This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
File:                     I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json)
Hash identifier:          UMwyWCjjQThupJZGTwFSqaqKj+cwxtO2fbZQvrMtxxQ=
Subject key identifier:   61:1C:52:15:1F:16:58:31:11:CD:E7:36:E0:4F:E4:C3:CC:04:D7:4C
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Certificate issuer:       /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial:       019C070D4059B9822097FE40FF08563A87A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
Manifest number:          0E36
Signing time:             Thu 29 Jan 2026 00:00:34 +0000
Manifest this update:     Thu 29 Jan 2026 00:00:34 +0000
Manifest next update:     Fri 30 Jan 2026 00:00:34 +0000
Files and hashes:         1: 1-7erNI2QQVesZx2S6vBk34vAQbc.roa (hash: LpuspUCuYwH1ZDqWCvOoYLaa0r5X4XSXoNPE482TARQ=)
                          2: 5uIuC6619SIoj23PHmVXaawg9T0.roa (hash: v61sWxYpjB5cR875CgKsX5/BohAXvtCj+4n0HCwoir4=)
                          3: BwwsX5CA49DLpcT7EZANR8AOmBk.roa (hash: xROcBtDrvn9mIzufXpFQnh5qUEHfuMjeYS0C0sO/iyE=)
                          4: D8y4sjkGpeIiHLe_h9a8iEbgYNY.roa (hash: TDMEwz5gt3EPb3Q8n7MUHWvN5PqCg9O85yXhInv+mAY=)
                          5: Fut3z_0NrsppnnypWgorA15khSo.roa (hash: PZ+31QMYFpcaajDE6Kz0RM280Aw/GsarIS/b6Pxddvs=)
                          6: H5LfcGZOE0woMI6tdZzE9r7HPEw.roa (hash: VVvZzi+5Bc0xtUjGUPjjK4zUfhmlu8TSLUbX+UCZJNM=)
                          7: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: r8ExSK7SEOu8YEtJwj/qKm94Vc73bqw1kSN5aKhBXBc=)
                          8: IjAXDkOBvVQgicdqQcDdqjKbExY.roa (hash: EdNiMAroL0c8PixsrsHLCM0XvpttsPiOW4jvWzfo+lQ=)
                          9: LRJOH1XAYORI27y4uJx_6K4rxvI.roa (hash: bh1x2XPDRMzdFYpJ/hthNxsh7SOpP2BmRgnfeXX/swc=)
                          10: ODwSvh8QvIx4C5RaxVj3WEz78js.roa (hash: TXe3jIUCwsHdp8bbSgAaG8537+311WJzZxhPypGxwfw=)
                          11: f2waKQNAA11ZmElzUDNQuE551eg.roa (hash: 9wNIMlJ6NAZfEpbuK9ToCkHc8eGXpYOSuShsA99Z1G8=)
                          12: gL5k2DS2jun3rDmSAFmyHUd90rY.roa (hash: ktbtdzg5OrIig6DPwxBSpYymgHZnpLgHQbuyYtdVI84=)
                          13: gcN7yS93t2HKXJyOUMDxPp8DdjA.roa (hash: DpOel+7rcXHeqLAzR65McC8S1GNmilo4XJs58vkTcEY=)
                          14: n2leCq1IHInB8JMONxXocTHAAQo.roa (hash: TMGH/DW6sK2n+NbvDRrrQiE8Vqge1MOsX7BtGpcHV5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Jan 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:07:0d:40:59:b9:82:20:97:fe:40:ff:08:56:3a:87:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
        Validity
            Not Before: Jan 29 00:00:34 2026 GMT
            Not After : Jan 30 00:00:34 2026 GMT
        Subject: CN=611c52151f16583111cde736e04fe4c3cc04d74c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d2:61:ae:2d:4c:e4:46:3f:e6:b0:0d:e5:7e:
                    ac:b1:61:e8:02:da:85:1e:9b:d5:f7:87:48:ab:0d:
                    35:aa:2e:8a:dd:74:53:ce:e6:57:ee:c9:2d:a1:c6:
                    24:5c:cb:a2:50:ff:05:2a:34:57:d0:3b:02:f4:99:
                    05:2c:96:5d:a7:4d:bd:15:26:5e:9d:78:b0:71:a3:
                    ed:46:b5:46:a4:0c:e9:59:48:e8:2a:36:74:8b:b4:
                    ee:84:cf:97:b5:0a:c7:5f:34:e6:12:83:a7:fe:cd:
                    30:23:41:12:8a:18:f5:42:e7:96:c3:c6:06:54:d0:
                    ad:e8:28:4f:b3:b2:76:b7:6c:85:6f:d7:42:9c:ac:
                    d1:03:41:e0:47:3b:22:42:5d:dc:d7:66:be:83:2e:
                    cb:4c:67:55:89:77:89:a5:62:81:67:e7:a5:75:8a:
                    af:d8:d2:f7:d2:54:be:23:5d:2c:dd:ab:52:a9:8c:
                    77:b6:13:da:74:c6:b5:ce:3c:e2:ce:f7:6b:53:47:
                    ae:7b:26:ed:b5:c8:9e:e6:db:e2:b4:99:2c:7c:77:
                    cd:ab:9b:14:07:40:d1:43:7a:82:e5:c5:5f:d5:0e:
                    6f:84:19:3b:d3:65:00:4c:0a:b3:69:7a:b0:1b:b7:
                    cc:9e:65:6a:82:d3:74:56:b6:be:c0:b1:63:ba:d7:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1C:52:15:1F:16:58:31:11:CD:E7:36:E0:4F:E4:C3:CC:04:D7:4C
            X509v3 Authority Key Identifier:
                keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:36:11:91:96:20:9a:3d:80:62:ef:65:8b:ba:ee:03:4e:99:
         9d:b0:ea:7f:8b:43:b2:0f:83:48:43:1b:fe:46:e4:db:35:45:
         00:7e:d4:6f:d3:50:2e:fb:c7:ee:fc:ed:28:51:3a:23:45:54:
         7c:04:17:d2:e1:a8:9c:a2:18:9a:37:c9:3a:fc:22:87:92:07:
         3c:a9:04:87:81:e1:f7:f8:aa:2d:a7:03:9d:4f:f6:c9:31:b0:
         ea:d2:2b:18:f2:c9:03:79:52:87:46:87:bb:0e:cc:01:72:65:
         db:0d:cc:18:e1:43:21:6d:f9:0e:60:d3:c2:db:4d:b0:dd:27:
         bf:48:79:a6:79:c4:56:7c:67:aa:7e:49:cb:98:ec:df:15:ba:
         a3:c4:73:ca:43:92:37:2f:d3:89:06:2b:c9:c7:30:e3:3e:33:
         1a:02:64:be:8e:91:8f:01:7a:0b:3e:d4:fd:84:27:53:39:00:
         c1:55:ca:49:4a:80:2d:9d:21:5b:8d:20:cf:ce:78:dd:74:b1:
         5d:82:d3:49:c5:cc:47:d8:39:e5:34:53:e0:08:b2:4b:fb:b4:
         9a:95:c9:6c:7c:82:34:ad:1a:8d:e8:40:5b:c5:cb:01:a9:f1:
         bd:2b:97:27:b7:63:bd:df:d4:aa:8f:ae:b5:98:b7:b2:24:c8:
         8c:e5:e1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 10:12:48 2026 by rpki-client