This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
File:                     Otc0z5DHc0KIBrloIJUVuRSDGp0.mft (raw, json)
Hash identifier:          MiLNEB5DZ1GlRU7VUwJk+mzqbLUAuE2JTJg5tYdF2VQ=
Subject key identifier:   92:DB:16:34:D6:62:9B:77:DC:D4:EA:92:70:A6:14:38:87:B1:58:A1
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Certificate issuer:       /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial:       019BF350A586E855F38697BA86A97DA15B5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
Manifest number:          1805
Signing time:             Sun 25 Jan 2026 04:01:47 +0000
Manifest this update:     Sun 25 Jan 2026 04:01:47 +0000
Manifest next update:     Mon 26 Jan 2026 04:01:47 +0000
Files and hashes:         1: 1-Qbrqy3eaDyYZjmaWJLP3YQsQ0U.roa (hash: 1GmvfspmxhXRZfjHjp+Nn84fIdG09U8DoT1IgAU3Frc=)
                          2: 6PKIKUxySdUwZYjBpQdap24rMCA.roa (hash: Q+sfZpJT+al0TFOwIddw17g5+KoGJur9NLjQbu4nLpM=)
                          3: 7DTaYq58DszxL3typMJ_Z8sgHiw.roa (hash: QOb3N70dWy19+rmSZK4iBpA9tvZZyMZV5R3SBFHpjuA=)
                          4: 8V2NwbvFlQZYvhmUrca34kxhXa0.roa (hash: DM0RB7X2NkgoMommIXHbEaH33Jj0bMo7E0xn5ejVedM=)
                          5: Otc0z5DHc0KIBrloIJUVuRSDGp0.crl (hash: WrAf6fBMy34FsHopacSbPBcUIBCPLh3nFvf4zVmpLLw=)
                          6: QawDO3nriy0Ac_BTEa82vA_nGDI.roa (hash: ONoC4PBmZZaC9uv6W2VVUcFA7b/wums0wl8fDhnZ7Gg=)
                          7: SfOe7Fk4wovyDTf65PPkUvpmOj8.roa (hash: IqHL6wYMj66T9G8mGNVSsyQbaYrfdIedvTge6Q1Bbhs=)
                          8: ZUtFH_qhx3L4PEjgB3q82Pko9A8.roa (hash: cpl/eTn6qz8+2/3oyMQl/oJw6IV6mFmSjoin/h1krGs=)
                          9: f8crMnaCvVJR24y4HZK4aF4ON_Y.roa (hash: a4LuuWR1pCU4Uin5c2uaOnWKPPk90YN8aUWR2m/vZDQ=)
                          10: kO9WlUparYb6jLj3Al1HAfYWyc4.roa (hash: uf/Ee/JGBTSZ54j7ty6QwzOZpLC0w43Jza7tQwup4Iw=)
                          11: oeb6m3It37B8PGE2O7TDai_TrWY.roa (hash: AfKJo3qTL26v5E6lQbsmszspXYIo4b8KBBv1yOMp4wQ=)
                          12: u5pqVXheduvSRyevzvk3F281Pv8.roa (hash: 99RNfzNuS1w8/5besxPZV13SYkOzDoP6UORAhIYy5ic=)
                          13: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (hash: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 04:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:50:a5:86:e8:55:f3:86:97:ba:86:a9:7d:a1:5b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
        Validity
            Not Before: Jan 25 04:01:47 2026 GMT
            Not After : Jan 26 04:01:47 2026 GMT
        Subject: CN=92db1634d6629b77dcd4ea9270a6143887b158a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:15:bd:b1:10:67:6d:0f:09:7d:df:ae:a0:
                    28:91:0f:b5:4b:04:7b:12:e0:3d:db:27:b8:11:3b:
                    0e:19:fb:d1:04:b7:ae:4a:8e:df:cf:49:42:63:42:
                    f9:d6:2f:e8:5c:9a:e7:93:64:1d:c3:61:75:f1:22:
                    0c:2a:f5:aa:48:51:df:57:b5:ac:b2:e1:07:28:2f:
                    5b:e3:b7:6d:f5:31:81:a2:bc:f3:24:17:aa:c6:21:
                    f7:26:29:2a:36:b6:5c:4d:f5:fb:8b:ad:9f:aa:5c:
                    d6:0d:36:09:d8:94:b0:2e:0f:76:9f:39:a7:15:0a:
