This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
File:                     Om4uf_LHAsirUUn-6nF1mRxzQJw.mft (raw, json)
Hash identifier:          fy0IdU+syb3ZMrypuGhzTs5upI52ZL2FxsTfFwHL0IQ=
Subject key identifier:   6E:80:2F:F4:B1:73:8F:ED:AE:1C:2C:0C:71:02:68:84:C1:58:ED:05
Authority key identifier: 3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C
Certificate issuer:       /CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
Certificate serial:       019BF5ABDAF8EA7FD2ABF8A57B19CF402BBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
Manifest number:          0801
Signing time:             Sun 25 Jan 2026 15:00:39 +0000
Manifest this update:     Sun 25 Jan 2026 15:00:39 +0000
Manifest next update:     Mon 26 Jan 2026 15:00:39 +0000
Files and hashes:         1: 2vFmTEXL4sIOGvvxET_z9OsJtkM.roa (hash: hE+J8l/9QyGd/yFHBwyjIvFqStRGpbN8ok17t6YgQA4=)
                          2: Om4uf_LHAsirUUn-6nF1mRxzQJw.crl (hash: EwLzCCn76vlCZhgKUMFA5yacXWNwvibYhJ5uK0zePKU=)
                          3: mYqU1cd-P8iQcqPiyiQeRNrIHis.roa (hash: HrYx/jKSjrT03a/YJLuKF9z9SwUK92ZUFYumLYD8iHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ab:da:f8:ea:7f:d2:ab:f8:a5:7b:19:cf:40:2b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a6e2e7ff2c702c8ab5149feea7175991c73409c
        Validity
            Not Before: Jan 25 15:00:39 2026 GMT
            Not After : Jan 26 15:00:39 2026 GMT
        Subject: CN=6e802ff4b1738fedae1c2c0c71026884c158ed05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8a:9a:b5:ba:c5:71:97:b5:00:ef:2b:42:50:
                    67:91:92:7e:f3:88:41:17:e3:bb:b9:c0:ac:62:20:
                    f8:73:f8:02:d2:81:88:77:0c:92:1d:64:34:41:f1:
                    6f:3d:cc:0d:8c:e1:fc:b9:16:2a:b4:d7:c7:af:1a:
                    73:84:7d:1f:51:fe:d2:55:86:de:c7:f8:0d:f9:8f:
                    04:8b:8c:26:4e:93:a7:8c:48:ed:b9:21:6b:0f:17:
                    2b:81:8c:2a:9e:a8:e5:12:df:8e:be:bb:ce:9f:b3:
                    70:eb:f5:93:f0:5b:18:b7:f0:60:a9:85:e6:88:b1:
                    a1:02:35:72:56:ed:3f:ba:a6:f0:db:b8:d9:47:22:
                    36:5b:0f:5a:50:fc:28:b0:87:46:80:d7:4d:5f:f0:
                    f0:45:20:f8:36:85:a3:ed:13:e7:33:b4:b7:c1:a6:
                    f3:fd:34:ee:e0:47:76:f7:dd:21:1a:e1:b5:2d:96:
                    c7:78:59:a7:36:15:16:52:eb:03:44:bd:33:97:cf:
                    a1:9f:a9:83:3e:68:34:82:8c:eb:3d:46:13:05:3e:
                    f7:04:42:8c:60:4e:ae:5e:ff:f1:fe:97:5c:5f:77:
                    df:95:3f:92:47:07:60:72:c6:03:af:39:5a:af:40:
                    c9:69:e7:f6:73:18:bf:8d:2a:38:02:9b:11:dc:b4:
                    e9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:80:2F:F4:B1:73:8F:ED:AE:1C:2C:0C:71:02:68:84:C1:58:ED:05
