This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
File:                     A0sO7SxaeHrYf7SfBNP989D0nUw.mft (raw, json)
Hash identifier:          Neluo44kFjXEMThwCz7W5ae40fhq0/nuWvsCqNc2Bp4=
Subject key identifier:   D3:3E:3C:B2:90:52:74:33:90:2B:F7:B6:9A:6F:8A:36:1F:F4:FA:67
Authority key identifier: 03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C
Certificate issuer:       /CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
Certificate serial:       019BF688229F05557210082F98E492C4956D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
Manifest number:          17ED
Signing time:             Sun 25 Jan 2026 19:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 19:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 19:01:15 +0000
Files and hashes:         1: A0sO7SxaeHrYf7SfBNP989D0nUw.crl (hash: +aRU/JyafqI4dPU+nqkugtPxVmIUWcCwN6Kr9JpMs3U=)
                          2: AnjhFMrWNEvE6l4HScTxK_j27SU.roa (hash: q/okpxUfXsi/Ghlksygzoe9SFHbeI77lnOKud4Wi2WM=)
                          3: ZRqL0ZQYom47oCvdLADk1vcBuk4.roa (hash: GIVmQ7w9VSaVEEGnKk80w5fPNmlaYNBnsxkMwqLM9S8=)
                          4: s-hYEuR7QzCMZYkhMtC8P1oHx24.roa (hash: xVxCRO6iWAgbZPNlY9qjziiMXXmRZfi75ei52vrfj30=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:88:22:9f:05:55:72:10:08:2f:98:e4:92:c4:95:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=034b0eed2c5a787ad87fb49f04d3fdf3d0f49d4c
        Validity
            Not Before: Jan 25 19:01:15 2026 GMT
            Not After : Jan 26 19:01:15 2026 GMT
        Subject: CN=d33e3cb290527433902bf7b69a6f8a361ff4fa67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:31:bc:a0:2c:af:d9:65:fd:d5:8e:fc:82:24:
                    27:4a:43:3a:f9:2e:88:8b:1f:1a:40:7d:8b:62:70:
                    2a:eb:c5:2c:5c:c1:aa:7c:6b:00:65:67:2e:8f:19:
                    dd:0c:4b:9b:8c:1f:53:1c:9d:56:4b:e2:58:a7:a1:
                    11:6b:34:de:46:78:e4:70:d2:61:be:47:59:9b:d7:
                    94:3c:10:86:64:56:62:8c:ef:f9:31:50:df:8e:3a:
                    1c:b2:96:f8:10:66:8c:6d:de:79:a2:7f:ad:17:0e:
                    78:21:4c:29:60:b4:43:86:11:a0:9b:ce:d5:9a:d8:
                    d8:8e:cd:99:ec:64:c3:e0:8e:7f:d0:bf:d1:50:6e:
                    71:a1:69:b1:67:22:14:b8:4e:81:fd:33:20:c2:cb:
                    67:b1:d9:06:ea:53:ab:59:57:60:53:d6:5d:b1:59:
                    8f:45:9a:d4:c3:26:56:5a:8b:87:72:d6:92:31:a4:
                    e4:72:1e:47:ad:2b:00:26:bc:af:99:4b:bb:38:ba:
                    f1:61:e1:1f:cb:90:5c:ba:35:d5:b3:61:47:a9:ce:
                    bb:32:4e:6a:25:7d:90:b4:e7:40:1b:ba:64:0b:0b:
                    fb:28:e6:76:21:ec:4f:78:60:4f:ed:02:99:17:25:
                    08:ec:15:40:c9:a1:28:b4:cd:6a:c6:80:c5:de:79:
                    8d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:3C:B2:90:52:74:33:90:2B:F7:B6:9A:6F:8A:36:1F:F4:FA:67
