This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
File:                     oOOBtudsuVIOjY9Wd27KD-F2zEA.mft (raw, json)
Hash identifier:          zBocm/MsTylYiGAuuLa2sNyikjgtV0u9uWaoBVvy5aM=
Subject key identifier:   C5:F6:60:73:9D:71:45:09:0E:44:C5:4C:E4:DC:DD:AF:A5:44:70:E6
Authority key identifier: A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40
Certificate issuer:       /CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
Certificate serial:       019BF8080D035C14E839E36746B06EC126E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
Manifest number:          17F9
Signing time:             Mon 26 Jan 2026 02:00:35 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:35 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:35 +0000
Files and hashes:         1: EqeB8tqHFp5nwKidq-l-rJcDnGA.roa (hash: LkoQtN+QmOCni6JN0Z5FUtSBkw3mqkVOTFE6VSZr0m8=)
                          2: R0klPunBOqp25e5iaWkRszu-ET8.roa (hash: VdL7X950DAJPhtKYFbxaa5UQZUjNVMuXiqFZIijFTEU=)
                          3: U13FecX6J3UOL0Ga46JJjAYTBnM.roa (hash: jhsgEsNANGrcwvVO7xJiaTQ5oa51oynlcgVfqCGIYnY=)
                          4: V2TMTG4WDi8rsRzuUJ35K6X29Mw.roa (hash: M4JvfosFkWwb5FMHFRCzlviyPCyGNqJtznLLB1q9hHc=)
                          5: oOOBtudsuVIOjY9Wd27KD-F2zEA.crl (hash: mtBvgQe1tLYnNP5C+GL73QLParRXUSOh3vJiS5CEGxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:0d:03:5c:14:e8:39:e3:67:46:b0:6e:c1:26:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0e381b6e76cb9520e8d8f56776eca0fe176cc40
        Validity
            Not Before: Jan 26 02:00:35 2026 GMT
            Not After : Jan 27 02:00:35 2026 GMT
        Subject: CN=c5f660739d7145090e44c54ce4dcddafa54470e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ba:60:0e:25:03:46:c8:06:15:1a:8c:03:f9:
                    a9:48:c6:70:f1:1b:a9:03:5d:a9:27:81:38:d9:d4:
                    b7:08:09:94:7b:46:88:69:36:44:82:6c:a4:ad:b2:
                    1b:2c:dd:6b:b9:b0:a2:d7:41:b5:6b:3a:14:56:78:
                    f5:94:e1:eb:c0:bc:b9:87:4e:34:22:54:fe:e6:14:
                    75:13:3d:33:67:7d:30:b8:f3:32:7e:23:44:5c:16:
                    d1:2d:b4:20:38:d1:f3:52:9c:b1:e7:ed:9e:cd:42:
                    5b:80:35:25:58:49:ef:94:db:d4:4f:76:27:57:67:
                    28:2b:a7:1d:4f:a0:6f:17:46:b7:d8:43:26:0a:81:
                    29:d5:99:70:c3:32:5d:27:80:cc:ff:28:ca:85:47:
                    7a:ae:68:e1:a0:63:89:10:f5:1e:70:d2:9e:59:24:
                    aa:2d:a7:71:98:50:f2:99:4b:fe:4c:11:7d:a6:bd:
                    cc:7d:ce:7b:6e:a0:e8:ea:53:6e:d2:9b:13:bd:05:
                    1b:3c:d7:92:3e:d0:e1:b5:56:c5:47:fb:b4:92:13:
                    d9:34:d2:30:4a:c9:32:8c:e9:b5:60:5c:b8:a2:2f:
                    70:22:1d:47:f2:b4:d5:6d:94:b7:e0:f6:d4:f8:6b:
                    37:37:f5:1f:b9:de:bf:ae:c0:c2:1d:95:b6:39:90:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F6:60:73:9D:71:45:09:0E:44:C5:4C:E4:DC:DD:AF:A5:44:70:E6
            X509v3 Authority Key Identifier:
                keyid:A0:E3:81:B6:E7:6C:B9:52:0E:8D:8F:56:77:6E:CA:0F:E1:76:CC:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oOOBtudsuVIOjY9Wd27KD-F2zEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/8e6f08-30f0-46dd-a7a1-a9c384128d42/1/oOOBtudsuVIOjY9Wd27KD-F2zEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:0c:18:55:9c:ad:56:d7:3b:10:cc:31:cd:12:a5:44:cf:
         ce:16:a7:ca:cd:e8:ca:72:be:e6:7d:41:85:f8:d1:6d:7c:95:
         4c:2c:6e:80:71:2c:91:c8:09:70:99:20:d3:be:79:82:70:95:
         69:aa:6d:65:e2:83:77:01:9e:ca:01:e0:6f:e8:e0:18:30:8d:
         b9:33:3b:c9:ae:27:e6:7a:d0:f8:94:7d:3d:0e:48:38:e5:6e:
         d7:6a:fe:09:25:ac:33:2f:4d:df:19:98:ea:e6:7e:0c:e6:f6:
         50:a6:5b:91:f6:8a:5d:60:27:9b:37:14:59:db:4d:d6:73:63:
         4c:ae:e1:53:ba:e7:25:42:fc:6c:02:23:bf:f1:2c:5a:81:a8:
         26:20:83:c0:68:f0:f1:50:61:c7:e1:bc:d2:81:0d:0c:86:95:
         8d:e9:61:9c:1c:39:5e:d8:50:6d:26:13:b5:fa:01:4f:d4:2b:
         c8:f6:d5:2c:83:45:8e:a3:f1:8f:d4:98:5b:e9:3a:fc:79:a7:
         96:d4:44:10:ff:af:3c:2c:11:ba:ae:a1:08:e9:c9:74:ec:11:
         c6:3b:2d:bc:54:b1:97:34:2b:67:38:bf:a6:c4:a8:f6:49:7d:
         0d:10:b3:1c:0f:ef:04:92:61:ec:3f:56:b2:de:40:cd:28:b9:
         f5:ab:f6:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:24:37 2026 by rpki-client