This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
File:                     13auCasbyUrOg_pv02rFIoZ7kuo.mft (raw, json)
Hash identifier:          oSgbthgELqKTHCRJ/qBWpBw8pSQVY/En0ZJonnfNVyo=
Subject key identifier:   35:20:42:0F:F0:F2:C1:6C:B9:A9:DB:18:9A:7C:C0:19:8A:0C:23:3E
Authority key identifier: D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA
Certificate issuer:       /CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
Certificate serial:       019BFBAE139E10AEBE8C618FD5B6E3FD0CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
Manifest number:          17EB
Signing time:             Mon 26 Jan 2026 19:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 19:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 19:00:47 +0000
Files and hashes:         1: 13auCasbyUrOg_pv02rFIoZ7kuo.crl (hash: S9e0ma6FUmf5vT0N6icR5aJ0CZOfvwUoZp6foBN8/0U=)
                          2: yQF_oqKXVguMAr3971D21MlrR_8.roa (hash: rXFsVsTmW2PojlnuQAcJtT+oQ2/oW7PggfH906SCVtQ=)
                          3: ywVR7woUIzneTMtjfuoirWk196k.roa (hash: i+MATSFKerXwDHLKNUICE818LV3sf8RvOyqaZnW8Yrg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fb:ae:13:9e:10:ae:be:8c:61:8f:d5:b6:e3:fd:0c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d776ae09ab1bc94ace83fa6fd36ac522867b92ea
        Validity
            Not Before: Jan 26 19:00:47 2026 GMT
            Not After : Jan 27 19:00:47 2026 GMT
        Subject: CN=3520420ff0f2c16cb9a9db189a7cc0198a0c233e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:be:88:fa:c1:e8:11:26:2e:8f:68:e4:bc:61:
                    99:e3:e6:a0:d4:23:53:ed:b3:b4:b2:10:ac:fe:2a:
                    f8:64:04:ec:e1:32:2f:77:d1:7f:5b:51:f8:e5:7f:
                    c8:db:c8:c6:73:b2:81:1c:7e:97:90:3c:19:f3:a1:
                    35:61:e4:36:f1:3b:42:44:c5:b2:f7:4b:48:54:9a:
                    c7:dd:cb:57:c3:b7:4e:75:d2:26:a7:57:f1:55:6d:
                    27:ee:ba:be:ce:b4:91:01:4a:4e:12:79:64:bf:1f:
                    b7:36:28:12:79:03:8b:2f:00:e5:5c:e4:ac:2c:f1:
                    c7:48:0e:a4:29:c2:bb:2b:f8:9c:32:7b:61:1e:3c:
                    d1:33:2b:5c:2f:b8:af:ea:57:9c:a1:eb:cc:96:22:
                    87:9e:85:3a:4c:c2:08:14:a8:6a:86:d9:46:9d:0d:
                    1f:08:26:c9:c2:0b:e3:3b:5c:b4:d5:81:83:24:4c:
                    ac:7a:ba:cb:be:f2:73:68:90:42:5f:ff:91:70:1a:
                    a0:da:87:7e:99:ac:1f:09:d4:e9:a7:4e:b7:73:86:
                    18:76:67:95:eb:2f:f0:60:c2:59:ea:47:5f:f0:ca:
                    89:9f:e4:14:89:58:d7:f6:27:4e:a0:5e:9b:72:1e:
                    ef:92:8d:d9:07:cd:0f:64:db:f5:4b:3f:85:a6:57:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:20:42:0F:F0:F2:C1:6C:B9:A9:DB:18:9A:7C:C0:19:8A:0C:23:3E
            X509v3 Authority Key Identifier:
