This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
File:                     ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft (raw, json)
Hash identifier:          iuJ613TatbgOpVeaKM4a3i9GxOz+STsa3dLJM2PYEFw=
Subject key identifier:   4D:8B:BE:35:A4:4C:DD:CA:14:E4:EB:8C:BA:B8:55:F2:AD:FC:34:9D
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Certificate issuer:       /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial:       019BDEB6A7B0125FE3EAC3BB5E8FD48982DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
Manifest number:          0A68
Signing time:             Wed 21 Jan 2026 04:01:11 +0000
Manifest this update:     Wed 21 Jan 2026 04:01:11 +0000
Manifest next update:     Thu 22 Jan 2026 04:01:11 +0000
Files and hashes:         1: 6ukLV0KulIPLZFYeMSixVEL1RhM.roa (hash: wWVKYiLRQV/kCSgMzDQKw35a/Is44S5aHAIYhJlN+Hw=)
                          2: 84-gr5Fvge6KrYBg8cW-K5m-lWY.roa (hash: g3nR2JZWccrgmSrxSD1ijsr/7vdXfXIIaehHLEnuPX0=)
                          3: CIJFxac5vdItrVRYlUcRRLbMyNY.roa (hash: ZXW9qFycMvFfSZ67NEpqlrnS/V4D5ngtH/E6coUsCUc=)
                          4: HktbNW43fd7Vb_ZaaGeNajH2WG8.roa (hash: 79snjSjI8SfzcKH7jhMDnbs8i4IW+WhI3UKxVBjwHBI=)
                          5: JqdskFuFmziaPGBY-7Tw9Pq4w38.roa (hash: aCu+I3qlWKZ9XlpWlRNcOlsLioSGa9tu6gGY+pIX418=)
                          6: O2OJ3t6MeqBUOLrqcqvjb5iXA0o.roa (hash: juwmeIUpdvT19Vy7e7M0nGB6sx/8sNLDPiHMWAyfnds=)
                          7: OfqA5pqJ4fJkpwDwUYuXxU3k4C8.roa (hash: Nh/1DT2PYHL73mgdwju8HsKlz3EXBSwiw8LM7YgOmrc=)
                          8: Uwe--gB6ylGJNxhfuiansY5qD4M.roa (hash: 1RQqYvxgWhqs5inThD8ruAxw/Cxc0/5ka5AdJ7o+12c=)
                          9: Yt_dqD1__D-0SfFduIjRZ9GoAOI.roa (hash: dIfa+Z6th3TwiAEy02BL8XC3kuyu4btAilmHb+CteHU=)
                          10: Z6Q4KeAqCeUZBMyI5LZnxQHmUaY.roa (hash: QHGhTNF2b+j3X0I7mApfXWLpTEdb1W60sJaF7U5ztFs=)
                          11: ZAXWWxV_g0guWhxvtcTaPAClorQ.roa (hash: /1ePGts9zGO64Aq7aeLnS25SFc247LH2DdeZkd1fO/I=)
                          12: ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl (hash: DKQ0LvLpim7BjXrbDArNm0bzLmW1APi9YBUCUEUW/Ac=)
                          13: ZiIjQFIjZ8j8nup9nB6UTnphCHE.roa (hash: QLs1jSzP7n9jTZ9LffNdrzXR3/pn3Ze2DppBtoqxG3s=)
                          14: _VGCfSLVW2xdJN6JGmh9iEsjqVg.roa (hash: tkrgNphI56yShQNt5RlRqqWTglZrf57Ok9IMT/BDMV8=)
                          15: _ufCZrY4TTbi8Cz0nPgq82cNiQ8.roa (hash: BF3dwTjI1MgTJaLrGrPoxVSylxBpdMOVtLESfSrh5fE=)
                          16: dS5eCQRkEAb_ryhyTFqWgmCl7K0.roa (hash: M45icBBYjNepxwAD8s0pUTrLlqvx/fyNCz11mkbuFSU=)
                          17: jDcM852-cAOnhmJ-3jD7XGUBeDQ.roa (hash: KRHKVKdREjQKUoYh6DwL2B3FLBC/y8sgqqKca5qYK2c=)
                          18: klATNb_dpL1MuOfOSHXHNV7NKYA.roa (hash: 3/mSvKnCetqv9HT/uztrqLgijhidILzVStqqGF+dS8A=)
                          19: lpiAPcG-y0T3SU8uNdvS5kp8DZM.roa (hash: Zn9ohDV7x7BReNvSf6ZPjELNU8R1XmIaR5qai19gH9A=)
                          20: nIm8PpBVGgztWV3R6eaqer3EUVM.roa (hash: LcWU5HridOIZz2AMiVEN1+lulIcQD0wPOniiN2X22fs=)
