This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
File:                     o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft (raw, json)
Hash identifier:          vFGOMsce3t9o2LA6djiOT//04HT19QiwR3ijqh/wLIk=
Subject key identifier:   5D:86:0B:A1:6B:E0:6A:DB:FA:21:2B:1F:2A:B1:B0:3D:9B:05:49:DB
Authority key identifier: A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E
Certificate issuer:       /CN=a3c03158aed81161d4f57c1742d460834173a79e
Certificate serial:       019BF7D1E00865A4250D2C279F7F9005AFC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
Manifest number:          1781
Signing time:             Mon 26 Jan 2026 01:01:25 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:25 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:25 +0000
Files and hashes:         1: 0ekA97_3VRQ08hV0uz6EOhaN0DE.roa (hash: rD08lKhny8O0yJf+dMzirJji6WJRCtgenWrivGjxIr0=)
                          2: M0FebHks1Tk00ImEHu7-wxSlw5A.roa (hash: Sg2vhVuTi3aBjV3j+isdRvJjSOlEy1Bgzf6/w0UQUzQ=)
                          3: o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl (hash: Ic/AwTa2EHTkzcxpHNsPokgLwgnGtzuhMZzKNL5a9ec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:e0:08:65:a4:25:0d:2c:27:9f:7f:90:05:af:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3c03158aed81161d4f57c1742d460834173a79e
        Validity
            Not Before: Jan 26 01:01:25 2026 GMT
            Not After : Jan 27 01:01:25 2026 GMT
        Subject: CN=5d860ba16be06adbfa212b1f2ab1b03d9b0549db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2e:43:1c:b0:6a:b8:6a:f0:00:5d:59:28:11:
                    a3:07:66:0f:91:9b:be:f3:f2:e4:35:d7:ae:2d:dc:
                    3b:55:25:8f:17:23:31:b4:db:16:3a:8b:f5:4f:15:
                    d8:ac:08:42:2e:95:0c:ab:4f:59:66:62:61:ca:b6:
                    fd:47:bf:2d:e6:16:58:6e:ea:3d:15:fa:34:bf:21:
                    22:55:47:af:e0:b2:cf:6d:be:24:d2:bd:1c:94:d5:
                    1a:42:a9:e7:59:9d:aa:61:23:54:e9:1c:e1:3a:aa:
                    e5:4a:50:ff:69:05:54:97:2a:56:fa:1d:f9:7f:28:
                    d5:4e:2f:c4:6c:77:00:91:6a:30:44:c9:eb:a6:4f:
                    46:2d:d1:7a:47:b6:e0:03:be:7c:98:ad:08:9c:d1:
                    6d:a7:5d:7d:d8:7d:a7:25:80:fa:62:e8:ea:8a:27:
                    ac:44:d9:fc:dd:77:ac:97:de:2b:23:d5:e0:26:c5:
                    6b:6d:f3:7c:da:52:8e:93:e7:7a:10:01:08:e0:ca:
                    f6:67:4a:60:8b:e3:a3:48:b9:da:7e:4f:dc:96:dc:
                    1d:29:85:20:8a:b9:41:29:90:0f:5c:2b:fa:db:7a:
                    4c:c8:5d:49:47:cd:ff:62:2d:aa:46:69:d6:b1:36:
                    d5:c5:86:45:63:43:4c:7c:39:48:89:99:34:6d:cb:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:86:0B:A1:6B:E0:6A:DB:FA:21:2B:1F:2A:B1:B0:3D:9B:05:49:DB
            X509v3 Authority Key Identifier:
                keyid:A3:C0:31:58:AE:D8:11:61:D4:F5:7C:17:42:D4:60:83:41:73:A7:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8AxWK7YEWHU9XwXQtRgg0Fzp54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/b66429-4f20-4b90-a6b8-4c10e3360577/1/o8AxWK7YEWHU9XwXQtRgg0Fzp54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:73:f6:49:94:a8:04:bf:79:92:d2:0c:a6:c6:9a:a9:31:38:
         4c:50:2a:16:d4:e4:75:63:ee:75:03:35:e7:f6:3d:93:12:8c:
         51:0c:3e:a2:ae:42:75:e3:f0:a8:ac:3a:49:73:c4:e5:d5:e5:
         b2:4b:d1:bf:3d:ff:2f:ef:ef:cc:53:30:8c:d4:0b:84:b5:00:
         00:c3:1a:60:b6:3e:a6:31:80:7c:08:20:87:11:69:c9:c1:a0:
         56:20:09:33:29:cc:38:47:69:16:0b:1e:6f:b4:b2:64:e9:db:
         f0:63:f5:c3:ab:d5:e4:d3:f2:e8:67:6c:d1:cb:c2:65:32:5b:
         d5:85:91:b5:3a:1f:67:b5:94:4e:5d:6e:94:f6:10:25:c8:71:
         66:c9:98:7d:7a:5e:5f:e0:ab:b6:82:fe:9e:96:c7:e1:42:72:
         f8:ea:73:c6:e8:95:40:5c:ba:1f:1e:f5:fc:42:5d:5c:d8:4a:
         ef:f3:50:e6:5e:cb:b9:2c:05:7e:2d:67:3e:f2:72:f3:0e:c6:
         79:e2:47:a7:c4:90:7f:1e:7a:6a:75:6e:0f:e1:41:df:84:04:
         84:82:33:c0:18:6c:ee:76:eb:52:b5:62:7b:bd:11:fa:d4:bf:
         2e:4b:e3:a9:80:70:87:03:18:83:91:82:d0:2b:70:0d:e9:df:
         93:01:1f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 10:58:14 2026 by rpki-client