            X509v3 Authority Key Identifier:
                keyid:03:4B:0E:ED:2C:5A:78:7A:D8:7F:B4:9F:04:D3:FD:F3:D0:F4:9D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0sO7SxaeHrYf7SfBNP989D0nUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2d783a-1cbc-40d4-b011-e085275aa364/1/A0sO7SxaeHrYf7SfBNP989D0nUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:2e:66:65:9f:3a:cc:2f:d3:c0:0c:84:4b:42:99:bf:14:be:
         37:c3:1a:c6:5a:b0:60:7a:0a:2c:31:ff:f1:cb:1e:14:ae:0c:
         b5:9c:46:2e:c3:59:e5:c7:eb:b3:25:17:03:99:8f:da:68:3e:
         75:1c:e0:2c:9a:cf:a2:23:70:30:f4:ba:ba:c7:bc:1a:e7:97:
         1e:99:af:8a:21:4b:34:42:22:c5:48:37:de:e0:97:ae:61:70:
         70:b3:80:7c:ee:f3:97:dd:dc:2c:85:90:2e:0d:93:49:d7:35:
         18:6d:c0:99:84:69:67:c1:92:e7:b0:f9:40:f8:d9:3b:97:b1:
         27:80:50:d8:23:7d:b7:ce:37:21:fb:43:ce:ff:46:06:7f:44:
         56:56:d4:10:8c:16:b7:26:e7:a5:bb:d6:7e:18:a9:f5:a7:e0:
         8c:24:dc:74:f7:01:19:9a:a6:8b:b5:7b:18:a8:08:23:5d:99:
         9d:2f:d1:2a:ca:82:5c:18:72:05:8c:92:30:52:e5:42:b6:aa:
         0b:e7:2b:12:e1:56:ca:b9:4c:48:c2:48:94:14:0a:da:03:3f:
         27:aa:4d:a5:2c:b9:ac:da:c0:3c:5a:53:31:92:04:99:aa:61:
         c6:3f:cb:24:d5:60:21:b6:f3:50:b4:ac:15:83:b8:dc:c2:17:
         40:79:b5:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv2iCKfBVVyEAgvmOSSxJVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNGIwZWVkMmM1YTc4N2FkODdmYjQ5ZjA0ZDNmZGYzZDBm
NDlkNGMwHhcNMjYwMTI1MTkwMTE1WhcNMjYwMTI2MTkwMTE1WjAzMTEwLwYDVQQD
EyhkMzNlM2NiMjkwNTI3NDMzOTAyYmY3YjY5YTZmOGEzNjFmZjRmYTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjG8oCyv2WX91Y78giQnSkM6+S6I
ix8aQH2LYnAq68UsXMGqfGsAZWcujxndDEubjB9THJ1WS+JYp6ERazTeRnjkcNJh
vkdZm9eUPBCGZFZijO/5MVDfjjocspb4EGaMbd55on+tFw54IUwpYLRDhhGgm87V
mtjYjs2Z7GTD4I5/0L/RUG5xoWmxZyIUuE6B/TMgwstnsdkG6lOrWVdgU9ZdsVmP
RZrUwyZWWouHctaSMaTkch5HrSsAJryvmUu7OLrxYeEfy5BcujXVs2FHqc67Mk5q
JX2QtOdAG7pkCwv7KOZ2IexPeGBP7QKZFyUI7BVAyaEotM1qxoDF3nmNjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM+PLKQUnQzkCv3tppvijYf9PpnMB8GA1UdIwQY
MBaAFANLDu0sWnh62H+0nwTT/fPQ9J1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEt
ZTA4NTI3NWFhMzY0LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZDc4M2EtMWNiYy00MGQ0LWIwMTEtZTA4NTI3NWFhMzY0
LzEvQTBzTzdTeGFlSHJZZjdTZkJOUDk4OUQwblV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPi5mZZ86
zC/TwAyES0KZvxS+N8MaxlqwYHoKLDH/8cseFK4MtZxGLsNZ5cfrsyUXA5mP2mg+
dRzgLJrPoiNwMPS6use8GueXHpmviiFLNEIixUg33uCXrmFwcLOAfO7zl93cLIWQ
Lg2TSdc1GG3AmYRpZ8GS57D5QPjZO5exJ4BQ2CN9t843IftDzv9GBn9EVlbUEIwW
tybnpbvWfhip9afgjCTcdPcBGZqmi7V7GKgII12ZnS/RKsqCXBhyBYySMFLlQraq
C+crEuFWyrlMSMJIlBQK2gM/J6pNpSy5rNrAPFpTMZIEmaphxj/LJNVgIbbzULSs
FYO43MIXQHm1zA==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:51 2026 by rpki-client