This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File:                     gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier:          D3lBoifjzanX+y7j0HqPMSJ5q5ATQoNzEudIaq6WsmA=
Subject key identifier:   D3:DE:56:8F:DB:2D:92:21:7E:C2:1B:FF:29:ED:BC:62:8B:CB:B1:AE
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer:       /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial:       019BF8081C10420543F78777B9F955F186F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 02:00:39 +0000
Manifest this update:     Mon 26 Jan 2026 02:00:39 +0000
Manifest next update:     Tue 27 Jan 2026 02:00:39 +0000
Files and hashes:         1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
                          2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: 8gD1FtQ6shStqHp7eN/45pbXxEYxNATMnVJbr5ugoLc=)
                          3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 02:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:08:1c:10:42:05:43:f7:87:77:b9:f9:55:f1:86:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
        Validity
            Not Before: Jan 26 02:00:39 2026 GMT
            Not After : Jan 27 02:00:39 2026 GMT
        Subject: CN=d3de568fdb2d92217ec21bff29edbc628bcbb1ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:aa:e1:99:62:7a:b0:82:19:f8:81:21:06:68:
                    78:5c:21:b0:15:13:7b:d2:17:b1:55:ff:f2:87:b7:
                    1d:38:d1:df:41:ff:30:87:59:d1:6e:b7:34:82:ff:
                    54:05:a6:d9:30:cc:06:aa:f0:46:45:d4:d0:d5:51:
                    4e:3a:8b:e3:d5:73:6d:7d:60:d9:5d:86:97:36:31:
                    4e:0e:c5:3c:38:81:95:56:a5:c8:89:b5:7a:33:b6:
                    9f:42:0e:89:66:a2:13:15:1d:d9:1d:01:9a:87:16:
                    58:49:47:db:7d:64:af:1a:ca:cc:69:69:42:c7:e5:
                    73:ef:64:17:c4:17:14:db:ff:8a:e7:34:95:77:ab:
                    f9:66:f9:74:b5:fc:be:0a:26:68:49:5a:19:34:4a:
                    4a:5c:eb:58:40:e4:80:a1:a7:98:ac:c1:8b:df:be:
                    4b:48:31:89:77:01:bc:7b:8d:bd:e9:f7:e4:a3:58:
                    86:3d:9b:f0:ed:7a:60:aa:5a:99:84:e3:cc:6e:f9:
                    17:70:0a:ba:80:53:1b:c2:99:cf:4f:16:56:19:6c:
                    17:25:fd:78:ed:c4:28:96:e4:45:87:11:b0:5e:f3:
                    4d:12:3b:90:cf:f4:ee:6f:b2:27:b1:9e:eb:aa:d9:
                    d3:18:3f:24:9c:67:c9:3e:c8:33:4f:5e:ee:48:8c:
                    63:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:56:8F:DB:2D:92:21:7E:C2:1B:FF:29:ED:BC:62:8B:CB:B1:AE
            X509v3 Authority Key Identifier:
                keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a2:df:6a:87:86:f7:9d:7f:f6:8b:15:33:3b:d5:d9:bb:c4:
         8b:31:8a:95:04:16:cf:e2:2f:ea:76:ea:6a:70:f9:e7:18:60:
         7d:f0:2a:4c:96:ca:6e:17:ef:3d:05:c5:c0:16:f2:29:93:cd:
         ab:cc:8e:e3:b6:23:af:5c:75:3e:4f:52:a0:e3:6f:a1:ce:82:
         de:e0:81:c7:e1:a2:cb:95:02:89:19:c9:80:60:37:8b:3f:08:
         f4:b9:15:82:57:88:9c:72:bb:b1:e9:42:02:a1:5e:5d:cc:d2:
         9f:2a:6c:9d:0e:35:0a:2e:02:52:21:c6:66:af:fa:7c:bd:06:
         5b:17:d8:55:4c:14:3d:2a:e9:63:b3:f5:50:ef:df:4c:47:8c:
         7d:c1:f0:e7:4d:93:37:1c:64:bd:a1:9f:3a:fb:b0:81:c2:d7:
         6e:20:9a:21:a2:21:dc:e4:2a:ef:4e:90:d3:c9:8b:78:38:5a:
         86:96:22:38:83:8e:1c:a4:58:14:be:53:7f:aa:3a:f4:59:1c:
         63:32:d4:89:23:97:a3:23:40:e4:3d:5b:24:c6:25:a6:0f:ec:
         e6:9c:0f:0d:b1:85:c9:41:b9:4d:85:f9:d7:3b:77:57:fb:bf:
         21:6a:d9:b0:d8:b8:80:88:ca:bb:31:56:05:52:ed:b7:21:50:
         c3:f8:fb:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 12:59:16 2026 by rpki-client