This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
File:                     O0d6YmB_uUyOI7WgYseNk9-cvWk.mft (raw, json)
Hash identifier:          8y6gd38jEFRUyt3lZQXThD82MHB9O9DbnIRVzzidQHI=
Subject key identifier:   3B:AE:2D:FC:B2:E4:AC:50:0A:3D:95:BB:CC:F6:C1:E4:B5:9F:3B:5B
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Certificate issuer:       /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial:       019BFA647702EC0CCE585361C137BB94BBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 13:00:46 +0000
Manifest this update:     Mon 26 Jan 2026 13:00:46 +0000
Manifest next update:     Tue 27 Jan 2026 13:00:46 +0000
Files and hashes:         1: Dr3WDUpz6-xPqX9Onpmd9dBVP5Q.roa (hash: K0SdFptEazmOT46XEGng/FuWvVaWyGlgcNjhMXNpZ4c=)
                          2: O0d6YmB_uUyOI7WgYseNk9-cvWk.crl (hash: yKfq9yq534w7YqH+vqqFX7+Y+rCvBrvs7Z4QZFx4WiU=)
                          3: pMHI94DTtKKz8gzxhVKkHUjKag0.roa (hash: pFTxumvDB0SF9JNJ3IzVUzE5KL+TMh7qeatEKMQOnlg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:64:77:02:ec:0c:ce:58:53:61:c1:37:bb:94:bb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
        Validity
            Not Before: Jan 26 13:00:46 2026 GMT
            Not After : Jan 27 13:00:46 2026 GMT
        Subject: CN=3bae2dfcb2e4ac500a3d95bbccf6c1e4b59f3b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:5d:34:50:d5:ca:27:e5:20:81:c1:4c:25:
                    c5:24:aa:e7:8d:87:16:dc:d3:0f:e4:b1:5d:07:12:
                    74:b9:4d:55:b6:67:ab:66:d5:cd:6d:1f:84:79:3d:
                    b4:59:59:68:54:44:68:a2:aa:1a:51:4c:18:46:fd:
                    ab:36:c5:0e:5b:bf:9e:8e:f5:ba:84:cd:07:5f:e6:
                    68:bf:54:d9:4f:f0:a6:e2:8c:ad:9f:57:f1:ab:fc:
                    66:a0:d9:f8:80:16:cd:c5:f5:6f:08:c2:ef:99:4c:
                    54:f1:ed:0e:bf:90:77:2a:2c:43:f1:c1:fb:30:04:
                    c6:ad:5c:0e:82:9c:8f:dc:78:75:b8:91:a1:4e:f3:
                    90:dd:1b:18:53:8f:10:b7:b9:b3:b2:ff:83:e6:05:
                    f6:93:30:29:db:b9:0a:75:8d:03:5a:d2:5a:e9:ab:
                    07:1d:79:23:a3:60:99:fd:fd:ea:4b:b3:21:0b:59:
                    b0:d8:e3:83:21:20:f5:51:74:84:92:af:a6:80:75:
                    b3:f5:74:f7:d7:7e:f7:6c:59:fb:af:22:a8:01:14:
                    9e:b0:24:31:e5:c7:7f:8f:80:da:81:b6:f3:9b:75:
                    c6:9d:a4:f5:f6:db:88:0c:59:2a:fe:8f:23:9c:c0:
                    02:67:f5:e4:74:bf:3c:b5:10:0f:fe:4b:71:c4:57:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AE:2D:FC:B2:E4:AC:50:0A:3D:95:BB:CC:F6:C1:E4:B5:9F:3B:5B
            X509v3 Authority Key Identifier:
                keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:e1:89:0e:13:0d:2a:f6:5f:0d:fe:a0:8a:94:b4:6b:a7:8a:
         1b:e3:c7:2d:ce:cd:03:d1:5e:21:28:0e:b7:54:5a:85:36:19:
         ec:5b:96:d7:5d:85:ce:b0:bd:e1:c8:42:39:d4:06:6a:48:c9:
         ab:d1:e8:77:f0:bb:d4:4a:37:30:7a:29:5b:ee:ed:3b:98:4d:
         40:4e:33:92:a0:0a:e4:3d:73:b2:c6:29:9b:07:20:84:02:7e:
         1e:fe:f8:bd:af:85:c7:25:e1:78:d0:25:54:40:91:8e:72:d2:
         24:54:0d:de:b5:3e:8c:d6:2b:5e:12:b6:e7:04:cb:06:c4:10:
         48:3c:08:4e:f5:13:b2:31:40:e3:b0:0e:9a:92:18:58:f2:68:
         34:90:d2:ce:52:ee:b5:6f:9a:21:ea:ef:d9:e2:55:ad:45:ab:
         bf:b6:b5:77:ca:f0:6d:ba:30:41:1a:09:b6:8d:6a:a9:0d:8a:
         60:ec:72:0f:12:8b:ce:08:1a:0b:b6:6a:5a:de:ba:d7:52:a3:
         74:95:bf:c2:b1:0c:a7:45:3a:36:77:6b:ec:a7:32:c7:89:6f:
         41:db:64:da:2d:7c:09:2d:f6:c1:71:6c:10:93:67:2d:72:9a:
         32:1a:28:95:72:06:9b:0c:86:4b:7d:8c:a5:87:3d:10:c5:07:
         91:13:60:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 20:29:52 2026 by rpki-client