This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          YjrO+76n3iPREN6YFaZoJ6AZ6snsWJSApT/KoPxsd0k=
Subject key identifier:   98:23:62:4B:87:77:A6:6C:7C:BA:E8:DC:FC:C4:78:CA:90:D5:E0:7A
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       019BF19847F545B09B86310E13F701851FC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          151D
Signing time:             Sat 24 Jan 2026 20:00:47 +0000
Manifest this update:     Sat 24 Jan 2026 20:00:47 +0000
Manifest next update:     Sun 25 Jan 2026 20:00:47 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: sZP/uat3Y/4SiCeoROy8mdEUNc7aFfqDh8DaODy3X2Y=)
                          2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
                          3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
                          4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 20:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:98:47:f5:45:b0:9b:86:31:0e:13:f7:01:85:1f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: Jan 24 20:00:47 2026 GMT
            Not After : Jan 25 20:00:47 2026 GMT
        Subject: CN=9823624b8777a66c7cbae8dcfcc478ca90d5e07a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:45:e5:d8:a4:8f:9d:97:3e:8f:3c:6d:e9:66:
                    5a:4a:45:7a:62:4a:d3:6e:71:f7:a1:df:c5:28:ca:
                    23:f3:62:86:b9:58:ba:c7:f5:27:51:d9:2b:b1:71:
                    45:b5:f2:35:4d:85:93:c0:fc:d3:16:db:af:60:b9:
                    1b:22:aa:57:a3:8f:62:53:e5:14:9f:4c:e3:25:a1:
                    02:93:63:84:68:75:3e:94:bd:57:cf:98:da:90:62:
                    90:65:10:f4:8c:ac:51:c1:30:84:17:0f:f8:43:ae:
                    57:f0:ad:2d:6b:fb:da:dd:ec:ee:7b:41:d4:66:43:
                    c6:20:f0:3d:6e:e7:d8:3d:3e:82:7f:4e:47:3d:7f:
                    74:b3:69:5d:2e:0a:0d:11:09:b9:61:0b:8f:59:e2:
                    59:57:f9:a8:56:28:4d:29:f8:b7:7e:4b:0f:24:65:
                    d3:c9:a3:6a:8c:23:11:ff:90:89:a0:53:5c:b4:16:
                    c8:d4:ee:da:2f:0e:57:8c:1b:72:c4:b7:7c:67:29:
                    79:be:29:97:48:34:bc:95:41:38:19:9f:a1:89:8e:
                    63:c5:b6:33:5e:3e:16:50:7a:5d:5c:fb:cb:5d:6a:
                    8b:18:24:74:d9:23:ea:14:4b:a0:6a:bb:42:36:2c:
                    10:d2:35:62:fa:27:c8:ec:e5:5b:36:53:80:0f:42:
                    07:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:23:62:4B:87:77:A6:6C:7C:BA:E8:DC:FC:C4:78:CA:90:D5:E0:7A
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:82:05:c2:7c:69:2a:e6:82:1e:61:d9:7a:0a:0c:9f:6c:
         33:0a:6c:0c:5b:fe:16:18:b0:86:94:82:72:06:30:fb:62:e4:
         49:ee:e7:7d:47:e9:58:cd:98:0d:d5:dd:cb:e4:da:28:d6:22:
         2a:e6:f5:2b:d6:23:85:ee:40:34:0c:38:b3:b5:cf:0c:5f:36:
         6a:28:04:cd:5f:5c:4b:ed:35:8d:72:79:0a:57:75:c8:bf:d9:
         4d:0c:0b:a2:3a:54:2c:f7:c8:4b:e5:a7:77:ed:c0:14:8e:a8:
         f1:30:c3:28:fb:df:0e:69:51:17:06:ac:b9:f9:b8:37:b6:f0:
         43:66:b8:38:34:59:6e:c1:7c:d5:d3:a1:b8:3b:5c:8e:77:21:
         a5:69:44:f8:73:d9:57:c4:66:22:e8:e9:47:cb:db:4e:22:ab:
         d1:a3:2d:31:84:5c:10:dc:f1:2b:c1:36:66:6f:1a:6e:d2:cd:
         b5:35:17:79:7b:b2:a1:6a:29:63:37:43:52:80:fb:2f:2f:75:
         3e:3d:91:52:6b:a7:9d:5c:d3:ba:2b:21:50:e4:e3:bd:9d:a7:
         2e:7e:1b:f9:7a:88:71:2f:f0:e2:5f:e5:90:e4:be:e1:5a:84:
         ac:67:82:6e:1b:bd:5c:bc:5a:83:2b:74:f7:75:e7:d5:b9:ac:
         4b:c7:12:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:14:50 2026 by rpki-client