This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File:                     coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier:          LdGqgSsMpDHz/IIiZj6GZb3q+OYs22tAH1+MIbE+YOU=
Subject key identifier:   7D:AB:59:12:17:0D:39:3B:D9:DC:51:15:1E:A1:25:1C:6B:13:B4:6E
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer:       /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial:       019BF53E3885092BD82098A0EF3B6D94944A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number:          0BF6
Signing time:             Sun 25 Jan 2026 13:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:54 +0000
Files and hashes:         1: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (hash: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=)
                          2: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: r4vkyXJdbjfW4J/mrmHa4JRjPmY3uOJudsZYFQ1MuYQ=)
                          3: iRt9261buTm7shrgFKkm6kWLTGc.roa (hash: uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:38:85:09:2b:d8:20:98:a0:ef:3b:6d:94:94:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
        Validity
            Not Before: Jan 25 13:00:54 2026 GMT
            Not After : Jan 26 13:00:54 2026 GMT
        Subject: CN=7dab5912170d393bd9dc51151ea1251c6b13b46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:79:2a:6b:5b:a6:e1:32:85:f2:12:cd:7b:
                    08:a0:ab:14:23:0d:38:c2:21:25:fe:03:89:25:76:
                    6f:79:82:e8:6d:36:f1:38:9d:a9:e2:49:6c:69:19:
                    3c:7a:fb:f3:9e:af:82:7c:5f:7b:97:85:eb:38:74:
                    bc:55:d0:f2:c1:3b:29:53:cb:7e:33:7f:0f:23:8c:
                    64:93:68:cf:cf:34:39:42:ba:0d:4e:3c:79:1b:9c:
                    3f:e6:c8:6b:7a:e9:4b:fd:c8:45:65:28:4a:60:c4:
                    ec:3c:45:dc:51:26:10:9c:03:7f:85:e6:91:1f:41:
                    e4:fb:61:db:29:a4:29:63:4a:1c:46:1d:c7:dc:5d:
                    35:c6:9f:69:d7:19:8f:25:6e:ed:02:cd:b0:1d:b0:
                    83:1e:d0:10:c8:b9:78:42:c0:76:46:6d:c0:98:b2:
                    da:62:fa:6d:65:d7:c2:62:fa:cf:92:ac:3f:f8:bb:
                    83:73:43:ce:d1:66:12:b5:38:a2:0e:f9:41:bf:4e:
                    1a:a6:3c:f1:e2:c5:e4:01:45:b7:45:09:dd:c5:c7:
                    32:c2:a3:1f:4a:7b:38:d9:20:33:f5:05:46:4c:0d:
                    96:25:2d:69:b8:34:2b:9d:5f:62:8c:67:36:cd:2d:
                    07:27:74:bd:09:4a:7f:1f:31:f6:cf:eb:45:f0:ca:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AB:59:12:17:0D:39:3B:D9:DC:51:15:1E:A1:25:1C:6B:13:B4:6E
            X509v3 Authority Key Identifier:
                keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:dd:3b:b8:4c:2d:e2:22:0f:59:ba:4e:0e:cd:5f:7b:d8:
         5a:ed:29:af:d6:55:6f:43:c1:a2:22:fc:e1:10:28:c0:64:96:
         fb:68:56:6b:cd:43:e4:6f:02:5c:36:5e:b6:59:ce:bd:39:8d:
         a2:37:20:84:2c:a7:06:e7:e3:33:af:19:e1:ee:4e:cd:87:13:
         05:1e:ba:05:7a:87:9c:5c:ad:cf:82:36:26:de:c6:2a:3a:08:
         83:41:db:39:26:18:ad:12:2b:93:aa:05:5e:2a:9e:d7:2c:6e:
         05:08:30:3f:60:86:23:27:9f:e5:94:17:67:d3:5a:d3:27:79:
         0b:7c:d3:21:49:7b:9e:3a:9b:c4:45:fe:93:83:56:3a:f3:75:
         c2:c2:1e:dc:76:c5:04:1c:55:2d:81:96:3c:8c:7f:5f:7e:43:
         c1:23:1c:c6:26:b4:18:8b:ae:e1:92:49:9c:f9:df:40:7f:53:
         f0:38:c2:0d:1d:fc:88:4a:14:66:81:84:b2:db:7e:04:fc:4e:
         75:48:5d:fb:fc:78:c6:c3:de:27:6b:6e:25:be:67:d2:0e:0e:
         90:69:91:53:e0:32:7b:78:2d:de:64:c9:56:b4:d6:a9:fb:55:
         a7:ab:0d:8b:eb:e8:cf:50:1b:82:3b:33:52:78:ae:cd:b1:d3:
         60:a1:28:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 18:16:10 2026 by rpki-client