This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
File:                     32GikiI62a68itgsKlZHX72XqDQ.mft (raw, json)
Hash identifier:          bBbMnfkFHDoULOdVgoBSNgJ3q8Vc3wESRc6pnsr4oqQ=
Subject key identifier:   9C:D4:77:54:E7:9D:21:FE:68:EB:5C:5D:00:DC:5C:0D:A1:28:12:09
Authority key identifier: DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34
Certificate issuer:       /CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
Certificate serial:       019BFE0B2A4A69D64B098D76C73C96E883F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
Manifest number:          0E9B
Signing time:             Tue 27 Jan 2026 06:01:43 +0000
Manifest this update:     Tue 27 Jan 2026 06:01:43 +0000
Manifest next update:     Wed 28 Jan 2026 06:01:43 +0000
Files and hashes:         1: 32GikiI62a68itgsKlZHX72XqDQ.crl (hash: LmZnRy819WPHVpc+2Lzdf74p42/lnDcr1TxknOO73QU=)
                          2: 3N8RjBOaHqysfsXcuS4moMiqHcA.roa (hash: iQaQoggeO3tLMHb/V/COJC4hr6BU8lu4S0DICLg++wE=)
                          3: QjEkoZ53NxBeCFxk_AcoQWsSsbc.roa (hash: F5UhzU9AKBT9nluGCkFBzLOXoDePYCyzrIATvKRbYOM=)
                          4: W_FOHMjyvQTaAri5A_zDlx2DY2k.roa (hash: njRnMCxu5gn2zsVJDrc4Nj/3Yt4VdpnpXJ0wh2X6tGk=)
                          5: fdth4-LheaAtkNOEJz6pHobfl_k.roa (hash: rTpg5aqyYW2RH+xhrSVpQRy6U3wJBueXqcjg7bGUFhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 06:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0b:2a:4a:69:d6:4b:09:8d:76:c7:3c:96:e8:83:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df61a292223ad9aebc8ad82c2a56475fbd97a834
        Validity
            Not Before: Jan 27 06:01:43 2026 GMT
            Not After : Jan 28 06:01:43 2026 GMT
        Subject: CN=9cd47754e79d21fe68eb5c5d00dc5c0da1281209
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:ec:84:f4:de:30:31:cf:02:02:03:36:a5:
                    4b:87:9d:e9:29:d4:5a:1f:c8:0c:41:26:30:0d:ed:
                    f9:c0:2d:ec:07:a1:1e:3e:8e:fe:b5:f8:29:a3:53:
                    d2:a4:42:de:62:0b:b5:b2:f6:df:73:5c:40:b3:1a:
                    ba:58:ef:5e:3c:20:95:1b:98:56:5a:9b:c0:64:7a:
                    31:a6:37:3f:b3:18:72:3f:f2:0c:fa:b2:98:7e:b2:
                    e6:65:6a:52:b8:26:7c:b0:42:ff:13:17:62:e3:bf:
                    56:51:7e:25:1f:12:62:57:23:24:69:16:e0:51:b8:
                    2e:17:cd:ba:18:95:ae:63:ca:df:ea:5f:3c:db:84:
                    75:b9:d7:d0:22:62:1c:32:6c:12:7a:a2:86:9c:e6:
                    e4:c9:ec:2b:c0:1b:55:43:34:07:15:58:5c:b1:34:
                    24:4a:91:bf:03:96:af:05:33:7d:da:bf:7d:ba:bd:
                    90:98:67:38:6a:8e:a0:d3:81:0d:c3:67:10:40:cf:
                    a2:0d:eb:89:65:53:0b:af:29:34:0e:b9:5d:09:b0:
                    66:21:16:83:a9:70:4d:b0:a9:86:8e:80:39:30:8f:
                    b1:b5:7b:fc:5b:99:4f:c4:7d:58:d4:32:aa:db:9f:
                    e8:14:8c:c9:5f:e7:5e:02:18:08:91:d5:64:9c:40:
                    74:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D4:77:54:E7:9D:21:FE:68:EB:5C:5D:00:DC:5C:0D:A1:28:12:09
            X509v3 Authority Key Identifier:
                keyid:DF:61:A2:92:22:3A:D9:AE:BC:8A:D8:2C:2A:56:47:5F:BD:97:A8:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32GikiI62a68itgsKlZHX72XqDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/b7d875-b12c-4ed8-b80f-41487f4d4171/1/32GikiI62a68itgsKlZHX72XqDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:fc:13:b4:5b:00:84:51:91:98:16:2b:34:2f:de:94:9d:a2:
         4f:57:39:41:56:55:68:c0:7e:c3:bf:b6:22:3f:70:cb:e8:b0:
         d0:ae:4f:bb:d3:26:da:be:be:a8:2c:fb:2d:af:96:b0:47:e4:
         0c:e8:d5:e4:8e:04:01:df:1e:52:d0:1c:5d:a5:57:c4:6e:6e:
         8c:a2:95:26:27:78:e6:b2:11:e3:48:ba:da:43:7e:a8:db:81:
         67:37:b2:c2:76:2a:53:28:2a:b7:ed:a2:32:96:dc:f8:dd:ed:
         ab:99:db:01:c2:fb:4b:cd:e5:4e:e3:53:b1:5c:24:6d:19:25:
         e7:1a:5f:b2:6d:15:a4:e5:9b:68:43:16:3d:82:ec:1d:be:79:
         14:d7:7e:87:6b:cb:c4:34:0f:12:d5:68:a5:96:90:5b:71:16:
         04:ee:55:1e:59:a9:c1:5d:e2:d5:35:b1:d1:6e:41:7e:60:5f:
         e6:46:7e:6f:00:a0:f0:b9:fc:c8:af:59:7e:ed:80:d8:60:70:
         de:92:55:f9:a6:b4:63:ff:74:76:1d:00:9e:ec:4b:ee:05:09:
         59:9f:d3:c1:e9:6d:3c:07:c9:cd:62:1d:95:63:4e:22:b6:a7:
         cd:fe:47:b5:b9:e7:26:27:05:69:31:70:54:d3:f3:b5:fe:69:
         26:05:04:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:04:29 2026 by rpki-client