This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
File:                     guAU8cjKOWapPvOdvGEtqsDYPcA.mft (raw, json)
Hash identifier:          OiwZEM2O+ZQTs1RoirZvAN30HEQLcig79CpIAdrD+00=
Subject key identifier:   3B:80:53:3F:F7:BA:88:00:8B:16:40:A3:18:C8:AA:A0:5D:FA:D2:9D
Authority key identifier: 82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0
Certificate issuer:       /CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
Certificate serial:       019BF3F519AF9054F71ABCF85B5DEBB7FB5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
Manifest number:          0C11
Signing time:             Sun 25 Jan 2026 07:01:24 +0000
Manifest this update:     Sun 25 Jan 2026 07:01:24 +0000
Manifest next update:     Mon 26 Jan 2026 07:01:24 +0000
Files and hashes:         1: 6vNlJPUrMrbTh1eOOipn8AK2h3w.roa (hash: 5F+X9YtQX+RhbdoXXgbOWJDvAvP+YvO4D5dj6R+cMg0=)
                          2: XuGR4gys41wGOBr9uLcSOWnLX6E.roa (hash: H8Y6ppYgmlgcN1bcTGYWIEFF/87PUD4eVRIKC0ZZ42M=)
                          3: guAU8cjKOWapPvOdvGEtqsDYPcA.crl (hash: ppyd0zja2FR8ziJwBd//ujL/iraDaP0e/uVsr4jHeoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:f5:19:af:90:54:f7:1a:bc:f8:5b:5d:eb:b7:fb:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e014f1c8ca3966a93ef39dbc612daac0d83dc0
        Validity
            Not Before: Jan 25 07:01:24 2026 GMT
            Not After : Jan 26 07:01:24 2026 GMT
        Subject: CN=3b80533ff7ba88008b1640a318c8aaa05dfad29d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:24:1c:63:f3:21:b5:f0:d4:0c:20:2e:00:
                    c2:f0:50:05:f9:15:bc:64:cf:21:f7:89:61:24:30:
                    be:d0:aa:87:ac:6d:34:de:18:21:82:05:38:ed:4e:
                    bc:c2:97:b2:f4:64:fe:b5:58:a0:1d:f0:6e:bc:1a:
                    59:56:e6:6e:be:8c:6d:eb:f6:7f:d9:9b:2b:72:1b:
                    b2:08:39:e4:9c:58:69:56:2c:e0:64:3f:b5:fc:0b:
                    1a:b0:31:76:19:a9:20:f6:9f:0c:4d:3c:89:f2:d7:
                    29:1e:12:49:1d:b8:45:96:08:9b:8b:63:d5:f7:78:
                    47:36:5c:f8:94:2b:e3:a8:65:23:92:fa:ab:9f:da:
                    80:05:2a:d6:78:c8:4a:c1:19:1d:ff:c3:4b:a2:05:
                    6e:31:95:94:07:e9:4e:87:9d:c5:52:98:b8:39:c2:
                    c2:4e:a1:c1:c1:46:35:0c:76:85:68:93:e6:db:e9:
                    97:76:22:d3:c2:a5:2d:88:51:12:87:c2:2b:38:87:
                    da:a7:65:ab:a1:ab:99:01:29:39:e4:04:97:05:94:
                    6c:67:90:8c:1e:06:a5:6e:3d:83:c2:73:e1:cb:7d:
                    24:1a:0b:56:b8:d4:e6:c0:ae:b9:c8:89:2c:0a:45:
                    4d:4b:58:f1:20:03:c9:8e:cb:42:b7:51:5e:29:88:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:80:53:3F:F7:BA:88:00:8B:16:40:A3:18:C8:AA:A0:5D:FA:D2:9D
            X509v3 Authority Key Identifier:
                keyid:82:E0:14:F1:C8:CA:39:66:A9:3E:F3:9D:BC:61:2D:AA:C0:D8:3D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guAU8cjKOWapPvOdvGEtqsDYPcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/8fa78f-1d73-4c5a-9e0b-66d80ed09bc7/1/guAU8cjKOWapPvOdvGEtqsDYPcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:f4:a1:0b:d0:ff:a8:e3:e8:3e:c9:37:a4:c6:a8:49:e5:ab:
         28:76:a0:c5:9d:65:77:fb:c9:68:c7:fb:a7:f9:14:10:cf:34:
         2a:eb:fd:19:53:6b:66:89:d1:7d:51:8c:66:c1:a1:d2:8d:ca:
         52:76:de:75:41:cf:b9:1b:45:48:df:c2:f8:90:25:38:cf:21:
         99:d8:69:97:50:6e:33:d4:9e:55:bf:8a:fc:78:00:a8:32:8a:
         63:fa:22:2a:9a:e8:5b:b4:fd:92:2b:77:a5:fc:28:02:95:31:
         40:a8:76:ab:6c:b2:94:8f:a1:7c:1f:eb:6b:90:06:98:d0:58:
         36:59:a4:29:51:72:c1:b8:8b:9d:34:ab:2b:eb:09:dc:98:d0:
         af:1c:5a:74:ba:54:ae:55:b2:e2:10:bf:26:92:40:43:24:21:
         26:b5:7e:90:26:db:49:1c:bb:df:be:d3:f5:3e:84:97:52:d9:
         a7:48:59:78:a1:f6:e0:2d:33:ae:e2:e9:f3:24:08:ea:39:46:
         e3:f6:25:3c:62:bd:08:71:f1:87:42:78:2d:92:bf:20:80:71:
         a9:0c:17:5f:ac:c3:48:a3:e0:38:d4:80:79:ff:e9:ac:43:4b:
         4c:20:a6:5e:f1:df:56:28:48:f3:c3:be:78:ba:0d:54:60:25:
         6b:fb:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 11:49:14 2026 by rpki-client