This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
File:                     OLeMju-a0lfWkNd9ya4_6aYkso0.mft (raw, json)
Hash identifier:          yA6LfFTl2/Bsa31rrSR1DTii2RgqL+enVQCMt6A75iI=
Subject key identifier:   DD:3F:04:2D:F1:05:1E:DB:C7:15:73:98:06:04:6D:A6:09:0C:BE:EE
Authority key identifier: 38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D
Certificate issuer:       /CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
Certificate serial:       019BF4629A969AB6E7B3C29128D907DFEF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 09:01:01 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:01 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:01 +0000
Files and hashes:         1: OLeMju-a0lfWkNd9ya4_6aYkso0.crl (hash: JkKP69WrpTfhtmmj8JcfM4cPFMMeiRX6An1hIo6xbD8=)
                          2: iZvlW3KPvCnSHXa74PO9QAePZE4.roa (hash: YP4N2voVIGl4Ht+q26EMPE95Er0VYxJFeUrNogLISjE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:9a:96:9a:b6:e7:b3:c2:91:28:d9:07:df:ef:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38b78c8eef9ad257d690d77dc9ae3fe9a624b28d
        Validity
            Not Before: Jan 25 09:01:01 2026 GMT
            Not After : Jan 26 09:01:01 2026 GMT
        Subject: CN=dd3f042df1051edbc715739806046da6090cbeee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:25:47:0c:c9:e6:83:7d:4c:e6:89:55:78:
                    f8:7a:33:e0:48:48:df:b3:9b:cf:3b:38:7a:98:53:
                    19:79:5c:38:36:9d:5d:e3:b0:81:f1:64:3a:ab:79:
                    7f:e7:e9:0e:79:26:2d:20:ee:b8:a6:35:ad:91:6a:
                    50:10:36:5b:3a:10:5f:a2:19:25:07:1e:fe:a3:0b:
                    0f:19:a8:56:b0:bc:46:a7:7d:cd:77:03:6f:71:df:
                    ef:e8:cb:4d:9d:e9:22:fb:79:dc:29:3a:f3:e7:92:
                    8e:8e:1c:3f:04:ca:23:80:e6:a7:0d:70:3a:f7:ce:
                    d8:c3:38:9d:74:16:c5:db:7f:3c:6b:76:b6:11:6c:
                    f8:f5:6b:8c:fe:24:74:ca:2b:31:22:c6:1d:f5:f9:
                    e8:0e:df:79:0d:b6:c0:55:6c:6b:21:6f:8f:96:64:
                    d5:71:16:2b:19:da:24:3e:39:87:b2:a4:eb:ca:01:
                    e7:25:5d:c3:ec:8c:7f:4d:a4:3c:22:9b:18:af:4f:
                    30:35:b6:0e:08:5c:e0:0b:dd:cf:ba:8f:3b:1b:6c:
                    a3:41:b4:aa:8b:ed:26:40:bd:5b:57:bb:35:15:06:
                    6a:91:af:8a:0c:ea:9e:dc:b4:15:98:9a:0d:94:c3:
                    96:84:d8:f6:ae:6c:fc:e7:4b:23:c2:a0:39:57:3c:
                    0a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3F:04:2D:F1:05:1E:DB:C7:15:73:98:06:04:6D:A6:09:0C:BE:EE
            X509v3 Authority Key Identifier:
                keyid:38:B7:8C:8E:EF:9A:D2:57:D6:90:D7:7D:C9:AE:3F:E9:A6:24:B2:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLeMju-a0lfWkNd9ya4_6aYkso0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/225fd6-caf3-4caf-b311-f518a9f79790/1/OLeMju-a0lfWkNd9ya4_6aYkso0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:c7:5b:9f:1b:a1:bf:17:1e:fb:de:ad:0b:b9:c1:98:c1:94:
         3c:3e:f9:3f:6d:16:55:d1:d8:42:dd:ab:9b:66:76:e6:87:86:
         88:7f:5b:86:f8:47:2b:61:ca:49:55:2d:7a:cc:dc:4a:b7:8f:
         e8:9a:67:5a:e4:f9:05:bf:09:a0:eb:98:92:86:b2:d6:c3:71:
         b1:62:31:b3:54:7b:d6:dc:3a:43:8b:df:c1:9f:db:83:ca:49:
         03:27:58:46:64:f6:8d:ae:2e:7e:db:cd:a7:35:73:b0:e1:77:
         30:49:46:fd:50:dc:81:49:a4:70:b7:6f:a8:3e:ca:d5:6a:79:
         20:29:1c:86:b7:43:a9:67:9c:07:89:c6:4a:c4:2d:6b:c4:80:
         b4:2c:75:24:bb:03:3e:84:eb:91:e5:45:35:b9:0f:d4:ae:b8:
         9a:32:51:25:88:8c:1b:07:28:74:17:08:14:69:c4:3e:19:f4:
         c2:74:c3:6d:a7:9b:bd:22:75:97:6a:f7:a0:d2:63:ff:a3:fc:
         01:9d:0b:9a:be:63:f1:1d:56:93:0b:62:a0:b2:1e:98:4b:04:
         d9:89:4d:2a:78:87:a2:8c:ca:ed:7c:1b:0f:8e:cf:41:c4:2b:
         30:21:fc:7b:2b:3e:fc:e5:d4:b3:b5:d5:7a:a7:9c:2b:92:8b:
         47:a3:0c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:23:35 2026 by rpki-client