This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
File:                     tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft (raw, json)
Hash identifier:          9GWtSK2YTqUL9nJ1ktkmBlD0S5GXpJ2TjF+iFcRx36M=
Subject key identifier:   A9:7D:7D:A7:D5:0C:76:76:18:5D:0F:53:F3:56:74:49:A0:2D:6A:2E
Authority key identifier: B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F
Certificate issuer:       /CN=b56daa6f850414a13f650df094506628a46dc12f
Certificate serial:       019C06A07342B51A8B55A6B3B596A63FDAEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
Manifest number:          12F1
Signing time:             Wed 28 Jan 2026 22:01:44 +0000
Manifest this update:     Wed 28 Jan 2026 22:01:44 +0000
Manifest next update:     Thu 29 Jan 2026 22:01:44 +0000
Files and hashes:         1: Bik7m89vzRCco3M88nPjZHbkJFs.asa (hash: E3lk8QC7FZHK6rDbU0vSs7vixcRg0VKIQc1p3hHw6G4=)
                          2: Dj17YO7HbdYhrlszRZcVGHooOSk.asa (hash: VPbBekLjuZ5VGctqJAL3rNUq/TMi3GHdtgrxOZNiX2M=)
                          3: tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl (hash: W3IQo0WItG2aDxpj72nltAjHuA+De0DuDbE+uIMWkB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:06:a0:73:42:b5:1a:8b:55:a6:b3:b5:96:a6:3f:da:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56daa6f850414a13f650df094506628a46dc12f
        Validity
            Not Before: Jan 28 22:01:44 2026 GMT
            Not After : Jan 29 22:01:44 2026 GMT
        Subject: CN=a97d7da7d50c7676185d0f53f3567449a02d6a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:ac:bd:c7:d5:6b:9f:c4:37:56:19:91:bf:
                    1b:1c:8d:0a:7c:1a:fd:46:52:fd:ef:7a:56:39:8d:
                    94:6e:f3:60:ae:d9:0c:ec:2e:e8:9e:89:ce:26:f3:
                    c2:a7:4c:6e:99:3c:3d:ce:98:d2:49:ce:0e:a9:dd:
                    54:95:8d:31:56:6b:69:9f:9e:18:28:e0:06:69:15:
                    ea:d9:88:e3:d3:a8:91:56:a5:3a:55:d3:33:55:39:
                    e4:6e:08:c5:fe:00:94:36:d0:58:77:c2:6e:c2:82:
                    05:3d:8f:ae:81:bf:ab:1f:20:cf:6f:b0:d1:f7:0e:
                    b7:38:11:8c:b4:13:7d:a7:5b:f9:59:0b:b7:72:e3:
                    c2:79:b5:5b:3e:2a:50:ad:b4:94:13:12:a4:ef:73:
                    b3:c5:19:09:96:65:eb:ed:9a:1e:8f:e1:a4:10:f8:
                    c5:44:fb:8f:a0:1c:98:57:3a:3c:1e:18:93:12:59:
                    8b:d7:b1:02:3b:56:54:e4:0e:22:bf:9e:98:58:2a:
                    4c:a4:1c:62:40:eb:ca:d3:ed:04:06:9e:7a:5b:c0:
                    e6:7e:20:6f:83:60:32:bd:df:2f:0c:94:e0:1f:ae:
                    76:f5:a6:34:42:e6:3e:0c:d1:c8:62:a9:f2:d7:ae:
                    d1:b9:5a:b1:91:59:a3:8f:ef:b1:63:27:f5:19:ca:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7D:7D:A7:D5:0C:76:76:18:5D:0F:53:F3:56:74:49:A0:2D:6A:2E
            X509v3 Authority Key Identifier:
                keyid:B5:6D:AA:6F:85:04:14:A1:3F:65:0D:F0:94:50:66:28:A4:6D:C1:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bee01-1fb8-47e2-b766-fe0a2ac0869f/1/tW2qb4UEFKE_ZQ3wlFBmKKRtwS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:db:d6:a1:f6:e2:bf:e6:3e:96:00:f6:5d:0a:fe:b0:0a:b8:
         63:3a:4c:e4:7a:63:08:42:c8:e5:09:de:e5:f8:8d:8b:df:2d:
         40:af:a9:94:1d:f6:0b:cf:8c:f0:86:2d:34:ed:e5:19:99:32:
         60:3b:7b:d5:71:4f:39:3d:2b:68:1a:4a:f8:c3:d9:8a:e9:40:
         f6:c3:a0:c6:38:ff:7b:ca:ca:74:b4:66:f4:c3:c3:d2:ab:2b:
         97:7b:ad:d7:67:1e:b1:8d:95:21:c7:e3:fa:2e:18:c4:30:1d:
         e3:ce:bb:34:fa:b3:f9:46:dd:00:52:05:63:01:b7:69:02:49:
         5c:c7:3f:67:62:e2:5d:53:81:02:7c:25:7f:e1:92:ae:7c:81:
         15:4e:24:14:04:c1:4b:3c:5c:f4:41:32:c5:1a:c9:23:79:44:
         2e:bf:9f:1d:c8:27:35:4c:ad:0d:b1:1b:b7:64:e5:85:04:f4:
         6b:47:76:a9:f3:58:66:49:c3:5f:38:c3:f2:99:cd:b9:da:13:
         92:c9:4c:33:a7:72:32:15:1d:06:1f:a9:1c:3a:bd:45:ab:da:
         1e:b7:e1:c5:7f:77:f5:57:7e:f0:b7:0c:ff:fa:3e:fb:54:b6:
         6b:ee:79:26:b4:28:64:20:e6:09:98:76:ee:b3:88:67:53:33:
         f7:85:80:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:23:28 2026 by rpki-client