                    5d:f4:ad:84:ff:41:53:34:73:3a:8a:5a:86:9e:26:
                    c9:ee:e4:03:e2:d5:18:5f:c1:63:50:d7:2f:5d:cd:
                    2d:2b:93:f2:d8:01:b2:fc:a8:3d:5a:df:9c:16:46:
                    e7:eb:58:4f:86:3d:cc:93:83:43:f3:57:c2:f7:6a:
                    0e:bc:ef:42:5e:38:6b:6f:13:91:a2:cf:7a:90:00:
                    d1:a3:ad:2b:3b:e8:21:00:24:db:72:56:95:30:ae:
                    4c:66:f1:7c:30:90:ba:84:67:b8:69:68:b6:03:be:
                    21:c0:a7:63:ee:0c:d8:6e:bc:f1:ee:87:65:a6:0d:
                    94:19:3f:b6:7e:c8:ec:c1:b4:77:51:c1:c5:b9:09:
                    cb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:DB:16:34:D6:62:9B:77:DC:D4:EA:92:70:A6:14:38:87:B1:58:A1
            X509v3 Authority Key Identifier:
                keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:d2:10:07:fe:fa:f6:04:74:09:0a:1d:0b:1f:8c:f9:74:2b:
         81:4b:5c:b5:04:df:ba:8c:b1:85:15:2f:d6:b7:ce:a9:c5:44:
         53:88:cc:c5:5b:04:81:69:56:39:e1:8c:f0:24:56:f8:12:75:
         46:62:83:1e:5d:4f:8d:32:46:47:3a:9e:e8:5c:1f:10:4e:84:
         a0:30:c4:01:54:61:f6:53:03:79:79:57:99:a9:a4:19:e0:12:
         99:22:f9:a4:29:12:22:b2:97:00:a6:20:95:f7:3c:45:83:93:
         0e:3a:b4:0f:11:fc:fe:6c:c0:08:22:79:73:ba:75:2c:87:cb:
         24:f8:f3:4d:e6:f0:57:c5:74:ee:63:47:f6:d3:c4:79:ba:2d:
         50:6a:c9:29:4b:f9:18:88:7d:d0:7d:04:cb:d4:56:75:b3:1a:
         e7:02:dc:d2:0c:4b:86:20:92:c0:40:27:8e:45:88:8b:23:42:
         85:e0:b9:5d:db:dc:63:a3:dd:01:29:b2:6d:d9:8f:93:93:b7:
         6f:c7:bb:ab:1e:e6:d0:2c:ff:96:b3:a9:c7:66:71:e5:15:24:
         7a:3b:40:bf:e0:c6:2c:fb:8c:a9:9a:7f:fd:bb:e4:ae:d8:cb:
         76:ee:c2:6f:0e:3d:c1:bc:c1:db:41:fa:62:76:dd:35:90:23:
         64:f4:13:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvzUKWG6FXzhpe6hql9oVtaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4
MzFhOWQwHhcNMjYwMTI1MDQwMTQ3WhcNMjYwMTI2MDQwMTQ3WjAzMTEwLwYDVQQD
Eyg5MmRiMTYzNGQ2NjI5Yjc3ZGNkNGVhOTI3MGE2MTQzODg3YjE1OGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7YVvbEQZ20PCX3frqAokQ+1SwR7
EuA92ye4ETsOGfvRBLeuSo7fz0lCY0L51i/oXJrnk2Qdw2F18SIMKvWqSFHfV7Ws
suEHKC9b47dt9TGBorzzJBeqxiH3JikqNrZcTfX7i62fqlzWDTYJ2JSwLg92nzmn
FQpd9K2E/0FTNHM6ilqGnibJ7uQD4tUYX8FjUNcvXc0tK5Py2AGy/Kg9Wt+cFkbn
61hPhj3Mk4ND81fC92oOvO9CXjhrbxORos96kADRo60rO+ghACTbclaVMK5MZvF8
MJC6hGe4aWi2A74hwKdj7gzYbrzx7odlpg2UGT+2fsjswbR3UcHFuQnLswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJLbFjTWYpt33NTqknCmFDiHsVihMB8GA1UdIwQY
MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt
NzZhMWQ0ZDgzMTk3LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3
LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNIQB/76
9gR0CQodCx+M+XQrgUtctQTfuoyxhRUv1rfOqcVEU4jMxVsEgWlWOeGM8CRW+BJ1
RmKDHl1PjTJGRzqe6FwfEE6EoDDEAVRh9lMDeXlXmamkGeASmSL5pCkSIrKXAKYg
lfc8RYOTDjq0DxH8/mzACCJ5c7p1LIfLJPjzTebwV8V07mNH9tPEebotUGrJKUv5
GIh90H0Ey9RWdbMa5wLc0gxLhiCSwEAnjkWIiyNCheC5XdvcY6PdASmybdmPk5O3
b8e7qx7m0Cz/lrOpx2Zx5RUkejtAv+DGLPuMqZp//bvkrtjLdu7Cbw49wbzB20H6
YnbdNZAjZPQTCA==
-----END CERTIFICATE-----
Generated at Sun Jan 25 11:49:58 2026 by rpki-client