This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
File:                     0l7-VEtjV8f7woGy5BscsudD6Jw.mft (raw, json)
Hash identifier:          A35MnmFxMQywrEyf6fWqBwQBKMOWO80j20z8ulL80uo=
Subject key identifier:   11:A8:75:13:D4:C7:07:F9:F1:D0:6E:F6:CB:98:6A:B9:E6:52:2B:DE
Authority key identifier: D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C
Certificate issuer:       /CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
Certificate serial:       019BF57552C5E97DED8A7227E99F2D0D8CAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
Manifest number:          41
Signing time:             Sun 25 Jan 2026 14:01:05 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:05 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:05 +0000
Files and hashes:         1: 0l7-VEtjV8f7woGy5BscsudD6Jw.crl (hash: 682IzgbExEHXPLrAYZCLEbDsrdDgkLHHYcQLBXhEieo=)
                          2: HYHPGDt2fjAgC47_M3DioNC03-E.roa (hash: cxx+e28mtQ/DOkAQ7RXQpszf/7Q5+36ijtIPOYGFO4M=)
                          3: LwR4VXrBpkRMHSbEFyenX6LXrCE.asa (hash: jVrxmc6svS9BB1rMG7dzIKPVWauhr47/OGDAYdAMkRY=)
                          4: QTLtDqEEsM_tlA6w6CJrYZAb75c.roa (hash: f/By1t4BWg4HCaNfNQT18viP9uwH0OR37HcliKJPeuM=)
                          5: b2VOFAnqw5bF8fvnjITcw0QPySc.roa (hash: p6e5jWlWStkGfYACB8q5Ip0Xm5alg3UPW1AjXMay8TY=)
                          6: h-9H8BvmwSMG-2kh1YXJYtXWY6Y.asa (hash: sCIUmJSoLok4G31DTxZhSpfZ1i35wAj3Z+H4d8mT8To=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:52:c5:e9:7d:ed:8a:72:27:e9:9f:2d:0d:8c:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25efe544b6357c7fbc281b2e41b1cb2e743e89c
        Validity
            Not Before: Jan 25 14:01:05 2026 GMT
            Not After : Jan 26 14:01:05 2026 GMT
        Subject: CN=11a87513d4c707f9f1d06ef6cb986ab9e6522bde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:5a:99:c2:20:44:cc:d9:93:0f:1a:53:33:
                    79:87:56:e5:dc:a0:03:77:0d:2f:9e:3f:f3:4b:e7:
                    b9:57:53:80:c1:5f:6e:05:7b:5d:82:bf:64:9d:51:
                    4e:b7:e5:15:a9:47:64:16:51:c8:6c:af:4a:2d:fa:
                    85:a8:15:f3:8e:24:87:c5:72:c1:90:be:e9:7a:35:
                    21:a9:d4:c8:ca:cf:ef:66:39:b5:e1:53:85:f7:be:
                    97:2a:da:ba:6f:a4:74:2d:33:fe:2a:df:7d:91:3d:
                    6d:a0:01:33:33:f5:d5:be:b1:5c:3d:76:e3:5d:6d:
                    e0:58:00:06:5b:72:09:4d:6c:1f:2f:3e:1c:e3:02:
                    ad:a5:88:16:df:35:35:06:f5:1f:8a:e3:ac:2d:ef:
                    e4:d7:4e:ba:89:7b:44:a1:39:bc:ab:7e:48:75:91:
                    fd:60:c4:25:18:1f:fc:14:0d:6b:4c:34:79:5e:42:
                    f6:b2:69:b8:66:d6:f9:01:59:ce:8b:20:39:d3:60:
                    43:80:5b:3a:a4:a8:73:95:68:1f:b5:71:a5:24:e7:
                    f6:f3:5c:d4:3a:c5:59:3b:47:50:58:d4:89:bd:69:
                    e3:27:94:db:4e:3e:14:29:0c:44:c9:ca:78:9c:5d:
                    6a:90:ba:a3:78:2b:50:ba:1c:c9:aa:af:5e:cb:5b:
                    65:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:A8:75:13:D4:C7:07:F9:F1:D0:6E:F6:CB:98:6A:B9:E6:52:2B:DE
            X509v3 Authority Key Identifier:
                keyid:D2:5E:FE:54:4B:63:57:C7:FB:C2:81:B2:E4:1B:1C:B2:E7:43:E8:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0l7-VEtjV8f7woGy5BscsudD6Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7d8b41-bc66-4a5f-82e6-a82cbbc73675/1/0l7-VEtjV8f7woGy5BscsudD6Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:ef:44:b5:53:bf:a2:b4:9e:46:be:0b:7e:ed:92:0e:a0:ec:
         38:57:5e:c6:d5:5e:03:53:e1:09:6f:7f:56:fc:d6:c9:be:a4:
         48:d9:2a:5d:86:7d:86:a6:68:4f:82:c7:9e:04:e0:3b:95:93:
         18:43:7e:5c:dd:d0:ce:4b:fd:3d:33:58:ed:f3:f0:73:39:16:
         be:a2:a7:5b:4e:4f:40:2f:50:bd:04:46:6b:fb:3a:ce:34:d6:
         5b:38:4e:02:2a:80:ba:66:f7:79:53:94:59:d3:ce:b7:c0:dd:
         ba:cf:4b:4c:ea:de:12:d8:a3:76:15:d3:8a:e2:4a:e3:d2:66:
         09:58:ca:b8:84:e8:a4:51:6a:71:a0:25:54:bf:ee:bf:4a:3d:
         57:72:16:fd:fa:c3:ff:ed:01:74:28:a6:25:b0:65:2f:63:10:
         cc:da:a0:03:fb:1e:df:17:d0:f0:7c:da:a2:74:bf:ac:8e:a6:
         e0:6d:d2:05:10:fd:0b:5c:40:90:21:52:77:71:9d:38:97:90:
         19:7b:a3:d9:62:03:6c:29:b5:7b:a8:b8:53:8d:53:cc:63:0c:
         b2:57:49:75:92:1e:b2:da:46:fe:78:d0:14:cc:9d:d9:57:10:
         5f:45:f4:8e:33:57:4a:c0:30:2c:26:69:28:84:d4:d6:d2:42:
         76:99:cb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:33:58 2026 by rpki-client