This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
File:                     PytPzqS3IvKm9scFxVie4avGIK4.mft (raw, json)
Hash identifier:          49F93gkHxrH/TVX85XihYxX5+D1gGt1i9AH9d3vOyrc=
Subject key identifier:   B4:12:66:FA:F5:AB:B2:15:B0:D2:B0:06:CF:84:BE:9D:10:0B:7E:DB
Authority key identifier: 3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE
Certificate issuer:       /CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
Certificate serial:       019B774929CA28A6FD8C749683C7EDC8DE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
Manifest number:          17A7
Signing time:             Thu 01 Jan 2026 02:00:41 +0000
Manifest this update:     Thu 01 Jan 2026 02:00:41 +0000
Manifest next update:     Fri 02 Jan 2026 02:00:41 +0000
Files and hashes:         1: PytPzqS3IvKm9scFxVie4avGIK4.crl (hash: A0kWvvrncVvn9hoh0dIM8M1wyelT1KGrjmE5w9uphi0=)
                          2: YQBFYB0MYwrVqZbuM7UQcqbC024.roa (hash: wyZtqH/kTGiAK4e2xHLNhEXkV/FU12e6HKB8OJ8RKis=)
                          3: wfcB4mAnFj3QU1k-UoqD7LNH2ks.roa (hash: SfjPp8tTJZPwOpMDomAWdq0cbTqhgyvnx9jbemLwves=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 00:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:49:29:ca:28:a6:fd:8c:74:96:83:c7:ed:c8:de:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2b4fcea4b722f2a6f6c705c5589ee1abc620ae
        Validity
            Not Before: Jan  1 02:00:41 2026 GMT
            Not After : Jan  2 02:00:41 2026 GMT
        Subject: CN=b41266faf5abb215b0d2b006cf84be9d100b7edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:9e:a7:d5:34:ea:ab:c0:64:04:ee:4a:9a:
                    3a:12:97:9c:43:ec:df:cf:36:04:09:42:cb:17:b4:
                    18:11:58:d2:d6:a4:d4:85:53:0a:0a:97:a1:06:03:
                    79:71:96:ae:d3:3c:f3:47:e2:e4:f0:c1:47:14:85:
                    cf:8a:44:36:c9:24:43:cd:56:cc:f9:9d:52:aa:15:
                    5d:62:f4:3f:eb:93:15:5e:c8:a7:77:80:9c:0f:09:
                    61:18:ff:c6:20:67:23:b8:64:16:32:f6:e6:51:a0:
                    d7:be:ec:e4:d3:95:8b:0a:7e:59:98:27:2a:cd:94:
                    5f:65:5f:6a:4e:31:62:0c:20:4e:60:0c:48:57:e4:
                    1d:30:76:22:4b:98:c4:83:29:43:07:0a:13:d2:f5:
                    f6:85:c6:e2:be:3a:0e:f0:d0:15:a0:1f:25:9d:4f:
                    25:16:a0:ad:9d:b0:12:51:bb:ab:7e:bf:5a:59:56:
                    6f:18:30:da:10:db:ab:ff:ce:72:4a:5d:94:f0:05:
                    80:1b:28:72:dc:58:d4:35:6e:17:8a:a2:85:b4:81:
                    bb:3f:cc:2d:52:f7:5d:c7:5b:05:56:f9:3b:a5:21:
                    ee:9f:35:96:d0:58:d9:3e:e0:ef:e0:a4:07:51:91:
                    d2:a0:03:0c:02:a5:47:62:b7:a5:d2:51:de:c6:c0:
                    9d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:12:66:FA:F5:AB:B2:15:B0:D2:B0:06:CF:84:BE:9D:10:0B:7E:DB
            X509v3 Authority Key Identifier:
                keyid:3F:2B:4F:CE:A4:B7:22:F2:A6:F6:C7:05:C5:58:9E:E1:AB:C6:20:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PytPzqS3IvKm9scFxVie4avGIK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/85b237-d041-4497-a729-6253ad08f858/1/PytPzqS3IvKm9scFxVie4avGIK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:70:88:51:9b:7e:f8:2d:24:de:ea:f4:4a:36:da:af:ab:
         80:fc:81:69:29:58:fe:f3:49:3d:0b:41:46:79:d5:0b:28:8e:
         f5:69:a7:4b:74:9e:40:05:e0:44:89:6b:74:9e:45:35:70:a5:
         3c:55:04:89:d1:6e:d8:f7:02:4c:fe:06:e2:f0:d0:21:7c:66:
         cf:54:04:fd:60:58:c7:2e:e1:0e:c2:40:30:e9:6e:d8:b7:e9:
         f4:2a:f1:46:44:00:94:fd:be:e4:05:a5:58:d9:44:2d:24:db:
         f5:29:6b:ef:66:b1:44:9f:67:10:7d:07:62:a5:08:5d:4b:33:
         16:72:04:09:66:d0:f7:06:0f:39:03:7b:cc:7f:ee:4f:26:81:
         82:86:c2:f9:03:e6:9f:59:52:87:12:75:00:67:cf:4c:29:c9:
         01:db:02:8f:40:1a:ff:31:c9:5f:1b:67:94:49:ae:e9:8b:e4:
         f7:bb:49:c3:82:77:0b:5d:d1:f0:a2:4f:da:6f:cc:83:77:d5:
         33:92:72:dd:55:d8:fb:67:bf:89:39:34:e2:f4:fe:06:7c:a5:
         2c:16:fc:3b:47:34:2b:89:20:11:09:17:81:cb:40:b5:59:d1:
         ae:34:61:c0:fa:8d:4f:aa:a1:cf:b9:ad:74:38:8e:7d:03:33:
         a1:34:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 1 03:51:26 2026 by rpki-client