This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
File:                     a0s-anyHg_yKVxn72fN7MsjHxco.mft (raw, json)
Hash identifier:          JEVWDpZG78ByTHokIQqAot4jcBgD6ZrKAW+hu/NLmuk=
Subject key identifier:   70:95:4D:C2:B7:D9:F5:16:29:D8:0C:1B:AE:90:9F:0C:F6:DE:2C:C0
Authority key identifier: 6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA
Certificate issuer:       /CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
Certificate serial:       019BE0375767153725FF6B81D1F8BC65A24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
Manifest number:          104C
Signing time:             Wed 21 Jan 2026 11:01:21 +0000
Manifest this update:     Wed 21 Jan 2026 11:01:21 +0000
Manifest next update:     Thu 22 Jan 2026 11:01:21 +0000
Files and hashes:         1: 1-PU-Hm_SbxZzdKhiYrsJyhJw6oI.roa (hash: F3ey1QrO2lAooe3dk5bBb9+xgHy1sfZAGBgLbjbxbY0=)
                          2: Bf9RdHQMdQL9V8vN6-doDD0kdao.roa (hash: OeRuEu23I1npxCLbqKUi8RpgkFTQ1kB32heke6+KB6M=)
                          3: GQIGNP3ib22FM0gmlZYEVyr6wsE.roa (hash: 6pjgMVqEKUSiLzAce+B/Gv6+j8GqxUjYg+qoHDWXENw=)
                          4: a0s-anyHg_yKVxn72fN7MsjHxco.crl (hash: VCKafkqT1OTNAmngrSZ6TQjNOQF1Ajk0DWSrS+3crUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Jan 2026 11:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e0:37:57:67:15:37:25:ff:6b:81:d1:f8:bc:65:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b4b3e6a7c8783fc8a5719fbd9f37b32c8c7c5ca
        Validity
            Not Before: Jan 21 11:01:21 2026 GMT
            Not After : Jan 22 11:01:21 2026 GMT
        Subject: CN=70954dc2b7d9f51629d80c1bae909f0cf6de2cc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:32:f0:da:e0:61:c5:95:41:cf:84:9e:0f:
                    f7:c2:62:9a:3a:2a:c7:49:0d:32:6c:f8:9f:fe:cc:
                    36:51:5a:c4:5c:a5:7c:66:56:d2:81:ed:cc:b7:48:
                    21:28:fa:a5:48:0b:70:2b:28:0e:dc:c5:ad:7a:8f:
                    bd:43:22:e3:6c:a8:f4:99:28:39:f0:14:ec:e0:d9:
                    6b:c8:b2:23:a0:33:c5:a5:3d:0b:27:1e:14:98:a3:
                    ab:10:b8:53:38:96:06:63:ea:21:41:5b:06:44:d8:
                    6d:db:ba:b2:f7:b7:8b:ad:92:b7:49:e8:ad:0b:10:
                    cb:a8:d0:f8:9a:93:30:a0:c9:c9:12:e7:68:0b:8c:
                    5a:86:86:8c:6f:b9:d4:5e:45:e6:c7:a5:e1:72:ed:
                    ee:41:c8:30:3d:74:e0:cc:25:90:c5:31:43:ca:fb:
                    58:50:31:27:60:c7:b5:56:af:6c:45:ff:ce:0b:4a:
                    85:fa:fa:eb:06:83:f6:b1:8c:31:db:ba:f8:74:9d:
                    29:cc:c6:f6:0b:52:79:ab:97:1e:c8:40:c1:3e:d5:
                    a7:f0:03:49:6c:f0:30:30:84:c5:7b:86:d0:0f:fa:
                    75:91:29:20:4b:2a:77:8a:92:b2:ac:15:af:ab:28:
                    98:89:2f:8d:b1:c5:a1:77:f9:fc:a0:43:f6:c3:dd:
