This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File:                     0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier:          uop1da2Rn9GWzz8J6hfrEgyg6DjwtisoCZQiQbYf99Q=
Subject key identifier:   11:49:4A:21:86:51:23:DF:8D:1A:DD:A7:C8:0B:23:C4:23:72:FF:F7
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer:       /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial:       019BF5AC9F25EFC8E8E5770FC95ADAD53AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number:          16A9
Signing time:             Sun 25 Jan 2026 15:01:29 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:29 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:29 +0000
Files and hashes:         1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: VuWyt38AxOmzhTviXBKQH/HDn52dElI1bU5Qn9rVcz0=)
                          2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=)
                          3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=)
                          4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 15:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:9f:25:ef:c8:e8:e5:77:0f:c9:5a:da:d5:3a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
        Validity
            Not Before: Jan 25 15:01:29 2026 GMT
            Not After : Jan 26 15:01:29 2026 GMT
        Subject: CN=11494a21865123df8d1adda7c80b23c42372fff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:25:98:57:68:db:5c:3e:29:2d:d1:b3:7c:
                    0e:1f:4d:d0:c9:cf:7f:88:77:d0:0d:4c:8d:59:bc:
                    65:12:0e:4b:79:d5:fd:0f:9f:9b:65:d9:c9:88:d0:
                    5e:ff:ac:21:79:90:5a:51:7f:ba:da:28:30:10:14:
                    9b:87:db:78:29:6d:f9:6d:67:3f:06:a5:ce:29:de:
                    94:57:3e:32:23:a7:52:25:15:00:8c:43:67:a7:88:
                    fe:89:41:ac:5d:a3:3e:f2:7e:21:f8:4c:27:10:01:
                    8d:64:7e:c0:b6:1f:c8:42:02:42:6f:fe:a4:9f:6a:
                    39:c6:14:9a:dc:0d:38:bc:3c:b2:a1:0d:94:dc:c7:
                    e9:a8:40:81:9a:31:89:2d:65:d3:c1:ef:3f:1c:b2:
                    00:e7:49:10:26:7f:b8:a0:6c:8a:4c:78:f8:da:68:
                    ee:a0:f0:1b:4d:c0:84:f4:6c:1d:df:c4:c3:08:14:
                    0c:bd:1c:77:5a:b1:ec:a5:1d:5d:f2:80:9b:45:c6:
                    53:b5:42:64:0e:7f:cc:ae:6d:4f:40:1d:99:c1:80:
                    18:82:c8:6b:52:67:9c:1c:cf:f2:d5:9a:0a:37:0d:
                    b0:bf:91:3f:4d:f2:5e:d5:5c:86:7e:8b:4b:c1:e5:
                    07:32:1b:46:ff:4d:11:d8:99:ca:9c:da:99:bd:79:
                    9a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:49:4A:21:86:51:23:DF:8D:1A:DD:A7:C8:0B:23:C4:23:72:FF:F7
            X509v3 Authority Key Identifier:
                keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e8:15:41:cd:6f:82:71:50:c5:a5:bf:f3:bb:9a:ae:11:03:
         71:13:41:15:6b:5b:c1:94:44:42:e8:8b:09:cd:33:ad:6f:73:
         70:c4:42:50:ea:65:33:51:87:3b:0e:98:9c:3a:f4:19:19:5d:
         a9:3d:70:63:a6:81:de:01:dc:6d:c7:bc:01:d1:26:72:30:43:
         89:ae:3c:fd:24:b5:ad:c7:25:b2:02:2c:5e:41:14:f1:de:fe:
         1d:14:e7:cc:8c:9e:f1:16:de:98:ae:75:93:ed:2b:50:0b:b5:
         e8:a9:09:ff:69:74:b5:90:e3:42:44:12:20:32:5f:f3:4e:f3:
         c8:86:e0:27:f3:e3:af:9d:07:3a:7b:c0:3e:64:2f:c2:7f:09:
         a1:4c:02:59:16:6b:3e:6b:d7:1a:2d:80:e6:e8:2f:64:92:2a:
         f4:3c:fa:f4:de:26:c5:41:b8:61:3e:0f:a7:d3:ed:47:f5:8b:
         8e:cc:be:3f:c3:08:da:2e:5b:07:bb:77:86:d6:83:62:65:c6:
         4f:99:37:b7:25:bd:b4:ba:8d:5a:96:ba:cd:f9:a2:b0:72:f6:
         d1:92:94:84:aa:28:2b:56:00:d3:bc:82:61:f3:ca:42:33:c8:
         c5:1a:80:b4:90:61:16:f1:ef:88:7d:c4:e5:91:d7:34:4a:6e:
         b8:c1:04:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:12:10 2026 by rpki-client