This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          8xMXT+3IOjZULfOpMJxq4np0v9ogL/Idqg8U4flai+g=
Subject key identifier:   79:37:BF:75:28:99:17:C5:6B:08:51:3F:D5:6A:FF:DF:0A:22:F4:90
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       019BFE7852801A4CC686AA8BE3827B835743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          180B
Signing time:             Tue 27 Jan 2026 08:00:56 +0000
Manifest this update:     Tue 27 Jan 2026 08:00:56 +0000
Manifest next update:     Wed 28 Jan 2026 08:00:56 +0000
Files and hashes:         1: EN-fsa953aMVETI0PGhysIbF3EE.roa (hash: frdZjusDaEBzWJUj9JdaF+Kkhr4AdRl43heo7DRLAnE=)
                          2: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
                          3: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
                          4: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: 4Av6IsC80MtM6oO29TvESX1n6VNMEMmCLn7jK9LfWwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:78:52:80:1a:4c:c6:86:aa:8b:e3:82:7b:83:57:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Jan 27 08:00:56 2026 GMT
            Not After : Jan 28 08:00:56 2026 GMT
        Subject: CN=7937bf75289917c56b08513fd56affdf0a22f490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2c:ac:42:63:ae:15:73:ff:84:c0:5c:db:f0:
                    52:89:f7:81:80:ae:e1:c0:0a:22:f1:d3:d8:17:66:
                    d7:23:11:fc:d3:60:87:c0:e2:4f:9d:46:47:a6:e1:
                    80:d2:7f:e5:c6:82:09:93:1c:43:df:de:45:44:00:
                    b0:e5:16:ca:a5:32:cd:ce:8c:92:59:bf:bf:b6:a8:
                    7a:ce:73:65:27:4e:6a:b8:de:b7:37:e9:0d:fa:eb:
                    37:10:d6:4a:a7:05:e7:24:14:da:3d:7a:53:b4:dd:
                    4e:aa:d5:54:53:fd:2b:6d:21:90:31:fe:a1:57:1a:
                    d3:2d:bf:62:d4:7a:d4:a3:86:22:b3:55:4c:c9:30:
                    3c:8b:cb:db:7f:e0:44:d4:b1:7f:5e:20:10:4a:b9:
                    4f:2b:21:13:59:3d:84:49:fd:62:ed:07:81:69:da:
                    27:c0:40:0b:f3:e9:1f:fd:c4:ef:b1:6d:02:81:23:
                    40:c6:ad:bf:b6:db:94:d3:ed:49:54:e8:2e:2d:80:
                    66:15:06:d2:84:ac:8d:a1:e2:38:c0:c5:dc:bd:03:
                    1b:45:68:1d:11:bd:78:ea:c9:83:87:2d:83:9d:57:
                    62:87:83:b0:f1:f6:53:36:3f:18:d1:56:c9:ba:56:
                    e1:4f:36:b0:f3:95:58:66:67:20:79:e0:9e:dd:4f:
                    cf:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:37:BF:75:28:99:17:C5:6B:08:51:3F:D5:6A:FF:DF:0A:22:F4:90
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:f4:3e:83:11:72:42:67:5a:da:8e:2a:24:75:52:5e:df:69:
         a5:70:a1:53:ff:f8:08:3d:a0:2b:05:a7:87:ff:ab:e1:6a:6b:
         a2:d4:ee:cd:3e:cd:44:2e:36:4e:83:be:52:84:b0:87:e1:ba:
         d1:d4:03:7c:d0:b3:62:6d:98:18:60:e0:b9:da:be:66:ee:74:
         2b:45:13:50:0d:ac:3c:2f:5b:13:8c:7f:97:80:72:66:0e:f1:
         29:3d:3e:63:d7:e1:ef:8e:f6:f1:f5:6d:43:13:98:5b:ab:40:
         e1:d6:d4:d9:0c:fe:d4:7e:51:d2:9e:7f:25:be:fd:50:29:8b:
         29:33:60:d9:9f:a1:8c:ca:15:31:b5:27:8d:2d:ed:12:1a:16:
         83:99:f0:61:1d:94:4e:25:26:d3:db:29:6e:f1:21:53:b0:45:
         92:e2:d2:5e:15:b2:8e:b3:9c:eb:45:61:f4:6e:25:81:6e:b6:
         31:95:04:4e:32:99:b5:94:41:77:a6:8a:3d:c4:cd:6f:47:53:
         c0:3b:91:73:a6:e2:8c:9b:11:b8:52:ba:a5:bd:b0:0f:cf:73:
         6b:3f:26:c1:81:16:02:e2:30:d1:4f:d1:31:5d:b0:78:a5:77:
         e1:c9:85:31:ec:0e:0c:ad:c4:b3:c7:66:32:5c:24:83:5d:91:
         e2:89:09:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:11:30 2026 by rpki-client