This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
File:                     zrhpg1RxEzWbreHz84EECR46ZDk.mft (raw, json)
Hash identifier:          IkThVv0ssPKYY70E2l7lsPXXkFZlJgrK4sA6byvohdo=
Subject key identifier:   4A:E8:90:C6:38:D1:C0:DB:BF:58:7B:63:60:CB:C8:A0:57:2A:0A:53
Authority key identifier: CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39
Certificate issuer:       /CN=ceb86983547113359bade1f3f38104091e3a6439
Certificate serial:       019BFBE5829D1038011646BFCAA89E4CD9AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
Manifest number:          1816
Signing time:             Mon 26 Jan 2026 20:01:20 +0000
Manifest this update:     Mon 26 Jan 2026 20:01:20 +0000
Manifest next update:     Tue 27 Jan 2026 20:01:20 +0000
Files and hashes:         1: AYCqf3M0d0U2_qjOq3RaqTQK8lo.roa (hash: 0umZskah+CEr8ip186+RE27wIFvtLRl5c7E3qXa1bJA=)
                          2: C2VLEg7n0tawM_YjuKM0EwCOIdU.roa (hash: YkJt5/I0ermqnHQNrdy2/02bafN5wEDvzpqYuCqnw2s=)
                          3: ED4SThrzQXYcrC-AEArSen9tJXk.roa (hash: 7Cm2n+7edQ/TSDNLB06WjyawgEuLOZa4VST/mcq8bUM=)
                          4: c39N67bVxmJiemTHJXkT_8LO_Jc.roa (hash: aB4P6VURUO7PJEhrDe97gwqnhvifkhr4AJMJpATFX6E=)
                          5: xGU0bYEQZqKtXvz-wOQxKTPLHDM.roa (hash: Pww3BJWwUmNPj1/iW/aWXYB7NNqY6jVB3VyHrlLqwhA=)
                          6: zrhpg1RxEzWbreHz84EECR46ZDk.crl (hash: kG2DWcJLvFx+Xu5D/VP5LEl6cQRVIWKd4IpDr1W3Q0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e5:82:9d:10:38:01:16:46:bf:ca:a8:9e:4c:d9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ceb86983547113359bade1f3f38104091e3a6439
        Validity
            Not Before: Jan 26 20:01:20 2026 GMT
            Not After : Jan 27 20:01:20 2026 GMT
        Subject: CN=4ae890c638d1c0dbbf587b6360cbc8a0572a0a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7e:bf:cc:e8:4a:4d:0d:2b:14:b3:41:0e:30:
                    cb:97:4b:a8:8e:fd:21:ed:a1:25:fe:fb:58:6a:f7:
                    5a:1b:27:45:43:2d:e9:80:9f:3d:87:5d:5d:b5:af:
                    4c:b1:ab:fa:34:5f:f3:6b:33:1c:c1:8a:f2:f9:11:
                    0c:6d:c6:26:7d:28:af:03:2e:46:03:24:26:54:a7:
                    12:fa:20:ac:c6:c0:59:dd:5c:70:74:1a:12:87:a5:
                    b5:05:bc:cf:9b:82:7e:d4:fa:a1:ba:cf:d8:33:b4:
                    45:21:ff:30:3f:45:b8:50:6c:2d:bb:30:4b:d3:e7:
                    cf:5a:64:be:72:0d:dc:9b:d4:c0:42:3f:92:f6:ec:
                    4c:96:c9:d7:e1:9c:07:67:15:00:d5:01:f0:a3:0e:
                    05:49:2f:67:ca:76:a9:9c:93:c7:92:5f:8e:aa:08:
                    cb:22:4f:42:13:f2:23:c2:fe:32:00:3d:00:60:d5:
                    96:4d:87:4c:25:73:3f:1d:96:ed:82:6a:9c:cd:d6:
                    b2:64:93:ab:75:e6:d8:a2:44:15:58:bf:06:09:aa:
                    07:60:70:b6:b3:54:4f:85:41:7d:7c:ee:12:69:28:
                    9d:54:49:cb:f9:28:53:2f:37:d3:1a:18:e7:4c:e4:
                    40:53:df:d3:73:97:15:78:6e:bc:f9:1d:ca:7b:2a:
                    fb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E8:90:C6:38:D1:C0:DB:BF:58:7B:63:60:CB:C8:A0:57:2A:0A:53
            X509v3 Authority Key Identifier:
                keyid:CE:B8:69:83:54:71:13:35:9B:AD:E1:F3:F3:81:04:09:1E:3A:64:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zrhpg1RxEzWbreHz84EECR46ZDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f3539d-38cd-465e-a57d-dee2f650dd86/1/zrhpg1RxEzWbreHz84EECR46ZDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:17:b8:98:92:c9:ac:bc:d2:8e:53:8f:92:f2:34:46:4a:b8:
         06:b4:6e:00:9d:dc:7c:4a:7f:8e:42:07:83:cb:b8:c5:ba:97:
         21:4c:4d:47:11:cc:10:2d:1f:bc:1b:e5:8c:48:dd:7d:8d:74:
         48:b1:77:35:fb:a1:0d:29:32:e2:2d:bc:31:2b:3f:5d:b9:8e:
         03:50:15:a3:f6:70:dd:1b:4b:48:e8:75:dd:c4:37:76:88:78:
         1e:75:0c:53:2b:a9:38:f0:a1:20:d0:f9:50:49:84:98:61:4d:
         fb:ef:33:4f:57:7f:99:48:25:39:74:ad:5a:cf:c1:bb:7f:d8:
         cd:88:a3:11:ed:8b:59:37:65:9d:a9:74:1f:04:5c:18:58:7e:
         a8:81:e3:a8:83:5d:2c:28:d0:2f:93:85:28:1c:e6:58:af:ad:
         4b:e9:b7:c9:b3:2d:8d:76:10:0d:bc:54:3f:ac:ae:0d:22:b1:
         3b:34:48:df:79:ce:70:7c:80:14:7a:8a:7f:ac:6f:d8:6b:03:
         a1:70:48:ff:52:73:d0:ad:81:75:76:12:ec:bf:bd:65:03:63:
         75:93:07:76:9a:ca:c1:8a:93:ee:ec:c6:1c:53:29:b4:b0:d5:
         15:51:9a:7a:f9:44:b0:60:ff:b0:0f:bb:04:79:bb:4d:f5:c5:
         d5:ad:83:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:55:56 2026 by rpki-client