This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
File:                     0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json)
Hash identifier:          IO9kDjEmdg5qWbTIwlaVTUJMTeANrlOXnN6RXW380PQ=
Subject key identifier:   9D:26:06:7D:8A:77:D9:08:73:38:E6:B2:30:D9:99:94:43:EE:69:1A
Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4
Certificate issuer:       /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
Certificate serial:       019BF4999675FCDF1058A8604FFF470E0FFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 10:01:04 +0000
Manifest this update:     Sun 25 Jan 2026 10:01:04 +0000
Manifest next update:     Mon 26 Jan 2026 10:01:04 +0000
Files and hashes:         1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: XU/F3ro6SDRozNHz8j7ScsDuKtDlSik+pIQTV8HRp6A=)
                          2: 3Vkd60WGnI7l2PM3HZFLlJxxjrY.roa (hash: Au6VFeA1y/3YJcbru/t0IUFfv15HD8c8YE7GcJ7+Cf8=)
                          3: ZtbiR2gXLmTAF_Ba81OuZamF65A.roa (hash: E3OpmkUHD20zWo50pMNSXcgN+lKW8YTl+sRAVHhIEok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:96:75:fc:df:10:58:a8:60:4f:ff:47:0e:0f:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4
        Validity
            Not Before: Jan 25 10:01:04 2026 GMT
            Not After : Jan 26 10:01:04 2026 GMT
        Subject: CN=9d26067d8a77d9087338e6b230d9999443ee691a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:17:9a:15:38:2f:6f:b4:be:b5:ad:c1:a6:e8:
                    81:a2:5b:15:d7:62:c4:9d:0b:10:f2:9b:79:70:2b:
                    51:d9:de:a0:2b:8e:e6:15:6f:2d:6e:f2:a7:17:90:
                    a0:ae:d9:74:80:1d:32:c2:b4:95:de:59:28:04:8e:
                    9f:7c:f8:30:be:be:c8:82:5a:e3:d7:5a:5f:c3:f3:
                    03:ab:25:8b:59:a7:48:4d:c4:85:6a:bf:df:1f:20:
                    ad:82:42:2f:a1:23:1f:29:cb:d7:c3:72:e3:6a:c0:
                    97:b4:1d:e3:a8:36:3c:15:68:23:46:e3:78:11:4a:
                    fa:94:b4:23:5e:78:23:d5:da:b9:2e:a1:23:4e:f2:
                    18:00:9f:fa:4d:30:3e:78:43:d5:59:07:c5:fb:5a:
                    58:35:35:2f:50:18:04:05:6f:0c:f0:21:59:07:98:
                    08:04:1a:ac:43:56:f6:c4:ea:6f:78:c4:e8:b1:31:
                    0c:7b:e1:90:6a:53:c2:00:29:c2:cc:e6:08:ee:6f:
                    d4:49:c1:82:e6:05:c7:d7:34:23:a2:83:82:39:0a:
                    12:d7:3d:5c:23:12:98:af:13:3f:78:fc:59:27:c9:
                    d5:8f:65:1b:fb:19:65:1a:b6:cf:99:ac:1a:9b:46:
                    d6:e7:77:1c:74:71:de:2f:fb:d4:ae:88:18:95:4d:
                    9f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:26:06:7D:8A:77:D9:08:73:38:E6:B2:30:D9:99:94:43:EE:69:1A
            X509v3 Authority Key Identifier:
                keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:80:b1:ac:8a:53:ef:81:04:54:04:04:e0:bd:a2:4a:a6:cb:
         c3:dd:f0:e3:a9:4e:dd:e6:c8:b8:d3:d1:21:2f:98:e6:88:11:
         79:89:26:9c:fe:7e:f6:0e:94:21:62:3c:3b:77:f6:2f:f0:ec:
         e1:71:44:fa:4f:c4:80:56:7a:26:2e:46:3b:e7:52:74:89:fd:
         83:dc:67:cd:76:35:38:f1:ca:e0:46:c2:b3:af:26:89:b9:7b:
         32:d8:65:ab:dc:be:ab:6a:d8:2a:da:07:f1:0d:d9:5c:00:14:
         ac:61:68:89:0b:0b:0d:2b:71:66:cc:bc:59:19:91:90:08:c3:
         63:44:63:d5:d7:22:2b:cc:17:8d:11:3d:85:ae:c7:be:33:47:
         7f:be:31:e6:be:f0:d7:cd:5f:aa:3c:46:fe:31:61:84:21:78:
         05:7c:33:39:40:4b:00:82:0f:c4:d9:66:52:4b:41:79:20:3b:
         45:f9:a6:71:12:ec:e0:85:4f:dd:81:f3:1e:ee:b5:33:b1:56:
         9e:0b:c5:01:1e:42:d4:3b:44:3a:59:7b:02:ae:a8:28:f6:72:
         76:a0:0b:47:41:71:3b:1c:a4:41:81:ff:da:e0:46:dd:f2:4c:
         33:01:aa:f8:b3:b4:ec:44:e3:b1:ea:2e:2e:ec:8c:fd:0e:6d:
         37:85:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:45:24 2026 by rpki-client