This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
File:                     POdWa7WxnnAPSOJeB1BsLyIt84Q.mft (raw, json)
Hash identifier:          dqgFy3hTIO15EMJ2g7jCaZjLLh+jTyewP7szfAO+HIw=
Subject key identifier:   1F:02:F3:B3:2D:E7:82:AA:95:13:95:E7:0E:8A:13:50:7D:F1:B4:5A
Authority key identifier: 3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84
Certificate issuer:       /CN=3ce7566bb5b19e700f48e25e07506c2f222df384
Certificate serial:       019C0F34C291E050E9E00992C58DDD931C61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
Manifest number:          1051
Signing time:             Fri 30 Jan 2026 14:00:41 +0000
Manifest this update:     Fri 30 Jan 2026 14:00:41 +0000
Manifest next update:     Sat 31 Jan 2026 14:00:41 +0000
Files and hashes:         1: 59JIOcrvwaeo-sYFo7t-MHws0gw.roa (hash: 4M2J02zr2QMxD8HQmUQji1N30RyT0kcqU00uheMc840=)
                          2: IKe3Kuub0SpVVP2Gnq1T557gDgk.roa (hash: ci82OhcD+rqbU1y8ZlxW++hpafTX5Z7/Pm7iV79c95E=)
                          3: POdWa7WxnnAPSOJeB1BsLyIt84Q.crl (hash: CesivvWwlfJWLRMIJPs6Vwb9IBvE14TdlCvdyN003rQ=)
                          4: g0yPFaUHY-D6DoLmNBezdgok6L4.roa (hash: tF2Yfxepm6QgVMGCXK7Mb8KH/TWmlDjJHDygGKLmNLo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 14:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:34:c2:91:e0:50:e9:e0:09:92:c5:8d:dd:93:1c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce7566bb5b19e700f48e25e07506c2f222df384
        Validity
            Not Before: Jan 30 14:00:41 2026 GMT
            Not After : Jan 31 14:00:41 2026 GMT
        Subject: CN=1f02f3b32de782aa951395e70e8a13507df1b45a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e1:9f:b2:c3:2b:46:f9:dd:73:02:8e:a4:ff:
                    5f:e3:78:c4:a6:78:f7:f4:a4:dd:7a:04:a0:42:7a:
                    20:16:dc:0c:a1:d5:6a:ce:df:90:01:cb:57:51:3a:
                    c0:09:9a:56:a2:5b:83:ca:d6:4a:c2:a3:72:46:11:
                    65:d8:46:14:3e:d6:76:0f:c7:9b:08:9d:32:3b:7d:
                    f4:f8:60:e4:3d:ca:aa:6e:a9:3b:28:b6:2c:93:18:
                    c5:32:09:93:3c:db:e5:10:e5:0c:cd:9b:5d:46:1f:
                    e6:b5:5e:c2:44:bf:47:4d:b6:1c:f5:5f:97:80:36:
                    46:b2:a1:94:22:dd:b6:79:83:29:a8:5f:5b:90:0a:
                    75:c8:22:d3:49:7b:c5:7e:d1:b7:3d:18:bc:18:0a:
                    b2:b6:11:65:96:47:02:b5:2f:b0:fe:34:5d:32:72:
                    f8:cb:41:33:b9:48:73:57:33:f8:0f:a6:69:21:c4:
                    c5:8a:b4:c8:3d:cc:fa:5c:b6:a3:83:88:1a:02:3a:
                    ae:ed:b9:66:65:41:ea:9b:e3:4a:0d:6e:34:23:fb:
                    c0:8f:a5:d4:bb:50:6d:ef:68:1d:95:09:83:55:9a:
                    92:6b:72:2b:b5:04:86:3b:4c:8b:4f:14:0f:f9:77:
                    99:93:07:85:ba:7c:d5:fe:c1:1d:e1:0a:ec:6c:ca:
                    ad:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:02:F3:B3:2D:E7:82:AA:95:13:95:E7:0E:8A:13:50:7D:F1:B4:5A
            X509v3 Authority Key Identifier:
                keyid:3C:E7:56:6B:B5:B1:9E:70:0F:48:E2:5E:07:50:6C:2F:22:2D:F3:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POdWa7WxnnAPSOJeB1BsLyIt84Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/86ff77-9772-4b28-aa12-89ff06f79635/1/POdWa7WxnnAPSOJeB1BsLyIt84Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:0f:84:cf:e1:19:a6:84:47:72:fc:b9:ff:e9:2d:58:54:37:
         4f:4e:9e:7d:3f:b8:e2:6d:17:1e:3c:9a:c6:b6:88:d5:35:d0:
         ee:3e:be:ac:f1:38:2d:72:83:b5:5b:b6:f6:a4:0e:17:4e:52:
         c5:cc:02:0f:86:2c:c0:f2:89:23:82:b8:04:b0:5a:95:30:d2:
         8f:ba:9f:c9:f4:ef:81:5c:db:2d:32:24:b9:3c:68:71:98:f6:
         f3:7b:d3:63:98:1f:02:9d:53:a0:ca:a5:a7:76:19:e8:16:75:
         c1:c6:f0:5b:47:71:f8:ea:3f:79:ef:f5:80:d0:01:06:f4:7c:
         1c:e5:da:ff:c1:0c:20:a7:01:d1:fa:7c:68:0f:2c:be:20:ad:
         98:ad:f3:86:01:62:12:ea:08:c5:f0:5d:3e:fa:cb:86:b3:46:
         43:e2:5b:91:48:ae:c7:56:83:f2:af:4d:60:5a:11:b7:7c:b3:
         a0:9f:07:a4:1d:e3:5b:ad:1c:44:97:c0:3f:64:74:bf:cb:f6:
         97:54:ae:cd:4a:c5:fb:f4:75:8a:fa:a0:38:96:ff:b1:ac:3b:
         c3:21:38:60:46:fd:01:72:4d:41:d3:ec:4c:e3:05:8e:26:0c:
         f4:01:c2:cf:69:6c:78:31:21:66:a5:1a:9c:e6:0e:98:cf:b3:
         ae:44:9f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 31 00:09:55 2026 by rpki-client