This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
File:                     Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft (raw, json)
Hash identifier:          gaRoq6240LhGLT6vM2tEjTFNz2e0NSZJr8d6S41xm2M=
Subject key identifier:   AB:03:0E:B2:2D:2F:5D:EA:E9:CB:ED:E6:04:C6:B0:53:13:A7:33:B3
Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90
Certificate issuer:       /CN=026d511ce3af90c4d601c7ccf8360523713e2c90
Certificate serial:       019BFE0AEF095C6A6D450F174DD3ECF2910E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
Manifest number:          0465
Signing time:             Tue 27 Jan 2026 06:01:27 +0000
Manifest this update:     Tue 27 Jan 2026 06:01:27 +0000
Manifest next update:     Wed 28 Jan 2026 06:01:27 +0000
Files and hashes:         1: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (hash: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI=)
                          2: Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl (hash: L6Lsapfafp+odwfDIgDCbbaD44T1WouNl1lqrA5JA5E=)
                          3: pvD38KfkiRiyA2ciIkT3w1-D9ho.roa (hash: d0J3qo9sPsuBsDx9fbtomBKJ9mGpLuYbMo3eWUmo/lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 00:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:ef:09:5c:6a:6d:45:0f:17:4d:d3:ec:f2:91:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90
        Validity
            Not Before: Jan 27 06:01:27 2026 GMT
            Not After : Jan 28 06:01:27 2026 GMT
        Subject: CN=ab030eb22d2f5deae9cbede604c6b05313a733b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:2d:83:2b:0c:a9:6e:cb:ae:45:45:68:69:
                    b6:2c:a5:4e:44:ce:41:ea:c9:94:9e:53:8b:ab:e7:
                    cb:3d:97:45:b6:68:42:5e:7d:1f:5f:06:3e:dc:72:
                    e8:81:f4:5c:e4:00:6c:b0:cf:cb:35:b2:70:8f:0b:
                    b5:8e:7d:d3:06:fa:cf:9e:97:98:00:3b:2e:fa:6c:
                    0c:ed:99:f5:94:81:3e:31:cd:f7:f3:56:71:bc:a9:
                    b2:19:00:08:be:d9:85:e7:1d:a9:b9:24:22:f7:3d:
                    cc:bb:8f:4e:aa:0c:cc:d0:95:8a:c4:ad:fa:b0:e3:
                    4a:fd:31:84:0e:ba:e0:79:f2:37:f1:60:f0:34:2e:
                    2a:69:b3:7c:7d:da:42:14:15:c4:4a:56:67:9c:48:
                    ae:ea:16:0c:d9:80:e0:13:5e:67:77:c4:2b:48:4e:
                    3a:ad:e4:32:a8:69:e6:03:f5:0d:63:9a:0b:f0:30:
                    98:b9:36:71:55:df:79:34:74:60:f5:eb:92:7e:c8:
                    6f:b7:8c:ba:34:62:fe:1c:33:00:33:e9:b9:3e:ec:
                    bc:db:d4:8d:f4:7a:20:54:20:ab:67:f4:c4:c4:36:
                    d7:d4:a7:e9:62:18:99:c4:c0:3a:83:48:bb:2a:20:
                    02:0a:43:fb:32:4b:49:40:4c:f1:b8:30:5e:d7:53:
                    47:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:03:0E:B2:2D:2F:5D:EA:E9:CB:ED:E6:04:C6:B0:53:13:A7:33:B3
            X509v3 Authority Key Identifier:
                keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:b6:d1:11:c1:64:70:1e:6d:55:1f:eb:d0:3f:5b:92:3c:
         31:49:28:74:09:96:c4:0d:b6:fd:3d:ce:88:65:0d:0f:f9:3c:
         af:5b:c5:1e:68:cf:b1:56:bf:62:f2:5e:ce:12:cd:43:6b:45:
         97:ec:21:f1:e1:dd:8b:51:40:cf:f3:a2:87:5a:29:01:16:13:
         31:d7:11:30:b1:55:0e:4f:0b:b7:b6:06:d3:32:62:bb:80:57:
         85:aa:19:1f:1d:83:74:4c:9c:59:ed:9e:b1:11:a5:3a:37:b0:
         78:02:85:5c:5f:5a:e8:ff:8c:13:2c:9b:da:36:f6:c9:00:62:
         47:55:01:9b:ce:bb:73:8c:42:b0:7a:b2:5c:51:e1:07:a3:ee:
         33:d1:5a:c7:34:01:29:d4:fa:50:94:66:1a:5c:06:19:3d:1f:
         b8:b0:16:46:20:8f:e2:d4:b7:c3:68:44:01:a1:85:b0:54:96:
         f7:59:40:aa:9e:45:80:78:6d:be:ef:b7:fb:87:6e:89:f1:e7:
         a7:75:e8:81:1d:59:26:b2:2d:a0:8d:4f:97:24:88:0c:58:45:
         91:b4:ec:f4:33:e4:0a:21:a1:69:71:85:82:af:65:4e:a1:14:
         60:92:d9:3c:1c:47:08:a4:70:50:db:35:d6:d1:69:db:29:39:
         c2:c3:2f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 07:42:01 2026 by rpki-client