sQrWNdI9Rc54/2SDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:00:6d:6f:f0:94:48:5e:1f:23:fb:14:96:b6:c1:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd060238d0668d45a041618ac5df767f59a0c4ae
        Validity
            Not Before: Jan 21 10:01:22 2026 GMT
            Not After : Jan 22 10:01:22 2026 GMT
        Subject: CN=eb85dff4ea986f6ded4d4146dbb0ac0cc5ce80be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:09:aa:08:d3:0d:6e:98:d6:54:b1:2b:27:ba:
                    6c:af:57:23:01:cc:85:76:85:02:0c:d4:1c:c3:b2:
                    c1:14:70:17:17:7f:e5:f0:44:82:78:74:e8:bf:e4:
                    b3:82:03:b7:9f:5f:36:c2:e1:d1:52:01:d5:4b:e4:
                    98:96:39:40:5a:e3:ff:d0:6b:72:4a:b7:fa:e3:59:
                    e8:46:a7:3c:2a:99:f9:b3:89:54:d6:56:f7:56:cd:
                    12:ca:e9:d1:a4:fd:8f:bc:c1:23:d7:88:df:02:c3:
                    a5:a6:c3:39:7d:4c:c0:e8:6d:70:03:f1:05:4b:49:
                    22:19:1f:08:1c:ff:ed:20:1f:73:df:39:a8:0a:d8:
                    e6:e1:a8:5d:76:b9:17:0e:74:78:76:d2:eb:b1:e5:
                    8e:16:99:78:1f:2b:f8:48:8f:f1:a6:0f:a4:53:91:
                    65:77:44:ea:f5:12:72:7a:bf:a0:f7:f1:32:eb:67:
                    7b:7c:44:de:a1:df:bd:26:69:33:d6:0b:f6:d0:63:
                    1f:0c:1c:84:2b:a3:d8:fa:70:64:3d:73:ac:63:4e:
                    d7:0a:d2:37:ff:bc:b5:6c:24:eb:9d:e9:47:17:33:
                    61:05:05:2b:af:75:a5:73:fe:f6:3f:49:5f:f0:5d:
                    0a:5f:aa:43:f9:35:dc:47:e2:db:2d:94:d4:c6:2f:
                    69:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:85:DF:F4:EA:98:6F:6D:ED:4D:41:46:DB:B0:AC:0C:C5:CE:80:BE
            X509v3 Authority Key Identifier:
                keyid:CD:06:02:38:D0:66:8D:45:A0:41:61:8A:C5:DF:76:7F:59:A0:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQYCONBmjUWgQWGKxd92f1mgxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/762006-f158-4e5a-b956-7fb6ea89637f/1/zQYCONBmjUWgQWGKxd92f1mgxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:0b:d8:6d:4b:97:82:50:0b:35:0a:4b:eb:c5:e7:36:a9:
         a2:5a:82:74:3d:df:4c:9c:43:65:32:fd:8a:b6:64:9b:2e:d4:
         e0:b6:aa:5c:99:30:90:7c:5b:a9:7f:1c:dc:a2:eb:d4:51:dc:
         30:da:74:7c:ac:36:a3:fe:b0:4e:fb:23:49:dd:d5:14:87:5d:
         f5:20:3f:87:70:7d:ab:2b:ab:35:ea:e6:7b:17:30:c2:4b:3c:
         4a:92:c3:7b:32:58:a6:06:e0:e2:a6:75:13:cb:1e:a7:14:1b:
         41:2f:c9:d9:fa:4e:82:13:ab:07:9e:f3:e0:55:c6:08:04:50:
         eb:94:4f:00:a3:83:c6:30:7b:ff:c4:64:6e:bb:37:78:59:73:
         92:e5:f9:24:c6:98:35:ec:e3:55:c0:a8:18:e7:06:17:be:97:
         36:56:4d:25:16:8d:23:3f:ea:c4:25:9f:7d:0b:8c:95:a5:8b:
         c9:8a:cf:c8:72:7e:a0:6d:24:a2:a4:fe:bd:29:f2:06:a9:26:
         c5:a3:13:79:ba:70:52:66:2c:b5:29:92:f9:e2:aa:5f:ee:2c:
         80:6f:74:75:b9:db:09:4a:2d:ba:09:97:50:94:2a:21:62:cf:
         67:47:98:9d:0e:eb:a9:3d:26:be:50:90:eb:8f:77:77:69:fd:
         35:d1:e3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 14:45:31 2026 by rpki-client