This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          YW1LupW1vJrQdvxd8M4c0qFQHRm33cLsYV0VyxgaUp0=
Subject key identifier:   39:08:70:CE:56:6A:92:3D:93:A1:6A:3E:A6:C1:93:27:ED:2B:CD:FD
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       019BF3BDDBAD5C88F9A5F98C6A23726DD4D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          071D
Signing time:             Sun 25 Jan 2026 06:01:04 +0000
Manifest this update:     Sun 25 Jan 2026 06:01:04 +0000
Manifest next update:     Mon 26 Jan 2026 06:01:04 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: rNnJpXxi6hFFCsbbJQJk2KNBWw43nJjM7VOYNtOYYZg=)
                          2: BYWS08eTtraOfHT_fVMPk7guHlM.roa (hash: 6Kz4FXMCjQe6WKeTUwsv4um5M7VGGcIVhgjpiTRZk6E=)
                          3: PiwQrJXVrX4qSCMDoPit1fwGxYw.roa (hash: maZooA2YaSXCCk76FIXDQQ5gHOUIoguMUZYt68Zbq38=)
                          4: XlbisSjtE0VEsvYZfBE1a7SwnPo.roa (hash: ywquchTaiRzJ9EyzBmBuS7GF3u7LPVkY7qatrsHV8Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:db:ad:5c:88:f9:a5:f9:8c:6a:23:72:6d:d4:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Jan 25 06:01:04 2026 GMT
            Not After : Jan 26 06:01:04 2026 GMT
        Subject: CN=390870ce566a923d93a16a3ea6c19327ed2bcdfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5e:90:56:4a:59:3d:f5:ee:42:11:39:e3:77:
                    ec:58:b4:38:c6:39:f0:af:ec:bd:a6:86:5a:aa:a9:
                    48:7c:b6:92:70:5c:4f:fc:f3:a8:7b:94:62:b9:64:
                    5c:6e:a1:61:34:2b:7e:28:af:b6:61:3f:a8:ab:a6:
                    c4:3e:68:72:dd:6d:62:a1:06:0f:da:f3:87:3e:8d:
                    bf:d9:be:b4:32:dc:21:84:b2:ee:08:e5:17:35:8d:
                    a4:4b:6e:75:93:3f:81:0a:f2:7c:7c:41:2b:0d:5b:
                    a8:f7:ba:e0:43:20:0e:cf:15:12:8a:26:05:9a:38:
                    4d:69:12:74:cb:e6:3f:da:38:e9:3f:70:dc:23:fe:
                    f6:a8:d7:2b:06:45:ef:55:90:a4:7a:10:bc:92:8b:
                    36:10:e0:0e:f7:d9:ff:19:3d:e6:97:e7:cf:d5:bd:
                    b8:04:49:4c:fa:fe:29:48:1a:b1:ce:d3:b5:c4:e4:
                    df:e0:32:f7:76:a5:1f:ed:a8:8b:65:85:12:c6:1d:
                    41:e5:2c:d4:39:8c:63:cd:57:1a:9f:08:17:fb:28:
                    11:7b:e2:83:d0:26:41:1c:7d:de:ef:c5:8a:1d:43:
                    87:53:f2:5b:55:51:9c:8a:1a:9a:41:0d:55:a6:51:
                    96:59:e2:64:dc:63:4f:54:54:16:77:d0:41:3c:cb:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:08:70:CE:56:6A:92:3D:93:A1:6A:3E:A6:C1:93:27:ED:2B:CD:FD
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:51:56:00:1f:f3:11:37:90:f5:87:b5:41:5e:33:17:dc:e9:
         dd:62:d4:0a:46:13:f1:5c:86:00:59:ff:8f:cd:34:f3:31:77:
         0f:2e:fe:c4:3b:43:23:dd:12:fa:a9:c4:d9:d1:9f:54:b9:b7:
         df:4d:80:fd:82:36:47:05:7e:38:e3:02:cf:9f:ad:07:c1:2f:
         b4:7f:9f:51:30:4d:a8:2e:81:e8:0e:e5:18:e5:3d:f4:8c:9a:
         63:c2:da:1b:0d:7b:12:4f:40:c3:bc:da:8f:9e:bc:5f:86:c3:
         97:9a:25:de:30:4f:71:77:82:49:9c:30:11:9e:f0:33:e7:8a:
         11:41:14:93:bd:74:77:4f:c2:a1:48:16:c8:cb:26:35:ca:39:
         5e:77:b3:0c:20:53:80:c0:34:38:8e:6f:56:93:65:03:09:98:
         f6:c7:0f:e1:8e:72:e9:ab:d2:84:36:67:5a:9a:c3:40:bb:e6:
         ef:f1:b8:69:6f:a2:d4:9e:1a:06:59:1a:67:32:45:c8:c0:89:
         29:25:8d:81:1d:46:00:6e:d5:8e:e5:77:65:32:f2:e2:3a:8a:
         22:1b:4c:94:ba:f7:95:a0:73:dc:d7:24:0a:3a:b3:36:af:44:
         f6:bd:97:cb:f0:17:fd:a2:a8:1f:91:e2:4a:34:69:88:b1:e8:
         25:c7:e4:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:27:57 2026 by rpki-client