This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          6bPJKBk/f760hg1+kqBTC2QMUBDOuExgbVUX7Ffd3zY=
Subject key identifier:   B7:2D:74:D7:B2:82:D3:43:5B:7A:80:D3:46:39:4E:EC:D6:43:44:79
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       019BF4997507747C1CDD7857AC77B959DB51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          17F9
Signing time:             Sun 25 Jan 2026 10:00:55 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:55 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:55 +0000
Files and hashes:         1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=)
                          2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=)
                          3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=)
                          4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=)
                          5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=)
                          6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=)
                          7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: Xcf++zROrXJApmIlpKeOxxQUQFUC8lXX8Ywxw7p47Cg=)
                          8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=)
                          9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=)
                          10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=)
                          11: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=)
                          12: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=)
                          13: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=)
                          14: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=)
                          15: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=)
                          16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=)
                          17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:75:07:74:7c:1c:dd:78:57:ac:77:b9:59:db:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Jan 25 10:00:55 2026 GMT
            Not After : Jan 26 10:00:55 2026 GMT
        Subject: CN=b72d74d7b282d3435b7a80d346394eecd6434479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:56:e7:52:10:1c:ce:4d:15:55:bf:6b:05:8e:
                    9c:00:f9:37:d1:fb:48:f2:f2:ae:78:3b:25:90:f2:
                    ff:51:40:d2:2b:b7:3a:76:c4:d1:8d:7c:99:dc:9f:
                    2b:54:ab:0a:62:32:a8:75:7b:4c:be:4c:f6:3b:5c:
                    73:2b:01:e3:04:66:69:ef:f5:75:0a:83:fa:f4:a0:
                    ee:b6:98:a4:f0:4f:79:f9:c0:1b:a9:5d:cf:0d:c4:
                    b9:c6:d5:6d:4e:c8:64:81:41:05:d7:fe:31:8d:b6:
                    3c:bf:3f:e4:01:6d:d3:36:31:3f:d1:64:8b:30:c0:
                    67:7c:c6:91:bf:fa:d1:05:1c:03:31:cb:11:1d:35:
                    32:a7:43:ab:f3:7f:e2:33:f0:d2:63:28:9b:f2:9d:
                    b9:d5:02:56:60:63:21:70:b6:b5:ac:01:b3:4e:62:
                    eb:91:92:cc:a2:1f:75:c4:33:46:86:a7:74:e9:2a:
                    13:24:36:6a:e6:a0:9f:7a:70:22:35:2b:67:85:ae:
                    22:4e:ba:e7:72:05:60:52:7b:8b:b8:f7:13:d7:a4:
                    83:c4:8c:56:e3:88:00:98:5a:f9:f1:17:1d:e1:0f:
                    09:78:83:58:20:af:ac:48:d0:2f:09:5e:42:39:4c:
                    99:ae:32:57:c9:05:f7:82:42:d9:36:cb:bf:9c:00:
                    aa:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2D:74:D7:B2:82:D3:43:5B:7A:80:D3:46:39:4E:EC:D6:43:44:79
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:89:8f:1a:b0:66:8c:2a:f7:63:a5:a0:18:eb:ec:17:b6:bf:
         2a:8c:0c:57:1f:23:c7:b4:cf:89:0d:35:c7:0a:e4:3f:e8:e4:
         2b:2a:da:31:95:b7:0e:53:8f:66:9a:60:cd:d9:07:eb:32:da:
         0f:53:ec:fc:c2:a2:e4:8b:a2:77:cd:26:c4:73:8b:c5:3c:e2:
         7d:55:4c:2f:24:4a:47:70:2f:3b:3f:c8:d0:8b:e2:f0:98:56:
         c1:e2:29:0a:df:c7:bc:87:96:96:09:25:a7:11:5a:81:a8:d0:
         42:a9:09:0c:04:01:fb:7d:4f:59:d6:a9:34:dd:59:8a:f3:1e:
         40:43:6e:5c:b7:78:21:76:3c:43:33:af:53:b7:b9:9e:d4:58:
         30:cf:fb:80:c4:2b:32:19:65:91:f5:14:37:c1:a9:51:1c:66:
         34:fb:92:83:8d:e9:64:11:37:9b:ab:65:d7:09:6f:21:31:00:
         ee:52:87:36:92:85:b0:9e:7a:70:32:0d:eb:44:0c:2a:14:b0:
         19:17:86:83:14:15:05:3e:2c:ab:dd:9d:7e:f2:24:06:11:00:
         1b:5a:24:b1:2f:f0:3b:28:74:57:a0:8e:76:7b:94:12:25:d6:
         45:e2:b0:0d:58:76:3e:13:eb:2b:7d:75:b1:91:b7:a4:a9:ee:
         10:dc:36:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:36:46 2026 by rpki-client