            X509v3 Authority Key Identifier:
                keyid:3A:6E:2E:7F:F2:C7:02:C8:AB:51:49:FE:EA:71:75:99:1C:73:40:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Om4uf_LHAsirUUn-6nF1mRxzQJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/188542-d4f7-4aa2-adc7-775a05788cf5/1/Om4uf_LHAsirUUn-6nF1mRxzQJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:99:32:91:fb:f4:1e:ea:49:98:d9:bb:65:b0:43:d2:c4:90:
         a2:fe:85:6b:72:84:f0:b5:e4:e6:30:1a:00:ec:46:d0:4f:6d:
         ed:52:40:5c:c1:79:9d:74:30:ef:72:57:0d:d2:5e:8b:a4:24:
         14:c1:67:8a:03:5c:a4:b6:f8:45:3f:88:9c:87:9e:7a:0e:ca:
         5a:18:5c:78:8a:cf:f8:f4:15:8a:66:14:ce:e3:0b:8f:70:5c:
         d9:14:57:53:8e:7c:af:b2:c5:fb:47:50:e0:08:d1:cd:d5:48:
         20:3a:0d:b2:6c:61:aa:48:61:69:d5:d8:eb:f1:7b:f4:3a:75:
         44:00:8a:8d:de:f4:04:f1:55:ac:93:5e:a1:dd:8e:3f:ca:87:
         ce:22:06:5e:29:d0:92:dd:39:e7:97:e5:27:f5:b3:27:fd:92:
         f9:c5:6e:7e:73:c6:50:89:75:06:ec:07:17:91:92:99:be:1a:
         38:aa:2a:6d:f1:c9:a2:05:50:cc:e7:5f:8a:d9:13:22:d2:65:
         4d:32:f8:0a:81:ed:02:05:5b:d5:e5:23:a6:68:08:bf:c3:b1:
         32:7c:ce:13:ba:9c:e3:b4:49:c7:9e:60:54:7e:92:a8:f4:15:
         8c:bc:73:36:3f:8a:4f:d1:be:38:fe:3b:ab:7a:d5:cb:49:3c:
         26:4d:79:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1q9r46n/Sq/ilexnPQCu/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNmUyZTdmZjJjNzAyYzhhYjUxNDlmZWVhNzE3NTk5MWM3
MzQwOWMwHhcNMjYwMTI1MTUwMDM5WhcNMjYwMTI2MTUwMDM5WjAzMTEwLwYDVQQD
Eyg2ZTgwMmZmNGIxNzM4ZmVkYWUxYzJjMGM3MTAyNjg4NGMxNThlZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4qatbrFcZe1AO8rQlBnkZJ+84hB
F+O7ucCsYiD4c/gC0oGIdwySHWQ0QfFvPcwNjOH8uRYqtNfHrxpzhH0fUf7SVYbe
x/gN+Y8Ei4wmTpOnjEjtuSFrDxcrgYwqnqjlEt+OvrvOn7Nw6/WT8FsYt/BgqYXm
iLGhAjVyVu0/uqbw27jZRyI2Ww9aUPwosIdGgNdNX/DwRSD4NoWj7RPnM7S3wabz
/TTu4Ed2990hGuG1LZbHeFmnNhUWUusDRL0zl8+hn6mDPmg0gozrPUYTBT73BEKM
YE6uXv/x/pdcX3fflT+SRwdgcsYDrzlar0DJaef2cxi/jSo4ApsR3LTp5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6AL/Sxc4/trhwsDHECaITBWO0FMB8GA1UdIwQY
MBaAFDpuLn/yxwLIq1FJ/upxdZkcc0CcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzct
Nzc1YTA1Nzg4Y2Y1LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8xODg1NDItZDRmNy00YWEyLWFkYzctNzc1YTA1Nzg4Y2Y1
LzEvT200dWZfTEhBc2lyVVVuLTZuRjFtUnh6UUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR5kykfv0
HupJmNm7ZbBD0sSQov6Fa3KE8LXk5jAaAOxG0E9t7VJAXMF5nXQw73JXDdJei6Qk
FMFnigNcpLb4RT+InIeeeg7KWhhceIrP+PQVimYUzuMLj3Bc2RRXU458r7LF+0dQ
4AjRzdVIIDoNsmxhqkhhadXY6/F79Dp1RACKjd70BPFVrJNeod2OP8qHziIGXinQ
kt0555flJ/WzJ/2S+cVufnPGUIl1BuwHF5GSmb4aOKoqbfHJogVQzOdfitkTItJl
TTL4CoHtAgVb1eUjpmgIv8OxMnzOE7qc47RJx55gVH6SqPQVjLxzNj+KT9G+OP47
q3rVy0k8Jk15gg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 01:33:27 2026 by rpki-client