This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
File:                     0uQqWD-iUbQyz8HcqL00HVBmC5U.mft (raw, json)
Hash identifier:          MN1cbeX93yyi70Bwume9UDKz0ZIi+aA+DDLVJGcINAw=
Subject key identifier:   03:EE:69:3B:53:FE:F7:79:DC:DA:CD:5E:07:D9:9A:0F:34:D6:39:47
Authority key identifier: D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95
Certificate issuer:       /CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
Certificate serial:       019BF53E51A3058741557A8FB840A4B81B48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
Manifest number:          0F37
Signing time:             Sun 25 Jan 2026 13:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:00 +0000
Files and hashes:         1: 0uQqWD-iUbQyz8HcqL00HVBmC5U.crl (hash: zMBikX3e/v6OVIk+GbYGF2L9ql8Z5SLR9Ovg7E5a45Q=)
                          2: q5abuoJZ1lm7pVfvA-IRNmZlgVc.roa (hash: 7Qb1m3fC7oeeHX74Shhd+okw0uSYANuxfkJI/afC/Y8=)
                          3: sAohPtqx4W8kbrtZbUQNGGMPcSE.roa (hash: apcfGmWEVMl7UGdf8o+sQrkZqcdAwR7qpF48CSMj6SI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:51:a3:05:87:41:55:7a:8f:b8:40:a4:b8:1b:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e42a583fa251b432cfc1dca8bd341d50660b95
        Validity
            Not Before: Jan 25 13:01:00 2026 GMT
            Not After : Jan 26 13:01:00 2026 GMT
        Subject: CN=03ee693b53fef779dcdacd5e07d99a0f34d63947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:33:08:77:bc:df:c2:92:8d:99:a0:23:e4:1b:
                    ed:88:3c:12:4d:43:ce:51:1e:57:14:dc:ac:36:3b:
                    a4:9d:77:8d:c2:a4:06:b1:84:bb:f5:a4:39:7c:38:
                    18:93:c9:35:99:50:2a:2f:91:11:11:7b:37:d8:44:
                    aa:66:a1:e3:04:df:cb:1e:71:5d:59:5a:c0:54:af:
                    2c:22:aa:a4:d0:04:66:38:2e:0e:c3:c2:c2:99:50:
                    c3:73:2c:15:a4:60:ab:08:97:bd:e8:53:0e:d4:25:
                    90:5a:bf:a8:3e:39:fc:79:65:de:52:e4:63:ac:e8:
                    5b:a6:f5:c0:d9:52:bd:b1:31:4d:0e:d8:f8:50:49:
                    23:1b:20:3a:38:a6:cc:6f:b3:a2:b8:ae:cc:cc:54:
                    2b:4d:7c:8f:77:7f:57:27:aa:ce:ef:66:fa:d1:f4:
                    1c:5a:93:e8:d0:e7:b6:1b:b8:37:35:11:a5:14:3e:
                    a9:f4:59:83:4b:ee:ad:bc:ae:0d:a5:4e:3a:49:74:
                    4a:3a:d8:5b:d3:56:ce:e9:f4:61:3f:82:69:e8:ab:
                    2c:50:81:08:2e:30:b8:d9:8c:ff:a5:65:58:35:44:
                    4e:7e:b3:69:a4:99:f4:23:81:cd:1e:fa:db:68:dd:
                    19:c0:d9:78:66:3a:a5:e2:4a:f2:5e:f1:b9:47:5f:
                    be:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EE:69:3B:53:FE:F7:79:DC:DA:CD:5E:07:D9:9A:0F:34:D6:39:47
            X509v3 Authority Key Identifier:
