This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          C0ZgkMqbb+ps/Vnp79MEEymIMj0U5+9SL3T1RnP7gO4=
Subject key identifier:   7B:E7:EB:62:E5:B3:89:4E:2A:0F:12:C8:E0:63:64:76:6F:09:8D:9F
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       019BF5E317B91C342C9F384CBDE0A440CC51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          03EF
Signing time:             Sun 25 Jan 2026 16:00:59 +0000
Manifest this update:     Sun 25 Jan 2026 16:00:59 +0000
Manifest next update:     Mon 26 Jan 2026 16:00:59 +0000
Files and hashes:         1: 3VvlIVLD8nV-Kprr00nGUqwlEG0.roa (hash: ueTtVv9Izvar/a32kf0F4hmGSZUFBIbcRRQsZSddarI=)
                          2: 7HJItND-ZHUyWIc0zlIoIbcu0kU.roa (hash: 9Bz34LYfCAabYfpSmfTeNq9WvdNCYgrnyawzxf6Rfac=)
                          3: cBS-3HpC_a4rHcbd8xWkU8ryqAo.roa (hash: BFwk1ZVFsJ92QmF6WqyS8lrea+ZBvLbcAz/u0+3fQLc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: BLSa7wrduOicNili0GhnTjV4pz5lAja/bM0LQIUiuH4=)
                          5: wpoL_iSupuiaeUF0rSK5oTJDYgk.roa (hash: tmpMUF0ltyMmfrFAPsjl7BnWO5nUIh5IyWezk54S+Pw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:17:b9:1c:34:2c:9f:38:4c:bd:e0:a4:40:cc:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Jan 25 16:00:59 2026 GMT
            Not After : Jan 26 16:00:59 2026 GMT
        Subject: CN=7be7eb62e5b3894e2a0f12c8e06364766f098d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:38:05:34:0e:d0:28:4f:e3:06:9c:ef:31:53:
                    3b:35:29:8d:e5:e7:26:0a:34:a6:f5:53:23:27:6a:
                    6e:35:21:1d:4e:55:e0:58:77:0b:28:df:64:e5:b8:
                    e5:6f:fd:86:12:8f:29:98:5a:db:d7:1f:1b:39:ab:
                    60:8a:62:b7:c6:64:3f:65:07:fb:e3:e3:a0:b6:9c:
                    ca:d0:4f:77:60:00:e1:d1:0a:63:22:47:85:4c:61:
                    53:bf:73:93:06:89:87:40:94:2b:1c:0f:a4:0f:24:
                    37:5a:49:e1:e1:11:33:86:5a:51:d6:27:a3:15:58:
                    52:9d:9b:0b:1e:2d:af:f5:a5:17:00:44:25:3c:df:
                    f5:42:8e:2a:fc:b3:e7:29:39:b6:b8:87:a3:32:ad:
                    99:9d:b1:59:70:39:9f:3d:d6:0d:b5:95:29:6b:2e:
                    63:fa:f1:f6:6a:90:38:c0:37:9c:58:ac:73:f2:a5:
                    05:d4:1c:60:59:e5:32:9e:61:03:a0:ad:84:4f:b1:
                    cd:4d:60:45:aa:aa:ed:4d:d0:b8:92:c5:35:3c:f9:
                    1c:28:f2:3f:2d:cd:80:bd:a2:2a:5a:47:88:5b:9f:
                    90:8d:04:a9:cd:32:9a:f1:ec:d4:ec:b3:97:cd:83:
                    60:6f:7e:3f:b6:48:6a:fa:1c:53:19:a5:c3:db:61:
                    73:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E7:EB:62:E5:B3:89:4E:2A:0F:12:C8:E0:63:64:76:6F:09:8D:9F
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:78:c2:bc:4e:da:95:6b:e2:d0:bc:a3:86:b3:8f:b7:ec:1f:
         89:3f:9b:72:e6:17:8a:26:60:c6:b2:15:8b:4d:fe:2e:87:f3:
         0f:60:12:f9:b5:00:07:ac:97:62:02:5c:13:3a:c0:88:57:e6:
         51:3a:d6:44:2b:54:48:48:28:91:cc:65:0a:78:e6:e5:17:97:
         9b:48:cc:49:c8:e9:8f:91:95:89:c0:92:ca:64:cc:52:5e:89:
         f3:1f:18:ac:89:d1:7e:76:48:2d:08:36:96:f7:81:b0:ba:32:
         a0:58:f3:0e:dd:32:49:e1:04:7f:c2:22:f2:ed:df:ba:e1:f3:
         36:70:95:15:ea:c1:68:8a:bb:e9:bb:13:64:37:1c:9d:21:f5:
         fd:d0:8a:72:43:1b:90:57:c1:8c:dc:9e:52:c4:83:9e:1b:95:
         2e:63:10:b3:4a:df:aa:12:28:86:7b:52:11:a3:81:81:03:04:
         1f:9e:3c:da:f7:d5:88:67:5f:4a:9d:32:27:f9:07:a8:67:b4:
         27:82:05:af:4b:e2:a4:7b:53:ad:bd:a8:c1:0e:c1:64:89:51:
         41:78:1e:dd:fa:2a:8a:28:7f:63:13:13:c1:73:af:52:74:41:
         fc:0c:6d:c4:0c:48:0e:02:66:65:6b:91:71:71:4c:aa:1d:54:
         7b:34:dd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:01:22 2026 by rpki-client