This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File:                     0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier:          KsBIYROLRvQNHPWSVr6fZl7VunAmcXUitKEq+YOdA2M=
Subject key identifier:   76:92:DB:B4:8E:09:CD:5C:E5:76:AA:7B:9D:E6:0D:7B:C3:35:94:8F
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer:       /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial:       019BF8E3E311BA6C7616FA7B664E6478C3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number:          09D3
Signing time:             Mon 26 Jan 2026 06:00:42 +0000
Manifest this update:     Mon 26 Jan 2026 06:00:42 +0000
Manifest next update:     Tue 27 Jan 2026 06:00:42 +0000
Files and hashes:         1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: Mo2F02XKaKlLQpxEgN8LxH+B6rHABsdKMq4LKUCo/6Y=)
                          2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:e3:e3:11:ba:6c:76:16:fa:7b:66:4e:64:78:c3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
        Validity
            Not Before: Jan 26 06:00:42 2026 GMT
            Not After : Jan 27 06:00:42 2026 GMT
        Subject: CN=7692dbb48e09cd5ce576aa7b9de60d7bc335948f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:a9:b2:eb:7c:4b:b0:e3:96:58:1a:58:ee:
                    d6:ed:45:b4:ad:99:bb:4b:6e:8b:4e:c6:04:74:b2:
                    0d:00:61:c0:1f:8f:25:57:8e:86:7b:47:a3:b7:2f:
                    cb:67:05:68:a4:c6:68:82:77:aa:6a:e1:14:bc:ac:
                    f7:b1:33:48:38:f8:74:36:98:f7:09:6a:c9:b7:e6:
                    41:97:16:92:5e:0f:c2:31:30:ad:5d:cf:3c:2c:d8:
                    36:8a:11:9f:06:16:0a:85:e5:07:1e:68:78:c8:7d:
                    67:52:9b:2b:53:5e:6e:f5:9c:2b:cb:bf:8b:ad:6a:
                    c8:37:fa:c9:cc:fa:19:26:23:b8:27:da:96:1b:52:
                    aa:83:97:df:07:d3:00:ab:bc:84:15:73:68:a3:cf:
                    5d:eb:76:c8:30:5a:cb:03:33:d5:fa:c2:47:3d:cc:
                    64:9d:55:66:99:b5:0f:5f:e3:bd:79:b5:b6:c2:49:
                    4d:ee:fc:f5:fa:f9:98:47:ac:04:37:3c:61:32:df:
                    d0:af:f5:26:84:d2:2a:33:21:1d:3a:f4:50:d0:1e:
                    fc:9a:1e:33:dd:41:ed:28:1a:e1:9d:d4:5d:8a:4f:
                    77:60:51:3c:e5:ed:cb:a3:f3:4c:1a:8c:62:b6:57:
                    e9:01:5c:7e:5e:0f:cd:36:42:b3:0b:b6:8f:c8:7e:
                    6e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:92:DB:B4:8E:09:CD:5C:E5:76:AA:7B:9D:E6:0D:7B:C3:35:94:8F
            X509v3 Authority Key Identifier:
                keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:f2:2b:fa:0d:95:74:21:03:83:a0:01:4d:3a:7a:99:ff:
         d9:30:de:ca:ec:9b:18:6d:53:0c:f0:a2:52:66:df:30:a8:33:
         a9:a9:25:f6:7e:dc:f6:4c:33:71:d5:d8:24:42:f9:48:c4:7d:
         cf:23:96:95:51:45:36:e7:0f:fa:be:87:dc:d4:2a:97:34:64:
         c4:bb:11:c9:11:7b:19:cb:a4:87:49:fd:54:76:7a:e7:85:16:
         6d:42:14:6e:af:38:dc:5e:0a:02:cb:1e:6a:02:23:f3:79:6d:
         cd:29:46:04:d3:3f:27:5d:f6:06:9a:30:c4:f4:51:38:8a:7e:
         38:e6:65:fc:43:c8:7b:81:9e:8a:74:d4:71:4a:15:b5:79:d2:
         65:d8:5b:fc:d6:5a:29:15:ab:3a:1e:df:76:a1:2a:89:2c:7c:
         2b:39:b1:a1:00:08:e3:c9:57:3c:2d:0f:3e:00:27:cc:95:38:
         08:03:b3:03:a5:f6:79:96:11:9c:52:33:c5:39:3b:56:aa:c8:
         8b:c4:f0:bb:83:59:73:44:2a:e0:41:cc:0c:f4:ca:03:a1:98:
         fd:92:7b:13:a2:c3:ca:33:6c:7e:81:8c:8d:ca:23:1b:3c:a8:
         64:d6:33:4e:4f:e3:5d:a9:c9:ea:3e:5f:0b:e3:a5:01:f7:ce:
         c3:58:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:48:07 2026 by rpki-client