This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File:                     DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier:          Y3hNsoclIOUpngdkIxmNvfoqKN7EZzDlwRtispbB4cE=
Subject key identifier:   14:A8:BA:D9:40:B3:85:B5:EF:C6:98:1A:36:CA:F8:EC:DA:DC:46:AA
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer:       /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial:       019C0F34F1CD7928935251F6E5830F5C8625
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number:          0832
Signing time:             Fri 30 Jan 2026 14:00:53 +0000
Manifest this update:     Fri 30 Jan 2026 14:00:53 +0000
Manifest next update:     Sat 31 Jan 2026 14:00:53 +0000
Files and hashes:         1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
                          2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
                          3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
                          4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
                          5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: YuuoyqIGpybX9aW0IVFh7LY1J+FRpVICb+UiewOk+aE=)
                          6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
                          7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
                          8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Jan 2026 14:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:0f:34:f1:cd:79:28:93:52:51:f6:e5:83:0f:5c:86:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
        Validity
            Not Before: Jan 30 14:00:53 2026 GMT
            Not After : Jan 31 14:00:53 2026 GMT
        Subject: CN=14a8bad940b385b5efc6981a36caf8ecdadc46aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f0:cf:ef:78:d5:bb:ec:f8:6d:b2:f1:c4:ae:
                    bf:1a:04:50:ac:ac:36:c9:c7:32:73:96:bb:f3:df:
                    1e:2b:4a:67:74:c9:f0:f5:70:c5:90:77:58:de:86:
                    46:60:55:20:1f:d6:68:95:3f:6a:90:9e:28:48:3b:
                    d3:a3:6a:a6:b5:49:81:a8:2a:ec:6f:c1:bf:cd:1c:
                    21:6a:fb:35:63:82:80:9b:d8:ce:97:62:15:e1:67:
                    17:b4:61:08:44:60:cb:33:b6:05:3f:9f:0c:08:8c:
                    8d:10:03:64:00:a9:01:1d:96:1c:6f:8a:09:78:76:
                    85:d5:c9:cf:c7:34:3f:2c:8d:ea:e4:26:5d:7b:7c:
                    44:f7:ab:6a:da:94:8b:a9:4c:21:35:17:30:13:ce:
                    b0:ab:60:4c:a8:d1:b8:f5:dc:eb:85:e3:fd:a2:05:
                    61:2a:f0:0d:d2:78:73:66:fc:fe:2d:fb:52:43:44:
                    01:da:88:00:6c:c4:23:6b:95:cd:53:6b:3f:57:d0:
                    8e:97:77:d6:14:6a:2d:10:b8:38:1b:3e:74:92:6f:
                    5d:90:ed:60:e8:fb:13:d7:57:9c:9f:a9:ea:df:9c:
                    a4:ac:10:27:c9:7d:d3:5f:6a:06:fa:76:f6:c2:15:
                    01:91:3f:97:c1:45:c5:3c:a9:0e:4c:49:25:bc:f1:
                    27:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:A8:BA:D9:40:B3:85:B5:EF:C6:98:1A:36:CA:F8:EC:DA:DC:46:AA
            X509v3 Authority Key Identifier:
                keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:45:d4:cc:7a:c7:2c:c1:79:30:4b:a5:37:4f:66:08:38:9d:
         76:73:b2:61:38:44:60:d0:0c:fe:94:bc:0c:ff:85:ea:1a:0b:
         76:40:97:49:5b:c4:1e:2d:e5:f5:9e:4e:e6:02:e8:2e:18:fe:
         8f:a6:37:ca:f9:dc:a5:e0:51:af:bf:82:58:81:6e:bd:8b:e4:
         04:8b:13:8b:fd:be:44:74:3b:43:3d:3a:44:95:89:41:1b:c1:
         1a:36:59:84:7c:0e:5a:74:53:fc:c5:6b:b8:b7:cb:9b:91:ad:
         6b:99:32:d0:01:41:f8:fd:64:8d:c2:59:fa:6c:b4:e9:df:8c:
         b0:cf:6a:51:bc:45:f3:02:7b:fb:2c:d4:4a:33:10:5c:50:c7:
         0b:f7:20:aa:73:14:c5:5b:2b:d1:64:0b:91:f0:3f:8d:41:e2:
         92:eb:5d:a9:fc:01:28:c9:7e:3b:7a:7a:7b:e9:29:d6:79:24:
         d5:e9:9f:4e:18:81:6c:f4:e4:55:a5:15:f8:90:85:b5:16:82:
         3d:73:be:65:cf:74:f3:2a:c9:fa:b1:c3:eb:89:9b:46:c8:a5:
         fc:5c:44:b2:81:91:b7:5f:e9:36:dd:38:47:fd:07:75:f7:52:
         1e:5d:53:45:5b:16:30:1a:3f:25:97:17:74:72:44:4a:b5:16:
         36:8a:3e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 30 21:31:45 2026 by rpki-client