This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
File:                     AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft (raw, json)
Hash identifier:          vaWosdRlKCXcbfDiQa39USYkO0BsCm7l/f2Ht/u+yeY=
Subject key identifier:   FF:4E:E2:2C:A4:EE:56:34:6E:E2:71:A9:5F:88:5C:12:CD:AF:94:E0
Authority key identifier: 01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0
Certificate issuer:       /CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
Certificate serial:       019BF4D03EC3462F884F8A49DCA9CA0E87DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
Manifest number:          16AE
Signing time:             Sun 25 Jan 2026 11:00:46 +0000
Manifest this update:     Sun 25 Jan 2026 11:00:46 +0000
Manifest next update:     Mon 26 Jan 2026 11:00:46 +0000
Files and hashes:         1: 6uyLPr7GcIkDSRR1cBioO7oGEF0.roa (hash: FfvCuloLAdVXrZLuuHrf1reVNj9KC+EjXSXR/em79FA=)
                          2: AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl (hash: 58kRbPvP/TtGOWoxBp0mGOPz7f9YYTODgHPqcIyR/Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:3e:c3:46:2f:88:4f:8a:49:dc:a9:ca:0e:87:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0148d2ca8a2b43b6cad25b22265354fe303911a0
        Validity
            Not Before: Jan 25 11:00:46 2026 GMT
            Not After : Jan 26 11:00:46 2026 GMT
        Subject: CN=ff4ee22ca4ee56346ee271a95f885c12cdaf94e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:c4:00:c5:11:2c:83:86:a3:e5:71:ff:77:
                    d3:ee:ac:99:80:72:cc:ce:9f:23:b1:ba:f3:fe:08:
                    b9:60:93:22:58:61:f7:90:f0:a5:61:9f:54:1e:8a:
                    07:83:76:d6:d3:6d:50:eb:b0:38:8c:cf:8b:53:c9:
                    6b:4e:ea:de:4b:32:30:93:3c:43:8c:2f:f7:96:41:
                    dc:be:65:7f:ff:04:b4:60:83:9b:e2:b9:89:4a:a1:
                    ff:e6:e7:41:4a:f0:2c:2b:9a:fe:24:84:73:ff:80:
                    bd:04:cf:4d:32:27:52:7a:f8:e4:b4:b1:7f:f0:a4:
                    b5:3a:4b:23:1a:3d:ed:1b:3f:60:e2:8a:68:93:82:
                    6c:55:98:e6:28:cc:70:f8:cf:39:cf:af:d3:04:3c:
                    fc:64:f4:0e:1e:a6:ca:13:37:7d:95:71:65:51:5b:
                    db:cd:da:01:af:41:f8:e0:29:e8:6d:2e:10:27:5c:
                    1e:25:f8:ef:25:f9:65:8b:f2:1d:1e:fb:d7:35:1a:
                    30:4f:a4:98:2e:d6:da:29:6d:c0:7c:dd:37:5e:4e:
                    b5:8e:1c:26:8d:d1:e4:03:7a:cf:53:8f:fe:2c:60:
                    5b:e6:52:91:6c:34:1f:70:89:3d:e4:d7:05:f0:19:
                    be:f4:d4:a3:88:08:ec:3c:73:90:24:4e:7e:45:81:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4E:E2:2C:A4:EE:56:34:6E:E2:71:A9:5F:88:5C:12:CD:AF:94:E0
            X509v3 Authority Key Identifier:
                keyid:01:48:D2:CA:8A:2B:43:B6:CA:D2:5B:22:26:53:54:FE:30:39:11:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AUjSyoorQ7bK0lsiJlNU_jA5EaA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b78cd-d005-492c-9167-1bf868a03538/1/AUjSyoorQ7bK0lsiJlNU_jA5EaA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:30:90:c7:80:ec:7d:ad:cb:92:86:2b:f6:24:fa:b5:b2:c1:
         b9:bf:ef:9a:dd:f5:b2:4d:3f:b6:36:16:8a:aa:dc:79:d2:78:
         9e:82:b9:ed:6d:d7:f3:4e:6a:92:5c:4f:14:0b:9d:22:ae:33:
         10:d6:0b:e2:38:08:47:79:38:cb:c7:3e:05:36:5d:c2:eb:f5:
         25:e3:48:3c:ef:26:46:b3:8b:0f:b8:8a:9d:81:06:d2:0c:11:
         e2:a6:b5:aa:c6:04:e7:da:a5:ba:54:b2:32:88:6f:41:d3:4e:
         3e:1e:01:a2:43:84:97:04:8e:85:a6:96:64:1e:3a:c0:03:0e:
         6a:35:42:d6:ba:a7:72:94:ea:d1:96:d4:2b:33:76:9c:cf:f0:
         0e:b4:4c:4d:a7:8f:16:b0:7c:b1:87:39:9f:47:d8:ec:cc:81:
         0f:ee:f8:8c:ae:b2:db:79:53:77:47:d5:a8:8f:ce:76:52:b7:
         fa:87:33:bd:27:e1:3e:2f:c7:60:c5:17:ef:d9:c6:2e:2e:83:
         26:5b:be:3e:b5:c5:35:d6:fd:52:86:d1:9b:17:01:cb:7f:65:
         07:78:ae:50:5a:29:c5:a3:7b:eb:31:8c:c1:36:cb:17:c1:78:
         69:1b:90:84:08:fc:9f:be:64:e2:b4:b6:0a:ba:43:df:15:4f:
         e2:06:46:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:29:31 2026 by rpki-client