This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
File:                     oq41aWif9UKpEdcJi4JGbm6p_IU.mft (raw, json)
Hash identifier:          eCIxMd37XBonBBqP47sOYYG9/LwteTRwYVU6NGZXJTM=
Subject key identifier:   CF:83:E8:DB:EB:96:D6:7F:01:B1:32:91:D4:53:50:25:2C:5E:41:3A
Authority key identifier: A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85
Certificate issuer:       /CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
Certificate serial:       019BF462B0543D93CA9EBC2B8B507C64EDD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
Manifest number:          0FC5
Signing time:             Sun 25 Jan 2026 09:01:06 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:06 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:06 +0000
Files and hashes:         1: DWNbWLKsKUbayknrkxZPm_ru1rE.roa (hash: 0OEC7qPtd3MHFAia/7IsrfByY6Mlpa/bnminYQcTx14=)
                          2: oq41aWif9UKpEdcJi4JGbm6p_IU.crl (hash: A33gfawOeedrS27CojXVoQxW70tyArbzzodYq/FBReQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:b0:54:3d:93:ca:9e:bc:2b:8b:50:7c:64:ed:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2ae3569689ff542a911d7098b82466e6ea9fc85
        Validity
            Not Before: Jan 25 09:01:06 2026 GMT
            Not After : Jan 26 09:01:06 2026 GMT
        Subject: CN=cf83e8dbeb96d67f01b13291d45350252c5e413a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:fa:a7:d7:ad:25:47:54:87:23:3c:cf:1e:
                    6e:3d:85:e5:a7:9c:ff:a4:36:b7:84:1a:3b:67:70:
                    02:6d:66:9a:45:28:2b:74:6d:51:27:ef:29:96:44:
                    64:a9:c9:8a:40:81:1d:bc:ef:a4:0e:49:ca:f6:b3:
                    54:0b:53:18:9b:c3:83:5f:f1:03:3c:b2:88:12:37:
                    db:7e:3c:db:55:09:7a:18:41:f8:0e:fa:c4:84:98:
                    6a:9b:81:5d:92:a0:f2:04:41:4b:d2:18:c2:40:4c:
                    9d:67:d3:f3:02:4c:98:71:93:fa:e8:44:f7:e7:df:
                    aa:f2:7c:b5:da:a8:93:9f:a0:62:db:2d:ea:e4:7a:
                    29:08:21:90:5e:4c:d4:b5:ad:ba:c6:a4:e8:16:35:
                    7e:8d:3a:c7:42:ac:84:1d:46:7f:9a:f7:dd:71:db:
                    49:2d:ae:0d:8b:f9:f3:3f:0d:c6:f2:75:db:43:0d:
                    91:b9:72:4b:20:05:c8:d3:9f:4a:9d:f2:41:1c:57:
                    af:15:96:4a:69:08:b9:22:40:41:f7:5c:0c:8a:58:
                    c2:3a:0f:24:a1:de:ad:3b:bd:c2:c8:db:2b:2a:10:
                    2c:90:4d:58:c3:5f:73:e8:ec:5b:33:60:d1:21:5c:
                    a5:77:66:b7:ba:f1:7e:39:d7:41:bb:af:06:55:12:
                    65:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:E8:DB:EB:96:D6:7F:01:B1:32:91:D4:53:50:25:2C:5E:41:3A
            X509v3 Authority Key Identifier:
