This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
File:                     mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft (raw, json)
Hash identifier:          ZxNX/FtuG+POw8WhXNk3U2IXbUXpCn5WEpjZtZ2CV+Y=
Subject key identifier:   4E:47:10:D1:8D:A1:A5:89:D6:D9:48:EC:7B:4F:D5:FD:1B:D9:4F:C7
Authority key identifier: 98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76
Certificate issuer:       /CN=9812e491aaa655b6324dbcc0cff00a8d63191076
Certificate serial:       019BF57527C328461D21A030E8DDD5430223
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
Manifest number:          1547
Signing time:             Sun 25 Jan 2026 14:00:54 +0000
Manifest this update:     Sun 25 Jan 2026 14:00:54 +0000
Manifest next update:     Mon 26 Jan 2026 14:00:54 +0000
Files and hashes:         1: 0ZP1YlMOxuFGcwCLj4TKGjg8sfM.roa (hash: VhKxH0518mejo08ToVhYHPgDOHhInMaaDygZ1dTqm3Y=)
                          2: PxAO6QWjRuZm8q9K54xxUUEQeWI.roa (hash: RPHe0HAn29niyt3l+FuU5yNdRfUenXNwYIbZ42Je8J0=)
                          3: RQbysAt1GgspnWOfwyBwad4EPWw.roa (hash: vfkA0hp4PretiDOgOmfw6YA3bRwSiVq26snYswjOLco=)
                          4: TEEO5INFoFOS-MGXLrvKsA4z6og.roa (hash: T0NYFqzX6is45agO0ikp5meW9VU+vzUTgYc02wqqV0s=)
                          5: kNrttXxRkvGtSS-ZxC6SB63f7PI.roa (hash: ejrGju4Fa38mlMegmP+17sgwP0nRgaGrfvKHwJ3IgXI=)
                          6: mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl (hash: i73pLmy/UEUKoLR55YrG1umjFYgNuzARo3SNiDaPiUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:75:27:c3:28:46:1d:21:a0:30:e8:dd:d5:43:02:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9812e491aaa655b6324dbcc0cff00a8d63191076
        Validity
            Not Before: Jan 25 14:00:54 2026 GMT
            Not After : Jan 26 14:00:54 2026 GMT
        Subject: CN=4e4710d18da1a589d6d948ec7b4fd5fd1bd94fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b2:f6:0b:a0:c0:ec:e6:08:bd:94:13:42:d6:
                    b8:b9:bf:47:e0:0a:41:9e:ff:57:8a:ef:76:aa:07:
                    21:74:3a:2f:f6:2d:a9:a5:0d:c7:9b:57:47:4b:7d:
                    26:fc:52:5c:1e:1c:01:1f:ed:93:00:80:77:f9:a5:
                    c9:b4:79:96:3b:f5:8f:d0:51:5b:49:14:33:0a:a4:
                    67:23:0b:d1:b3:81:bf:87:56:b6:6c:82:b1:ca:e0:
                    84:54:6a:cb:72:ea:2b:f9:ff:e4:30:72:a2:fd:38:
                    ab:1a:60:f2:75:39:db:82:47:a7:9c:9c:e1:f5:11:
                    12:8a:00:59:16:25:b6:fd:f6:9a:3b:18:c8:f4:99:
                    ee:11:3f:16:26:62:8b:da:79:a4:69:70:4b:0c:87:
                    6c:74:8e:3c:3b:3c:d2:fa:98:72:74:5f:53:54:18:
                    2f:ad:86:1d:18:df:9f:54:21:f0:09:ef:e8:90:e1:
                    66:6c:eb:1c:e3:ba:5f:59:65:e0:a1:3b:e2:06:33:
                    9d:a4:b0:96:e4:67:f4:6e:2f:16:24:60:3f:1e:15:
                    22:56:fb:d6:0b:6d:85:5e:70:40:51:f6:a6:c7:0e:
                    a8:49:99:dc:57:cd:cc:43:70:c9:b5:b6:0a:2b:5c:
                    41:b1:c2:c2:b3:53:c9:04:c8:40:1f:97:f4:e1:5f:
                    f8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:47:10:D1:8D:A1:A5:89:D6:D9:48:EC:7B:4F:D5:FD:1B:D9:4F:C7
            X509v3 Authority Key Identifier:
                keyid:98:12:E4:91:AA:A6:55:B6:32:4D:BC:C0:CF:F0:0A:8D:63:19:10:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBLkkaqmVbYyTbzAz_AKjWMZEHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0e7ed3-48cb-4afe-8d15-dffe17f3db54/1/mBLkkaqmVbYyTbzAz_AKjWMZEHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c7:53:95:7a:1f:11:88:76:39:da:9d:5f:9c:dc:51:2e:6c:
         fe:56:22:d4:09:2f:ae:f3:de:9b:f5:27:2d:c4:51:95:5e:3f:
         5a:9a:7c:35:a7:f0:52:a2:07:29:af:99:17:d1:39:0a:1e:5a:
         4a:43:3d:c0:66:78:d1:16:80:bd:44:64:2f:ad:27:62:f0:12:
         85:4c:91:c1:e9:56:e8:47:d2:2c:40:60:14:7d:31:3e:c4:c1:
         21:d6:59:50:5e:4d:3b:f1:28:db:14:b1:1d:fa:10:1a:21:20:
         a2:07:73:55:c4:0c:38:fc:33:5c:b7:d1:32:2c:de:2f:c2:da:
         a3:a2:06:11:a8:f1:b4:73:4f:f5:68:e1:71:78:06:45:fd:f0:
         19:7b:0e:59:e5:2e:66:01:c3:a2:03:c0:7b:94:2e:45:fb:59:
         ff:91:4c:11:34:a7:27:9c:b7:29:73:6e:2b:05:4e:da:38:ae:
         a3:1d:c6:ed:42:93:1b:50:90:52:de:06:d7:df:11:4f:a6:51:
         af:9f:1b:35:bd:fc:aa:c9:b1:6e:70:07:29:53:dc:2f:df:cc:
         fe:d4:5b:78:62:9a:4a:8c:80:c2:e8:57:8f:50:47:a6:ad:9c:
         be:e9:3a:8a:52:78:13:ea:de:54:6e:d6:91:71:8f:5c:82:0a:
         73:09:bc:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 20:32:52 2026 by rpki-client