This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
File:                     rAzRozjr9ceVLrmh8AYFSfk0CtY.mft (raw, json)
Hash identifier:          E+hFoo6HLPPNQZUTz4kwjI0IBviXRqb9em/aL+uh3dE=
Subject key identifier:   AA:30:66:4B:92:9A:96:3E:F8:00:96:D4:5A:09:2A:C8:28:55:D9:A7
Authority key identifier: AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6
Certificate issuer:       /CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
Certificate serial:       019BF3505C12388E75A4F231B4AEBF43BDE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
Manifest number:          17E7
Signing time:             Sun 25 Jan 2026 04:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:28 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:28 +0000
Files and hashes:         1: CHly21F90uK3t1PTfGR7rzZwk_E.roa (hash: mWrqsrt9qgm67LUNBZ/tu5yn1dKMTJD4Xe31GCUEOfc=)
                          2: aG9dVoBqgrqqk06kOEPaSY8Bqzs.roa (hash: Orir7PkRZZnMYBwB3ZGIXihY2LtAAjB+kCKoDM/u5+A=)
                          3: rAzRozjr9ceVLrmh8AYFSfk0CtY.crl (hash: EvJTeXgRQSqIw8QCUCIIj0enlszWQnAtu7tO0oVwUOw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:5c:12:38:8e:75:a4:f2:31:b4:ae:bf:43:bd:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac0cd1a338ebf5c7952eb9a1f0060549f9340ad6
        Validity
            Not Before: Jan 25 04:01:28 2026 GMT
            Not After : Jan 26 04:01:28 2026 GMT
        Subject: CN=aa30664b929a963ef80096d45a092ac82855d9a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b2:9f:47:4d:c4:8d:0b:6d:19:62:ab:73:0a:
                    f3:07:53:00:7d:04:2d:59:a4:a4:ef:ad:3b:9f:62:
                    fe:1c:f7:dc:ec:d6:fd:de:cc:53:a0:aa:48:30:4c:
                    a5:df:20:79:06:2c:3d:02:44:84:f7:61:9b:15:b9:
                    fc:6d:37:95:72:b2:3d:d7:15:ee:ee:26:1b:26:93:
                    34:97:cf:e2:c0:22:89:f7:68:c9:aa:36:29:af:01:
                    65:28:82:82:73:4f:c0:8f:cd:11:92:58:22:fd:eb:
                    53:d5:39:79:7b:7c:5a:99:c3:aa:80:0a:ed:a6:df:
                    33:c9:86:50:39:e4:f4:83:ab:5f:ec:84:0e:7a:de:
                    28:bc:99:46:f4:8c:70:ed:61:48:97:e0:51:99:25:
                    c4:43:b0:f3:56:f8:c7:a7:0b:b7:7c:37:11:0d:98:
                    56:1e:17:16:2c:22:cd:2b:d8:51:cd:19:f1:fe:af:
                    53:90:8c:85:e8:17:ab:a6:c0:28:58:95:30:0e:bb:
                    26:99:22:95:78:f3:64:ea:2e:dc:ed:fe:2d:29:fc:
                    b8:79:ff:11:58:8d:d8:06:cb:e1:c8:48:b7:2b:75:
                    ab:46:53:86:d0:9f:27:56:9f:4f:8a:77:8f:f7:38:
                    8a:50:bf:1a:a4:1e:52:35:58:79:1a:27:ff:06:64:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:30:66:4B:92:9A:96:3E:F8:00:96:D4:5A:09:2A:C8:28:55:D9:A7
            X509v3 Authority Key Identifier:
                keyid:AC:0C:D1:A3:38:EB:F5:C7:95:2E:B9:A1:F0:06:05:49:F9:34:0A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rAzRozjr9ceVLrmh8AYFSfk0CtY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0c5ec1-9c3d-4162-9804-a33518bdd8fe/1/rAzRozjr9ceVLrmh8AYFSfk0CtY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cd:9d:3d:a7:93:46:26:43:a3:d1:e8:d4:07:5a:ac:19:0c:
         50:03:12:cc:00:e8:72:f1:07:ed:c4:0c:f6:d0:84:9e:2a:54:
         9f:fa:03:2c:e3:c5:61:cc:a1:fc:83:cf:e2:74:b5:0c:28:b2:
         43:bf:e6:f5:9d:5b:dd:ee:8d:f2:94:ec:b2:8d:3f:24:88:98:
         14:0d:8c:3a:4a:8e:7c:ca:57:a5:c8:33:63:c8:1a:31:5e:20:
         1e:89:ad:c1:b0:44:2b:5e:af:a6:af:98:e7:ab:12:0f:53:88:
         47:51:55:dc:86:bf:b1:3a:40:2b:a4:b6:0a:6f:e3:43:fa:bf:
         96:fa:ab:97:79:1e:02:a7:2c:44:af:4e:fb:2c:fc:84:63:58:
         db:ce:b0:f9:55:d7:ce:67:b0:c1:cf:8c:7d:a4:35:41:be:1c:
         d4:2e:71:4e:2c:e2:78:b1:00:43:40:92:68:34:a1:85:cf:0b:
         8f:4c:32:86:b5:f7:4a:25:ab:25:43:05:e0:4e:32:d7:20:b2:
         d5:e2:5f:f6:4d:3a:6d:9e:f5:39:08:d5:4d:6c:39:59:96:c8:
         a4:ce:8f:7d:89:a2:2d:c0:e1:ec:4a:5e:ba:5f:8b:21:3c:f1:
         17:7e:0b:17:5e:08:50:41:cf:ea:f2:94:de:a2:8d:5c:9b:05:
         4b:f2:0a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:21:59 2026 by rpki-client