This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          /CAKW2MkaU6KADDeFg84dbIGJmV3oza3E2HcR09py+o=
Subject key identifier:   5B:32:88:45:71:DD:84:F0:62:62:18:5D:C3:24:DE:8D:5F:E0:94:7D
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       019BFBE54A021F3EFFBD71D2C1DBC0ADE4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          037C
Signing time:             Mon 26 Jan 2026 20:01:06 +0000
Manifest this update:     Mon 26 Jan 2026 20:01:06 +0000
Manifest next update:     Tue 27 Jan 2026 20:01:06 +0000
Files and hashes:         1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
                          2: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: qDiuQbXPtIUfI8x2Rg/8tYxBS0gjDPdPlBoQu/jv81s=)
                          3: r9NWEPI6u6L0HITxoVcmXnXadCs.roa (hash: os9y7CavhWu63QlaCtuG1FYwA+ohXqqwFQrtt1Hmj8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e5:4a:02:1f:3e:ff:bd:71:d2:c1:db:c0:ad:e4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Jan 26 20:01:06 2026 GMT
            Not After : Jan 27 20:01:06 2026 GMT
        Subject: CN=5b32884571dd84f06262185dc324de8d5fe0947d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c8:dc:de:54:11:94:4c:e1:26:58:f2:d0:99:
                    a2:8a:7e:90:40:d7:1a:4d:8d:52:46:d7:eb:a9:59:
                    15:bd:fe:72:b3:ec:e8:76:63:3b:dd:f7:07:9e:36:
                    32:d5:a7:7e:f0:e1:44:96:6e:75:37:56:0e:17:b7:
                    0a:48:ce:bb:6c:9e:8e:f8:58:f8:66:1a:90:57:05:
                    b4:28:6f:0a:77:d0:e6:e1:04:2b:ce:2f:f7:8a:ff:
                    04:c8:9c:c8:9f:88:aa:38:21:d7:8d:3e:25:c8:e8:
                    21:d8:ac:cb:4d:17:00:10:65:7c:91:00:e4:36:9c:
                    4f:f7:3d:9e:f5:0b:c9:bb:15:41:a5:3e:86:86:34:
                    6e:6c:e4:11:45:68:91:7b:af:49:5d:e5:b9:b4:2b:
                    71:d7:dc:0c:05:38:0c:b6:51:8a:ef:0b:72:d3:cc:
                    32:e4:dd:90:f8:d0:97:c4:8e:66:67:b7:0a:fc:67:
                    e0:d4:da:7f:54:50:64:b7:ac:38:e2:c2:58:83:52:
                    50:c4:79:1c:e6:5d:02:a9:4b:ce:39:d2:95:ee:55:
                    25:eb:ac:cb:0b:ac:09:84:15:77:8f:10:db:d5:a1:
                    48:d0:75:2e:62:6b:66:36:60:63:2e:0b:52:14:d3:
                    fa:9d:d7:97:05:7d:df:63:4a:ce:2d:ec:5f:8d:c6:
                    f0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:32:88:45:71:DD:84:F0:62:62:18:5D:C3:24:DE:8D:5F:E0:94:7D
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7a:97:50:16:41:24:e3:07:2f:74:c7:ec:bd:dc:ef:0f:22:
         58:c8:16:7f:e8:b0:49:35:84:42:51:f0:ea:44:66:cd:a8:1b:
         c9:4c:a0:3b:49:21:b7:d6:21:b9:c0:c3:65:23:39:f7:2c:e5:
         89:e4:ee:9d:53:34:3a:07:a5:b8:3b:b9:da:e2:46:94:27:e6:
         c3:76:87:80:3b:56:ea:1f:a3:2e:47:ba:15:e0:41:31:4e:83:
         ee:58:93:37:6a:fc:33:16:e0:63:ab:62:a0:84:ee:9c:4e:8f:
         68:90:fe:33:49:8f:3f:68:ca:ae:2b:af:c8:a1:74:4c:57:72:
         d6:77:b8:6c:b3:95:5c:c7:52:f2:2c:87:19:30:b6:c7:c9:ca:
         c3:de:65:9b:b7:ca:eb:4a:17:11:5e:32:6f:df:30:25:2a:a4:
         c7:ff:d1:81:7c:08:12:42:04:76:a4:23:02:f7:39:57:85:c0:
         9c:9c:13:23:5f:5f:c1:30:32:db:13:c0:80:46:71:66:ad:cc:
         b5:ea:59:0d:29:b5:48:d9:e6:08:5f:1d:b4:2e:be:09:4f:f4:
         f9:6a:1e:db:ae:ea:65:11:4b:f7:a3:7d:a2:e9:02:64:1d:0c:
         3e:8a:cc:52:a9:bc:ec:6d:53:f1:91:07:f9:a9:bb:68:78:53:
         f7:f9:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 04:46:24 2026 by rpki-client