This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
File:                     Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft (raw, json)
Hash identifier:          xjR0qNZi43/VQw2Hbt/Bn/IJfYTka2CCbeZRm/uUJGk=
Subject key identifier:   76:E3:64:8C:D1:90:6C:B0:A9:0E:57:0D:75:33:87:49:AB:B2:F7:81
Authority key identifier: 3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B
Certificate issuer:       /CN=3ee770f47fd903925d80ac58e05e076f3baa110b
Certificate serial:       019BAC81902549E6FFF46E1073962B3CC018
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
Manifest number:          17E3
Signing time:             Sun 11 Jan 2026 10:02:10 +0000
Manifest this update:     Sun 11 Jan 2026 10:02:10 +0000
Manifest next update:     Mon 12 Jan 2026 10:02:10 +0000
Files and hashes:         1: 3Xzw0ot56N_EusWh2h58eLSz4B0.roa (hash: iH4AA+yRWyX27I6HolfVM6gPaKu1WmLVwGw6HZLB8y4=)
                          2: BuBIsW377edbkmu5ptF81PLF5Q0.roa (hash: 7usajOpcONduahe3A78W+zcY0T4iqrBLIw2pvsiXVhE=)
                          3: DjXJwzbl4W3XGaoLQo6hAmrBQG8.roa (hash: jl1YeEZePiNEtg2usgFbuFZ6hVw7XxXcZBL3CQj31Fw=)
                          4: JzDXwgyNq3RwLA7tKi4-_-T8gdk.roa (hash: 7tR3jHKaYMI4YerkPTTCvH1HxUUs2q6psxE9aCLDewY=)
                          5: KMY6j_E36uvUuAHSCVi8RVwyNZk.roa (hash: 385QQx7zFPQ/GIVaSJKLaxgbyTlGMuSuRpzfcwObgl8=)
                          6: KZG9N6fHM4sI4IJYGPS031GIMCU.roa (hash: tEyjCiPhn7zJ39mR5w03HcizEZWXp+RRquI3HmwwGD0=)
                          7: Ls9dhWOQVIXCZvTtIru43VwF3x4.roa (hash: bqXgyngEP1JKsREn71aJ9c+bjM49v5vA6K6imPid/2k=)
                          8: Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl (hash: FhGzc5bc7L9Nmkf2fIv3g0P4isLmhQuIhOnnKA2AA2U=)
                          9: QRXUHF37F-opsyYWxXP7VgAa1i8.roa (hash: Rd6zDiWkrBTIuMj25R/o3LbSCqV2kuQDIEMGjWq9WXE=)
                          10: SmbJvKuZFpV6X2LbIBdQ3Q2unS8.roa (hash: 96JsC18JGLBW4IoziYCsWOr6Kg7mDOV+l3s14FX0t1Q=)
                          11: Sq5nLh2syZPngb2x1LEIp9f1YtY.roa (hash: 05nmQvdIRbXAED19j0IeECaU4r6/x0Sqw8dDEQV001g=)
                          12: VKUDHCvlmcIYzEGkxwedlbEe9nQ.roa (hash: tFw/0Vxd694kI0nU/bUko3Cq/RqaULhTbo0IINuIfKk=)
                          13: maIlT2DilxhpvXDvDKP5lewC5Jg.asa (hash: kPqttGLIZcEb1QIFFS840yNbuoYOd9uwdsD7XHdRl3w=)
                          14: pTp4FJAMyldHwYadK3tw3d0ONec.roa (hash: LJ0x/Ion8T2uqGWKOSSqvMbLcTtZp6UhXx/m9d3ZpQQ=)
                          15: yWaDK5srT5k2WUJDHHIexqT-SUw.roa (hash: ju3Pb68m0FKpSwBfTyj/2egCnhf7dZEhijFgYyPnrRY=)
                          16: zV6gwKizHJtPCmj9FYOUA9jeUek.roa (hash: EcadcbZq+piW+970GC+VLWi9HJJfXxoGsLY8i+apRPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 10:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ac:81:90:25:49:e6:ff:f4:6e:10:73:96:2b:3c:c0:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ee770f47fd903925d80ac58e05e076f3baa110b
