This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
File:                     xZvR6MWPZBvZRDBfEcVO_l86DOI.mft (raw, json)
Hash identifier:          Rvoppie3/3ZhX8DljTyAvqnNYD3wz8g0j+I8H7kYubI=
Subject key identifier:   E6:ED:27:B8:84:ED:9D:0F:8E:83:AC:75:20:42:FC:D0:06:38:B1:CF
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Certificate issuer:       /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial:       019BFC1BD80DB0838C7BCF0997ABCA3BD4CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
Manifest number:          180C
Signing time:             Mon 26 Jan 2026 21:00:41 +0000
Manifest this update:     Mon 26 Jan 2026 21:00:41 +0000
Manifest next update:     Tue 27 Jan 2026 21:00:41 +0000
Files and hashes:         1: EvezJV6Vs9jqKeUbJVzpq1KiVDU.roa (hash: 2svyQKGgqn/3aPQxfvJ2sTwJRY+qNPgcGyhkMpZSELI=)
                          2: NCLucTkvi3guFUx3Unodz7qu3f8.roa (hash: XS6lokDQlSUVgmf31X4rX8+KGasUvIdfEySA8Treukc=)
                          3: _wgviRVG1K_5o-U9fJ7o7ZJk_RE.roa (hash: 8X8kwr6+94gamc2uAWENoz4y3O77vpqIsVr/rcSuqCo=)
                          4: ezXML66PH_53DvtrZpee7wJgcq8.roa (hash: 8PYXc5RxO1awIA2fhoLa9kTXnH71YLw1uLcJ1CNtRqs=)
                          5: h5hIPsJLhskffy-sowI0XWx6XlE.roa (hash: SZZgcDO6xitZpi8SqVoNBovZysldQ3yiUtrtfkP4Ct8=)
                          6: tqRuH8AtUL10GIVamWVHWz8fxNg.roa (hash: RZkT6lVI+WQmmrPn0pAsOsM6VyHGnWPmG3xanKfDovc=)
                          7: xZvR6MWPZBvZRDBfEcVO_l86DOI.crl (hash: 7unlbCsxXoS0+8lA8tM4PRjLZoNDiyYIwdJZhCgxil0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1b:d8:0d:b0:83:8c:7b:cf:09:97:ab:ca:3b:d4:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
        Validity
            Not Before: Jan 26 21:00:41 2026 GMT
            Not After : Jan 27 21:00:41 2026 GMT
        Subject: CN=e6ed27b884ed9d0f8e83ac752042fcd00638b1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:b6:43:33:24:5e:ff:3e:a6:d1:b0:f9:11:
                    0e:05:c9:5f:a2:16:1a:9f:73:8a:ce:0d:84:9d:e8:
                    1c:59:7d:16:d3:e4:22:0e:3c:31:1a:f7:44:e6:8b:
                    71:8e:94:63:ca:01:63:ff:2a:8c:af:c9:12:36:34:
                    3b:45:20:fa:6e:34:49:7a:a8:6e:09:c9:d9:b6:9a:
                    e5:17:31:2b:89:89:43:7b:69:10:11:b8:b5:a5:87:
                    50:59:f9:d8:ed:3c:47:cf:2e:4f:15:77:ea:7d:57:
                    e9:b8:c5:6b:3f:f2:0d:7a:b8:ef:f5:48:e5:29:b2:
                    da:10:f7:2d:36:82:f8:ff:d2:3b:80:ac:69:56:4e:
                    12:41:48:d4:ff:01:a6:2c:dc:17:ac:6e:67:64:0e:
                    8c:93:e4:6b:f2:2f:27:87:03:fb:7e:9e:cb:cb:68:
                    aa:55:74:23:b7:94:b7:50:e2:8d:4f:4c:cd:8e:fd:
                    65:8d:c0:5d:f9:d4:f2:44:05:64:70:70:72:7e:7d:
                    c9:63:ec:92:b7:f3:f0:9c:a0:be:76:61:ff:84:0a:
                    62:28:11:95:0b:64:08:ed:ff:31:5c:0b:5b:c5:30:
                    e3:62:2c:61:db:9d:f8:d0:bc:53:bd:6f:37:84:2b:
                    31:30:2b:14:a0:60:6b:47:46:31:bb:96:41:8d:7f:
                    47:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:ED:27:B8:84:ED:9D:0F:8E:83:AC:75:20:42:FC:D0:06:38:B1:CF
            X509v3 Authority Key Identifier:
                keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:3b:b2:8b:92:f9:59:1d:2b:53:fc:5e:43:d4:f9:d5:8d:3b:
         b8:b2:c7:b4:42:82:82:41:e1:53:74:3f:59:28:fe:e2:3b:c2:
         01:8f:07:10:5e:1b:9a:b6:3d:84:09:02:64:6d:a7:2e:a6:f2:
         24:14:44:4a:f2:31:24:cc:a3:4e:86:a8:b2:1d:ad:50:a0:6a:
         63:1d:ed:65:7d:6e:62:9f:90:06:af:01:d8:3f:e6:29:fc:64:
         af:14:52:9a:8e:f3:d8:2c:d1:7d:21:ad:58:8c:f4:59:e5:b1:
         13:a9:93:a2:0f:5f:94:da:bb:88:ee:18:05:11:cb:d1:0c:74:
         7b:46:82:6d:c1:46:6b:41:5f:7a:f4:ef:bc:18:2d:a2:54:a9:
         03:66:8c:c1:03:5a:81:a4:3c:b1:bc:45:26:7b:45:11:8e:cc:
         bf:38:02:8b:1e:6f:cd:1a:16:d3:c1:36:cb:c2:6d:7a:10:fe:
         30:b1:58:55:1f:8a:7a:60:b8:53:d6:83:70:a3:28:b4:d8:48:
         86:65:a8:19:ca:49:98:43:f0:73:70:85:7c:57:61:ed:90:71:
         c9:63:f2:b9:bc:ab:24:5a:04:d8:34:16:85:3c:90:d4:40:10:
         00:ae:d8:ce:12:19:74:42:ad:32:7a:9e:39:87:b9:bd:ca:b1:
         6e:3f:60:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:16:29 2026 by rpki-client