This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
File:                     AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft (raw, json)
Hash identifier:          VjDSG1ewB16fBZ67KyP+fwVa+hKb4Y070hIxKdx/4hk=
Subject key identifier:   1A:BE:B5:E3:60:65:05:65:E4:57:AF:DF:C4:43:49:9F:40:1A:C4:04
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Certificate issuer:       /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial:       019BFB096146C6FCCC7B1BAEFF7F77E7326F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
Manifest number:          15A9
Signing time:             Mon 26 Jan 2026 16:00:54 +0000
Manifest this update:     Mon 26 Jan 2026 16:00:54 +0000
Manifest next update:     Tue 27 Jan 2026 16:00:54 +0000
Files and hashes:         1: AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl (hash: 752oObxMrwtesQ1HdHM8MzjnQp7EqdCUZYpw+sFrAo0=)
                          2: JZoFu5TMtgO6GAifQLMq6mNbzQk.roa (hash: NCchRFVvR+s9twFKa/UkTDiMQ9XBI45G1DwlByTQ0pE=)
                          3: aihBYA5xplYmWfW8AOuewemRnFY.roa (hash: wUPGbJwm1otYE0/5qPkx6y5JVuMAsf3lCIi1krAa/d8=)
                          4: gtbETOybprgnBnsdOcXReqiJdJg.roa (hash: MHBLEVDbm/5/3P4t1AJ9tw9OGawy0RxaBcMDfw8zw9M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:09:61:46:c6:fc:cc:7b:1b:ae:ff:7f:77:e7:32:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
        Validity
            Not Before: Jan 26 16:00:54 2026 GMT
            Not After : Jan 27 16:00:54 2026 GMT
        Subject: CN=1abeb5e360650565e457afdfc443499f401ac404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:47:44:b6:22:3c:bf:a6:f9:f2:0c:76:4f:78:
                    1b:b9:92:35:d3:77:74:39:46:8b:f6:f2:96:f5:ab:
                    91:ad:94:75:92:8b:5e:29:30:9e:12:91:c4:d4:ff:
                    31:21:e6:9e:ca:b0:f4:88:8f:47:1c:5f:82:d1:29:
                    47:bc:fd:78:4a:5b:1f:29:cf:91:1b:9a:cf:25:b6:
                    c6:92:e6:69:9e:e0:c3:24:3a:fd:e4:2c:15:b5:53:
                    38:e8:ff:f3:cb:2e:76:0c:64:33:30:7b:13:f3:c1:
                    95:fa:f6:4d:46:09:82:9a:ec:32:da:38:af:aa:6d:
                    38:32:d5:c6:6e:86:b7:2c:84:2f:00:01:59:0c:27:
                    ec:80:19:d1:38:0d:62:16:88:45:7f:6a:5e:b4:e2:
                    a9:b6:54:f3:88:39:57:8c:3e:71:e1:a4:38:f7:8a:
                    21:3a:82:5b:dd:0f:cc:68:d3:18:03:19:af:15:a7:
                    be:e6:ec:d6:32:c3:f3:35:42:04:8c:08:a7:47:aa:
                    83:3a:c9:64:e4:77:b3:e6:74:4a:6d:0a:46:05:2e:
                    8b:e1:8c:c1:6f:4d:9c:34:6a:76:ab:6d:43:21:f9:
                    68:b7:a6:9e:8a:cf:76:ef:8c:ef:7c:a2:33:a5:88:
                    d5:a5:ef:06:9f:6a:a1:aa:0a:66:20:dc:1f:c2:be:
                    d5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BE:B5:E3:60:65:05:65:E4:57:AF:DF:C4:43:49:9F:40:1A:C4:04
            X509v3 Authority Key Identifier:
                keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:f1:b0:de:e3:b4:e6:8a:17:83:d6:6e:2f:75:49:6e:4c:b8:
         e0:92:ad:a3:72:8f:a9:e5:51:25:6a:5c:e4:04:bb:bd:71:fb:
         03:67:5d:d3:d2:83:f4:f3:a4:96:df:b3:17:4e:85:a3:b4:52:
         a5:a4:82:2f:4b:93:a2:e6:b2:68:f2:9f:dc:ce:b3:b1:38:c9:
         42:bf:87:7d:42:64:e0:a5:df:eb:a1:8d:fe:e9:45:96:47:12:
         bb:e0:24:56:21:8f:3f:81:7e:d7:cb:01:39:85:4f:ae:39:2e:
         0f:6c:6c:5e:1b:0c:02:ac:53:09:ac:5c:9b:e2:80:a5:15:92:
         ea:e6:44:46:29:74:b5:8a:16:92:07:5b:e1:a9:ad:1b:e3:3c:
         45:c3:aa:bc:7f:e6:93:46:7e:b7:8c:02:f2:89:eb:6c:2d:7f:
         be:c1:58:9d:e2:88:08:61:bb:5b:0c:f8:88:de:14:db:6e:e0:
         19:5c:f9:b1:d3:48:67:51:78:9a:da:c1:14:78:8d:08:8d:e7:
         a3:10:f1:7c:f0:7d:86:26:70:d6:60:75:f0:2c:33:58:10:6b:
         69:27:2a:82:cf:52:b2:3a:95:e5:f6:ac:19:4c:14:a7:c2:03:
         13:a4:10:c0:90:ef:8c:27:8b:66:51:b3:ea:79:1d:fe:f7:64:
         4b:9b:f0:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 18:14:25 2026 by rpki-client