This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
File:                     P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json)
Hash identifier:          b//PF6U3/GCbuHBdUBcYdAk28vdBKLNiTS0aDMGeB4k=
Subject key identifier:   BE:1D:37:A4:69:2E:9B:68:77:F3:5B:74:47:8F:DE:E0:78:49:C3:22
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Certificate issuer:       /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial:       019BFA2E2E742BEC1CC3E021468D146C9815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
Manifest number:          1811
Signing time:             Mon 26 Jan 2026 12:01:29 +0000
Manifest this update:     Mon 26 Jan 2026 12:01:29 +0000
Manifest next update:     Tue 27 Jan 2026 12:01:29 +0000
Files and hashes:         1: 14H-LNkPVbf1P9syu0gSDZX0QuA.roa (hash: 0sR139VBAEgTBXJuZQLHKc7RqftEBg36UvCit9+wB4Y=)
                          2: 4wMBnZXnbOtnzlZreBESG0005OE.roa (hash: skZKvqXWnRPa4nI3ThB/TrYjGRKVnazsk4dzqKlcPUw=)
                          3: 7g4r1oWjvlSPhlhcBPNRGCxJbuM.roa (hash: f3W/aXX2oWLOcz8n9AblRDokKEiMNGrTfCRmoGI/Lgg=)
                          4: 8cJlsHm0dVDV2ACL1UhTAh_wZXg.roa (hash: LnF2FnCPrAFRzWaaVfy6M3SOCgPNybkqYgz2G8nzbvw=)
                          5: A_Limg3OLYd13ZlGUJbwD_dgooY.roa (hash: AheclwiuL8WgcNGkcsG2buEkjItkhZhagDjGjEY7ta8=)
                          6: GHgp5Vp47VKlbxndRXtEhJDYn_U.roa (hash: syIEb7iHu5Ey2FBT8ljIgEWQRJ42h5jOyIS+gGfr5AI=)
                          7: OXmdplbNmQib2l2reBSTrU4L_PA.roa (hash: vuEIsii+dFtqe9HP/V9IK24UtjZr6nf8P7Rlt1fMhoA=)
                          8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: RuRkp5bGJDumZLwVddssUizH2nVfjnC+iuQpr8MX6wo=)
                          9: VYo918jh-i7rJwHE82ZPQwc45P0.roa (hash: upWdBHigy6D1tAgLScglqnlFKHDlTGPxQKZWr5SD6eo=)
                          10: Vxa3gxIRBuzpvmC_LtYioiwPkS8.roa (hash: SmaXCWbuVQWDYA1WmhxKxyYko6Urx/bhXRz1ez20W+M=)
                          11: Y6ImGVFmS5obOGtb7VS-5RES8ds.roa (hash: 5dw889Z3clPV/mha7vYDDn4q7WZv7n9gkeTOdly28Rw=)
                          12: _2Ua11sWzPO5DBlFQv8tb1tAVlA.roa (hash: LUsDXZFiK9FtK6EnFC70rYFOjc6L5qWymh1S/jDGElE=)
                          13: nINyubjIu33geaoAM2ygk8-OXIM.roa (hash: teOxeh4o4zZnuTWriyDSWtH89vqt0w3l5G0p6/GrNok=)
                          14: pJUNLwWtEptjt5DB91VfVf1ogI0.roa (hash: oSeqIzwGYJ8PJBctq0lGeA6kcX9bfJwo5235nbRUPRA=)
                          15: rExjMR-P95Bzz5RS6p1JgM8JSNQ.roa (hash: 4LNpkWN8dEzxfyUg6mtreEZRcnf507vtfHeANuOXjg8=)
                          16: sowEHuyCg98-_nRKaQkJf-fVgEs.roa (hash: oeX4pQ1F7WFsfTOBD0YtMDT1xhl2JArmAYEp1mUoROI=)
