This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
File:                     pAoIH7qPsz77RiWe-T9oeNcBUOs.mft (raw, json)
Hash identifier:          +C9VZIkGbSnm3VA3E388EjvJn6ofnUh5OCj1ikXcewE=
Subject key identifier:   41:74:EE:48:46:E3:39:29:D8:C5:2B:4D:5A:47:AC:E0:42:98:C4:78
Authority key identifier: A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB
Certificate issuer:       /CN=a40a081fba8fb33efb46259ef93f6878d70150eb
Certificate serial:       019BF53E48DD5222FD7C6FD35CA83A656C04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
Manifest number:          0D44
Signing time:             Sun 25 Jan 2026 13:00:58 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:58 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:58 +0000
Files and hashes:         1: OhY8iioWFoGV_gNBKSk4X8sRbuk.roa (hash: 4vq6Ky/r1novGDL62rq4JfVtcvb5rhPQ6KChaQx7Zvk=)
                          2: VBRvFj1EOS8ywtDDLAz1AuJ-F3M.roa (hash: ZcSJ73xAFGVAh8eRMHYLBDppD5u63RXHyLpMLnO53qI=)
                          3: pAoIH7qPsz77RiWe-T9oeNcBUOs.crl (hash: Gx2qKTxrGPBG03nKWAnpzIiXmUzvRHlbQAAZm8/xgAo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:48:dd:52:22:fd:7c:6f:d3:5c:a8:3a:65:6c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a40a081fba8fb33efb46259ef93f6878d70150eb
        Validity
            Not Before: Jan 25 13:00:58 2026 GMT
            Not After : Jan 26 13:00:58 2026 GMT
        Subject: CN=4174ee4846e33929d8c52b4d5a47ace04298c478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:b6:78:98:ac:1f:d8:6d:df:50:4b:ad:07:
                    af:aa:2e:7b:69:91:bc:53:f7:5d:11:6b:eb:61:a3:
                    47:14:c3:63:ce:2d:2f:4c:4e:a3:32:69:23:d9:63:
                    bb:bb:d8:66:c3:f0:a0:39:b3:b6:50:c4:f4:8e:5d:
                    9b:8a:10:eb:37:75:ef:a3:5a:1a:13:72:42:69:62:
                    ce:88:76:f3:65:e5:a2:f0:01:91:59:76:4b:13:2e:
                    d3:6b:a9:d3:d4:61:88:df:68:f6:e5:23:3a:5c:73:
                    52:d8:67:ff:9f:2e:b2:ed:c9:77:e8:8e:e6:e0:7b:
                    5a:6b:bd:22:4a:42:49:2f:72:8a:c4:96:f9:9a:9b:
                    9b:94:bc:2f:c6:87:60:69:b8:e4:d9:ca:2b:72:21:
                    c2:3e:6f:0b:c9:6c:44:0b:f4:e8:a5:3e:e2:26:a5:
                    c1:f2:ae:47:06:ff:b0:86:4a:1e:c2:0c:2f:45:11:
                    e2:90:cd:78:90:6b:9d:e4:59:59:3d:6f:d2:72:e0:
                    2f:8d:24:24:09:ca:6c:2d:b8:de:ed:98:a1:c1:25:
                    09:12:a5:56:c2:c1:b0:aa:91:9d:df:0e:7c:19:bc:
                    7c:bc:92:b7:15:ea:ef:1b:12:37:87:7f:41:79:9a:
                    a0:3b:62:46:56:d8:88:43:1c:c7:67:cd:fc:c0:0e:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:74:EE:48:46:E3:39:29:D8:C5:2B:4D:5A:47:AC:E0:42:98:C4:78
            X509v3 Authority Key Identifier:
                keyid:A4:0A:08:1F:BA:8F:B3:3E:FB:46:25:9E:F9:3F:68:78:D7:01:50:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pAoIH7qPsz77RiWe-T9oeNcBUOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb27a0-94d2-49aa-85ea-ae91e4662d93/1/pAoIH7qPsz77RiWe-T9oeNcBUOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ce:17:04:3c:47:23:cc:78:5d:e3:c1:b1:20:95:fc:51:1c:
         0f:45:a9:32:f0:8e:a2:ab:3c:ab:e2:b7:d6:23:60:2f:6f:47:
         e2:66:5d:fd:a5:71:e0:b1:9b:cb:cd:50:63:8c:e6:6f:4e:4c:
         d3:95:80:d2:2e:66:9d:2d:a5:68:63:6d:eb:f9:62:ac:99:15:
         f2:69:ee:70:13:27:18:42:ec:65:7b:b2:1d:b9:87:a3:64:c4:
         24:fe:92:03:45:a7:29:df:99:fd:77:a6:7e:f4:ea:64:ed:90:
         09:f2:25:83:7a:e1:58:06:43:d8:f2:79:f6:70:aa:32:2d:4e:
         03:16:81:7b:44:67:9b:19:4f:5b:d7:f2:1a:2c:0e:2a:c5:84:
         6a:97:aa:fb:88:be:25:85:7f:db:02:0a:d2:41:1e:e0:92:de:
         cc:e4:54:4f:a7:db:65:39:f5:e3:a2:d7:b8:7a:8b:70:5a:95:
         fd:98:6c:42:9a:31:ea:db:cf:44:2c:86:fc:54:96:ca:08:d1:
         16:d7:12:78:e8:87:4f:4e:2e:64:b0:91:2a:84:20:ad:29:19:
         64:33:df:38:c7:54:16:75:0c:70:fb:c7:9b:39:32:66:17:62:
         52:a8:cc:ce:ac:c6:16:c9:71:cc:fb:fc:ff:db:55:c9:4c:4b:
         a0:b7:c2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:58:50 2026 by rpki-client