                keyid:D2:E4:2A:58:3F:A2:51:B4:32:CF:C1:DC:A8:BD:34:1D:50:66:0B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uQqWD-iUbQyz8HcqL00HVBmC5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/3ab7fc-baef-4a96-bdd3-fdc1dcda2961/1/0uQqWD-iUbQyz8HcqL00HVBmC5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:a5:56:67:0e:24:8a:64:ab:91:af:10:72:01:12:a0:8f:95:
         54:44:ea:0f:4a:4e:6a:20:9a:a2:a5:9c:e4:f6:60:34:3c:19:
         d1:bb:e3:11:04:c7:b5:03:2e:e2:14:e0:e1:b9:88:7f:6a:6b:
         a0:51:c9:e1:2d:b8:42:84:fc:23:e3:bb:68:5b:94:75:15:57:
         81:3a:d3:31:57:82:42:b3:01:c3:d5:ee:a4:44:62:88:cd:6f:
         4c:da:fe:cb:03:e6:b3:29:dc:15:96:11:b5:49:7d:6e:6e:f1:
         a8:eb:8d:a0:9f:3e:e0:e8:ee:6d:e9:b4:66:0f:d8:e5:66:dc:
         3f:70:99:09:82:17:59:0e:57:34:2a:cf:16:0e:76:dd:7b:28:
         d7:1e:f6:82:ab:09:ea:6e:28:e7:a5:6b:eb:ab:05:7c:fd:ec:
         aa:68:66:ed:27:bf:c0:55:de:6e:fe:53:6b:b9:b4:0e:26:79:
         00:a9:4e:26:40:77:aa:dc:9a:c4:3d:93:b8:20:a2:07:43:11:
         c2:bd:f1:09:a1:7e:6f:05:7a:1b:27:b6:eb:e2:3b:93:ea:c5:
         d6:98:00:62:39:23:78:a4:bd:57:14:6e:f3:4a:5f:ca:95:22:
         e6:e8:b5:f1:5b:b5:8b:ca:33:98:fe:77:46:37:a4:95:33:f8:
         5f:18:0f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv1PlGjBYdBVXqPuECkuBtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZTQyYTU4M2ZhMjUxYjQzMmNmYzFkY2E4YmQzNDFkNTA2
NjBiOTUwHhcNMjYwMTI1MTMwMTAwWhcNMjYwMTI2MTMwMTAwWjAzMTEwLwYDVQQD
EygwM2VlNjkzYjUzZmVmNzc5ZGNkYWNkNWUwN2Q5OWEwZjM0ZDYzOTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTMId7zfwpKNmaAj5BvtiDwSTUPO
UR5XFNysNjuknXeNwqQGsYS79aQ5fDgYk8k1mVAqL5EREXs32ESqZqHjBN/LHnFd
WVrAVK8sIqqk0ARmOC4Ow8LCmVDDcywVpGCrCJe96FMO1CWQWr+oPjn8eWXeUuRj
rOhbpvXA2VK9sTFNDtj4UEkjGyA6OKbMb7OiuK7MzFQrTXyPd39XJ6rO72b60fQc
WpPo0Oe2G7g3NRGlFD6p9FmDS+6tvK4NpU46SXRKOthb01bO6fRhP4Jp6KssUIEI
LjC42Yz/pWVYNUROfrNppJn0I4HNHvrbaN0ZwNl4Zjql4kryXvG5R1++PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPuaTtT/vd53NrNXgfZmg801jlHMB8GA1UdIwQY
MBaAFNLkKlg/olG0Ms/B3Ki9NB1QZguVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMt
ZmRjMWRjZGEyOTYxLzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8zYWI3ZmMtYmFlZi00YTk2LWJkZDMtZmRjMWRjZGEyOTYx
LzEvMHVRcVdELWlVYlF5ejhIY3FMMDBIVkJtQzVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaVWZw4k
imSrka8QcgESoI+VVETqD0pOaiCaoqWc5PZgNDwZ0bvjEQTHtQMu4hTg4bmIf2pr
oFHJ4S24QoT8I+O7aFuUdRVXgTrTMVeCQrMBw9XupERiiM1vTNr+ywPmsyncFZYR
tUl9bm7xqOuNoJ8+4Ojubem0Zg/Y5WbcP3CZCYIXWQ5XNCrPFg523Xso1x72gqsJ
6m4o56Vr66sFfP3sqmhm7Se/wFXebv5Ta7m0DiZ5AKlOJkB3qtyaxD2TuCCiB0MR
wr3xCaF+bwV6Gye26+I7k+rF1pgAYjkjeKS9VxRu80pfypUi5ui18Vu1i8ozmP53
RjeklTP4XxgPAw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:52:47 2026 by rpki-client