This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          pyq2YKer5ffWGQZDL9dh8vCFqz+L4uLDslhmOWtDNAA=
Subject key identifier:   97:6D:A8:FD:87:62:8A:E7:B8:77:3D:E7:60:7B:F5:CC:BD:4A:86:7B
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       019BF5AC8FEB41DA7F3586E496164EEC9720
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          1802
Signing time:             Sun 25 Jan 2026 15:01:25 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:25 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:25 +0000
Files and hashes:         1: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (hash: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: VGGzyRmRWYV/heGqTnpGj0qepqwCgTNE25YatpOidno=)
                          3: SSpWF7_mFd5aLq1v7cUlO_7MUeg.roa (hash: sS4G3ab1K8SPkh8ckCRuErQYvrEjmRohAAhZp3pf6ig=)
                          4: eBZ7AmSoNEvuFIsVSaKIFPergtc.roa (hash: bJyd01nfZd9XumL2AfymHRJRduJs4cP6QwBEo8jMpBk=)
                          5: ltPyLrCgtlMllsCXQ4dfSV5n1sg.roa (hash: /beWoLO2qLG+iVsq1LgAGcDTFDHTDeaWmY9kyyThHj0=)
                          6: mJmloBqH1ccv7pf7_dE3WxThQ58.roa (hash: L0vhterDlOQyvmoADd6+0joQnbdSLqt2I9Yyqwk+Dl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:8f:eb:41:da:7f:35:86:e4:96:16:4e:ec:97:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Jan 25 15:01:25 2026 GMT
            Not After : Jan 26 15:01:25 2026 GMT
        Subject: CN=976da8fd87628ae7b8773de7607bf5ccbd4a867b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:b7:31:4d:0a:98:5b:c1:d3:8c:27:f9:d8:
                    fd:da:c5:24:c5:94:cf:f4:bb:a3:ee:90:4f:92:b5:
                    a4:a5:c5:b6:02:7b:39:6d:33:f0:1a:2c:34:88:4b:
                    cd:68:a7:25:1f:aa:25:f0:f2:92:62:a5:a5:dc:29:
                    df:20:7c:5a:5d:2f:16:a6:ce:61:b5:3f:1e:f3:be:
                    ef:4c:84:e5:4d:3b:67:82:13:d1:39:af:48:86:17:
                    07:4a:2d:ee:fb:00:83:1e:d6:48:06:b4:6a:0c:7e:
                    25:83:c9:77:a1:37:01:26:e4:26:36:79:61:97:9a:
                    ba:c5:1d:8f:c0:67:bf:58:f2:e5:f7:96:c6:7a:71:
                    ab:5d:87:37:1a:21:fe:bf:93:db:aa:87:7e:aa:d5:
                    e8:4a:19:e5:a4:5b:e5:ea:3f:77:c2:7a:ab:86:90:
                    3e:a2:87:9d:31:19:8e:63:3f:8c:c4:9d:11:2c:aa:
                    cb:01:82:ad:55:c1:91:d0:99:45:d7:b6:99:e5:13:
                    25:5d:fe:2d:f0:63:e1:1b:19:32:5b:a5:d2:fc:82:
                    c9:b0:e4:24:5a:b6:15:72:ae:60:3b:ba:f2:a3:3b:
                    ee:29:64:2a:d4:2b:ad:b7:13:51:b3:60:7e:8f:a5:
                    95:f1:14:ea:26:15:5d:1b:f4:69:59:ce:85:0b:11:
                    a9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:6D:A8:FD:87:62:8A:E7:B8:77:3D:E7:60:7B:F5:CC:BD:4A:86:7B
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:cb:c3:c5:ef:41:8c:0d:e3:4b:2d:b7:19:f2:49:20:1c:56:
         09:fe:f3:4e:91:cb:76:7e:52:9a:40:7b:a7:e3:24:57:9c:ee:
         4d:1b:c5:ce:f9:d8:40:01:f9:61:d6:17:f4:40:23:15:96:2c:
         6a:18:13:fa:5e:71:8f:81:aa:61:09:2e:9b:07:e6:72:29:b5:
         3d:fe:80:94:ef:e2:7d:28:26:47:b0:4f:a7:7f:60:8b:7a:f9:
         f5:22:5f:a2:0a:e3:57:2c:40:89:b5:71:69:95:89:24:2e:7e:
         05:8a:90:4d:89:ca:f7:1d:ec:2d:b6:af:ab:f1:b9:06:a1:62:
         0b:f2:16:f0:dd:ab:0a:a5:88:1d:d4:94:3c:a9:33:4f:39:a7:
         f9:a9:9a:6c:f9:f7:f6:f1:e1:ea:10:d9:ac:e8:bf:d9:fa:28:
         47:7d:95:77:53:6a:b9:cc:4a:71:cc:23:d5:b7:f9:81:0b:c8:
         60:95:07:98:9b:ec:3d:9c:93:7f:2c:f5:e9:4a:bf:22:77:3b:
         38:51:55:42:76:b4:81:d5:c1:e9:b8:6b:0a:5f:2b:58:ce:4a:
         81:a4:dd:cb:ec:94:1b:53:8d:6a:b3:fb:52:c8:4e:b9:d5:a1:
         cd:6b:17:90:ce:b5:ba:b9:0f:6a:13:8f:53:ca:f4:2e:83:38:
         f9:49:55:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 19:45:54 2026 by rpki-client