This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
File:                     ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft (raw, json)
Hash identifier:          qdUWdWRUJ675FsGWsUkgAillB9dccn0a82dBa1oxszg=
Subject key identifier:   BE:8C:0E:97:70:04:0F:6C:20:30:CF:4E:EC:2F:92:90:B9:92:AD:C8
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Certificate issuer:       /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial:       019BF9F6BB49E944CD6D0DC7618EF44FB781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
Manifest number:          1480
Signing time:             Mon 26 Jan 2026 11:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 11:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 11:00:55 +0000
Files and hashes:         1: VrGbU3QOrHG9m3kuxOwRhUx6Wbg.roa (hash: hDz07lJqNzJNY545cD3FDRksWHSBVWWDKwpbA8KVi0Q=)
                          2: ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl (hash: aPJmD567Wkg8LUp6pcLeMlckywFJ1noG+cu7XmRu7y4=)
                          3: eKcVeXq2wt0SKbLGS84_xIQwRyI.roa (hash: o/AvUkqirZcVTc0Fj5CZijcSI6/NhaqXETyeyP//FGQ=)
                          4: enrj7Rmn-Rbin2HO4jtah8-M3bU.roa (hash: NrW7rDMpz8LFJnfE1GrWjyKulkBnQDA8wPMx4nsv1l4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:f6:bb:49:e9:44:cd:6d:0d:c7:61:8e:f4:4f:b7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
        Validity
            Not Before: Jan 26 11:00:55 2026 GMT
            Not After : Jan 27 11:00:55 2026 GMT
        Subject: CN=be8c0e9770040f6c2030cf4eec2f9290b992adc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:47:b3:56:39:38:91:18:6f:9d:7c:65:b0:dd:
                    0c:aa:eb:6e:09:6c:61:f3:91:a2:ce:93:e0:fd:e4:
                    0f:49:c5:e6:8f:84:18:91:8f:e7:3f:3a:80:97:d9:
                    b9:ba:71:cc:0a:c5:0b:0e:fb:00:7d:9c:57:b0:87:
                    cd:57:d5:57:cd:20:6d:51:58:fd:68:de:9f:3e:87:
                    14:59:65:7f:8f:ca:44:39:45:bd:67:c0:ea:26:c9:
                    77:0b:3e:9c:6c:1e:23:95:3d:9a:8b:42:5d:28:8e:
                    7d:c5:f7:2a:5f:38:c6:41:6f:98:e1:6d:72:77:2a:
                    96:9e:69:df:68:ff:48:6f:d6:98:a7:c2:dd:af:fd:
                    a6:d1:88:cb:ca:a1:0b:ab:7a:ff:26:8a:9c:27:86:
                    43:33:c7:9b:c5:2b:a6:3c:8a:30:cb:08:98:36:71:
                    c8:ce:26:94:15:69:db:23:22:54:f3:3a:4e:29:b1:
                    ee:a0:a3:e1:ac:4a:df:34:6a:da:b5:3d:87:f5:b2:
                    13:17:52:c9:51:7f:83:1f:8c:ae:31:6e:7c:c3:5c:
                    b5:f8:f6:40:6f:f8:7e:19:b5:71:30:5e:1e:47:cb:
                    d6:24:6f:b1:d0:e6:95:99:f7:6a:43:e5:94:55:c5:
                    3c:32:e5:09:a2:28:76:5d:56:ef:d0:8c:c3:18:f2:
                    24:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8C:0E:97:70:04:0F:6C:20:30:CF:4E:EC:2F:92:90:B9:92:AD:C8
            X509v3 Authority Key Identifier:
                keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:5f:c8:12:62:d8:4b:13:7a:d8:1d:c5:c2:b8:bf:df:1b:
         19:6b:a2:70:c4:a0:48:93:f7:d3:de:28:94:f9:68:98:cc:27:
         3c:42:4c:f2:e8:b9:5e:0b:e0:c8:bd:70:30:4c:d0:ec:1c:ec:
         20:d4:10:8d:1f:dd:36:af:0c:f7:eb:d5:88:10:ac:eb:81:5b:
         ed:04:17:55:33:0f:55:5a:ae:87:78:f1:2c:7f:6e:fa:e5:ec:
         f3:fa:05:da:3b:ab:14:a4:ca:ff:b9:35:5b:15:0f:08:1f:31:
         23:52:ac:d4:d3:af:59:3f:88:38:51:0f:de:ba:72:d2:e4:5d:
         31:6e:ef:d2:43:45:69:32:97:de:b1:8c:ec:e7:2c:12:07:b2:
         f3:67:98:05:e2:f9:01:4d:d9:a5:89:f4:f3:10:f2:3c:ea:be:
         89:65:df:dd:60:1a:b1:4b:9a:e1:b6:3c:29:76:84:59:3b:ce:
         2c:b6:46:a8:b7:30:5f:8b:63:b3:47:30:35:92:0e:c3:94:d1:
         17:d1:11:cf:4f:9c:26:ee:a8:98:f6:63:fb:6b:b9:96:3e:aa:
         02:9c:2d:e1:b9:89:71:98:bd:7c:78:e1:89:de:03:71:11:aa:
         dc:8d:e6:3d:4f:ff:c4:11:d9:87:ce:e7:b6:4b:82:94:ac:19:
         39:b0:99:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 16:27:20 2026 by rpki-client