This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          csXKj07TrRH4g49Wh3L7NJU6I2CtUWoI7d6UQQKhzSI=
Subject key identifier:   32:08:C0:A7:AA:93:CB:BD:72:4E:FC:D5:EC:4B:23:67:3C:C1:F5:A3
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       019BF80801287082D8E6B33D48B4F59EC0F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          037A
Signing time:             Mon 26 Jan 2026 02:00:32 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:32 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:32 +0000
Files and hashes:         1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
                          2: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: KBP2Yv7GA6uebeO/u6eN3ccAQpCgBy5pmeDqj3zkI0k=)
                          3: r9NWEPI6u6L0HITxoVcmXnXadCs.roa (hash: os9y7CavhWu63QlaCtuG1FYwA+ohXqqwFQrtt1Hmj8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:01:28:70:82:d8:e6:b3:3d:48:b4:f5:9e:c0:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Jan 26 02:00:32 2026 GMT
            Not After : Jan 27 02:00:32 2026 GMT
        Subject: CN=3208c0a7aa93cbbd724efcd5ec4b23673cc1f5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f8:f5:1a:91:a4:76:23:e2:3c:b4:ab:39:f0:
                    40:60:6b:2f:a5:05:85:ec:e0:d1:39:6a:fc:a2:e5:
                    ad:54:07:8f:c2:7d:35:1c:b8:2b:dc:7e:99:e9:99:
                    31:80:bd:c7:93:9b:58:b9:cf:94:9f:aa:5c:71:fc:
                    05:89:49:f7:d4:36:c1:70:97:23:25:0b:11:c3:fe:
                    31:ff:f4:e2:f1:89:46:63:4c:65:8c:93:0a:10:10:
                    7d:58:bc:5a:6c:fa:d7:ac:f1:28:52:6f:6e:eb:4e:
                    be:dd:7f:5b:02:a2:a2:9c:21:e0:b8:c0:8c:1e:97:
                    e1:87:ff:27:4b:06:3f:25:f8:d4:af:9e:33:55:68:
                    a7:81:e6:39:16:ee:ea:fa:a3:f4:65:3c:94:eb:ad:
                    e5:4c:2f:d0:5b:48:c6:63:b4:0c:b1:50:ad:08:eb:
                    64:fa:30:f1:12:25:ae:0a:e5:b5:23:2f:37:f4:67:
                    91:9b:9e:6a:90:ea:0b:33:c3:f7:8c:26:2e:13:5d:
                    88:c4:88:cd:ce:f6:15:ca:f3:4a:1d:fd:94:90:7e:
                    7e:6a:1c:34:62:ab:f7:0b:fb:de:bc:7c:4c:cc:10:
                    fe:cd:3e:e3:9f:5a:8a:6f:60:e1:28:0d:21:cc:4a:
                    a3:e6:5a:43:78:2a:76:63:36:9f:6c:71:dc:08:26:
                    7d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:08:C0:A7:AA:93:CB:BD:72:4E:FC:D5:EC:4B:23:67:3C:C1:F5:A3
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:42:1a:f0:9d:c8:8f:28:c3:4b:e3:d2:8f:d0:8e:85:3b:
         81:dc:02:1b:86:cb:0b:4a:c3:08:0d:b4:35:40:79:12:8d:fe:
         75:66:f0:94:0b:a5:3b:e0:04:a6:71:d1:24:bc:d5:d7:18:51:
         33:ed:d6:ad:16:32:98:89:b2:84:37:c6:50:d3:4d:57:cf:da:
         d1:f0:3c:11:d4:d4:d5:8b:e0:ad:81:c7:d6:77:e7:f7:78:65:
         a0:85:08:d7:7d:09:59:97:d3:72:8b:6d:a7:0e:64:54:cb:9e:
         75:ec:14:c2:67:81:aa:8a:8a:61:1e:4d:75:b0:86:64:b4:bb:
         68:b3:01:5d:3e:4d:2c:e7:2d:1d:04:24:c6:11:c8:47:e5:00:
         0f:13:59:67:82:07:7e:25:90:8a:e1:c0:2d:15:f8:5b:2d:a3:
         f0:4c:a6:cc:52:7b:62:76:b3:9c:45:81:27:74:2c:a6:95:ac:
         c6:6d:ad:ed:3e:a9:64:f3:cc:32:9b:37:0d:4e:23:6d:29:ef:
         8b:35:0e:6e:c3:0e:3a:a9:85:46:5d:f8:c9:6c:dc:6d:78:5d:
         d4:93:2f:a8:bb:f7:ec:e1:1d:2d:62:4e:20:94:6a:32:c4:b1:
         33:c3:22:dd:8a:05:c1:01:c1:ce:74:f0:d6:61:56:7a:bf:ad:
         a5:ad:f8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:49:28 2026 by rpki-client