This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
File:                     A3tIRJuhyuFb3iwvCG2UIY4HILs.mft (raw, json)
Hash identifier:          gR9uGocVod2fKDPo1J5ip4vxBGxYN5oV6hDPwSgTlYw=
Subject key identifier:   AE:7E:A7:52:C7:07:11:C1:E4:71:93:6F:2E:3C:D2:1F:1F:BF:C3:73
Authority key identifier: 03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB
Certificate issuer:       /CN=037b48449ba1cae15bde2c2f086d94218e0720bb
Certificate serial:       019BF68798EEB0790BAB5D83011C8EF91456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
Manifest number:          0A31
Signing time:             Sun 25 Jan 2026 19:00:40 +0000
Manifest this update:     Sun 25 Jan 2026 19:00:40 +0000
Manifest next update:     Mon 26 Jan 2026 19:00:40 +0000
Files and hashes:         1: A3tIRJuhyuFb3iwvCG2UIY4HILs.crl (hash: A4HX3K4Tpk57+BtaL9evav86EZ0+7uXWSWszfn4G3P8=)
                          2: NU1chFo-5BLldjjUHOHACaYSPbk.roa (hash: mPNtrM0KZ13ZE9NQl/AWLpFJNMzjMXEfz7Z2RWOGx54=)
                          3: mYz_MkjSPD9GSyH-TeUGX0chOQ4.roa (hash: WxLwxSoDDiuH4ux4xQpjQSFz0+gjmkukqbwmAoxdiWw=)
                          4: n3LOmWNaywYcomz89nsEZwUgqLc.roa (hash: FTvzP1PwrDb59C0ZjVwl+fjoPbpbQc06fgCGTV/Sl8c=)
                          5: z7z9NPdm2G_ghOM88Mpsfz2gDWQ.roa (hash: ChE8eiiCMdjlkz/0X1Vsc6xwzakTA1jdQrpmD+bEoeU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:87:98:ee:b0:79:0b:ab:5d:83:01:1c:8e:f9:14:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037b48449ba1cae15bde2c2f086d94218e0720bb
        Validity
            Not Before: Jan 25 19:00:40 2026 GMT
            Not After : Jan 26 19:00:40 2026 GMT
        Subject: CN=ae7ea752c70711c1e471936f2e3cd21f1fbfc373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:46:c9:95:cb:47:c6:3f:fe:39:3d:8e:16:ec:
                    de:37:57:49:70:e4:04:8b:02:37:96:55:7a:e4:73:
                    fb:35:82:a8:c7:09:80:f3:da:40:b5:60:da:7f:01:
                    26:aa:cc:de:9b:16:ac:70:29:24:b3:8c:d8:73:23:
                    14:4d:bd:83:64:b2:06:ae:05:f8:87:3e:0b:d0:c2:
                    60:f7:9b:32:20:93:d3:45:dd:a1:1a:54:2f:25:a5:
                    ae:92:42:c4:b8:91:15:92:65:af:c8:03:56:6b:11:
                    0a:f9:32:ca:5f:23:f6:0b:a2:69:69:55:6b:09:b5:
                    68:eb:c0:20:b7:2e:96:df:df:6a:dc:b2:a8:b9:3b:
                    4a:46:e3:fb:ed:c3:91:7a:c6:79:95:f4:83:ea:dc:
                    5d:5b:2d:6f:c8:01:81:e8:9d:34:51:82:08:64:03:
                    8c:8b:9b:8f:83:c7:50:b2:25:3a:f1:f3:f0:bc:63:
                    5a:16:e3:29:b2:b6:85:01:05:76:ba:aa:e7:bc:3e:
                    80:0d:c7:e8:8f:78:7f:a7:dd:be:03:af:58:3c:8a:
                    0d:f9:c3:31:0e:2a:1e:a7:dc:3e:14:b9:b4:5e:af:
                    1f:d4:b5:88:b0:32:c1:74:db:ed:d9:bd:c3:ab:a9:
                    a0:ff:83:51:84:7c:cf:70:19:18:ed:5b:9b:5b:ea:
                    93:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7E:A7:52:C7:07:11:C1:E4:71:93:6F:2E:3C:D2:1F:1F:BF:C3:73
            X509v3 Authority Key Identifier:
                keyid:03:7B:48:44:9B:A1:CA:E1:5B:DE:2C:2F:08:6D:94:21:8E:07:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3tIRJuhyuFb3iwvCG2UIY4HILs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/5ff78e-db14-4b05-9cc6-7403e13675ab/1/A3tIRJuhyuFb3iwvCG2UIY4HILs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:58:61:e2:f5:06:d9:3d:5c:48:00:ba:df:e8:17:92:12:a4:
         07:3f:fd:4f:bd:72:b4:03:9b:04:fb:1d:65:1c:37:a7:07:92:
         54:21:ca:5e:50:91:1f:7c:fe:4b:65:4e:1e:c0:6e:12:b1:f8:
         96:a4:41:a1:4c:bb:64:80:8a:b0:47:22:3d:6a:36:9f:6a:cc:
         82:38:92:2b:b2:18:02:72:d2:b6:ab:f2:f7:59:82:f1:3a:c0:
         df:73:29:49:cf:f2:55:df:b7:1f:f3:fb:35:e2:54:cb:db:cf:
         0e:f6:cb:94:0e:ef:23:ef:55:00:64:91:d0:63:70:1f:e4:fc:
         83:8d:19:b1:b1:eb:1a:7c:c5:e1:ff:db:cc:5d:ce:cc:06:c4:
         51:38:11:f2:8c:5c:26:ba:58:c4:f6:12:d1:52:e3:49:2e:05:
         35:ba:74:66:2c:82:9d:f7:b9:60:0d:48:31:4e:1f:96:b9:d5:
         9d:9f:ae:3c:40:de:88:8c:4d:fd:e8:fa:fe:77:63:a5:be:79:
         df:e8:23:be:2c:48:7c:e6:20:4d:f0:af:28:b9:43:4f:04:dc:
         f0:da:6a:54:af:71:5f:ba:78:56:76:40:cb:34:bb:d5:64:7f:
         7f:83:31:b0:e6:f6:f5:2a:e9:e7:ee:f3:ed:68:fc:94:8d:66:
         97:9d:47:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:00:28 2026 by rpki-client