This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
File:                     ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft (raw, json)
Hash identifier:          ninzBnZ8Y2Ui6QikX+tMu307GG/J+a6p3KUR6k35BXQ=
Subject key identifier:   69:21:80:52:F5:06:B1:A7:AE:01:E3:4D:EC:B1:DF:4A:23:6D:50:33
Authority key identifier: 65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA
Certificate issuer:       /CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
Certificate serial:       019BFBAEAC9E9BD7ECC6B1E858C29DC69763
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
Manifest number:          0BFA
Signing time:             Mon 26 Jan 2026 19:01:27 +0000
Manifest this update:     Mon 26 Jan 2026 19:01:27 +0000
Manifest next update:     Tue 27 Jan 2026 19:01:27 +0000
Files and hashes:         1: ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl (hash: pVkNypVhEyHDi8wlqfEmuSgMYpyiyXcK4IVLxihacAw=)
                          2: oAsWXs4gepUgdtyVum1Sl5zQ0yQ.roa (hash: On+gGjr8rTU+wqF8jInBbdR1DrtmCg/UcweFh0kLfjU=)
                          3: shLbklZTsl4AZPGv5XqOqviR4Fs.roa (hash: 3mVV646n9CiCww0apd2ZXdr2biN6kuu9VtbZKzpMXDk=)
                          4: wNWaeIo1EAzWYqKEsMEX14uNfGQ.roa (hash: pEDt/E1EsF0TWRhexvZPmk3z2Y8kiJZTlwVkYrWgB0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:ae:ac:9e:9b:d7:ec:c6:b1:e8:58:c2:9d:c6:97:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6552d2cb5a9e8d5689fad67a9605149c6d5ef7ba
        Validity
            Not Before: Jan 26 19:01:27 2026 GMT
            Not After : Jan 27 19:01:27 2026 GMT
        Subject: CN=69218052f506b1a7ae01e34decb1df4a236d5033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:01:bd:8d:5b:37:52:6a:7d:16:26:e1:8d:
                    ae:d8:12:d5:92:67:7c:a2:a5:d8:40:f1:af:6b:11:
                    e2:de:11:c9:76:9e:bf:6f:8b:47:ad:7e:34:58:18:
                    8e:9f:1c:66:5f:d5:0e:c9:95:32:b7:16:9c:86:de:
                    6f:f8:2d:e1:90:6f:ac:7d:64:8b:f1:1c:39:0f:f5:
                    b7:2f:5d:c4:44:db:ad:9d:ea:91:b4:54:96:28:2c:
                    10:46:5d:48:e3:ff:b5:d3:89:8c:b6:50:6a:45:d6:
                    52:87:39:ee:24:46:bf:5d:66:78:47:59:79:28:57:
                    9c:00:32:f8:e5:36:94:b7:c8:23:2d:f7:08:03:9e:
                    de:e8:7f:bd:dd:d9:91:d2:46:46:b7:92:b7:45:a4:
                    02:db:17:d2:0c:97:61:36:83:ab:89:22:9e:9c:a9:
                    02:a2:8b:93:77:9d:ab:cd:2f:7d:a9:d6:f8:9c:30:
                    2a:ff:2b:c8:37:8c:cc:28:b4:9f:cf:fb:fb:38:6f:
                    2b:3b:28:de:0a:9c:c0:c3:17:7e:6e:78:e9:61:a0:
                    72:61:bf:c5:af:32:1c:b5:2a:dd:a2:1d:57:0c:1f:
                    da:2d:9d:7d:61:7a:cf:20:f5:8e:df:fd:94:61:a4:
                    53:fc:7d:c3:ee:65:b8:ee:14:ca:ae:2c:30:95:b2:
                    1b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:21:80:52:F5:06:B1:A7:AE:01:E3:4D:EC:B1:DF:4A:23:6D:50:33
            X509v3 Authority Key Identifier:
                keyid:65:52:D2:CB:5A:9E:8D:56:89:FA:D6:7A:96:05:14:9C:6D:5E:F7:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d1fac7-7c5b-4fa6-b7e5-9a5d8ba7d803/1/ZVLSy1qejVaJ-tZ6lgUUnG1e97o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:38:56:17:e9:c4:c3:f3:7c:55:06:33:b4:ee:d3:14:e0:50:
         0b:fe:be:f7:4c:88:af:32:c9:ad:b3:11:39:b3:9d:48:c2:22:
         95:35:c6:84:68:2a:6e:c1:04:30:84:01:d7:5c:ed:1c:ff:e6:
         f5:5e:8b:1e:cd:a6:cb:ab:f4:47:f2:e1:98:1a:21:ce:73:71:
         c5:15:b3:5c:63:20:cf:48:a2:9b:a5:f2:28:ae:e0:61:79:5f:
         31:7a:87:c6:78:f6:34:44:6c:4e:f8:e5:64:87:2d:de:ee:de:
         41:70:d9:a7:40:c9:83:6a:36:1a:3a:f7:ea:63:6e:69:65:1f:
         b7:b0:af:07:43:26:4a:25:45:08:9a:c9:da:2b:6a:c8:9b:61:
         4b:ea:ed:1b:0a:f9:34:ca:ae:3c:b9:b5:53:39:7a:a8:61:05:
         ce:66:df:93:65:54:5c:5c:07:3c:80:9a:11:9f:5d:e5:0c:b8:
         b9:35:51:06:47:f9:2a:a6:58:46:27:96:d9:6f:08:5a:c4:fa:
         97:00:5d:c3:c0:c4:07:23:d4:20:a3:3f:00:b6:df:d5:2b:c8:
         78:c6:d6:f6:e2:9c:94:29:f8:a7:57:8b:40:3c:ac:7b:17:ba:
         9d:b0:c8:00:f0:d8:38:d5:37:3e:78:2d:6a:b9:a2:4a:1d:a8:
         86:38:6b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:12:43 2026 by rpki-client