This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
File:                     0wGZH8ND81jA8u665Vzy2jRSHHo.mft (raw, json)
Hash identifier:          hU/lOYRj/147mjmLw0Bt+OP90Vpdu7LFAoXXyg7MLvU=
Subject key identifier:   E1:B6:0E:07:EA:BA:2F:D4:23:6E:0F:DE:B7:5E:23:BB:50:C5:1C:1F
Authority key identifier: D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A
Certificate issuer:       /CN=d301991fc343f358c0f2eebae55cf2da34521c7a
Certificate serial:       019C1C4BFBA1FDC6A68E1DF950F7F5954632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
Manifest number:          17FE
Signing time:             Mon 02 Feb 2026 03:01:07 +0000
Manifest this update:     Mon 02 Feb 2026 03:01:07 +0000
Manifest next update:     Tue 03 Feb 2026 03:01:07 +0000
Files and hashes:         1: 0wGZH8ND81jA8u665Vzy2jRSHHo.crl (hash: ZbMWIvfwt6uqE0cljkIVvyypSW/R5fWSq/GPtCGV8Qk=)
                          2: 13qi8AI2-EVNpOSQSS-2sC_j3KU.roa (hash: Ao/N1CH5IyqTs+C/2xXMQjWZkUvQDWoCz0AZMzqUUQQ=)
                          3: C0D3XPGkyCuPOGv9YW3WaQ81a9g.roa (hash: g8qNTYkk+kkeSWc3XwhwJA4ghsKgURElfaxWHrKjSQA=)
                          4: jv_YABzSModWtlchMh_9InM60gw.roa (hash: 4R+lUnXKrDrYcGJOHmhH6oyg2E2dK50I55PSI9u6SrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Feb 2026 03:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:1c:4b:fb:a1:fd:c6:a6:8e:1d:f9:50:f7:f5:95:46:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d301991fc343f358c0f2eebae55cf2da34521c7a
        Validity
            Not Before: Feb  2 03:01:07 2026 GMT
            Not After : Feb  3 03:01:07 2026 GMT
        Subject: CN=e1b60e07eaba2fd4236e0fdeb75e23bb50c51c1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:9f:2f:62:df:2f:e3:3a:df:5f:cd:6f:df:
                    7c:6d:91:57:74:8d:e9:91:0e:7a:31:33:f4:45:04:
                    8b:2f:30:a0:e7:c5:ef:ff:10:28:ec:bc:0a:d8:5f:
                    6d:26:06:8a:32:28:d9:f6:56:43:ce:f1:ea:f5:ad:
                    2e:ee:b8:c7:88:16:9a:06:32:99:66:25:af:ed:d1:
                    05:14:23:87:8e:83:f1:8a:dc:76:9a:36:fc:7a:84:
                    65:36:d1:c3:89:b0:83:5a:0e:e8:67:92:22:17:f5:
                    95:54:40:f7:b4:fd:9a:71:67:65:87:ac:58:7d:68:
                    08:53:6d:98:8d:2e:23:a1:b6:97:19:f5:3c:49:f4:
                    d4:32:cb:36:fd:fd:85:5a:aa:1e:63:72:6b:ec:01:
                    ce:76:16:2f:db:ea:0a:6e:3b:ff:50:48:3b:21:32:
                    67:fc:f1:d8:0b:74:75:cc:0b:cb:cf:e9:dd:08:bf:
                    20:54:08:56:58:14:8e:a8:41:b3:fb:c3:60:d2:be:
                    17:22:c2:05:1f:dd:c1:e8:81:f2:bd:12:9e:ba:29:
                    f7:15:1c:bb:1b:72:5c:1a:af:9f:f2:c4:5f:51:05:
                    b2:e6:73:80:de:79:6e:6a:ab:86:4e:3e:39:65:7c:
                    f9:fd:fb:a3:fe:89:6f:15:8c:00:cd:73:3e:b4:65:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B6:0E:07:EA:BA:2F:D4:23:6E:0F:DE:B7:5E:23:BB:50:C5:1C:1F
            X509v3 Authority Key Identifier:
                keyid:D3:01:99:1F:C3:43:F3:58:C0:F2:EE:BA:E5:5C:F2:DA:34:52:1C:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wGZH8ND81jA8u665Vzy2jRSHHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c36f83-8b35-4d05-a334-f98c483015d7/1/0wGZH8ND81jA8u665Vzy2jRSHHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:ab:83:00:a9:af:6d:9f:76:d4:85:53:d8:88:49:db:26:b3:
         65:b3:34:a0:f1:6a:e5:24:b1:b7:e8:c1:62:50:df:ab:f3:ce:
         23:cc:da:1b:12:8a:9a:42:b4:ce:11:97:88:b6:d9:2e:db:73:
         ae:f9:fe:58:0a:7a:20:0f:7b:45:e9:57:7a:2c:14:96:fb:ee:
         3c:40:29:5d:c8:0e:5e:13:e9:61:21:f4:52:4e:8d:2a:71:0f:
         69:ba:4e:63:a2:6d:0a:98:30:53:dd:d2:55:5a:a2:97:d7:60:
         c2:c9:5d:33:f0:23:df:bb:c2:6c:cc:e7:0b:3b:87:b5:2b:7b:
         62:90:4c:02:27:5d:a9:a8:72:9b:fc:ec:fa:f4:74:f1:0e:b4:
         c7:4b:79:f8:1d:c1:8d:63:bb:0a:e3:54:be:33:e6:69:59:4d:
         85:2e:5d:cf:8a:7d:01:5f:31:5a:19:51:24:78:cb:92:7e:7b:
         8e:ab:48:49:1a:88:c5:64:e2:dd:ad:64:74:6b:93:37:06:b6:
         fc:b6:bc:5b:34:d6:51:75:bd:81:23:a2:c0:ac:70:4d:a7:85:
         9a:bf:3d:25:2d:55:f7:70:62:79:64:55:0b:f5:d4:d6:f1:4f:
         c7:9e:80:53:e9:6e:26:3c:33:dc:9d:61:84:0e:64:fa:cf:77:
         9e:66:05:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 2 12:54:13 2026 by rpki-client