This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
File:                     OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft (raw, json)
Hash identifier:          yb/QOqlsdTwEBnXCvFRTMVMbKYU+gLh0xvsArem4EK4=
Subject key identifier:   B6:87:89:1B:96:9A:CD:9B:D3:DB:38:4E:2B:69:92:62:EF:42:5C:47
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Certificate issuer:       /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial:       019BF87637B3F383E51AB8ACB525E649E8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
Manifest number:          17FB
Signing time:             Mon 26 Jan 2026 04:00:55 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:55 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:55 +0000
Files and hashes:         1: 0Bk51Mjn6qErtAhOivvm_I8c0aE.roa (hash: aq3ZMEYBOh/rpC3SYBAxrvfX3FzvIksQARIozff4ffc=)
                          2: 3l3JwyRn9LUMsz8MYG14zOnBHdc.roa (hash: 2A1HY2h9Phgu+RFmc7588XfC02kPw7N3ZbQ8wc/kW84=)
                          3: 8bVGqU-tjWPnIG8sBYrZvrrahKI.roa (hash: IFFyNQvZAT+Bna1YbPC14TW6c3lxt7eZvL1L0yVl4NA=)
                          4: 8cAZRJhTLPqKsm4TAUR87r4-9JA.roa (hash: sx3g13vfM7xaU8g2AQwyXKrMTuN6j6YaMqFMPUpyTc0=)
                          5: CQTXAg4uTXvVTudN5hFeeXkNvkQ.roa (hash: MvXWyNfB+L1JsnBDH+iw0vhodg+qR3E3YtxwCLlLcLM=)
                          6: H_ZqL6RkECdFkORWPkQHZkQLmTw.roa (hash: iJ7KZIZmr4InzppQ2C7K5GIf14/i+7a4DnEB+2Vcn7s=)
                          7: OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl (hash: e2AjRZ/RkgZuMlK/aCITGKfPeCZTDMm6GAVYHleF1zA=)
                          8: PZJni5TxpYn092_2LgQ4TzNg1Vk.roa (hash: KAnI/w7Z4z73b7zbsNexFN30a6Ok+1UWHYIM1LyRw7A=)
                          9: TZUj41Zk_a4ctgh6bkXXZRSBnwo.roa (hash: SlDdEwpdjEtSII8TXEBDIBic9lrt5T7OD2GqENaMep4=)
                          10: dc8BS5CRu-zycD-wNYY8YKfw4Cw.roa (hash: 2OEK8MCyAYfbPpIXmNvUjGE5NLgSoSESlZhOHxxGtOM=)
                          11: iKkbPcQ4WIJAurPfzrtorCYjeJc.roa (hash: t+1uw36Adk7Pip1XNPSev194m4wMZgCV8f3gz9/3gjg=)
                          12: jT0g8lVx3dcAMaKxYxMOa3DkEIY.roa (hash: m3BcVFDXlnD1YdMRwzlLYT9pFM0ZGvuCdz2ltBkF8AA=)
                          13: n-mejQ3q29BELhma3oWoUOm-iuQ.roa (hash: NGJx12o2aUAcKnv8G9XcrR/xbQgpGxsRftcm0M1WRmc=)
                          14: oQGGdDTaNSA17PKm44IDHYFop2E.roa (hash: zwBhRxHLQ9o3LHpah+oy4Xr0d2WLdIvePEERXND5wzs=)
                          15: tklVWYVDGXe5URD0QFeTFCI-yOg.roa (hash: gNNzPMTDn7JasW09Gz6g9NSXq8GJJJOIAedRgSZzHrE=)
                          16: xXkiOHP5GPVKZFmsEyZEMy5ArTU.roa (hash: xeH/fFNJIFUXQ3IjYea8XVk8nJ8Z09onGn+NwK+Mb24=)