                keyid:A2:AE:35:69:68:9F:F5:42:A9:11:D7:09:8B:82:46:6E:6E:A9:FC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oq41aWif9UKpEdcJi4JGbm6p_IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/98867c-856e-46c9-8925-6ea5d8b75411/1/oq41aWif9UKpEdcJi4JGbm6p_IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:33:11:0c:c1:23:ad:fb:7e:23:ef:cb:c9:03:ea:96:9d:0c:
         0b:63:84:ba:22:c8:42:37:2e:60:ae:9c:3a:a8:fe:c6:63:69:
         66:81:aa:1a:30:92:6d:da:8f:75:e8:83:5e:52:eb:c0:de:9f:
         26:15:1e:95:65:ec:c2:bd:32:fa:f0:3f:d0:c8:40:eb:6c:5f:
         b1:5f:8d:6f:9d:7f:14:23:55:62:fe:2b:60:f8:52:a8:6f:85:
         ac:2c:17:5b:ce:85:35:a5:c2:4e:02:69:e2:79:9f:0c:61:f0:
         28:8b:a2:59:04:ef:02:cc:ed:05:ae:8c:83:9e:b3:26:7c:ed:
         3e:f3:9f:05:4d:cc:b7:82:b7:0c:3e:13:31:7c:a2:be:cd:9e:
         6f:a7:5c:c5:68:a7:45:6a:84:17:60:25:26:16:d5:02:1a:c3:
         9b:a8:ec:50:f8:4b:a4:8b:45:6e:5e:93:98:87:1d:80:dd:74:
         ea:aa:0f:f5:01:fb:25:ee:61:ad:84:9b:69:6c:82:61:32:66:
         36:55:8e:0f:10:7d:6e:70:d2:14:13:2b:c9:c9:f2:30:2c:6a:
         65:4d:6b:fe:a0:09:91:32:33:fd:c7:6a:df:8f:44:a3:a1:bd:
         72:ad:00:c4:3c:77:25:6d:7d:d8:a0:2b:a2:04:b8:5a:63:f5:
         d1:a3:cc:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv0YrBUPZPKnrwri1B8ZO3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyYWUzNTY5Njg5ZmY1NDJhOTExZDcwOThiODI0NjZlNmVh
OWZjODUwHhcNMjYwMTI1MDkwMTA2WhcNMjYwMTI2MDkwMTA2WjAzMTEwLwYDVQQD
EyhjZjgzZThkYmViOTZkNjdmMDFiMTMyOTFkNDUzNTAyNTJjNWU0MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvj6p9etJUdUhyM8zx5uPYXlp5z/
pDa3hBo7Z3ACbWaaRSgrdG1RJ+8plkRkqcmKQIEdvO+kDknK9rNUC1MYm8ODX/ED
PLKIEjfbfjzbVQl6GEH4DvrEhJhqm4FdkqDyBEFL0hjCQEydZ9PzAkyYcZP66ET3
59+q8ny12qiTn6Bi2y3q5HopCCGQXkzUta26xqToFjV+jTrHQqyEHUZ/mvfdcdtJ
La4Ni/nzPw3G8nXbQw2RuXJLIAXI059KnfJBHFevFZZKaQi5IkBB91wMiljCOg8k
od6tO73CyNsrKhAskE1Yw19z6OxbM2DRIVyld2a3uvF+OddBu68GVRJl6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM+D6NvrltZ/AbEykdRTUCUsXkE6MB8GA1UdIwQY
MBaAFKKuNWlon/VCqRHXCYuCRm5uqfyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUt
NmVhNWQ4Yjc1NDExLzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85ODg2N2MtODU2ZS00NmM5LTg5MjUtNmVhNWQ4Yjc1NDEx
LzEvb3E0MWFXaWY5VUtwRWRjSmk0SkdibTZwX0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALDMRDMEj
rft+I+/LyQPqlp0MC2OEuiLIQjcuYK6cOqj+xmNpZoGqGjCSbdqPdeiDXlLrwN6f
JhUelWXswr0y+vA/0MhA62xfsV+Nb51/FCNVYv4rYPhSqG+FrCwXW86FNaXCTgJp
4nmfDGHwKIuiWQTvAsztBa6Mg56zJnztPvOfBU3Mt4K3DD4TMXyivs2eb6dcxWin
RWqEF2AlJhbVAhrDm6jsUPhLpItFbl6TmIcdgN106qoP9QH7Je5hrYSbaWyCYTJm
NlWODxB9bnDSFBMrycnyMCxqZU1r/qAJkTIz/cdq349Eo6G9cq0AxDx3JW192KAr
ogS4WmP10aPMuw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:28 2026 by rpki-client