                          17: u6WZ0gjUYg9KzTP7BRY9Du-KEb4.roa (hash: SMkvUlI2T5oc05LZlQuumKtLHa+vf18Pqccm9PimLVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 10:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:2e:2e:74:2b:ec:1c:c3:e0:21:46:8d:14:6c:98:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
        Validity
            Not Before: Jan 26 12:01:29 2026 GMT
            Not After : Jan 27 12:01:29 2026 GMT
        Subject: CN=be1d37a4692e9b6877f35b74478fdee07849c322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:06:f2:05:99:9d:60:4f:20:5c:93:7c:98:
                    b5:ac:e9:55:7c:7b:4f:8f:f1:60:65:3e:95:c0:25:
                    0d:28:47:95:37:f0:d8:69:b3:29:45:a5:a2:33:4f:
                    91:39:bb:1c:9e:3a:90:43:80:4e:ad:81:7f:f0:34:
                    ed:06:cb:08:cb:f8:30:e9:01:de:52:37:48:07:3a:
                    32:fe:f6:b5:5f:82:cc:ef:0c:5f:5f:de:70:3e:18:
                    1d:98:55:fc:1c:d4:61:42:57:b1:c5:d0:f9:e2:ec:
                    7e:0c:b3:eb:65:f7:81:e5:60:c8:4f:f0:b8:6b:b9:
                    a8:19:61:22:18:33:7d:6e:c1:9b:41:7a:85:a8:78:
                    4c:9b:29:9d:26:78:43:03:e5:5c:01:27:72:01:45:
                    21:3b:9c:98:49:0b:65:75:2b:43:6e:23:47:48:38:
                    0e:78:c6:ff:22:ce:fb:5d:7d:03:93:d2:88:41:17:
                    39:11:ff:25:26:8d:1c:7b:be:7f:00:3b:f1:4b:f1:
                    19:e7:ab:b4:a8:f1:27:34:bd:33:eb:e1:e3:a7:9a:
                    01:8e:ad:9d:5b:02:67:39:35:a7:b3:a7:fc:a8:17:
                    d2:8e:94:93:b4:54:3e:4b:dd:33:da:79:ac:5f:bf:
                    1d:de:d0:af:b2:46:2d:01:c7:83:57:44:d9:3a:22:
                    c4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1D:37:A4:69:2E:9B:68:77:F3:5B:74:47:8F:DE:E0:78:49:C3:22
            X509v3 Authority Key Identifier:
                keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:0e:c8:36:24:62:c8:f8:b5:9f:82:fa:fb:b2:1b:f4:f3:2b:
         17:f1:2d:32:53:32:05:ea:73:26:ff:0d:5e:dd:97:13:f5:ec:
         70:40:0e:59:72:05:63:1c:df:94:a4:a1:1e:6d:82:94:a0:3b:
         0f:db:58:2f:59:41:92:ac:56:00:57:32:d5:74:87:19:68:05:
         7e:a8:fb:44:a8:e8:24:86:25:12:a1:a6:10:28:56:93:57:ff:
         9a:15:dd:7e:1d:1b:ff:40:4a:fa:55:49:50:cd:b0:63:29:b3:
         4f:c9:30:2e:eb:03:e5:d7:17:b1:53:7f:88:c7:71:ca:7d:40:
         58:2c:14:fa:f6:46:38:5f:38:8e:90:99:fa:14:ff:a6:97:42:
         75:a1:6e:4f:78:1b:07:99:04:6c:c7:f4:bc:90:2e:76:c7:cf:
         0c:1c:aa:fd:0e:c0:5f:29:67:ea:6e:a5:6e:62:87:eb:86:6a:
         4c:4c:4a:c5:6e:89:65:09:9c:47:9e:22:a5:8a:d0:ca:a6:3e:
         3d:bd:67:fe:d6:1d:21:e2:ec:02:8a:58:6a:5e:57:90:3b:7e:
         2e:07:6c:12:f0:fb:7b:03:dc:74:b3:34:4d:9d:86:a0:e9:b3:
         51:f5:ce:66:38:2b:8e:fa:a1:e6:45:5e:2c:aa:58:d4:cf:6c:
         13:e3:a8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 13:49:20 2026 by rpki-client