This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
File:                     dMf46RuB_mSHMHxSJusET5I5bOo.mft (raw, json)
Hash identifier:          jKBE9nd5iiniAQvQABhff5urNaMtEBI8k1g3czzwZcw=
Subject key identifier:   3B:36:03:95:ED:DB:DE:4E:F9:ED:EE:79:41:7A:BA:D7:90:D4:D3:22
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Certificate issuer:       /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial:       019BFAD2CA09A0A961A62A65F0BE8346698B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
Manifest number:          177E
Signing time:             Mon 26 Jan 2026 15:01:16 +0000
Manifest this update:     Mon 26 Jan 2026 15:01:16 +0000
Manifest next update:     Tue 27 Jan 2026 15:01:16 +0000
Files and hashes:         1: ZMUCUaol16FS16uvGYc5LMi3mms.roa (hash: 1PMSBIos5jL1U1+prZU3noEZyRlQ7CsZEb3CRHH/Kmg=)
                          2: dMf46RuB_mSHMHxSJusET5I5bOo.crl (hash: 1ACYiD9ewepg3GKL2ChXp77f/SiW35IkLUBuhkt8hO8=)
                          3: tTSdWCx25FCn0IY4HobZWct52gk.roa (hash: fHmHb3pigGy4UNI0P79QY+ZoI7ILqOgBSDwz0m8aRvg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:d2:ca:09:a0:a9:61:a6:2a:65:f0:be:83:46:69:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
        Validity
            Not Before: Jan 26 15:01:16 2026 GMT
            Not After : Jan 27 15:01:16 2026 GMT
        Subject: CN=3b360395eddbde4ef9edee79417abad790d4d322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:8c:6b:a8:7c:5a:d2:30:56:44:25:83:27:
                    3e:cb:c5:00:87:23:57:2c:4d:1c:23:dc:42:43:9c:
                    06:ed:ac:9e:1b:4b:54:a4:1b:c4:cf:fc:7c:af:22:
                    12:21:62:23:bb:1d:f2:62:8a:2f:f3:65:e6:47:c4:
                    29:c5:6a:ba:dc:3d:c6:d3:43:93:a5:db:0b:0b:1a:
                    ff:33:28:2a:a9:8a:0f:be:de:27:99:c8:ea:e9:a8:
                    8e:48:54:17:dc:19:ea:47:12:f9:95:0e:ec:b2:54:
                    7c:4c:e5:ad:b9:52:84:f5:b1:46:cd:ce:3a:d1:6a:
                    ab:c9:19:9b:87:1e:75:94:85:f1:4f:da:8b:8c:99:
                    c5:0b:06:5b:1e:61:96:26:59:c1:e6:8c:8a:f0:d2:
                    8a:a0:b0:9d:07:61:cb:d6:0d:ec:e9:a9:fb:e0:9f:
                    a0:f0:e7:05:95:ae:64:d2:88:b8:e4:dd:70:d9:59:
                    6c:79:b7:ce:ce:fd:18:d9:2c:2f:f5:ee:04:4b:39:
                    e5:e4:97:58:c4:8a:ef:2b:32:16:91:7a:e1:97:65:
                    cb:74:be:f8:5c:c2:ed:a4:af:eb:ba:8e:fe:6f:b7:
                    31:ae:ad:3f:69:e9:7a:4d:1e:7a:f9:88:8c:9c:58:
                    07:2f:82:52:01:80:a9:eb:75:26:a0:d9:82:27:bf:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:36:03:95:ED:DB:DE:4E:F9:ED:EE:79:41:7A:BA:D7:90:D4:D3:22
            X509v3 Authority Key Identifier:
                keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:fa:ac:80:96:31:d9:f7:cd:d6:be:c0:d2:4b:db:8f:c3:b0:
         df:bb:9b:be:e6:7c:ac:e8:3b:5f:8c:1a:8e:34:1b:48:2e:90:
         4c:a1:10:70:d2:4c:17:9f:78:01:a8:b4:95:4a:57:78:82:18:
         91:a5:c6:ef:ff:f2:c1:f3:42:b8:6a:d2:c5:89:dc:76:95:71:
         fa:1c:f5:1c:2b:47:87:88:3e:8d:42:71:d6:e7:32:61:15:df:
         00:f9:11:c4:1e:8c:82:c0:84:a2:29:01:e9:4f:99:15:cc:55:
         7e:95:99:4a:c5:cb:37:5b:26:88:5e:c4:94:a3:e6:e1:25:6e:
         41:36:50:c5:91:af:f9:9a:2f:ec:fd:33:f0:81:9f:de:64:8c:
         ed:cf:1a:f7:b9:bd:8b:ae:7a:31:1b:60:e0:ff:8d:5e:63:70:
         76:90:f7:52:2d:b9:62:94:71:60:67:a9:e8:c9:6b:0c:b3:35:
         b8:5d:88:1a:60:91:bf:af:6f:a9:56:87:5e:c4:e2:7c:a3:7b:
         6e:24:ec:f6:7c:01:4e:4f:0b:9f:62:f3:76:a2:d8:14:94:c2:
         93:ad:d1:27:02:d8:4d:19:a8:71:b9:d4:09:a9:b2:43:3c:f7:
         68:77:e7:cb:23:fe:f6:04:c4:8b:e2:09:b2:56:3f:dd:f2:e5:
         26:c2:36:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 00:29:38 2026 by rpki-client