This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
File:                     OoOZNq7v8ohnjncmMwIPolm9nPI.mft (raw, json)
Hash identifier:          oAiU9y2NvEkMINRUQJLr+xfo/fZn3I5bnuLLIxoRylI=
Subject key identifier:   DF:16:1C:8C:A8:EE:6F:2A:61:F4:77:CA:F0:50:6A:F9:C4:8F:0B:25
Authority key identifier: 3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2
Certificate issuer:       /CN=3a839936aeeff288678e772633020fa259bd9cf2
Certificate serial:       019BF8ADD1D182C847B24E501727E46B5304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
Manifest number:          07B4
Signing time:             Mon 26 Jan 2026 05:01:39 +0000
Manifest this update:     Mon 26 Jan 2026 05:01:39 +0000
Manifest next update:     Tue 27 Jan 2026 05:01:39 +0000
Files and hashes:         1: OoOZNq7v8ohnjncmMwIPolm9nPI.crl (hash: g/EXayLN8Fna16zDUE3Jqjo4Itwh7uHzZgpiqTwupBE=)
                          2: PMdpUUy3N8aucFQis2EHtpFZuIY.roa (hash: 4gf7AvqhQ7Z0YpFJcEQijaezm8f7LNn2p+OXg9bnpFY=)
                          3: y2_r5sbY9Lv_uRDh7BVz6TP_Rqk.roa (hash: elggw6C3t4Wz+4yMu7U0O34nBVY/GyhPWM7xDo4hWNU=)
                          4: z1DkqtK6bhv2xKbEFbpfSZsh_Yg.roa (hash: x3T0qFMVxxd2FdR3A4LaLQ4+c2t85rP2XyfqD4Q6wxc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:ad:d1:d1:82:c8:47:b2:4e:50:17:27:e4:6b:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a839936aeeff288678e772633020fa259bd9cf2
        Validity
            Not Before: Jan 26 05:01:39 2026 GMT
            Not After : Jan 27 05:01:39 2026 GMT
        Subject: CN=df161c8ca8ee6f2a61f477caf0506af9c48f0b25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b1:32:a2:c5:f5:ef:b4:13:89:0c:9f:7a:e7:
                    47:5d:bf:e8:e1:e4:83:db:57:6e:70:c2:a6:bf:1a:
                    03:39:e2:ba:b1:52:ed:12:d4:db:e8:c4:99:5b:a3:
                    0e:80:33:80:38:18:6b:23:81:31:3f:4d:ad:d9:fd:
                    a9:cc:4c:d6:46:ce:c9:d2:ef:ce:e7:76:82:f5:cc:
                    f5:df:84:05:3f:2e:d8:fb:ee:2c:9b:90:f9:ff:2d:
                    ac:94:08:30:00:69:02:bd:ae:30:00:2d:ac:db:6a:
                    69:5b:35:4a:86:b3:70:fe:49:a8:8d:63:11:3e:a5:
                    33:fb:e3:b5:88:af:d4:01:50:06:9b:16:ea:bd:3e:
                    dc:b5:a7:25:5a:e6:42:a6:97:fa:be:4b:a6:09:0e:
                    09:29:7e:5b:49:78:9b:1b:72:7e:0a:eb:79:0b:0a:
                    2d:b1:45:e4:99:d2:dc:e6:92:dc:6c:7c:1b:db:26:
                    7a:6f:05:f3:aa:01:5a:e7:4f:b6:55:06:f7:20:28:
                    3a:0b:3e:f8:ca:be:6b:a0:fc:72:06:04:f4:f9:db:
                    ed:2d:7b:97:0d:09:59:1f:03:b8:53:b4:55:06:26:
                    bd:72:9d:37:4a:7e:f2:6f:6d:18:0d:fc:4d:13:32:
                    a4:37:4d:23:63:32:bc:89:9a:8e:70:7a:a0:93:bd:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:1C:8C:A8:EE:6F:2A:61:F4:77:CA:F0:50:6A:F9:C4:8F:0B:25
            X509v3 Authority Key Identifier:
                keyid:3A:83:99:36:AE:EF:F2:88:67:8E:77:26:33:02:0F:A2:59:BD:9C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OoOZNq7v8ohnjncmMwIPolm9nPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/5c6745-768e-4d61-b604-835f4e37283c/1/OoOZNq7v8ohnjncmMwIPolm9nPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:94:f6:37:e7:f4:97:9b:c2:7d:f0:4c:63:2a:00:43:d7:6e:
         15:fb:dd:bd:60:77:07:66:df:11:5e:20:d0:78:4c:c3:eb:82:
         87:91:80:c5:ad:5f:8b:21:80:a6:e5:84:b5:6f:a4:92:cc:8d:
         d5:70:75:f1:95:a7:cf:4e:33:23:20:e3:44:b5:bd:42:64:d3:
         77:9d:84:38:7f:37:46:71:af:3c:d2:1c:b1:8a:c6:f3:b5:49:
         39:d8:df:61:8d:14:46:ca:e1:3b:8e:e1:1c:4a:9b:18:74:25:
         4d:58:b4:44:14:ce:10:d7:20:0c:75:33:36:cb:35:87:07:f9:
         40:d4:58:ed:7b:f6:4c:ad:ae:b1:c6:81:3f:5e:7c:4e:1d:cb:
         3e:8e:83:0e:e8:62:4b:60:48:f8:cc:91:b9:b6:ab:7d:3c:13:
         f6:85:a7:14:ab:8b:bf:25:81:fb:5d:7b:f4:55:51:84:a5:bd:
         b0:e6:7d:af:1b:05:8e:9b:0e:3e:64:f3:79:87:97:23:a0:d4:
         4f:d9:92:1d:58:82:06:fb:fa:e8:02:d4:fd:97:c1:47:ea:e3:
         72:6b:85:ed:45:6c:fd:17:69:8b:54:6b:0e:b8:61:4e:d8:d3:
         3a:35:d6:44:f2:b2:b5:8d:70:06:80:23:51:ac:cc:f6:e2:d7:
         a3:00:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 08:42:05 2026 by rpki-client