        Validity
            Not Before: Jan 11 10:02:10 2026 GMT
            Not After : Jan 12 10:02:10 2026 GMT
        Subject: CN=76e3648cd1906cb0a90e570d75338749abb2f781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3f:69:a6:80:38:0c:b7:df:13:4c:78:24:9b:
                    13:2c:1a:c8:37:68:7f:cc:c8:aa:f9:29:bc:a9:7a:
                    31:b4:84:c1:79:0a:19:81:09:74:82:0f:b7:84:87:
                    b3:d6:1f:46:dd:49:b5:0b:0f:6b:2b:6e:1a:76:ba:
                    6c:04:2a:7d:84:18:6b:6d:63:51:64:49:e9:6e:87:
                    aa:16:d7:81:b6:20:70:cb:7e:73:8b:de:8b:af:e0:
                    0c:e6:99:81:e5:02:56:37:94:9f:ea:68:75:e9:47:
                    58:89:ab:21:68:d1:70:86:6a:97:07:3c:04:cd:77:
                    11:8d:f5:d9:fb:a6:01:cd:1e:9e:87:b9:57:10:13:
                    b5:31:7e:3e:7a:c3:51:e1:c9:58:cd:56:f7:52:cb:
                    7f:db:ff:a5:a9:6c:2b:d4:9e:cb:3a:e5:cc:3b:8f:
                    a2:1f:ee:4f:10:6d:08:23:17:d2:49:37:e9:84:01:
                    58:bb:f8:21:40:6a:c3:dc:e3:f7:bc:77:f9:0f:0f:
                    7c:ed:33:97:63:47:b8:ca:7e:38:96:e0:e2:48:cf:
                    8a:c2:fb:50:bd:f5:85:7f:c7:90:f3:35:1e:5c:af:
                    66:42:36:c1:fb:5b:86:ef:55:1c:33:2f:01:d3:7a:
                    70:45:84:20:91:fd:88:95:48:ac:de:db:ff:ac:4e:
                    62:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E3:64:8C:D1:90:6C:B0:A9:0E:57:0D:75:33:87:49:AB:B2:F7:81
            X509v3 Authority Key Identifier:
                keyid:3E:E7:70:F4:7F:D9:03:92:5D:80:AC:58:E0:5E:07:6F:3B:AA:11:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/434344-323e-48f8-ade2-624f83682169/1/Pudw9H_ZA5JdgKxY4F4HbzuqEQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:80:b2:cb:2c:eb:fe:5f:c9:b2:49:8f:38:88:13:65:a3:cd:
         19:dc:11:55:16:9c:80:2b:66:07:f4:88:32:f9:81:5e:6e:34:
         be:05:fe:2c:ba:4f:da:f7:fc:76:9f:91:36:18:71:7f:1a:d5:
         1a:e6:be:ef:9d:56:39:19:44:7a:be:00:05:5e:64:b0:9b:99:
         57:3f:51:15:63:99:83:86:57:7e:b6:9c:86:e0:a2:de:48:52:
         5f:c0:73:b0:88:4b:1a:f3:e6:1e:6c:ff:57:0e:9b:79:e7:f7:
         d9:a7:94:09:6b:77:07:10:d3:d4:16:74:b6:44:7a:de:0f:ba:
         fd:09:c0:9a:ac:b0:9f:37:b3:d0:de:96:81:1f:97:1b:0e:04:
         1a:8b:eb:73:f4:84:03:2b:af:1f:63:84:dd:8b:43:90:ed:20:
         52:03:29:7e:f2:a1:2e:fb:8a:11:c7:26:4e:9a:75:00:0c:c8:
         af:fe:59:ab:a1:a4:b1:6b:24:f3:4c:44:24:22:60:42:ea:69:
         74:55:2c:95:76:62:59:45:1a:80:9a:23:23:54:b7:d4:69:48:
         20:f9:eb:0a:8b:c3:eb:cc:31:2a:c2:6d:9e:f7:59:ff:e1:14:
         30:37:31:86:84:8b:30:65:a6:e0:91:f6:49:6c:ae:f8:e5:69:
         14:43:c5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 11 20:08:19 2026 by rpki-client