This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
File:                     C9StlfF_OXIHo_wNGG8pE98465M.mft (raw, json)
Hash identifier:          mq+N+ZiZsFW//2lC5JtYPZqmj5TV7bwnuGfSa/JrOro=
Subject key identifier:   00:37:B7:C5:C9:AF:6B:6A:57:4C:3C:4B:BF:C8:85:DF:1C:E1:59:3A
Authority key identifier: 0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93
Certificate issuer:       /CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
Certificate serial:       019BFE413B71473000BE4FC72E7511F5D083
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
Manifest number:          14FE
Signing time:             Tue 27 Jan 2026 07:00:46 +0000
Manifest this update:     Tue 27 Jan 2026 07:00:46 +0000
Manifest next update:     Wed 28 Jan 2026 07:00:46 +0000
Files and hashes:         1: 5Exteqie3KsBngcWjYUU_zanfa8.roa (hash: PdNLvFWIBwQQSvbTJF82uHlbPL/7rLb8bBwlQCZrRe8=)
                          2: C9StlfF_OXIHo_wNGG8pE98465M.crl (hash: Qlq4SKxCzEh0B1thyK813GzXl3EeFq27t4mAzKP5Dzo=)
                          3: Y3ge3oRqpdmJst537rmbrGZpsUE.roa (hash: Pn9f33aZ8ng5xcQn0dPf3vN8u8Ztxrsr9oyxZOfeI/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:41:3b:71:47:30:00:be:4f:c7:2e:75:11:f5:d0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bd4ad95f17f397207a3fc0d186f2913df38eb93
        Validity
            Not Before: Jan 27 07:00:46 2026 GMT
            Not After : Jan 28 07:00:46 2026 GMT
        Subject: CN=0037b7c5c9af6b6a574c3c4bbfc885df1ce1593a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:74:af:f9:20:87:fc:2a:c5:3d:fe:d2:c6:15:
                    da:bc:d9:ee:9c:b4:72:89:1c:7c:b4:68:71:4f:08:
                    85:57:56:eb:1e:92:0d:ac:03:d8:e6:8f:ad:fe:ac:
                    b0:70:fe:10:4f:ee:28:10:db:86:79:3d:09:8f:9d:
                    42:54:84:fc:f6:82:49:da:3c:46:8a:5b:ca:8a:22:
                    55:81:21:26:73:e2:be:96:fc:41:31:64:ce:d0:6a:
                    6e:7c:bc:0e:e8:26:70:1b:b9:23:09:0b:07:4e:39:
                    35:85:0e:85:98:31:c8:19:69:e6:7b:09:eb:ec:8e:
                    75:24:e9:33:de:f3:5c:e1:3d:01:28:53:cb:a6:46:
                    6e:ce:5a:f5:d1:ef:aa:fe:d3:da:7f:ff:16:7d:20:
                    ba:ad:4f:ff:e4:30:b1:c1:e6:da:0d:05:fe:fc:42:
                    d8:57:09:80:dc:c9:ab:bc:b4:0f:4e:fc:bf:2e:41:
                    d0:8a:44:5b:94:5a:55:5c:28:9c:0d:b4:46:34:38:
                    b6:5a:a4:7c:47:f1:56:81:51:3c:d5:52:33:11:c1:
                    88:06:d4:b1:03:0a:97:a8:b1:46:ac:80:a4:4a:bf:
                    60:14:12:b5:4a:8c:a8:35:05:84:19:d9:f8:e9:3f:
                    36:cb:56:8f:06:70:70:e7:95:21:ed:61:2d:6a:8d:
                    7b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:37:B7:C5:C9:AF:6B:6A:57:4C:3C:4B:BF:C8:85:DF:1C:E1:59:3A
            X509v3 Authority Key Identifier:
                keyid:0B:D4:AD:95:F1:7F:39:72:07:A3:FC:0D:18:6F:29:13:DF:38:EB:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C9StlfF_OXIHo_wNGG8pE98465M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/76d082-ac32-4738-99e6-b2f6086368c7/1/C9StlfF_OXIHo_wNGG8pE98465M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:08:fd:67:22:8e:48:21:ed:ed:da:5a:50:d6:bc:79:48:ca:
         16:b6:3b:e2:e6:f5:82:b3:11:38:9d:05:f2:ec:df:fa:4e:36:
         6c:71:98:db:39:b9:7b:40:c7:f9:20:82:e6:e4:14:7d:7d:9f:
         0c:ff:71:60:83:50:49:11:57:56:fb:90:f4:54:06:88:f3:f9:
         4b:d0:91:13:c7:97:0d:d9:e5:9a:c3:1c:74:4b:3d:ab:99:d0:
         47:d0:4f:a3:96:0a:12:e0:c8:df:25:9e:a0:23:9f:d6:d3:d4:
         6d:9f:b5:1b:76:f7:f0:aa:72:9a:b9:32:d7:72:1a:95:44:a6:
         3e:80:2e:ee:ec:83:0c:cc:38:87:df:2f:8e:c2:46:f6:23:09:
         3a:37:80:5f:89:e9:11:5a:57:5d:68:3a:e4:37:1a:81:57:62:
         df:50:5f:a5:b3:22:66:1e:ae:23:74:c1:c2:4b:d0:03:98:0e:
         52:33:09:60:fe:9d:b9:cc:03:03:41:7a:55:6b:d9:b7:e2:9d:
         95:97:6f:e1:5a:5f:79:fe:35:c5:3f:e2:a4:b7:2d:7c:65:4a:
         9f:83:b6:da:a1:78:17:b5:e9:31:7b:5a:d5:f9:ed:7e:66:95:
         31:d7:90:d7:1a:a7:b1:68:71:1a:1c:5b:af:8a:6c:f0:08:61:
         bc:6a:f9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 13:23:17 2026 by rpki-client