                keyid:D7:76:AE:09:AB:1B:C9:4A:CE:83:FA:6F:D3:6A:C5:22:86:7B:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13auCasbyUrOg_pv02rFIoZ7kuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1a09bb-01de-4be5-bce1-908648a20bc8/1/13auCasbyUrOg_pv02rFIoZ7kuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:6c:4c:b0:40:66:de:6e:9a:d5:58:e7:3d:45:3e:77:ff:98:
         6d:58:72:2a:b5:7b:c1:ad:54:1d:9c:59:a0:c1:1b:cc:e0:57:
         64:87:88:37:aa:0d:9a:9f:8d:19:91:ea:3b:b8:d6:5b:5e:3d:
         f8:e5:bf:8a:fd:fd:24:a7:53:77:bc:24:b7:9a:9c:05:92:d1:
         4b:11:19:23:ac:bb:4c:a0:7c:0a:bf:7c:32:8a:a8:5b:ce:24:
         1d:49:d0:30:7e:92:20:f3:15:52:f9:e0:9f:c2:20:80:64:fa:
         0d:cc:e6:c5:43:04:23:37:4f:80:eb:43:a3:73:ca:85:93:08:
         38:23:96:ff:af:1d:83:08:a4:98:d7:30:b8:0c:51:32:e5:7a:
         a1:6c:b4:b8:d8:0e:e4:d2:7d:ca:2e:4a:ba:c7:9e:92:84:ab:
         7c:18:97:3a:5d:7a:59:42:f1:15:1f:9f:16:ed:2d:26:3d:f2:
         1d:43:bb:17:d9:e6:09:39:d8:9b:8a:16:36:fc:dc:b5:c6:4f:
         9b:00:c5:63:09:9d:d9:aa:62:e6:b4:87:4a:3c:dc:21:25:bc:
         88:6c:c0:ef:2f:0c:f4:dd:9d:49:73:67:32:7c:15:23:f6:2c:
         2e:bd:03:bc:de:5f:55:73:cc:f1:77:ad:d6:57:d1:e0:41:b7:
         80:7a:87:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv7rhOeEK6+jGGP1bbj/QymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NzZhZTA5YWIxYmM5NGFjZTgzZmE2ZmQzNmFjNTIyODY3
YjkyZWEwHhcNMjYwMTI2MTkwMDQ3WhcNMjYwMTI3MTkwMDQ3WjAzMTEwLwYDVQQD
EygzNTIwNDIwZmYwZjJjMTZjYjlhOWRiMTg5YTdjYzAxOThhMGMyMzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb6I+sHoESYuj2jkvGGZ4+ag1CNT
7bO0shCs/ir4ZATs4TIvd9F/W1H45X/I28jGc7KBHH6XkDwZ86E1YeQ28TtCRMWy
90tIVJrH3ctXw7dOddImp1fxVW0n7rq+zrSRAUpOEnlkvx+3NigSeQOLLwDlXOSs
LPHHSA6kKcK7K/icMnthHjzRMytcL7iv6lecoevMliKHnoU6TMIIFKhqhtlGnQ0f
CCbJwgvjO1y01YGDJEyserrLvvJzaJBCX/+RcBqg2od+mawfCdTpp063c4YYdmeV
6y/wYMJZ6kdf8MqJn+QUiVjX9idOoF6bch7vko3ZB80PZNv1Sz+FpleOxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUgQg/w8sFsuanbGJp8wBmKDCM+MB8GA1UdIwQY
MBaAFNd2rgmrG8lKzoP6b9NqxSKGe5LqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEt
OTA4NjQ4YTIwYmM4LzEvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8xYTA5YmItMDFkZS00YmU1LWJjZTEtOTA4NjQ4YTIwYmM4
LzEvMTNhdUNhc2J5VXJPZ19wdjAyckZJb1o3a3VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqmxMsEBm
3m6a1VjnPUU+d/+YbVhyKrV7wa1UHZxZoMEbzOBXZIeIN6oNmp+NGZHqO7jWW149
+OW/iv39JKdTd7wkt5qcBZLRSxEZI6y7TKB8Cr98MoqoW84kHUnQMH6SIPMVUvng
n8IggGT6DczmxUMEIzdPgOtDo3PKhZMIOCOW/68dgwikmNcwuAxRMuV6oWy0uNgO
5NJ9yi5KuseekoSrfBiXOl16WULxFR+fFu0tJj3yHUO7F9nmCTnYm4oWNvzctcZP
mwDFYwmd2api5rSHSjzcISW8iGzA7y8M9N2dSXNnMnwVI/YsLr0DvN5fVXPM8Xet
1lfR4EG3gHqHzQ==
-----END CERTIFICATE-----
Generated at Tue Jan 27 04:28:22 2026 by rpki-client