This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File:                     uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier:          lLXCQobkKdQ2dXgjZYXKXJr26kAYLDIQPObItbrepXM=
Subject key identifier:   7E:18:7B:87:9B:0E:78:81:9E:10:0A:B6:1D:44:C4:86:70:60:5E:65
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer:       /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial:       019BFBE57D30384F015F93F2B8723C79D275
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number:          0F30
Signing time:             Mon 26 Jan 2026 20:01:19 +0000
Manifest this update:     Mon 26 Jan 2026 20:01:19 +0000
Manifest next update:     Tue 27 Jan 2026 20:01:19 +0000
Files and hashes:         1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
                          2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
                          3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: NELgy/QB8n6KfHTXez7qq9ZdnqrDeMUQXn8Pkzrw5kk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 15:35:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:e5:7d:30:38:4f:01:5f:93:f2:b8:72:3c:79:d2:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
        Validity
            Not Before: Jan 26 20:01:19 2026 GMT
            Not After : Jan 27 20:01:19 2026 GMT
        Subject: CN=7e187b879b0e78819e100ab61d44c48670605e65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6d:46:f1:5d:3b:31:81:e5:6e:be:ff:15:09:
                    00:86:76:a0:43:70:e1:3d:f3:28:44:fb:11:1c:37:
                    dd:6b:29:7c:fc:68:6e:e1:bb:92:f6:f2:8c:f6:3a:
                    e5:39:37:f2:06:9d:fc:40:58:ab:00:56:18:de:b4:
                    45:c5:44:7e:0c:a6:0d:18:a2:3d:01:22:50:56:0d:
                    b3:96:55:d2:21:02:47:75:fb:fd:0c:25:83:41:61:
                    68:a5:a7:9f:7c:60:0e:66:25:16:8c:00:9d:cf:a2:
                    8a:f5:a2:e0:19:d6:9b:7c:0e:60:6b:95:4d:2e:08:
                    5e:bc:7e:80:c5:86:c7:08:b7:ab:8b:54:1b:03:1f:
                    21:c6:7d:15:01:e0:93:f9:b7:ed:d3:60:b2:d8:6c:
                    36:ae:d3:26:e2:7b:df:d5:a9:30:3f:1f:02:f8:b1:
                    4c:0c:0d:14:69:e5:db:e9:62:92:88:64:e1:ea:ba:
                    ef:b3:7a:46:64:99:a8:63:e0:7a:aa:70:4d:ec:f7:
                    2e:db:82:00:14:ee:51:4a:f0:63:4d:65:6c:0b:e9:
                    c0:ab:ff:2a:c7:70:fc:51:3f:7a:a7:68:70:12:92:
                    7c:02:df:0f:c1:b5:b9:94:c8:2a:32:f4:b3:3c:81:
                    aa:3f:8d:e4:c3:07:94:f6:18:fe:d3:15:f2:3a:5e:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:18:7B:87:9B:0E:78:81:9E:10:0A:B6:1D:44:C4:86:70:60:5E:65
            X509v3 Authority Key Identifier:
                keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a6:7f:9e:95:94:5e:09:ac:c9:ef:d9:b8:d7:56:25:df:74:
         b8:fc:9c:0d:35:56:4c:c5:e7:37:4d:88:7d:b9:6f:d3:75:3a:
         19:5b:8a:25:00:07:53:68:00:4d:be:e1:46:b1:1d:d4:7c:82:
         1d:fd:96:cf:e3:a5:43:6e:9f:5c:17:01:2c:5b:da:87:c6:45:
         dc:49:dd:7a:a2:af:25:3d:77:44:06:ba:5a:2e:ff:16:76:85:
         73:92:26:07:b7:cf:07:02:90:c1:84:65:ab:dc:8f:96:19:02:
         da:5b:72:b1:28:f5:91:c4:70:c8:a5:44:58:17:f5:b5:40:85:
         72:b9:04:b0:0f:00:40:fc:c9:38:1b:b0:8f:17:98:35:a2:cd:
         9b:3c:77:f6:42:a0:cf:49:55:b2:63:4e:53:f4:e4:35:e3:75:
         b2:c9:8b:ba:00:53:04:5a:e8:bb:a4:64:9c:03:41:4f:16:94:
         9d:5f:82:6f:1f:cc:37:b8:42:76:23:43:ad:36:a8:37:02:2b:
         d6:b6:4b:64:14:0e:09:95:a6:c1:78:85:72:a8:1d:c8:d6:e5:
         ba:82:00:2f:fd:5f:67:ce:d6:db:3a:48:19:9d:6c:b6:25:24:
         40:59:cf:57:d8:63:68:50:49:c3:86:a5:99:bc:1b:6a:cc:93:
         e2:1f:dd:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 23:27:16 2026 by rpki-client