This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
File:                     4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft (raw, json)
Hash identifier:          4ubyNI/05U+U99e7V9DC8hR2PWsrnOfuqfhrU/VrcUc=
Subject key identifier:   BC:EE:BD:83:F6:95:D6:DC:2D:54:8B:EB:62:D2:B6:0A:E4:86:B8:4A
Authority key identifier: 4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F
Certificate issuer:       /CN=4CA5079D5112F15EE26CBCBBB02400EA57228E8F
Certificate serial:       6A4D5DB447B53D79BB65507038967BBAA579D446
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer
Subject info access:      rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
Manifest number:          34
Signing time:             Sun 25 Jan 2026 02:26:20 +0000
Manifest this update:     Sun 25 Jan 2026 02:21:20 +0000
Manifest next update:     Mon 26 Jan 2026 03:38:20 +0000
Files and hashes:         1: 326131343a373538303a663830303a3a2f34302d3438203d3e203531303837.roa (hash: 6wqby/Mrx9cd27NqiWdmDbK4L+jiWVktq5w3hJHDKq8=)
                          2: 4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl (hash: XnRtkiF38OmbRIiSB+GNiUml/V3+nZlC/iqviItVxQ4=)
Validation:               OK
Signature path:           rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl
                          rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 01:36:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:4d:5d:b4:47:b5:3d:79:bb:65:50:70:38:96:7b:ba:a5:79:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA5079D5112F15EE26CBCBBB02400EA57228E8F
        Validity
            Not Before: Jan 25 02:21:20 2026 GMT
            Not After : Jan 26 03:38:20 2026 GMT
        Subject: CN=BCEEBD83F695D6DC2D548BEB62D2B60AE486B84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3e:3d:9c:5d:7f:b8:c6:49:32:92:53:1a:9a:
                    16:42:a7:af:b3:2e:40:94:c4:47:a9:0d:90:7d:39:
                    17:b7:01:64:76:b0:f9:7f:f8:37:60:cb:37:76:3c:
                    b0:64:cf:17:50:4f:bf:16:30:43:40:6c:83:0d:d7:
                    61:4f:0f:f8:68:39:4a:86:f3:f0:25:55:2f:86:c7:
                    a5:0a:41:c2:a0:a8:f2:d7:22:7b:d9:24:84:a9:1e:
                    68:0b:ca:b2:ce:f4:d9:f7:47:9f:c1:d8:cb:08:f2:
                    ba:f3:30:40:d3:64:fb:f3:61:31:d2:d4:6a:17:9a:
                    75:91:86:37:a5:04:f6:d8:96:cd:40:f2:d7:4b:65:
                    00:b4:51:cd:10:1a:c3:eb:61:07:7e:b6:20:bc:77:
                    0b:1a:c4:f6:0d:b6:31:99:f0:df:96:fb:09:20:df:
                    02:de:d0:b4:cc:42:71:a5:e9:98:49:bc:06:23:d6:
                    5d:77:59:01:0a:97:68:3a:c9:e6:f8:4c:8c:52:78:
                    6f:9c:33:63:df:7f:b0:7b:18:24:67:0b:1f:70:d7:
                    22:37:e0:78:72:d6:02:4f:b6:1d:53:f2:de:fe:77:
                    c9:47:11:c8:47:c1:46:31:43:1c:17:53:54:b0:9f:
                    a1:19:ea:3b:01:d8:31:41:23:f8:f0:54:e6:2b:42:
                    35:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EE:BD:83:F6:95:D6:DC:2D:54:8B:EB:62:D2:B6:0A:E4:86:B8:4A
            X509v3 Authority Key Identifier:
