This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          NkTQjPTjPyMUUDh5X3i5Sl2Kdotua913QKVPgeNlx2g=
Subject key identifier:   6D:25:43:D2:E6:FB:14:9F:D7:CA:F0:C9:AE:61:07:6E:AE:44:82:AF
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019BCFB18B171BDA44EB59A539BE0BF00129
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          121D
Signing time:             Sun 18 Jan 2026 06:01:17 +0000
Manifest this update:     Sun 18 Jan 2026 06:01:17 +0000
Manifest next update:     Mon 19 Jan 2026 06:01:17 +0000
Files and hashes:         1: 0p95IngmkZetH0gXJAOs3SDAY0E.roa (hash: LNPnqbLWCMHvDTcExFmSigDZZyvSElARaSkh4q6WPOA=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: GGqlSVpayJkcN9P3K/Pu0x7D0tSti8GpazCgiSALnSQ=)
                          3: Kmej-qj8fPfHORtg4SVaVONzC0U.roa (hash: 6jPhrS5Z1S4tcgzddswtFrBAws8weds+gbgTtA+mUrw=)
                          4: QpnXyX_umcsmqvreaTpX1ie0BoE.roa (hash: QyePGZ/3nR4Ec0qcv35y65LN0I6BsNvKBqNN8cDu/NU=)
                          5: YwRJ2tVF3VFoI8oBKxmxmrlWvzU.roa (hash: e5XlfGq0oDoZyjw7Mj6ppUzfy4+mxsWTLSJb/MkUC8s=)
                          6: fG4rAo9hnNmK3VLhmWi71rIfAd8.roa (hash: gGzEO/u7SMQDSlMk5ffb5FzkNVdHLmHQvEqqwyoxESc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:cf:b1:8b:17:1b:da:44:eb:59:a5:39:be:0b:f0:01:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Jan 18 06:01:17 2026 GMT
            Not After : Jan 19 06:01:17 2026 GMT
        Subject: CN=6d2543d2e6fb149fd7caf0c9ae61076eae4482af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:07:2c:8e:21:70:e7:71:d6:06:28:bd:35:
                    e8:29:ff:3c:8c:40:f4:31:11:f7:4c:36:7e:7c:df:
                    d9:39:f9:1b:e5:d9:e0:8b:70:66:b4:ef:9a:82:c3:
                    b4:12:75:54:cf:28:ce:ad:2b:9c:64:ff:e3:95:ba:
                    f1:8b:ea:4e:ab:a7:93:0c:17:7a:38:ef:0b:d0:b2:
                    59:6b:8e:ee:e4:3f:dc:8e:7e:1c:dd:14:d7:5e:70:
                    d5:b5:c6:b0:4a:95:2f:a9:6f:45:e2:f1:15:4f:6d:
                    7f:5b:6d:c4:45:04:ed:2e:c0:fa:1e:ad:63:4d:28:
                    50:50:17:0d:d0:4e:66:93:f8:f4:f2:02:5f:0d:98:
                    a2:a1:d8:91:fc:b9:b4:15:15:62:cb:5d:d0:91:0c:
                    f3:16:be:fe:1c:62:d4:65:be:bb:67:3e:6e:da:52:
                    b9:a8:40:eb:03:86:4c:52:15:df:96:03:94:8f:02:
                    11:03:3e:5f:1c:74:cc:c2:2b:b5:3a:18:dd:00:24:
                    97:ae:ae:fa:b5:ce:6a:77:ca:ca:03:db:8c:89:0a:
                    ae:4c:c3:dd:2c:c4:05:34:84:f2:64:95:7c:37:33:
                    8d:56:cb:e4:96:29:09:86:af:a3:ab:52:42:65:1c:
                    84:18:c2:a8:d1:41:e7:5a:63:6a:8d:0a:19:06:b5:
                    69:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:25:43:D2:E6:FB:14:9F:D7:CA:F0:C9:AE:61:07:6E:AE:44:82:AF
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:0d:0b:90:04:25:81:f5:02:03:87:15:25:87:13:58:ed:35:
         c5:de:45:28:4b:db:97:ca:a3:6d:e2:1f:b6:74:48:e9:80:a7:
         fb:26:0d:d0:27:2d:76:63:9f:72:19:87:39:e7:f1:36:b9:43:
         92:d6:e3:ae:dd:02:e5:85:49:1d:a9:01:ba:b2:d6:bd:df:38:
         db:99:f8:bd:94:9b:96:06:a4:75:4f:ec:4a:f3:f3:68:92:6e:
         6d:4d:2e:ef:90:2f:a0:bb:1e:b7:d5:8c:66:96:b2:82:55:de:
         59:04:45:96:63:15:68:8c:b1:0d:a8:96:17:1c:b1:64:40:6c:
         f7:85:e1:ea:ed:70:e7:c6:8a:ea:aa:77:6e:68:0d:48:0b:ef:
         a8:68:c6:11:3a:d9:70:3e:d5:96:c3:0b:b9:28:0c:c0:ab:5d:
         7e:e9:72:e6:d4:b4:fa:be:1f:0e:cc:e3:02:4d:39:d0:dc:c7:
         4f:ef:67:f1:e4:64:cd:8d:a2:7a:d3:26:2b:01:03:b8:58:de:
         24:8f:e4:9b:bc:0d:a8:d3:78:18:cb:96:1d:74:57:02:70:10:
         6f:a0:76:47:b0:66:78:ab:aa:f9:64:70:64:ad:f7:48:29:2a:
         29:b9:70:59:31:3d:7f:23:e1:a1:94:0a:aa:7f:b1:34:60:81:
         15:b3:13:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 12:07:56 2026 by rpki-client