This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
File:                     r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft (raw, json)
Hash identifier:          V7VgpTbs2Du2etTQMmIdoEibarGkuHw/0MTWkSYaBQY=
Subject key identifier:   D9:CF:FB:D6:AD:3C:88:93:B2:F3:99:90:A4:49:F2:FB:2B:C6:FF:E6
Authority key identifier: AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1
Certificate issuer:       /CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
Certificate serial:       019BF83EF59A8BA31EE3881BFE4B7CEDBF55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
Manifest number:          0784
Signing time:             Mon 26 Jan 2026 03:00:34 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:34 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:34 +0000
Files and hashes:         1: LwqXAM6lPGk_PmFvOULH64ObLAs.roa (hash: MrcdOxOshx/gVLtXaalP4jwQbNYdpAAfBt14JuVSsXw=)
                          2: r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl (hash: 4PFkBoW1norLRde4+dBWkHt8h51J2fnAXmW+qXPzrGA=)
                          3: s-1hinZK4tY9bZC4k9BOYyXjqxk.roa (hash: qbBIxBxOXTtMEXXkSI4yM3F77zIR/XL9wvzMoK2RSOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3e:f5:9a:8b:a3:1e:e3:88:1b:fe:4b:7c:ed:bf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afedc3a63df17bb4bf34560957967e59a8b3e3a1
        Validity
            Not Before: Jan 26 03:00:34 2026 GMT
            Not After : Jan 27 03:00:34 2026 GMT
        Subject: CN=d9cffbd6ad3c8893b2f39990a449f2fb2bc6ffe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e8:5d:d7:a7:8e:49:a8:d3:47:6e:91:40:cb:
                    3f:7a:47:19:05:31:59:15:e1:4d:16:45:2b:a7:8c:
                    a1:0e:00:5e:c5:c1:99:2f:06:b9:20:62:6b:6a:dd:
                    3c:f3:bf:5b:a3:9c:aa:de:97:b7:fd:21:a7:d5:1b:
                    11:0d:ca:85:8d:7e:8e:90:55:25:28:a1:84:41:84:
                    21:c2:50:d5:02:25:48:2d:15:f2:04:61:47:d6:0f:
                    00:d0:41:c8:b7:3b:20:1a:ff:ec:ec:24:ad:02:e5:
                    59:9d:be:78:a2:bc:24:7d:2a:fa:0f:32:fe:5c:08:
                    98:42:e1:85:c0:6d:cb:a7:c2:fb:8e:39:31:ad:c5:
                    77:94:8b:c2:68:5d:94:1a:83:10:a3:2b:a9:b9:8c:
                    4c:de:00:c1:7f:92:88:b1:44:b4:1c:ef:e8:25:74:
                    de:65:fd:1e:ca:7a:92:7a:a0:80:33:d7:30:ae:6f:
                    b9:1b:ff:0e:1b:7d:26:33:ee:e5:bf:10:db:c3:66:
                    5c:6a:49:75:35:19:79:1f:3d:0d:f7:26:77:57:11:
                    aa:d2:1a:b2:cc:ff:e5:db:a2:ae:47:dd:d9:ca:39:
                    54:f2:82:14:24:b1:95:48:19:37:27:cf:8c:7a:ed:
                    08:f9:79:c1:29:40:f4:40:c7:53:f0:77:72:73:17:
                    3d:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:CF:FB:D6:AD:3C:88:93:B2:F3:99:90:A4:49:F2:FB:2B:C6:FF:E6
            X509v3 Authority Key Identifier:
                keyid:AF:ED:C3:A6:3D:F1:7B:B4:BF:34:56:09:57:96:7E:59:A8:B3:E3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/824d8d-b046-46f6-86b8-9b8ace4281f3/1/r-3Dpj3xe7S_NFYJV5Z-Waiz46E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:fc:84:6f:b1:9d:cb:47:99:c7:d3:7f:99:82:ef:52:9e:de:
         98:04:a9:4d:62:bc:0c:ed:0a:1c:36:06:c5:0f:9a:c4:30:d9:
         fb:21:e1:07:27:fd:bd:8a:4a:06:d9:fd:17:dd:eb:18:83:37:
         3e:27:5b:5b:8f:10:ae:51:08:43:29:a1:80:d3:09:77:20:19:
         25:4b:08:03:aa:47:9b:96:bf:2d:32:fb:55:3f:0c:7f:ce:48:
         d3:5d:e9:aa:14:aa:02:bd:30:f2:0e:a0:ae:5e:97:15:3b:78:
         65:64:00:c2:4e:ee:86:45:02:12:bc:e0:fb:db:98:ae:1f:d2:
         e2:69:d7:b5:7e:3a:c4:a9:2e:bc:5d:12:35:2f:26:7c:27:5b:
         76:79:ea:51:2a:62:18:95:97:49:36:db:ed:f5:3b:16:78:73:
         59:78:d5:74:9a:3e:30:61:bd:d2:bb:4e:52:2e:cc:a0:9a:6c:
         f8:0b:39:91:44:1d:27:e4:43:f8:45:a2:73:86:3d:9b:31:a5:
         d5:d6:06:95:47:c7:45:9e:cb:d8:24:21:24:0a:cd:26:7d:4f:
         52:5c:e3:0d:5e:4f:12:cf:fa:40:6f:a8:c3:8f:54:05:ba:3b:
         8a:06:c3:ca:a2:56:2d:42:c4:c3:a9:86:d0:1f:ab:94:20:7c:
         00:e2:f4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:13 2026 by rpki-client