                          17: yVcflys92CzAxU-EuN_3N-w3nlE.roa (hash: zUTtMpuZxFGygRwVxvfWbYqYKDMVT6hU9O37iMaFGcM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:37:b3:f3:83:e5:1a:b8:ac:b5:25:e6:49:e8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
        Validity
            Not Before: Jan 26 04:00:55 2026 GMT
            Not After : Jan 27 04:00:55 2026 GMT
        Subject: CN=b687891b969acd9bd3db384e2b699262ef425c47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:4c:cb:d5:ee:13:9e:14:4c:c6:1b:62:f6:
                    9f:fe:cb:e1:ab:df:f5:98:b7:12:ee:a3:7e:d8:f8:
                    57:fa:7c:ac:e5:00:50:0d:a0:6a:e2:40:26:fa:0d:
                    ca:4d:b2:3d:6f:a9:34:f1:e7:b8:0e:15:c9:d9:9f:
                    ec:5d:db:78:23:0b:5e:82:db:65:3d:4d:b5:a9:d5:
                    a8:db:5a:37:19:d9:1d:7b:39:9e:01:f9:f1:90:72:
                    32:92:8c:a9:4c:a2:d0:c5:79:7b:04:40:e7:4f:50:
                    01:6b:d7:20:3c:34:4e:ba:0d:ef:c8:cd:0a:78:9e:
                    95:52:07:28:a2:91:58:41:f8:47:29:b4:04:23:94:
                    e3:7c:55:3c:9f:41:e4:58:a1:47:3e:97:e1:5b:6a:
                    64:a7:73:ce:01:5a:d8:23:19:f3:d2:57:d1:7b:46:
                    4e:10:35:dd:4f:e1:4c:91:6c:71:d8:e8:41:89:2c:
                    92:1b:07:9a:ed:c4:34:56:1a:b7:c9:73:b4:25:ce:
                    bc:45:4a:04:26:0d:af:24:79:f0:72:39:e4:12:70:
                    f6:96:b1:cd:f0:4d:0e:56:bb:14:a0:43:57:c7:91:
                    cc:32:1b:be:f4:03:58:43:25:a0:88:a0:a6:86:af:
                    2a:e2:46:10:06:63:ca:44:b5:8c:17:94:2a:b4:47:
                    e7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:87:89:1B:96:9A:CD:9B:D3:DB:38:4E:2B:69:92:62:EF:42:5C:47
            X509v3 Authority Key Identifier:
                keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:92:53:f1:1b:d5:9b:ea:ca:02:a6:ad:13:30:c4:1e:83:9b:
         34:9c:50:65:b8:63:a0:a5:e4:65:29:2e:0f:fe:f1:9c:e4:5e:
         66:54:33:72:49:d9:13:1b:13:f7:13:19:51:9d:8e:8f:0e:14:
         c5:7d:cb:16:c0:f7:97:ab:82:d4:3b:b1:67:dd:f8:fc:f6:23:
         4f:9e:da:ff:ba:a3:fc:31:eb:dc:df:99:15:73:a9:e6:8f:24:
         30:a0:b0:74:b9:bb:98:f3:f5:9b:c5:6b:fb:6a:6e:54:69:72:
         89:30:bf:23:88:fb:9e:e0:1d:4c:dc:35:fa:bd:d6:be:56:6b:
         56:fe:9a:95:b3:7a:21:9e:af:a7:e3:9c:88:2b:1d:bc:8d:1b:
         fd:13:0e:0e:d6:71:41:e8:01:f7:96:ca:60:ad:31:f4:d3:01:
         c2:6e:44:8b:23:e5:bd:54:4e:cd:93:56:14:52:16:24:4a:ca:
         f8:bb:b5:ac:f2:19:41:b5:6f:cd:27:ba:6f:a0:d7:0c:14:44:
         f6:b0:98:4e:09:18:db:fd:6f:ea:c0:99:1c:ac:3b:1b:61:dd:
         66:64:e0:c3:30:18:8e:f7:fe:3e:10:4c:83:8d:70:f6:d1:9d:
         f1:8e:b1:87:d8:f2:c8:21:b3:e6:dd:1f:65:09:39:bc:62:08:
         77:8e:8b:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:18 2026 by rpki-client