This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
File:                     mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json)
Hash identifier:          m0CdfjU61n7ZmuOY6Y7KPoH74jL6fwfoufAimaujX3s=
Subject key identifier:   1A:A7:91:8D:0D:05:BC:7A:F2:CA:5C:9B:CC:91:89:D5:4C:36:D8:E8
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Certificate issuer:       /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial:       019BF319075BA53FE7C42C7396EA547F3934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
Manifest number:          11EE
Signing time:             Sun 25 Jan 2026 03:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 03:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 03:01:02 +0000
Files and hashes:         1: 0VSesXDVm1kdp7OP9sVaQNaIx0I.roa (hash: QMxjCfdCBm32VW6X1BoprZ37jAPwnIJNYNKtYt65wRk=)
                          2: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=)
                          3: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=)
                          4: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=)
                          5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=)
                          6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=)
                          7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=)
                          8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=)
                          9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=)
                          10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=)
                          11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=)
                          12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: sLeHEEd7BB4ED4fwUzPWlKyIhx29xa0DVwySd0CzCxw=)
                          13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=)
                          14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=)
                          15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:19:07:5b:a5:3f:e7:c4:2c:73:96:ea:54:7f:39:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
        Validity
            Not Before: Jan 25 03:01:02 2026 GMT
            Not After : Jan 26 03:01:02 2026 GMT
        Subject: CN=1aa7918d0d05bc7af2ca5c9bcc9189d54c36d8e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:09:e2:a2:d5:c4:88:0b:35:18:1a:1d:67:
                    8d:a2:68:86:fb:27:34:54:cc:aa:1e:ce:05:10:bd:
                    10:92:29:b8:1b:1b:78:9f:55:c1:9a:30:34:97:4e:
                    ac:36:0d:ae:cc:a3:b0:31:b9:eb:63:5f:df:0b:95:
                    a8:84:ff:e1:07:f5:9d:8c:5b:9c:79:d6:ad:51:7b:
                    b2:19:92:95:60:72:84:a2:a6:70:dd:8d:59:4a:4e:
                    94:a5:dc:49:8c:09:86:9d:4f:87:30:50:19:49:cb:
                    3d:8c:dc:f3:da:80:ba:fd:6b:3e:5a:03:d3:0b:93:
                    36:a2:1d:74:60:c5:5d:b6:bb:dc:84:bf:43:66:e0:
                    91:b3:19:82:b6:b3:cf:25:74:ac:14:55:a2:44:8d:
                    04:fb:bf:bf:15:ee:1e:4b:38:04:85:18:01:9e:c4:
                    67:c8:67:37:60:2e:e9:85:11:d5:f8:c7:ab:4f:6f:
                    98:f2:6f:68:72:00:e8:ab:0a:1c:b7:97:d3:e4:86:
                    30:1c:de:49:58:7d:cf:68:7b:9e:79:b2:89:bd:82:
                    71:17:f0:1c:15:d7:cf:fb:7d:29:17:de:6f:83:f2:
                    dc:a2:56:ea:79:9c:0a:de:6d:5d:3b:d4:01:9a:a8:
                    df:b4:7e:ef:47:a6:c9:10:42:13:b6:29:01:97:03:
                    55:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A7:91:8D:0D:05:BC:7A:F2:CA:5C:9B:CC:91:89:D5:4C:36:D8:E8
            X509v3 Authority Key Identifier:
                keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:21:b9:9b:e6:95:9d:0d:cb:22:03:5a:3c:2e:7a:c1:18:80:
         8a:33:dc:cd:b0:4b:c9:8b:35:c8:5c:08:1f:f6:70:c9:93:29:
         3d:c2:c3:0b:bb:41:a1:88:8f:bd:18:16:46:84:18:99:27:38:
         77:ad:0a:bf:cb:5b:d1:4b:0f:6f:02:33:36:bd:71:77:20:c0:
         23:1b:d2:7e:d7:79:af:fa:51:93:bf:08:f6:2b:27:bc:5c:59:
         f2:e5:f6:df:7a:0c:b3:d6:80:df:79:eb:d0:46:89:98:3b:b9:
         bc:db:14:c9:19:6e:eb:0f:49:01:6e:c7:cc:dc:09:82:98:75:
         ec:a5:d0:35:79:33:18:f9:05:ab:c4:d1:ed:fd:10:7a:65:de:
         86:13:08:6d:ea:11:35:c4:86:f2:23:c5:3b:21:30:42:cf:d9:
         f7:96:f8:dc:f8:64:ad:3a:49:ad:df:bb:8a:7d:c8:50:f0:81:
         10:e7:6e:6e:f7:4a:9d:d0:07:ea:bc:9f:0b:cb:12:d1:3f:37:
         02:50:27:64:bf:f1:1f:bd:ca:dc:c5:b1:ae:c5:f0:8f:2f:96:
         c3:55:fb:8f:8f:33:ce:e3:bd:55:62:f3:3c:31:b8:3b:e4:a9:
         c2:ca:3a:85:31:58:aa:c5:5e:59:6a:38:8e:42:9e:b3:98:81:
         f6:b3:f1:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:44:56 2026 by rpki-client