This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File:                     4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier:          t2supuxlwa9qMogXYgzNpqgDklyapGoRHQlcB+vRjAI=
Subject key identifier:   3A:74:A3:90:75:4E:5D:C3:9B:CF:6C:1B:59:58:0A:3C:CC:F6:4E:B1
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer:       /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial:       019BD5EA6AA13A92E6E9D714B3B25CFA6618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number:          0E6E
Signing time:             Mon 19 Jan 2026 11:01:08 +0000
Manifest this update:     Mon 19 Jan 2026 11:01:08 +0000
Manifest next update:     Tue 20 Jan 2026 11:01:08 +0000
Files and hashes:         1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: grkDmZuWb9dkKyiRYyQW24WT6Qjk5kzRyOY9ziAzplE=)
                          2: DXNfK9iDbAyacvGKo8OhC8gh6Ws.roa (hash: ie8rWldwV9B67n5/EffGRxDtlu39UUHKQ/tSe/j67xQ=)
                          3: OD1vu1xvYZtuVSOWeWsoiRek5JE.roa (hash: wh893NwS229KIBxcphoahE5rVlzAGosMJTAhq3iAiRg=)
                          4: kpJpjf8DEZUzbeocou67-xPbGzs.roa (hash: 6kfdp9N3WAjBikoQRDTNTZ1g1ptesnrFillaOS+4UCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Jan 2026 09:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d5:ea:6a:a1:3a:92:e6:e9:d7:14:b3:b2:5c:fa:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
        Validity
            Not Before: Jan 19 11:01:08 2026 GMT
            Not After : Jan 20 11:01:08 2026 GMT
        Subject: CN=3a74a390754e5dc39bcf6c1b59580a3cccf64eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:4a:a6:19:d6:a2:ac:08:2f:9b:c4:f4:e7:
                    62:63:57:48:2d:36:ee:bf:89:7e:4a:9c:10:f1:c9:
                    4a:6f:97:78:b1:d3:05:d3:c0:d8:65:c8:9c:74:d2:
                    20:5c:13:0b:5e:81:57:3d:5e:3d:9c:ae:48:63:23:
                    00:e8:ab:05:a2:86:9c:dc:d7:3e:63:91:7b:12:03:
                    d7:c2:f9:7a:d7:f3:d2:e8:e8:80:a1:81:10:f3:bb:
                    e5:01:57:2e:0d:55:c1:d2:9a:a2:36:d7:5d:f5:e8:
                    ab:fc:40:d7:00:18:14:6c:7b:a9:17:fb:48:81:30:
                    48:81:7f:a4:14:3c:ec:f2:79:b2:a4:ea:f1:85:47:
                    3a:25:de:80:f3:4f:6d:2d:2b:ae:d7:89:84:5e:71:
                    3f:0d:d0:c5:f2:12:ef:39:d1:a2:49:21:f9:a7:1f:
                    58:0e:9a:66:a3:b5:9e:a4:25:d5:3a:96:cd:a1:0b:
                    63:52:2b:ac:93:dd:79:5a:d9:9f:ab:6f:e2:3e:34:
                    e5:7c:cb:c2:b2:8d:0d:70:10:46:77:40:bc:56:bb:
                    68:a0:f8:2e:9a:75:89:54:5c:80:d4:ca:3f:81:50:
                    24:1f:38:0a:f3:10:87:04:57:f2:99:5d:f7:54:76:
                    a9:50:c7:c4:8a:2f:b1:9c:f2:af:32:29:b6:51:01:
                    96:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:74:A3:90:75:4E:5D:C3:9B:CF:6C:1B:59:58:0A:3C:CC:F6:4E:B1
            X509v3 Authority Key Identifier:
                keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:54:4a:c0:c2:af:07:c8:7c:a3:e2:c2:9a:b6:90:4a:45:ec:
         ba:78:44:20:de:67:b1:c4:8d:75:1c:fa:ad:df:29:ee:af:77:
         38:aa:29:88:d6:4f:ef:d9:81:62:e1:b9:96:f8:a6:1f:53:03:
         71:c2:36:6c:44:11:38:b4:42:67:b4:a7:99:e1:18:59:cf:dd:
         38:95:6a:40:36:f3:2f:04:89:15:95:87:02:84:52:85:e1:d5:
         3f:94:0d:3e:66:5d:32:0c:69:a8:5d:37:fa:05:3d:71:c4:e8:
         3c:cf:b4:16:a3:60:10:8a:cb:fb:24:b0:21:2b:3a:e6:20:dc:
         ec:46:ce:14:d8:a2:30:b0:45:37:fa:93:db:4d:cb:96:c5:07:
         01:7d:d9:c5:d2:10:54:19:6d:24:1f:d7:03:0c:93:98:a1:94:
         39:1a:f3:14:52:58:ab:d8:30:93:84:33:e4:c7:ab:7c:0e:16:
         5c:5f:6f:48:e1:3b:2b:6c:cc:36:c0:72:db:14:dd:5d:e2:44:
         d5:f6:53:c6:47:ac:b3:e9:e1:df:e0:47:a1:06:cb:58:09:09:
         1e:1e:32:e5:fa:43:50:14:38:31:16:b7:4b:0b:ec:ee:55:e7:
         2d:73:78:58:10:9e:3e:5d:1c:29:8f:24:0b:f7:7e:ea:d2:3e:
         1d:19:16:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 19 18:29:36 2026 by rpki-client