This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
File:                     aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft (raw, json)
Hash identifier:          VOCD46d0SkyuVz5oy4eNfzK+KPoBN4g1XzQhOQf+A3s=
Subject key identifier:   28:75:C7:E8:B9:F4:6F:84:9C:6F:D5:28:0A:25:20:E7:EA:84:CD:6D
Authority key identifier: 69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F
Certificate issuer:       /CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
Certificate serial:       019BF3F50D5029ECAB22D6D09DEB4EEC7DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
Manifest number:          0945
Signing time:             Sun 25 Jan 2026 07:01:21 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:21 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:21 +0000
Files and hashes:         1: TaUDh7SQNSjeoUQ6njjxKFEFIz8.roa (hash: n5XH/yUmkqCjpx73R7Q/F//2yRpJ/JyjMXb5NxsqPAM=)
                          2: aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl (hash: HIBL69R5G5Vnd87EBTS3g62n9whGzQ1WKYC62l4+dew=)
                          3: hoOh2lQ6xX4vf4vHzx-4VSNBDEQ.roa (hash: QvTMus8rtJvNC+3lcBpZ7MeQ/XKaChIMsEOr9EuRiJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:0d:50:29:ec:ab:22:d6:d0:9d:eb:4e:ec:7d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=696c67867e0e202248e7f5e3cbd574bd1a32fe3f
        Validity
            Not Before: Jan 25 07:01:21 2026 GMT
            Not After : Jan 26 07:01:21 2026 GMT
        Subject: CN=2875c7e8b9f46f849c6fd5280a2520e7ea84cd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:53:f5:3b:5d:95:2f:a6:94:12:a2:33:0f:17:
                    a7:98:fe:81:54:8f:b5:14:59:a7:6b:02:98:3e:71:
                    41:9b:b8:30:97:54:4c:01:8a:3b:fd:f5:d9:65:a8:
                    3a:fc:d9:5f:2c:d3:e4:c3:cf:6b:fb:6e:4a:d9:0d:
                    03:2e:16:1e:21:1c:36:60:a5:98:8d:b3:7f:21:1c:
                    52:ff:a5:4d:ca:88:f2:b0:a6:c4:95:bd:00:c5:19:
                    5d:bc:ff:97:fb:e4:af:fb:2e:67:e9:0d:e0:25:bc:
                    23:55:b5:2a:3e:2d:f8:6a:18:79:d1:3f:f9:ea:d5:
                    57:0b:68:51:fd:60:0b:eb:37:3f:5c:53:b8:7d:dd:
                    e9:51:78:43:3c:f3:96:85:55:7d:85:bb:6b:9f:bd:
                    89:08:37:54:13:95:18:c7:30:fd:45:c0:f9:32:16:
                    21:03:39:30:80:be:77:88:1c:d9:7d:62:b3:17:72:
                    19:6f:d6:85:04:45:92:52:d3:28:c5:ab:34:47:5f:
                    15:85:5f:98:8a:af:00:a7:c0:c2:30:de:15:09:92:
                    97:d3:db:ba:29:37:05:c0:72:9d:e1:47:b4:cc:8c:
                    9f:2f:71:01:1c:5f:ac:46:f3:21:b3:3c:4c:1c:3a:
                    39:c5:c6:15:76:1e:94:36:43:dd:2e:30:6b:71:ed:
                    c7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:75:C7:E8:B9:F4:6F:84:9C:6F:D5:28:0A:25:20:E7:EA:84:CD:6D
            X509v3 Authority Key Identifier:
                keyid:69:6C:67:86:7E:0E:20:22:48:E7:F5:E3:CB:D5:74:BD:1A:32:FE:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWxnhn4OICJI5_Xjy9V0vRoy_j8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ec0453-7e8f-41b1-85d1-1cb1a8f80238/1/aWxnhn4OICJI5_Xjy9V0vRoy_j8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:79:4c:53:c6:da:59:17:8a:b2:f0:d4:ed:2b:c6:4a:77:71:
         a3:7c:bf:43:bf:80:4f:0a:4a:ee:c0:df:c3:01:a9:1c:c3:ba:
         3b:56:fc:2e:f6:94:86:c6:e0:28:08:8c:53:a3:ce:3b:ce:e1:
         92:ce:08:2d:13:13:f6:95:b3:06:a3:00:13:b0:ed:88:08:b2:
         0b:2e:f1:0d:ae:e7:db:d2:c2:d6:df:e4:0d:47:e0:78:06:b8:
         95:25:19:b0:59:97:61:94:94:f1:cc:90:92:28:c7:96:00:a1:
         e9:3f:60:2f:ab:a0:40:67:4e:41:2e:38:f7:2a:86:d0:56:b8:
         e1:89:c3:7f:55:6a:18:83:af:38:a6:83:34:72:5f:d7:8a:8a:
         38:50:54:0a:38:7f:5a:d1:de:8b:99:0c:38:b2:ba:05:2c:e8:
         0e:7f:8a:b1:0d:12:c5:ea:7e:26:66:98:0a:c4:83:d7:3b:69:
         4f:ae:aa:88:cc:b7:cf:43:7a:d3:b3:68:be:a7:7a:87:53:5d:
         6d:cf:9f:35:4d:29:e0:11:14:44:55:88:94:c4:07:95:f5:0e:
         ae:2a:64:87:7f:6a:cf:49:00:ea:85:bc:42:3a:4f:a1:aa:42:
         68:21:1c:28:9a:90:2c:19:eb:6a:ec:aa:a5:59:fc:e6:60:7a:
         cd:42:7d:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:19:08 2026 by rpki-client