This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
File:                     0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft (raw, json)
Hash identifier:          Y7i8NWeMwni4NjxCpzDlY14KWm7fBAvpico+YoN74tY=
Subject key identifier:   0F:EF:8B:8A:8F:4B:49:C0:92:06:94:00:7D:2D:44:69:2A:4E:A4:EE
Authority key identifier: D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81
Certificate issuer:       /CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
Certificate serial:       019BF8AD0C69C96E00C84E8398F869674266
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
Manifest number:          11C0
Signing time:             Mon 26 Jan 2026 05:00:48 +0000
Manifest this update:     Mon 26 Jan 2026 05:00:48 +0000
Manifest next update:     Tue 27 Jan 2026 05:00:48 +0000
Files and hashes:         1: 0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl (hash: tJgQpoR/qap9tEfOeZ4VxHaCnWhVnuSY0V6iiahJa60=)
                          2: 1-crrXO-fETfpfCuOfq_V8AAtFcU.roa (hash: tdCum/fabFsLr9FpxBtUaox/ikhPTJgRBISx07CTGFc=)
                          3: 9qhyf8XaXLBiOxT9FefpSvz7EAo.roa (hash: LVzOeIuhXpbz7YMXKNB/lJ0KobWs5PmsNOZb547oGVM=)
                          4: Mqj0Demridh190h6JIN3Gx3sPy4.roa (hash: AORPpnZQfRY//hqEidzjVvXW/SBvbOFeJtpk2VoU8BI=)
                          5: qW_xRDyYFTJ1pnImR0U2Y6u9sv8.roa (hash: lYESXNxjJKf8HpJy1cENZI84AstuQ+Y1hlO3VCh5QhI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:0c:69:c9:6e:00:c8:4e:83:98:f8:69:67:42:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d17bf4fbea894f43eeb3db1b216e57766e01ab81
        Validity
            Not Before: Jan 26 05:00:48 2026 GMT
            Not After : Jan 27 05:00:48 2026 GMT
        Subject: CN=0fef8b8a8f4b49c0920694007d2d44692a4ea4ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4a:20:5b:95:4b:ef:4d:71:b8:ce:a1:99:28:
                    a9:eb:1e:c7:b2:e6:6c:93:d7:74:71:86:07:24:09:
                    75:cd:89:2a:cb:7e:91:7c:3a:9c:1e:15:8b:2e:ea:
                    21:26:33:ac:3d:1e:74:95:68:4d:a5:e2:df:c3:85:
                    1a:c6:bf:d9:3b:82:47:ad:75:a0:4e:0c:c1:4e:9c:
                    57:12:53:35:2e:de:55:98:37:f8:7b:b3:de:6b:01:
                    88:c0:7f:60:ff:1c:2c:2f:a0:59:40:ea:d5:76:73:
                    80:fb:76:ab:86:3e:a0:ad:09:b4:c8:9c:a7:5e:53:
                    48:58:55:61:4c:a8:58:20:e3:67:ee:9c:33:cb:c2:
                    02:5a:7c:7a:c3:c0:dd:84:35:e4:2d:d9:a8:79:90:
                    8e:ee:c3:39:05:a6:69:b5:7f:ad:ac:fd:7b:3c:92:
                    93:79:88:8d:81:26:ca:c7:a9:a9:18:07:fb:92:22:
                    b2:13:9a:8e:39:68:88:2b:3a:ff:b2:9a:21:75:97:
                    e1:62:29:1c:c7:cb:dc:c7:d5:7c:93:85:ff:dd:14:
                    a4:e5:1a:e6:0f:d7:b1:5c:b1:9e:4e:5e:c7:61:52:
                    f6:72:66:3a:4f:da:29:e9:e3:55:38:2e:21:8e:3f:
                    b3:20:ee:5e:c1:8d:03:28:f1:8a:4d:e8:2e:ee:fb:
                    31:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:EF:8B:8A:8F:4B:49:C0:92:06:94:00:7D:2D:44:69:2A:4E:A4:EE
            X509v3 Authority Key Identifier:
                keyid:D1:7B:F4:FB:EA:89:4F:43:EE:B3:DB:1B:21:6E:57:76:6E:01:AB:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/421529-73e2-4916-8bd2-2c201d30ae05/1/0Xv0--qJT0Pus9sbIW5Xdm4Bq4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:8c:66:87:2c:77:63:c1:7d:d0:0c:ee:95:5b:a1:bd:d8:d5:
         c4:36:16:75:57:6d:23:c1:8f:3d:71:cb:53:2b:89:b4:02:b2:
         14:46:7c:f9:79:79:74:76:67:61:9e:1c:a7:53:b7:20:4b:3f:
         69:13:66:da:08:a8:04:25:83:82:d0:8c:06:c0:87:9d:bc:8d:
         7b:00:9f:ca:65:cb:89:c2:55:9c:87:19:3d:fc:3c:f0:2d:06:
         f2:0c:36:f0:7a:8c:82:2d:f4:4a:f0:90:e4:81:a5:44:74:5d:
         c0:49:14:52:f7:17:9f:45:d8:79:3c:ba:de:d0:59:c3:f1:c0:
         ed:1d:98:03:35:63:54:50:c6:f1:51:07:3e:b9:17:f3:4a:3d:
         59:10:2c:47:20:95:d7:a7:6e:9c:cc:38:93:3f:18:57:bc:5b:
         c0:97:44:7b:29:67:36:24:d3:47:1d:ae:da:e2:df:0b:df:72:
         8c:87:40:ed:cb:b6:cf:bd:df:3d:ca:6b:36:35:0b:b3:cb:9a:
         01:da:e3:74:64:a0:8a:a9:ed:cc:1b:99:92:2b:db:79:fb:32:
         aa:c9:5c:96:7d:aa:22:c6:62:e5:b8:2a:21:7e:bd:72:50:bd:
         d1:87:8e:b3:d1:00:a1:45:a3:6e:b2:77:06:6f:d3:5d:58:9a:
         06:97:79:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:34 2026 by rpki-client