                    a9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:95:4D:C2:B7:D9:F5:16:29:D8:0C:1B:AE:90:9F:0C:F6:DE:2C:C0
            X509v3 Authority Key Identifier:
                keyid:6B:4B:3E:6A:7C:87:83:FC:8A:57:19:FB:D9:F3:7B:32:C8:C7:C5:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0s-anyHg_yKVxn72fN7MsjHxco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/464194-53ad-4031-856b-4332c957a22f/1/a0s-anyHg_yKVxn72fN7MsjHxco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:72:71:1d:35:79:24:b1:54:2b:a9:4e:3f:11:48:e3:80:82:
         cc:08:f5:0f:3d:93:da:9e:c7:b2:f6:7c:16:17:48:b4:53:7a:
         9b:f0:b2:d1:bf:36:90:36:a8:a5:e0:13:6a:32:66:78:b2:87:
         4c:bf:96:46:35:d9:d9:1c:15:2d:1d:38:e8:80:c0:c6:56:79:
         99:3b:73:9b:96:93:0d:23:e6:28:06:a2:72:8d:69:f6:d1:3d:
         64:e9:8f:b6:8b:f7:b2:3e:b5:5b:63:8e:56:85:ea:24:53:00:
         a0:90:29:d2:c0:92:2e:de:8c:85:6d:70:6d:9f:40:7e:f8:f5:
         39:67:62:8d:f6:bc:79:9f:02:eb:e2:3e:59:42:5a:75:32:ec:
         70:61:08:70:67:6f:2c:ed:e0:ee:9f:36:ca:2d:c9:42:c2:8c:
         a2:47:d8:56:c2:cd:29:7e:f7:09:fb:aa:95:54:2c:c1:77:71:
         4c:03:14:50:03:86:7c:31:81:d0:8b:97:1a:b3:bd:1d:54:37:
         ff:1c:de:f4:2c:ba:5c:3c:70:87:0e:93:80:49:1c:8c:14:7a:
         73:e6:ad:f5:56:d9:22:b0:31:7f:bd:63:d6:ff:a0:c8:65:ac:
         a6:54:26:6a:fe:ac:f1:ff:07:34:d9:f3:d4:c2:ef:09:0e:d0:
         8e:03:2f:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvgN1dnFTcl/2uB0fi8ZaJKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGIzZTZhN2M4NzgzZmM4YTU3MTlmYmQ5ZjM3YjMyYzhj
N2M1Y2EwHhcNMjYwMTIxMTEwMTIxWhcNMjYwMTIyMTEwMTIxWjAzMTEwLwYDVQQD
Eyg3MDk1NGRjMmI3ZDlmNTE2MjlkODBjMWJhZTkwOWYwY2Y2ZGUyY2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2a8y8NrgYcWVQc+Eng/3wmKaOirH
SQ0ybPif/sw2UVrEXKV8ZlbSge3Mt0ghKPqlSAtwKygO3MWteo+9QyLjbKj0mSg5
8BTs4NlryLIjoDPFpT0LJx4UmKOrELhTOJYGY+ohQVsGRNht27qy97eLrZK3Seit
CxDLqND4mpMwoMnJEudoC4xahoaMb7nUXkXmx6Xhcu3uQcgwPXTgzCWQxTFDyvtY
UDEnYMe1Vq9sRf/OC0qF+vrrBoP2sYwx27r4dJ0pzMb2C1J5q5ceyEDBPtWn8ANJ
bPAwMITFe4bQD/p1kSkgSyp3ipKyrBWvqyiYiS+NscWhd/n8oEP2w92pCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCVTcK32fUWKdgMG66Qnwz23izAMB8GA1UdIwQY
MBaAFGtLPmp8h4P8ilcZ+9nzezLIx8XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmIt
NDMzMmM5NTdhMjJmLzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NjQxOTQtNTNhZC00MDMxLTg1NmItNDMzMmM5NTdhMjJm
LzEvYTBzLWFueUhnX3lLVnhuNzJmTjdNc2pIeGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASHJxHTV5
JLFUK6lOPxFI44CCzAj1Dz2T2p7HsvZ8FhdItFN6m/Cy0b82kDaopeATajJmeLKH
TL+WRjXZ2RwVLR046IDAxlZ5mTtzm5aTDSPmKAaico1p9tE9ZOmPtov3sj61W2OO
VoXqJFMAoJAp0sCSLt6MhW1wbZ9Afvj1OWdijfa8eZ8C6+I+WUJadTLscGEIcGdv
LO3g7p82yi3JQsKMokfYVsLNKX73CfuqlVQswXdxTAMUUAOGfDGB0IuXGrO9HVQ3
/xze9Cy6XDxwhw6TgEkcjBR6c+at9VbZIrAxf71j1v+gyGWsplQmav6s8f8HNNnz
1MLvCQ7QjgMv7w==
-----END CERTIFICATE-----
Generated at Wed Jan 21 19:36:25 2026 by rpki-client