This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
File:                     O9mhd7td-26r5MrXne-PiwBd9lY.mft (raw, json)
Hash identifier:          6kcOieOaf9turstwgBtcECIqC2NOl7c7Q1Wx/ygpy3U=
Subject key identifier:   B0:A9:2C:6C:AE:A6:D2:2A:85:2F:3D:0D:1F:C9:74:9C:C0:F3:CC:C7
Authority key identifier: 3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56
Certificate issuer:       /CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
Certificate serial:       019BFE0AF1E7BF75EB7851B84BACEA7B4AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
Manifest number:          132F
Signing time:             Tue 27 Jan 2026 06:01:28 +0000
Manifest this update:     Tue 27 Jan 2026 06:01:28 +0000
Manifest next update:     Wed 28 Jan 2026 06:01:28 +0000
Files and hashes:         1: 1-XNUwWKzbev3eBkOpcFm2xBkpoQ.roa (hash: /XJqAINdnXXDOWVdvq7kHAw4+acFhC/fD2KcJxKL5nQ=)
                          2: ETKpQOj6OTuNPXTp1i_iB6iLDJY.roa (hash: oL+8JKtbsi8ZoMkkG6i545NLOcvXQnKT9FOD68h1HXk=)
                          3: O9mhd7td-26r5MrXne-PiwBd9lY.crl (hash: /hDlEQDuxs4Qtb/KFCC695oqHmBj+pIURXIs9ItM3lA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 06:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:0a:f1:e7:bf:75:eb:78:51:b8:4b:ac:ea:7b:4a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bd9a177bb5dfb6eabe4cad79def8f8b005df656
        Validity
            Not Before: Jan 27 06:01:28 2026 GMT
            Not After : Jan 28 06:01:28 2026 GMT
        Subject: CN=b0a92c6caea6d22a852f3d0d1fc9749cc0f3ccc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1f:d9:79:00:06:0a:8f:c5:01:ce:24:de:90:
                    70:49:f9:bb:45:6f:7c:2a:8e:72:9c:6f:1e:fb:fc:
                    20:2f:ff:f3:b6:36:35:53:d1:9c:a4:e0:ea:25:16:
                    9a:cd:7c:67:55:fd:bb:e8:02:9f:59:d1:43:a4:6b:
                    a9:04:2b:12:1e:95:4d:81:1c:29:a1:8f:19:3f:a1:
                    3a:4c:45:26:31:54:de:46:bc:e6:8a:cc:ea:d4:86:
                    b1:d0:7d:47:34:1a:5a:5b:ac:e5:0e:bd:a9:8a:a9:
                    21:37:eb:69:bb:3c:48:ed:45:4e:55:ee:c1:73:02:
                    a2:b0:b3:ae:f6:da:e1:78:43:53:f9:94:4d:83:c1:
                    fe:cc:0a:a3:4a:2f:a4:8d:7a:c1:83:fa:64:8a:8b:
                    8b:76:00:0b:5b:d5:a9:ee:62:9c:4b:09:3d:45:15:
                    df:8b:23:31:6c:cf:86:0c:99:61:82:a5:b0:c5:56:
                    4a:6f:e1:35:20:e0:b7:8f:e7:3b:c7:8b:ae:2d:b4:
                    89:70:40:fc:b1:d4:41:3a:c1:ab:a7:5a:c6:54:ec:
                    83:45:a9:c8:b7:93:b1:9c:ce:87:63:a8:33:8b:3f:
                    11:c2:6e:18:d7:46:88:e0:c6:3d:c3:65:9f:65:be:
                    ba:0a:6e:87:fa:49:44:1d:35:cd:8a:37:4e:58:56:
                    00:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A9:2C:6C:AE:A6:D2:2A:85:2F:3D:0D:1F:C9:74:9C:C0:F3:CC:C7
            X509v3 Authority Key Identifier:
                keyid:3B:D9:A1:77:BB:5D:FB:6E:AB:E4:CA:D7:9D:EF:8F:8B:00:5D:F6:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O9mhd7td-26r5MrXne-PiwBd9lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c0d467-f62a-419c-be85-e38030b69d5a/1/O9mhd7td-26r5MrXne-PiwBd9lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:e4:4e:4d:b0:07:17:a7:19:7c:4c:c4:f9:19:1e:32:aa:
         1e:7b:c9:3a:ea:67:c7:4b:2d:2f:3c:8a:8b:1a:f3:09:46:4d:
         34:04:e1:9c:09:c2:46:85:aa:4e:da:0c:9e:55:1a:21:ce:c4:
         cf:a3:30:88:d6:ff:03:6a:fe:09:97:5a:59:67:16:b6:8f:14:
         9e:3d:7f:65:c3:61:82:04:07:35:44:83:19:41:bd:c8:78:cd:
         a8:51:c1:0f:9b:5a:ab:2f:5c:56:50:4d:12:b3:26:02:d5:5e:
         da:b5:9f:99:91:c8:8d:0d:4e:d6:ca:c4:ac:c6:c9:d3:90:45:
         66:d8:33:e7:9d:0f:0f:3a:fa:54:86:81:52:97:50:5d:2e:83:
         c1:ca:8f:8c:5f:19:7d:67:b2:95:e7:96:66:cb:65:03:b5:17:
         51:69:6c:ab:14:c0:0a:a2:3b:09:fa:aa:ba:a6:6f:f7:27:be:
         d2:a7:19:3e:de:cc:f8:0a:1a:9d:90:25:cd:42:cc:ce:67:ff:
         a5:a7:37:5d:47:96:13:0f:af:6a:dc:e7:b6:b4:70:48:d8:d5:
         df:cb:18:2d:fc:17:02:b9:d2:63:b1:0c:86:52:6d:fd:46:a5:
         11:e6:a8:ec:fa:7c:cd:34:b0:8c:3c:cf:dc:6e:cf:f3:02:48:
         df:b4:ba:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 12:45:24 2026 by rpki-client