This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
File:                     b4CWRAfF2qRAiKz-leZIi4APreU.mft (raw, json)
Hash identifier:          tzi6iDRMon0AkPtWSkyzS406XEZwQyvl6APGi7r96II=
Subject key identifier:   70:5C:92:B9:45:B9:F6:8B:80:C1:1F:6F:90:8F:48:A7:CF:14:7F:49
Authority key identifier: 6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5
Certificate issuer:       /CN=6f80964407c5daa44088acfe95e6488b800fade5
Certificate serial:       019BFCF81A6678CB7F50B3225CC79F84DA50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
Manifest number:          0FE8
Signing time:             Tue 27 Jan 2026 01:01:16 +0000
Manifest this update:     Tue 27 Jan 2026 01:01:16 +0000
Manifest next update:     Wed 28 Jan 2026 01:01:16 +0000
Files and hashes:         1: 1-32w-LG2_3MN5stMgExAO0f0NSM.roa (hash: +gMPqRhllgTKSW4BKPpHRxWjT/hynauGjaOuYFXhPnY=)
                          2: b4CWRAfF2qRAiKz-leZIi4APreU.crl (hash: sHM8sFxPVgbxmHkEW8k1sjU1xLHv4pWQTgTzDREcfkA=)
                          3: rihpWR5lfOU3jWw_hazq8i-NTnc.roa (hash: KFfr9h7mP9mKrCtGOFXC3EbHAHlcqrnQ3k9bqEF6yLI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:f8:1a:66:78:cb:7f:50:b3:22:5c:c7:9f:84:da:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f80964407c5daa44088acfe95e6488b800fade5
        Validity
            Not Before: Jan 27 01:01:16 2026 GMT
            Not After : Jan 28 01:01:16 2026 GMT
        Subject: CN=705c92b945b9f68b80c11f6f908f48a7cf147f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b1:25:8a:da:19:bf:34:36:b6:da:a7:7c:79:
                    28:e1:22:6d:79:39:49:26:01:34:bd:af:8c:5f:7f:
                    97:3a:ac:9f:20:f4:43:50:96:e7:6c:10:e5:dd:e8:
                    66:bf:18:61:4a:6f:fd:aa:74:e4:83:d0:92:1e:34:
                    45:74:e9:33:7f:f0:0d:24:a8:55:09:bd:14:7f:0a:
                    70:1d:24:2e:73:a8:6b:ea:68:44:1f:c4:a4:fe:a8:
                    07:83:75:72:52:81:d3:2e:04:68:bc:da:70:38:32:
                    98:cf:35:f3:a7:37:2b:01:70:c4:5b:4a:31:a2:a2:
                    41:7b:0a:51:02:97:e8:30:f5:00:ef:db:b7:8f:6b:
                    c0:ea:0e:f0:ea:42:5b:27:d4:b5:11:e7:33:17:43:
                    2f:a0:6f:8d:d0:24:b4:48:93:51:14:e3:55:66:ea:
                    10:51:3f:bf:75:cf:16:d9:88:1f:de:8f:07:e8:63:
                    ab:98:9a:23:e8:2d:10:bc:bd:a3:10:13:b0:c3:98:
                    e5:40:8d:ff:2a:ce:dd:91:60:36:cb:85:ab:7a:d6:
                    34:6e:51:76:3e:b9:d9:dc:98:d6:55:cf:0c:29:79:
                    58:07:7b:74:c0:9d:63:e3:14:ce:f9:64:9c:a3:59:
                    c1:58:46:37:5c:e3:78:f5:d9:db:d4:97:9e:17:32:
                    08:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:5C:92:B9:45:B9:F6:8B:80:C1:1F:6F:90:8F:48:A7:CF:14:7F:49
            X509v3 Authority Key Identifier:
                keyid:6F:80:96:44:07:C5:DA:A4:40:88:AC:FE:95:E6:48:8B:80:0F:AD:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4CWRAfF2qRAiKz-leZIi4APreU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b906c9-2b3d-437c-a3cd-5d92cef23c5a/1/b4CWRAfF2qRAiKz-leZIi4APreU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:4f:ec:37:6f:45:9d:a4:a7:a0:1a:7f:12:42:39:c0:2b:3c:
         eb:71:38:b8:2e:ad:a9:bf:a4:57:4e:85:01:ff:79:1c:a8:69:
         c6:5b:57:2b:86:1e:b3:1b:56:f1:46:09:02:01:7d:92:df:70:
         dd:7a:3e:54:1a:98:b4:85:8e:7d:89:16:11:16:f9:07:a2:cb:
         ea:73:37:1b:18:37:dd:b0:20:c0:d3:24:c8:44:00:1c:db:d3:
         87:63:8d:85:23:ae:49:17:27:a5:3f:27:b6:69:9c:56:9b:64:
         87:af:da:97:71:5c:40:67:8d:33:2b:73:29:5e:b9:80:f3:76:
         cd:44:d6:76:3c:9d:fc:cb:df:71:14:79:79:61:09:83:0c:95:
         bb:da:94:d4:05:57:20:6e:47:93:1a:cc:f6:ec:21:22:28:e9:
         e6:c5:e8:9d:60:ed:fe:26:34:55:9d:23:03:3a:92:5f:f6:37:
         fe:cd:52:6d:84:29:41:32:ce:53:fa:af:55:cb:aa:40:81:40:
         ac:12:1d:76:6c:90:8e:f6:0d:e5:d8:85:a3:6a:9c:b0:f2:85:
         5f:0d:e3:6e:c4:2e:5e:06:d1:76:93:d2:a3:65:d9:e3:c2:3a:
         ec:62:2d:03:17:89:98:e7:62:b2:e6:a1:0b:1e:f9:63:ec:1a:
         be:de:82:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:41:15 2026 by rpki-client