This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File:                     4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier:          x1cgUhhcH+Dh6T+4dXfkVT2xxRp4FWQa0aevH0xbdRI=
Subject key identifier:   75:CD:13:2E:92:84:0B:50:4F:56:62:AF:B4:EC:12:42:3D:D5:5A:CB
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer:       /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial:       019BFAD221842EE650C44C1B7CED6B2045F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number:          16BC
Signing time:             Mon 26 Jan 2026 15:00:33 +0000
Manifest this update:     Mon 26 Jan 2026 15:00:33 +0000
Manifest next update:     Tue 27 Jan 2026 15:00:33 +0000
Files and hashes:         1: 1_xba5d5cbirhQ2s_z8_1tiC0PA.roa (hash: Bfsy6ICU1Mj8KS3Ard+cJzbdeC4klrQoTK7qG8jjB4g=)
                          2: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: /H5bqzYwboq46yhjHBunkvRVn1cmkYNKEEn+mcPnRnY=)
                          3: mGPgYFI0a87W2xPkMo1Inw-FNM8.roa (hash: dR0boNIbJAGAYCT8YMYIsJDWFR4gMtz1D9GMelmMhUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:d2:21:84:2e:e6:50:c4:4c:1b:7c:ed:6b:20:45:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
        Validity
            Not Before: Jan 26 15:00:33 2026 GMT
            Not After : Jan 27 15:00:33 2026 GMT
        Subject: CN=75cd132e92840b504f5662afb4ec12423dd55acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:4e:a5:55:03:8c:6f:32:32:69:fa:09:3c:96:
                    d4:68:b5:15:15:f8:97:91:88:68:73:d7:45:4e:69:
                    10:86:62:3a:b6:7d:38:1c:cd:69:b3:e9:ea:99:4b:
                    74:d0:84:eb:c4:0d:8d:c1:78:b3:4d:9a:dd:5f:71:
                    08:a4:8c:20:e4:ee:c5:58:2c:b9:d1:58:d1:3f:06:
                    3d:38:a9:73:94:9a:9a:ed:66:a9:df:84:ea:ac:17:
                    7c:1f:80:8f:34:96:e8:73:94:db:7a:6f:a8:73:f1:
                    98:a9:a6:db:d4:05:d0:9e:33:eb:98:58:ff:ca:49:
                    7e:ea:e0:5c:b7:8d:0c:10:92:27:f7:2a:0f:e6:86:
                    83:6b:a4:45:c9:74:13:8b:5b:18:3d:d3:22:a8:75:
                    fc:dc:ee:11:18:28:c1:7a:99:74:cc:b0:49:55:a5:
                    44:44:0d:cf:d9:cb:7e:b3:d8:50:2f:dc:c0:cf:6b:
                    a5:0a:bf:ae:47:28:9b:98:aa:b6:6c:67:09:3d:36:
                    37:f0:ec:9a:b5:2f:40:1c:1e:c9:27:2f:95:90:1c:
                    19:82:dc:96:95:79:ea:32:29:2e:62:83:35:16:b3:
                    1c:d4:57:f3:22:c7:26:1f:93:1a:53:05:e8:9e:a0:
                    d9:85:3b:e5:f1:17:37:6d:9c:04:c9:a0:8e:88:47:
                    6f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CD:13:2E:92:84:0B:50:4F:56:62:AF:B4:EC:12:42:3D:D5:5A:CB
            X509v3 Authority Key Identifier:
                keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:10:2d:27:c1:6e:7d:1f:3d:98:01:f0:d4:e8:40:52:95:74:
         3a:59:f9:d0:56:4c:4c:02:65:96:1f:91:6c:8e:01:3d:a9:ac:
         58:8a:0b:30:21:f5:03:af:cf:7d:78:eb:49:bf:30:66:99:f0:
         17:f0:08:0e:2f:bb:c0:9a:d7:c5:be:25:81:ac:42:69:7f:23:
         48:fc:c9:f8:37:f6:ac:a7:ae:6c:79:2a:70:df:11:7b:31:95:
         fc:ed:50:31:14:1c:28:b4:fc:42:61:26:e7:07:44:01:f4:62:
         23:53:dc:8d:82:0f:79:e3:b8:04:34:58:14:0a:17:cd:63:f9:
         19:7e:cb:a8:db:f5:8a:ab:c8:9e:b4:53:52:55:91:b4:3a:9b:
         c5:67:c8:57:73:13:c2:82:ef:6f:a8:a5:14:21:55:8f:6d:16:
         91:96:22:a3:0b:7a:26:d5:81:43:55:02:7d:85:d3:e6:a8:df:
         ab:a0:a4:7c:3b:13:c9:3a:c2:00:31:ae:fb:a0:ed:52:32:18:
         4d:39:d9:43:73:c9:45:d1:bb:d2:7d:5b:53:02:01:be:38:3f:
         7d:26:71:51:8a:29:c3:18:71:df:27:51:28:26:23:c3:9f:14:
         51:f0:ce:ed:89:1c:81:5f:fa:87:26:df:60:5e:a4:8a:27:2b:
         81:8f:ce:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 21:03:21 2026 by rpki-client