This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
File:                     abAZJ6Ghd9QmEiHZRihRSlJaluA.mft (raw, json)
Hash identifier:          ycKYaXOaDxyezsD39aYEwyhtNpLcB7GZekyTPLDmtxM=
Subject key identifier:   B0:0E:D3:F7:CD:A6:46:72:05:D0:3A:D3:A3:60:D7:FE:AB:3F:ED:E4
Authority key identifier: 69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0
Certificate issuer:       /CN=69b01927a1a177d4261221d94628514a525a96e0
Certificate serial:       019B9E5776C50A0CC78AA5CB869647FA8661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
Manifest number:          0BF6
Signing time:             Thu 08 Jan 2026 16:01:30 +0000
Manifest this update:     Thu 08 Jan 2026 16:01:30 +0000
Manifest next update:     Fri 09 Jan 2026 16:01:30 +0000
Files and hashes:         1: abAZJ6Ghd9QmEiHZRihRSlJaluA.crl (hash: 8EN+At/qlfp0xQwTv9mtX2J1Pz3zR1SAV/zVYGamKTc=)
                          2: epJ5NtfvH1g3tuK4xd9nscSiEoA.roa (hash: niW0UBzEk+eWx8n4afLHbWheyJix/ATlxCY23FXANN8=)
                          3: hpFPFF4swm17BfKeLPrET14DerI.roa (hash: /w3PMxP9jyIQ4EgZwsRkLDa6435IO8C6U7QCr8ty+WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Jan 2026 16:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:9e:57:76:c5:0a:0c:c7:8a:a5:cb:86:96:47:fa:86:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b01927a1a177d4261221d94628514a525a96e0
        Validity
            Not Before: Jan  8 16:01:30 2026 GMT
            Not After : Jan  9 16:01:30 2026 GMT
        Subject: CN=b00ed3f7cda6467205d03ad3a360d7feab3fede4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:5b:ab:20:a4:03:bd:66:40:c6:35:8e:50:
                    1f:81:82:7c:e9:48:e2:1c:6e:b4:a2:c4:4f:b6:62:
                    7d:02:d0:ce:12:fe:bb:c5:8f:60:2a:50:10:b7:dd:
                    dc:e7:7b:90:dc:01:52:ed:e0:65:65:15:96:27:af:
                    6a:91:82:ef:2b:a9:42:fa:f6:ab:f0:5e:b3:fd:11:
                    9d:5b:84:53:77:0c:0b:85:20:45:0d:80:fe:48:bc:
                    cf:b0:6a:4c:18:46:9e:87:f6:68:76:7a:3c:1d:e8:
                    e2:ba:ce:37:1c:e8:9c:bd:1b:7c:bc:b2:39:0d:65:
                    7d:4f:a6:8b:7c:14:35:85:1f:92:8d:a1:15:eb:79:
                    a6:0d:af:e7:4e:07:5c:e0:2c:01:e8:32:1f:e6:ef:
                    d1:ab:65:b3:a9:1a:52:55:4d:2a:ba:54:5f:44:39:
                    b3:88:64:db:ec:f2:10:0e:05:6c:58:db:2b:ea:92:
                    a6:bf:15:bd:97:10:a7:a8:d4:60:fe:96:26:33:c3:
                    d6:03:38:3e:80:6a:5b:d3:70:87:24:ef:57:08:30:
                    34:a8:f2:f1:7b:69:d9:00:69:bb:48:4b:70:9e:84:
                    c6:0d:60:a1:04:5d:b9:31:5d:40:25:c4:27:33:74:
                    7e:28:41:bf:77:2c:65:a6:72:04:d6:24:b8:49:fd:
                    65:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0E:D3:F7:CD:A6:46:72:05:D0:3A:D3:A3:60:D7:FE:AB:3F:ED:E4
            X509v3 Authority Key Identifier:
                keyid:69:B0:19:27:A1:A1:77:D4:26:12:21:D9:46:28:51:4A:52:5A:96:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abAZJ6Ghd9QmEiHZRihRSlJaluA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/328eb3-5603-4955-aa92-2252bccfdbf9/1/abAZJ6Ghd9QmEiHZRihRSlJaluA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:20:b9:b5:74:2e:0e:f4:be:87:c6:df:40:4b:8b:bb:2c:b9:
         12:b1:f8:ca:11:94:35:1e:06:9a:0d:e1:7c:7a:f3:38:6a:ab:
         c3:12:04:aa:0d:14:c5:eb:ec:d6:4c:74:8b:13:aa:e2:94:53:
         42:71:75:be:f6:a4:34:c5:ab:16:bd:39:00:a6:75:85:5f:f1:
         91:00:11:65:bd:11:66:60:08:30:97:8b:10:ab:18:9e:16:01:
         24:05:39:59:15:0b:df:fb:3c:8f:3d:81:34:ea:07:7d:f3:0d:
         e8:f3:28:99:7e:ce:dc:c1:b8:1f:8f:e6:48:dc:a6:36:22:06:
         2c:65:b1:2b:b8:00:47:23:61:9b:4b:cb:87:fb:c1:b1:c1:79:
         28:ad:c3:76:20:ae:db:38:bd:96:60:d9:af:71:1b:93:67:5b:
         0d:f6:dc:e1:d6:54:30:81:b2:71:f1:4e:cb:c5:af:b8:d3:cb:
         8b:66:db:d7:ec:7f:95:82:54:25:eb:70:33:6c:00:16:6c:a4:
         5c:6f:00:0f:29:d2:e1:68:c1:d3:ad:1e:5b:a1:89:3a:47:29:
         47:96:e1:48:c6:4d:3c:1e:0b:bf:df:e5:b1:80:4a:81:2f:e3:
         35:7c:19:8e:f9:82:26:32:2e:d6:77:88:05:f8:6a:2d:a1:73:
         a1:a6:67:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 8 23:57:03 2026 by rpki-client