This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
File:                     guOWgcWq77NeVPStivpCjU_94Go.mft (raw, json)
Hash identifier:          tf7oSIcAdTtpYUDX/Ovxb6Tc1HnvX9aykSL92sJr62g=
Subject key identifier:   98:4D:7F:42:43:86:F3:17:CD:1F:A1:FF:62:DC:BC:94:DB:AA:AC:67
Authority key identifier: 82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A
Certificate issuer:       /CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
Certificate serial:       019BFB776E4600856AB82A05E7A00E6CF4F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
Manifest number:          0FE8
Signing time:             Mon 26 Jan 2026 18:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 18:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 18:01:06 +0000
Files and hashes:         1: JpmAbUUjgdGj6qAIyyJytHhitKc.roa (hash: CcEuObSxm5FzQn0dVTtYmBf1361NVKZ22QzUQfSvlR8=)
                          2: _DjjSU3BAoPGedf4mI0XCD0mbWo.roa (hash: qwdJ+lJOWsnxPjxpN0M5u6G8sfxnyYF02VcN5oTvQUA=)
                          3: guOWgcWq77NeVPStivpCjU_94Go.crl (hash: t8/sOJYxK0wndoj6VuzQ4O7QkzJP82zfbm7etfKZvoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 18:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:77:6e:46:00:85:6a:b8:2a:05:e7:a0:0e:6c:f4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=82e39681c5aaefb35e54f4ad8afa428d4ffde06a
        Validity
            Not Before: Jan 26 18:01:06 2026 GMT
            Not After : Jan 27 18:01:06 2026 GMT
        Subject: CN=984d7f424386f317cd1fa1ff62dcbc94dbaaac67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5d:74:92:a8:d1:4e:ca:c7:97:8a:d8:e6:00:
                    58:ac:78:fc:2f:29:cb:67:4a:60:01:09:9e:07:ba:
                    8e:8a:a0:42:d6:5f:d6:7f:a3:f2:87:ba:dd:f7:d6:
                    c5:61:99:9e:b9:2a:22:d1:14:13:a8:7e:12:3c:13:
                    37:d3:e9:09:0e:17:19:59:4b:81:15:fe:fd:fa:03:
                    87:34:83:7d:48:47:9f:6f:e2:5a:69:9a:86:c3:a5:
                    8f:29:79:78:67:39:7d:fa:40:40:58:70:28:38:e4:
                    52:fc:99:a5:74:3a:00:31:27:2b:a8:d9:1a:69:0d:
                    04:a5:57:ed:38:dc:b0:ad:81:5c:4c:93:78:c0:28:
                    16:41:a3:97:67:2d:5e:a0:b0:46:8a:35:3b:52:c5:
                    85:f9:41:06:f7:62:70:4e:73:af:82:30:45:81:f8:
                    5b:79:e1:07:ae:04:44:13:66:aa:3f:85:cb:1a:52:
                    b8:10:c5:8f:88:0a:fa:4e:4f:08:dc:4f:2e:47:ff:
                    05:f6:5b:cd:96:96:9e:e4:85:83:f2:02:df:64:e2:
                    e5:48:f1:71:ed:21:ad:9a:8f:1c:38:da:aa:dd:0b:
                    c4:03:31:58:5c:79:f8:a9:c4:3e:c2:e6:1d:aa:10:
                    5e:99:90:58:1b:06:97:d9:c2:19:ae:83:ec:64:51:
                    d2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:4D:7F:42:43:86:F3:17:CD:1F:A1:FF:62:DC:BC:94:DB:AA:AC:67
            X509v3 Authority Key Identifier:
                keyid:82:E3:96:81:C5:AA:EF:B3:5E:54:F4:AD:8A:FA:42:8D:4F:FD:E0:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guOWgcWq77NeVPStivpCjU_94Go.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/57b53e-3003-46a6-9ce8-fafd1496ae59/1/guOWgcWq77NeVPStivpCjU_94Go.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:5b:39:f9:aa:3b:7b:da:ff:28:00:a9:35:5b:0d:df:6b:65:
         8d:e6:6b:fe:ec:6a:51:95:ed:3e:4e:3b:5a:ca:f0:ca:78:0b:
         c3:a4:f1:cd:3c:7d:b7:c4:03:e1:c9:8d:f9:a3:66:66:cd:d9:
         33:66:e2:8f:9a:76:33:56:0c:7a:0f:45:79:fa:a8:4c:28:f3:
         ad:c5:df:93:cc:f8:46:9a:41:2a:c4:d5:ca:69:10:2e:61:5c:
         3d:9c:b9:12:d9:a4:3b:73:aa:e0:2e:04:49:8d:c1:7b:27:fe:
         b4:6c:f2:be:61:13:14:a8:82:81:6b:04:2a:0f:34:95:be:d0:
         e9:e1:dd:61:46:6e:0d:ec:d3:aa:9b:d4:41:73:20:98:ce:8d:
         a7:15:12:25:a5:01:a4:19:67:f5:b1:82:a5:91:68:07:ae:e6:
         d0:aa:33:07:98:64:67:bc:fa:f1:6f:b7:5a:e5:c8:5f:0f:f2:
         95:14:d1:83:d1:ad:32:cd:f3:94:9c:a8:57:57:9b:aa:09:e4:
         d6:50:ef:5d:fc:a5:8a:ee:e0:0e:7e:d8:44:81:e7:a8:f7:a6:
         d2:32:cb:1b:98:12:a6:45:42:5e:4c:4d:50:9e:ba:c9:2c:92:
         0f:14:4a:75:89:58:81:ef:4e:5d:d4:19:5b:39:d8:3a:60:60:
         b5:4a:0f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:17:47 2026 by rpki-client