                          21: wrXPrBkvVYEiubXH_1rHl5x6rRY.roa (hash: ErXBvOflUDPT4rNXBY8cKsHB/p7pBztp4XIa2fvVsWs=)
                          22: xfA0_z8nF9jogJTt8JvDJWiwKd0.roa (hash: 4UoytCa8mc6+13s7j6+TJjXwUJP2qWBxDCO/3czDtbE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 00:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:de:b6:a7:b0:12:5f:e3:ea:c3:bb:5e:8f:d4:89:82:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
        Validity
            Not Before: Jan 21 04:01:11 2026 GMT
            Not After : Jan 22 04:01:11 2026 GMT
        Subject: CN=4d8bbe35a44cddca14e4eb8cbab855f2adfc349d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:27:25:74:68:3f:b3:d8:7b:01:ae:97:25:ff:
                    64:13:7a:87:2f:86:68:f5:37:4a:b1:27:6c:0d:f4:
                    ef:62:86:bf:3e:31:ab:19:28:75:21:ed:68:1f:e5:
                    08:09:48:d5:66:0f:56:5f:26:f4:79:91:0e:27:e9:
                    ec:b3:af:8d:8d:f0:4a:81:e8:ca:5a:14:d1:a3:68:
                    2b:97:26:e2:be:dd:bd:b4:0b:c5:dd:54:b6:50:0f:
                    05:15:38:11:06:c0:38:93:4f:1a:e4:00:39:99:53:
                    40:a8:e3:c3:30:2e:0a:7c:53:4c:ca:33:29:34:7d:
                    f3:b2:0a:11:0c:24:8c:2d:ac:7a:91:25:c9:06:1e:
                    8d:4c:70:63:17:fe:bf:2d:94:1a:40:2b:49:fc:16:
                    87:9b:d5:b8:f8:49:b1:8e:2d:0b:fe:4a:9a:ec:6c:
                    9d:ba:3e:a9:d6:bb:86:d9:49:fe:c1:cf:17:b1:3c:
                    ff:59:66:d1:08:d9:3b:f3:1c:4c:b7:7e:81:b1:93:
                    19:ab:9e:ba:5f:c4:42:84:6d:7f:8c:49:2b:d7:ec:
                    52:d4:4a:6b:03:72:6d:f9:7f:54:cd:80:7e:c1:0d:
                    88:c5:3f:fa:b8:48:f9:9a:46:f1:5f:4e:10:16:e8:
                    be:99:69:f5:dd:62:93:11:55:6a:48:06:0d:18:db:
                    21:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8B:BE:35:A4:4C:DD:CA:14:E4:EB:8C:BA:B8:55:F2:AD:FC:34:9D
            X509v3 Authority Key Identifier:
                keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:1b:98:b5:ac:c8:b3:73:a7:f9:49:b5:ac:06:fb:9c:92:
         ef:e2:a1:2c:bd:f1:43:a0:82:45:73:ac:22:cc:76:3d:8e:71:
         ca:c0:74:4d:c7:82:cb:09:88:ec:c3:6d:4b:73:39:d5:1a:09:
         f8:8d:dd:2c:8a:3e:8d:de:f9:e9:fc:54:32:d5:11:0a:9a:cb:
         f3:a3:bc:56:bc:5c:1d:66:38:58:39:f7:4f:e6:9d:7d:a9:c7:
         1f:03:cc:1d:85:7b:2c:2a:ba:0e:d4:e9:d7:50:91:15:7a:53:
         f9:93:f6:51:4a:89:67:5d:ed:a3:a5:18:1b:86:4d:7f:ca:38:
         ff:c2:f2:54:45:aa:7f:04:67:1e:35:43:2f:92:61:85:be:10:
         2f:47:58:d2:6e:8a:ff:2f:d7:50:23:b7:73:7b:90:86:d3:7e:
         73:ae:25:61:92:6e:09:b5:dc:0b:b2:45:3c:cb:47:c6:a6:a0:
         cb:d2:2a:b1:98:01:10:11:b1:6f:7d:8a:0d:80:33:52:e8:ef:
         48:90:78:e8:9e:27:73:d2:b7:27:da:07:fc:60:78:49:94:83:
         a0:9d:fd:04:50:1e:d2:16:58:e0:85:43:cc:56:01:93:41:b6:
         9a:fc:95:5b:94:cf:0f:d8:d3:bc:37:a6:a0:fc:0f:ee:2b:de:
         e8:e5:58:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 21 06:52:05 2026 by rpki-client