This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
File:                     MXvyYLzaMCviwgdijPsWRHhhT-U.mft (raw, json)
Hash identifier:          quzkF+SLwoBsWt06NBv4c0zZYPalZ/hkXxVqY8qSjcM=
Subject key identifier:   E4:14:4A:10:1C:63:37:8D:72:B8:25:AE:BA:4F:01:D6:81:4E:D1:61
Authority key identifier: 31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5
Certificate issuer:       /CN=317bf260bcda302be2c207628cfb164478614fe5
Certificate serial:       019BF6F60B440C2B90C2876536E49567F9D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
Manifest number:          0F5D
Signing time:             Sun 25 Jan 2026 21:01:18 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:18 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:18 +0000
Files and hashes:         1: MXvyYLzaMCviwgdijPsWRHhhT-U.crl (hash: zblulxYoi4z//CsomlMMdloe9+J9tDCdsOWPkK2g3ec=)
                          2: xerBMxNW-woKiA8KHx0KcXB634A.roa (hash: AR2Ndl4ICAGHIwDUvuX6ce4+Y2SPrh5ql1qQ6H1YP74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f6:0b:44:0c:2b:90:c2:87:65:36:e4:95:67:f9:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=317bf260bcda302be2c207628cfb164478614fe5
        Validity
            Not Before: Jan 25 21:01:18 2026 GMT
            Not After : Jan 26 21:01:18 2026 GMT
        Subject: CN=e4144a101c63378d72b825aeba4f01d6814ed161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6e:f6:29:ed:67:06:1e:f4:7c:c2:71:25:be:
                    c5:70:a5:4d:76:b3:0d:24:00:f2:1c:0c:00:3f:c4:
                    62:85:2e:b1:1c:c6:7c:99:65:83:4c:ed:ae:82:a0:
                    f3:b9:f5:e8:f3:6e:fb:99:93:52:bd:3e:d6:37:e4:
                    d9:55:cc:6b:44:da:d1:d5:8e:f7:5d:3d:a9:64:7c:
                    3d:92:f1:dd:85:61:b7:12:ae:10:f8:0b:a5:3e:e3:
                    aa:d0:b2:c8:8b:36:85:76:70:05:16:6c:18:10:43:
                    fe:4d:a6:a1:16:cc:29:80:cf:13:a2:2f:27:c1:18:
                    13:e2:62:3d:6a:d9:04:65:78:20:84:33:52:06:05:
                    43:c2:2d:16:c3:ce:37:f7:59:59:7e:83:f9:89:5c:
                    2d:b5:db:f9:43:be:f4:7b:c0:45:41:3c:58:d2:dc:
                    7c:dc:e7:6b:5a:a7:87:30:4a:f2:94:2c:c2:f7:0a:
                    a1:2f:3c:e6:99:86:56:3b:21:a4:34:05:c1:2b:1d:
                    60:6e:9a:ce:1d:c7:07:9e:c6:bb:66:d8:11:db:5e:
                    e8:4d:55:ef:da:ac:a2:b3:b1:ea:be:4c:55:19:30:
                    8f:d0:c2:0b:84:cd:6b:f6:7f:fa:e5:56:85:ad:7b:
                    e8:47:36:87:bc:c2:da:aa:a6:f7:f0:f9:5a:6a:79:
                    82:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:14:4A:10:1C:63:37:8D:72:B8:25:AE:BA:4F:01:D6:81:4E:D1:61
            X509v3 Authority Key Identifier:
                keyid:31:7B:F2:60:BC:DA:30:2B:E2:C2:07:62:8C:FB:16:44:78:61:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXvyYLzaMCviwgdijPsWRHhhT-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/07d146-ef22-4e5c-bd5c-42ed3e373679/1/MXvyYLzaMCviwgdijPsWRHhhT-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:72:62:3d:e9:15:cb:fe:0c:58:dd:25:7e:f4:c7:a9:06:d1:
         67:47:93:5f:5c:bf:e3:0d:5b:15:63:ac:fb:75:89:76:d4:0f:
         7c:bd:83:2a:24:74:32:5e:52:19:bb:d5:26:59:be:d9:e1:9e:
         9f:9b:fc:de:a5:9a:01:b8:08:57:da:34:af:0d:10:81:80:c0:
         2d:8e:cd:01:fa:5d:fb:e3:c6:f4:1c:66:1d:63:ce:82:1b:6f:
         a7:40:d6:1f:47:3d:90:e9:80:16:6a:d6:b4:2f:b7:ec:d3:05:
         a4:a2:87:72:51:0c:f0:ef:83:05:dc:33:7f:22:4c:e1:47:b4:
         9a:b6:b4:77:61:d0:3c:9d:10:d0:b9:3e:bc:e6:ef:a2:08:3f:
         39:ad:9e:c8:33:76:66:b0:32:35:62:b4:20:1d:f1:ea:df:9c:
         e3:59:6f:a2:90:b4:a0:1a:f7:51:0f:1a:b3:14:d6:df:7c:1a:
         38:cc:dd:a9:69:ec:22:bb:98:b4:c2:d3:db:9a:04:f6:10:b6:
         c8:32:73:cb:91:47:dd:d0:c6:d2:a0:68:10:97:3b:83:90:6a:
         08:0c:ec:1a:c3:88:b8:6c:9e:76:91:12:9a:1f:f9:fb:cc:89:
         e2:e3:d1:49:c8:10:1a:4f:61:7b:98:24:ef:72:d5:8d:f0:2d:
         0c:7c:c7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:48:19 2026 by rpki-client