This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File:                     b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier:          U0OpZFdeGPs9YVcbjvHAfAD7+cMnv+uu0FeRQkyzu04=
Subject key identifier:   CF:F2:8B:86:20:A5:37:AD:53:F2:4A:79:E9:52:F4:91:25:9D:0F:FF
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer:       /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial:       019BF4D0CCDD8E27918A6A21E8D98E6EEC17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number:          0EA3
Signing time:             Sun 25 Jan 2026 11:01:22 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:22 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:22 +0000
Files and hashes:         1: F1IZXSaM0EUoVJYeBekbQHeIDzM.roa (hash: wwBTKYgogZnI9lVmsw1BYLdI24cEQPAqs+GHEd0mVlc=)
                          2: XRWUGRiRnDftn0w5XsjFN-6BZUA.roa (hash: eD7AmSbdUlIktA8wqOi/TIT8HlO0vCWmUNetc9plP2U=)
                          3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: mwx4iD91V4RavhhogTQI+5+MXOxgv6BUYF2c5RPnrco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 11:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:cc:dd:8e:27:91:8a:6a:21:e8:d9:8e:6e:ec:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
        Validity
            Not Before: Jan 25 11:01:22 2026 GMT
            Not After : Jan 26 11:01:22 2026 GMT
        Subject: CN=cff28b8620a537ad53f24a79e952f491259d0fff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:66:90:ca:c0:73:ee:b3:c4:df:07:16:07:54:
                    c9:6c:c4:c5:8a:c1:72:7e:76:c5:94:47:e5:1b:9f:
                    fe:fb:a6:f4:35:ca:c2:74:9c:ef:da:83:59:96:85:
                    35:29:a6:9a:d3:db:30:f6:32:a7:57:06:59:21:9e:
                    71:6a:1d:e3:66:17:b8:7f:0f:7f:12:d4:87:f0:1a:
                    66:71:bc:d1:79:5d:ca:3d:39:29:06:80:6b:04:ce:
                    2e:2f:08:39:3b:4a:0d:21:0c:b7:c4:2a:7f:91:38:
                    71:ed:15:ea:b5:15:f7:0f:ec:38:95:3c:02:87:77:
                    56:8b:df:55:17:80:60:7a:5d:ad:d7:df:27:04:b9:
                    d9:c2:6e:14:f0:70:34:e0:3c:ee:74:cd:5b:93:43:
                    b5:cb:30:d7:9f:50:09:4f:01:2a:7d:6e:a2:aa:2a:
                    48:bf:50:29:a1:d5:7f:28:c2:15:d8:7b:9e:a3:7e:
                    8d:c1:05:68:36:ef:a3:9b:4b:84:3a:27:a7:cf:5b:
                    03:34:f1:16:ef:27:aa:06:0c:a5:c9:c0:c9:84:cd:
                    c4:85:eb:96:8a:c9:99:96:55:1f:71:69:3e:07:23:
                    17:9e:91:0a:8e:dd:a2:06:d9:2b:3c:d9:8d:6d:ed:
                    0c:72:b3:19:08:6b:98:35:15:fe:9f:ce:4d:1c:cd:
                    62:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F2:8B:86:20:A5:37:AD:53:F2:4A:79:E9:52:F4:91:25:9D:0F:FF
            X509v3 Authority Key Identifier:
                keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:be:23:f3:85:af:2d:20:75:6d:97:26:85:8a:0a:88:d3:ff:
         75:cf:82:e8:da:f7:7c:2f:67:24:41:5e:a8:bc:f0:d2:f5:de:
         f6:1d:f7:34:be:de:d4:0c:3f:92:b7:8e:46:a1:0a:c8:f2:44:
         e8:7e:21:65:f5:ab:7d:be:74:8c:11:5e:9e:62:98:56:8e:bf:
         1c:82:41:66:24:a2:74:f9:6e:fa:6d:f7:d4:23:26:b1:61:59:
         75:e7:15:3b:ff:2f:aa:33:3b:92:47:97:53:92:0b:6a:17:ec:
         bc:ee:f6:d8:95:75:4e:80:04:93:e0:f8:55:dc:09:e8:40:bb:
         cf:f0:0b:3a:0d:8e:b2:c5:c1:84:bb:51:0e:e5:59:4c:70:42:
         62:74:ee:b7:aa:19:a4:78:60:b9:0d:53:71:0f:34:c3:4f:75:
         c2:21:34:51:b7:83:da:12:8a:8d:15:4a:61:a9:b3:5c:b9:8a:
         8e:c3:14:12:7e:d5:17:b7:c2:46:22:e7:4f:e7:71:61:11:09:
         8f:33:57:6d:9f:a4:0f:86:52:7d:63:6b:c1:4c:f0:fd:e3:a6:
         b4:ad:0d:99:60:fb:ee:16:bd:23:8f:b7:18:a7:da:6f:80:9c:
         cf:d2:9c:27:22:52:98:d9:cd:6c:40:cd:7f:d9:c9:17:26:63:
         03:8f:b7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:07:28 2026 by rpki-client