This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          hHgLVuawMlsw/rwZqIIJ5er6FLBqgTMpQhEGBGH2JDU=
Subject key identifier:   4B:F8:38:BA:8A:9C:F6:82:4C:27:EC:55:66:12:35:00:B8:15:C7:79
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019BF5AC9B378AFBBC763B67F10ADC2C70E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          12FC
Signing time:             Sun 25 Jan 2026 15:01:28 +0000
Manifest this update:     Sun 25 Jan 2026 15:01:28 +0000
Manifest next update:     Mon 26 Jan 2026 15:01:28 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: 5Eh63obG8QlXLOCyhFt+/WUX/AXa64wcEdIMQ0oNPxw=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:ac:9b:37:8a:fb:bc:76:3b:67:f1:0a:dc:2c:70:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Jan 25 15:01:28 2026 GMT
            Not After : Jan 26 15:01:28 2026 GMT
        Subject: CN=4bf838ba8a9cf6824c27ec5566123500b815c779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6e:96:af:d3:ef:da:fb:c3:35:a4:39:9c:56:
                    1d:5c:28:c1:af:32:14:00:a4:48:bc:7d:f7:14:a1:
                    ee:b7:c2:71:29:bf:01:3f:01:03:4c:77:06:34:b3:
                    b2:50:86:76:ee:5e:7a:53:21:27:64:d0:52:ac:09:
                    67:d1:98:94:ac:e6:2c:a9:45:19:57:bd:76:80:74:
                    cb:15:00:1e:91:48:73:32:c2:e8:c4:65:08:f8:64:
                    e8:8e:bc:b4:53:b9:9e:c8:40:ad:5f:60:21:01:7a:
                    b6:2a:73:36:a3:1f:7b:32:c5:ad:14:fd:3b:ae:39:
                    f4:e0:35:c1:3b:e1:61:93:00:57:9f:7e:ec:57:f9:
                    ff:b9:64:ae:91:c7:2a:4c:ca:ac:34:ed:94:3b:8c:
                    f2:90:75:6c:a9:a2:aa:40:ab:fc:25:2c:3b:21:bb:
                    e9:11:d3:2f:30:db:0c:7f:d9:c2:db:c3:7b:79:07:
                    5e:13:d2:87:cc:2e:3d:f1:82:9e:a2:bb:80:7e:02:
                    96:81:37:ad:35:c0:d0:30:1c:5c:49:65:1f:77:cc:
                    ec:23:3f:89:32:23:b2:2c:6a:9b:d0:ab:16:a1:a3:
                    d5:e1:5f:82:1e:e7:0d:e6:ff:00:16:ce:56:67:cd:
                    31:59:22:7d:92:8a:dd:f3:94:b2:b2:94:97:67:9d:
                    5e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F8:38:BA:8A:9C:F6:82:4C:27:EC:55:66:12:35:00:B8:15:C7:79
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:57:58:54:68:f3:17:53:38:cd:be:82:10:f1:c9:7f:7e:c6:
         a2:2f:9f:60:29:bc:5b:4c:e4:74:bc:29:11:ba:11:57:2c:82:
         8a:6b:92:72:86:60:ea:63:ac:7e:7c:9b:52:fa:d6:5c:a9:3f:
         5e:08:a0:3d:65:89:8c:d7:58:51:59:9d:d1:ca:94:90:6a:04:
         f6:69:39:97:7f:dd:3b:3f:15:7a:48:94:cb:60:04:fe:a6:48:
         2d:a2:17:95:45:a2:cc:ca:d5:b4:10:c3:e4:66:0e:5f:2b:64:
         39:e5:5a:c9:b6:4f:e1:9d:e2:42:54:b1:69:4e:10:7e:3e:c3:
         ba:47:2a:b3:99:10:52:d0:d3:f6:22:c0:c7:6c:07:6f:39:26:
         89:ae:10:34:f4:4a:d9:c4:87:79:fd:bb:2d:fa:21:04:ef:26:
         22:62:0b:28:73:0e:ee:bb:2e:64:1c:d6:fa:da:69:91:ca:2d:
         84:b1:f3:20:fb:cd:a0:cc:0e:e4:de:4e:a4:47:f0:ba:4e:45:
         d6:40:f5:2c:ac:33:cc:03:4b:f2:ce:b5:81:bb:46:70:1e:55:
         ce:a9:65:ad:8a:09:08:05:3e:6b:aa:07:7f:67:ff:35:ad:e6:
         96:98:3e:07:53:9f:50:8a:09:0d:f3:45:ea:65:85:18:c0:af:
         91:3c:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:41:38 2026 by rpki-client