This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File:                     1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier:          m4WpbCfS3hNnd2f5DG2QOgmZvWK7Hz81fvYnT479cOA=
Subject key identifier:   6E:74:96:90:36:30:7B:C0:89:A9:8E:F1:5D:DE:21:86:B9:C9:E2:81
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer:       /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial:       019BAE6F04F2A52090FBA409B509BA00E22F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number:          03B9
Signing time:             Sun 11 Jan 2026 19:01:09 +0000
Manifest this update:     Sun 11 Jan 2026 19:01:09 +0000
Manifest next update:     Mon 12 Jan 2026 19:01:09 +0000
Files and hashes:         1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: fQAvCSfZ4k4PJ8GYc00Ztuyh5N4DwIpHwTvvh7KZe/k=)
                          2: 94RSIfdi4Wu_3u_5Fxt7y2P-IZg.roa (hash: KQBiX0qPyskq77ewW4ksZcWfJF9WrYtw2Dq9ll73ZI4=)
                          3: nKSVCDWOLc_L-u8R349_O7dpE-0.roa (hash: 3mbBV8zfrwDYTj5UVPeGBqMVBLvBI0mE8QTCzzuoTPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Jan 2026 18:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:ae:6f:04:f2:a5:20:90:fb:a4:09:b5:09:ba:00:e2:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
        Validity
            Not Before: Jan 11 19:01:09 2026 GMT
            Not After : Jan 12 19:01:09 2026 GMT
        Subject: CN=6e74969036307bc089a98ef15dde2186b9c9e281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:38:ab:c3:52:11:83:da:c6:de:48:b1:3e:
                    2a:47:c3:65:74:d3:05:7c:f9:dd:b5:7f:44:18:42:
                    50:45:29:11:a4:a8:12:4b:ff:e3:69:7c:9b:96:11:
                    7c:68:3d:b9:3e:04:a3:9e:85:d2:d2:22:de:9e:b0:
                    9c:65:65:26:7e:1d:f5:7b:fb:6b:45:b7:91:db:ea:
                    9f:a6:37:aa:8e:9a:69:d1:a6:79:1c:10:d1:0f:00:
                    d3:c8:68:2a:75:72:20:ec:b5:71:e3:09:2b:d1:00:
                    d0:ba:14:df:42:82:cc:de:36:2e:82:43:ab:04:6d:
                    e2:3f:81:36:8e:8e:41:3c:8c:65:25:86:77:7d:6f:
                    5e:77:fb:11:e0:37:80:49:d7:82:6e:c5:47:51:d1:
                    02:ea:fb:b7:ae:ca:0c:01:af:82:a1:b9:ff:7a:2f:
                    7a:a2:f0:eb:e8:7b:3d:5f:3f:b6:af:c0:1b:1e:15:
                    56:1a:49:46:27:84:1c:e1:89:8c:f9:10:d9:8f:fd:
                    9e:3b:2f:fd:7e:70:aa:b2:94:f8:ce:95:fc:1d:3f:
                    c7:87:17:ed:2c:05:8d:31:70:91:68:f1:1b:23:24:
                    a5:a7:af:12:10:05:c0:d6:a2:01:cd:49:7b:ab:ad:
                    ff:7e:45:d6:6e:45:8d:02:c3:f5:be:71:0d:19:f8:
                    b8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:74:96:90:36:30:7B:C0:89:A9:8E:F1:5D:DE:21:86:B9:C9:E2:81
            X509v3 Authority Key Identifier:
                keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:0b:0b:1d:79:70:7e:99:7e:c1:7a:16:b1:41:5e:60:72:14:
         a5:93:24:db:7b:50:5a:cf:9e:ad:eb:40:c7:db:f8:01:c5:c4:
         2a:f8:21:87:7f:94:3a:2a:33:82:be:4e:1f:b7:0a:c7:cf:2c:
         ca:e4:9a:c3:94:a7:ef:77:f2:b2:93:23:de:ac:4e:dc:10:0e:
         cd:e6:d5:fb:d9:10:90:cd:4d:56:72:83:d9:92:1f:6d:41:ad:
         95:df:d2:b9:11:a6:75:6f:8b:f3:80:e4:e9:3c:19:6a:04:0c:
         d5:61:01:38:85:81:2f:52:be:cd:4c:9b:e4:ce:51:2f:b9:35:
         de:5c:6f:56:bd:84:c2:e1:7f:bb:b8:f5:a4:20:47:c0:fc:38:
         60:29:1e:97:52:a4:6e:88:4e:ac:54:01:a4:3e:9a:df:7c:84:
         00:07:f3:79:17:84:4a:0c:96:2b:d1:1d:b3:9d:49:6f:0e:e2:
         07:9c:5f:4c:e5:9b:84:65:b1:2f:40:71:ab:6f:95:9c:d8:db:
         80:e4:46:0f:b6:a3:ef:6e:20:04:7f:c2:e9:49:82:e0:15:13:
         af:ae:6e:2f:a7:24:87:5b:b6:36:6b:49:60:d0:2a:96:63:ec:
         46:c0:8e:98:e0:f9:eb:db:3d:cf:37:fd:12:32:0c:15:6e:17:
         2f:3d:d7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 02:29:39 2026 by rpki-client