                keyid:4C:A5:07:9D:51:12:F1:5E:E2:6C:BC:BB:B0:24:00:EA:57:22:8E:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.blw.moe/repo/AS51087/0/4CA5079D5112F15EE26CBCBBB02400EA57228E8F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:a9:90:e5:43:fb:03:80:5b:eb:ed:34:ce:f6:13:80:71:c0:
         14:67:54:be:d2:60:40:b6:31:e3:26:d5:6a:25:2b:b0:ae:79:
         73:ff:f3:49:3e:da:76:2a:eb:ac:bf:96:9b:03:aa:f6:93:7c:
         f0:e4:e7:b4:c8:0b:45:c2:23:66:94:5c:fc:18:c1:65:e8:69:
         ed:40:f6:c2:a3:bc:75:4a:38:24:2b:de:43:bb:9f:0d:27:c6:
         04:81:66:a5:cb:7e:2e:3e:90:d0:b6:14:6c:78:1d:58:96:6f:
         a6:55:8b:50:36:92:66:d2:17:3b:a6:69:49:dd:3d:25:4c:22:
         29:a4:a4:2e:fa:12:f9:99:0b:98:c3:30:ae:8b:bb:63:91:fa:
         ff:51:d8:0b:f6:13:11:ef:78:fe:5c:80:c1:46:ab:63:21:05:
         96:b9:f9:09:11:68:51:f9:69:86:d1:b1:b6:32:86:db:fb:e5:
         de:c4:85:a6:45:70:4f:1c:6e:64:ac:8a:a0:08:26:66:66:f3:
         b8:6d:ce:ae:95:8c:07:8a:37:0d:11:4e:67:fe:67:f5:21:8b:
         35:fc:b6:3f:36:6b:6e:56:b0:b5:67:5d:3d:fd:f5:ab:1c:93:
         24:9d:a8:7c:2d:9b:3f:c8:5f:db:0f:ea:da:df:7c:55:df:3c:
         b5:c3:82:72
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgIUak1dtEe1PXm7ZVBwOJZ7uqV51EYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNENBNTA3OUQ1MTEyRjE1RUUyNkNCQ0JCQjAyNDAwRUE1
NzIyOEU4RjAeFw0yNjAxMjUwMjIxMjBaFw0yNjAxMjYwMzM4MjBaMDMxMTAvBgNV
BAMTKEJDRUVCRDgzRjY5NUQ2REMyRDU0OEJFQjYyRDJCNjBBRTQ4NkI4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsPj2cXX+4xkkyklMamhZCp6+z
LkCUxEepDZB9ORe3AWR2sPl/+Ddgyzd2PLBkzxdQT78WMENAbIMN12FPD/hoOUqG
8/AlVS+Gx6UKQcKgqPLXInvZJISpHmgLyrLO9Nn3R5/B2MsI8rrzMEDTZPvzYTHS
1GoXmnWRhjelBPbYls1A8tdLZQC0Uc0QGsPrYQd+tiC8dwsaxPYNtjGZ8N+W+wkg
3wLe0LTMQnGl6ZhJvAYj1l13WQEKl2g6yeb4TIxSeG+cM2Pff7B7GCRnCx9w1yI3
4Hhy1gJPth1T8t7+d8lHEchHwUYxQxwXU1Swn6EZ6jsB2DFBI/jwVOYrQjXLAgMB
AAGjggIaMIICFjAdBgNVHQ4EFgQUvO69g/aV1twtVIvrYtK2CuSGuEowHwYDVR0j
BBgwFoAUTKUHnVES8V7ibLy7sCQA6lcijo8wDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5ibHcubW9lL3JlcG8vQVM1MTA4Ny8w
LzRDQTUwNzlENTExMkYxNUVFMjZDQkNCQkIwMjQwMEVBNTcyMjhFOEYuY3JsMIGe
BggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMucGFh
cy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvODkyNzBmNmMtYTNmZS00Mjk5LWIw
NzktMzA5ZWQ5N2YzODI0LzAvNENBNTA3OUQ1MTEyRjE1RUUyNkNCQ0JCQjAyNDAw
RUE1NzIyOEU4Ri5jZXIwbAYIKwYBBQUHAQsEYDBeMFwGCCsGAQUFBzALhlByc3lu
YzovL3Jwa2kuYmx3Lm1vZS9yZXBvL0FTNTEwODcvMC80Q0E1MDc5RDUxMTJGMTVF
RTI2Q0JDQkJCMDI0MDBFQTU3MjI4RThGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsG
AQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASqmQ5UP7A4Bb6+00
zvYTgHHAFGdUvtJgQLYx4ybVaiUrsK55c//zST7adirrrL+WmwOq9pN88OTntMgL
RcIjZpRc/BjBZehp7UD2wqO8dUo4JCveQ7ufDSfGBIFmpct+Lj6Q0LYUbHgdWJZv
plWLUDaSZtIXO6ZpSd09JUwiKaSkLvoS+ZkLmMMwrou7Y5H6/1HYC/YTEe94/lyA
wUarYyEFlrn5CRFoUflphtGxtjKG2/vl3sSFpkVwTxxuZKyKoAgmZmbzuG3OrpWM
B4o3DRFOZ/5n9SGLNfy2PzZrblawtWddPf31qxyTJJ2ofC2bP8hf2w/q2t98Vd88
tcOCcg==
-----END CERTIFICATE-----
Generated at Sun Jan 25 12:18:02 2026 by rpki-client