This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
File:                     m_8VJ49T93YcLz0z3ZvneopPvZQ.mft (raw, json)
Hash identifier:          IaZ3Q1ncLYgD0nnIy8cTkpIflvx8loEArVPIvuf6pUg=
Subject key identifier:   5B:27:6F:98:9F:DF:DE:86:F4:02:0C:A1:03:8C:0B:5C:51:9F:2C:27
Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94
Certificate issuer:       /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
Certificate serial:       019BF57583619F6AEAF4891BBB8BD8ADC77F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
Manifest number:          1129
Signing time:             Sun 25 Jan 2026 14:01:17 +0000
Manifest this update:     Sun 25 Jan 2026 14:01:17 +0000
Manifest next update:     Mon 26 Jan 2026 14:01:17 +0000
Files and hashes:         1: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (hash: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks=)
                          2: Q4oVtB_GG7eovbLinG-u2kk_sok.roa (hash: cM5qIsneZAmTqIZg9DeB6vafwKefGN204JmC+NSInLk=)
                          3: TRB5S_43lNyOLKzxAGsR3jba-nU.roa (hash: K/IXnKVsdiRn2o1kH+FaE/QlEeszfs0vxtMbvnwDCbQ=)
                          4: m4hSv_mEGl1O7CcJ0lhgjYNl4mM.roa (hash: uKi5CjgcDmOAt0F3mDiM2fjwRKRtze0jB8esHr2tRSk=)
                          5: m_8VJ49T93YcLz0z3ZvneopPvZQ.crl (hash: bYEj6FvuBmutGM9mHTkNbr4S77DcbnAXeIEgmDuf0Ck=)
                          6: tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa (hash: sb1ZYmGZNktATZIUUN0if0MQ6BfFbZD5jVek7sbME7Q=)
                          7: u-b7hCj6gdd6K9YCWBDHTcbmd6g.roa (hash: qRx5Ajf58qovX1XwWQ0T9y9tHlrDKVNojCTuf45PlRo=)
                          8: v_G295N19bDrQCJDMtlZ-ai88wg.roa (hash: ZZZ/+7GguAvkf95Ay0eDVtwD7Ey8QKEeDZLP7i4i8qA=)
                          9: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (hash: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:83:61:9f:6a:ea:f4:89:1b:bb:8b:d8:ad:c7:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94
        Validity
            Not Before: Jan 25 14:01:17 2026 GMT
            Not After : Jan 26 14:01:17 2026 GMT
        Subject: CN=5b276f989fdfde86f4020ca1038c0b5c519f2c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:a6:56:0e:09:fb:f8:0b:d4:64:5f:f1:29:
                    26:2c:32:a8:43:18:55:25:4e:22:dc:16:0f:ba:e3:
                    65:c9:08:71:fe:da:c3:09:70:21:c8:9f:e7:73:71:
                    34:3d:ba:9e:19:2d:df:b4:e4:5c:6d:8d:c7:0d:f8:
                    d5:25:5e:3c:18:47:c6:e2:b9:72:59:2c:97:13:0e:
                    56:ee:6a:80:25:86:8f:cd:9f:5d:00:cb:20:35:24:
                    5d:37:ed:88:dc:91:e2:54:d5:68:ab:ae:17:51:82:
                    11:58:cb:f6:b5:8e:5c:cf:74:14:68:62:87:60:0c:
                    8a:70:2b:25:16:bb:61:04:ef:02:a8:ec:e7:8e:eb:
                    13:87:65:63:26:a8:51:78:11:f0:49:84:02:d2:e8:
                    75:a3:61:13:70:b0:69:96:9f:13:f3:33:bd:64:a9:
                    2b:02:cc:7f:d6:a3:67:c3:82:da:5d:5a:0c:3f:9c:
                    b8:31:ec:ca:e1:e9:41:00:54:d1:8c:41:cc:36:5f:
                    4a:4b:65:fc:26:d2:f6:07:8c:f3:b8:e5:ae:16:59:
                    48:81:61:51:50:e4:da:74:13:80:c0:25:78:15:4e:
                    f9:ef:d2:06:a0:ff:09:0b:70:24:e1:44:8a:7d:2c:
                    84:9d:2f:d1:fc:49:50:ee:a5:ec:81:8e:8b:a5:5c:
                    c9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:27:6F:98:9F:DF:DE:86:F4:02:0C:A1:03:8C:0B:5C:51:9F:2C:27
            X509v3 Authority Key Identifier:
                keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5a:f0:4f:8d:00:fe:22:34:a3:8e:44:83:d1:a4:94:46:d8:
         25:9a:b3:db:ff:73:09:f5:d7:74:1a:93:17:01:a7:79:a9:f6:
         bd:72:06:fb:18:2e:b4:09:73:f1:d7:83:6c:22:81:d9:39:84:
         b4:69:ca:1d:74:77:99:4a:1d:92:b8:3c:bd:93:21:28:25:e6:
         2c:90:9e:e8:39:a3:6d:98:e0:f8:c0:b8:42:75:1b:60:de:f8:
         40:21:13:fe:ea:13:18:d7:31:6d:83:88:3b:28:bd:9c:b6:02:
         fa:f8:eb:db:aa:06:55:27:c0:03:9e:b0:ad:09:97:bb:91:7f:
         b6:9c:75:28:7d:de:51:eb:74:c4:20:f9:73:86:a4:92:d3:66:
         1c:65:80:c4:2f:bf:92:b9:67:7c:aa:21:81:1f:cc:f0:88:5a:
         b2:fa:b9:12:af:70:27:4c:71:08:d3:83:d0:bd:48:41:96:c2:
         23:72:41:34:3b:96:57:87:14:37:0e:d0:b2:f4:d9:b9:0d:f5:
         2c:6f:18:7f:92:6e:52:30:ff:2f:cf:8c:44:da:91:f7:cf:96:
         66:24:bc:b2:dc:21:c7:e9:c8:ad:d5:a2:7b:e8:91:e3:26:13:
         3b:86:74:42:64:94:37:66:c0:13:70:8d:aa:69:6e:ee:b5:31:
         b7:6c:be:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:04:28 2026 by rpki-client