This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
File:                     mxl1igh4doFtwZNh6vHpQS3nP4Y.mft (raw, json)
Hash identifier:          qR2cltzmrSG3Pevic2ISwUvcl0Q6LPln2oDtzHOTfDc=
Subject key identifier:   A1:E1:6E:30:D1:EB:6B:41:09:B3:EE:23:F4:B7:95:2D:90:55:F7:31
Authority key identifier: 9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86
Certificate issuer:       /CN=9b19758a087876816dc19361eaf1e9412de73f86
Certificate serial:       019BF7635ED9A824C9136A5AE6F4BF9BF4DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
Manifest number:          089D
Signing time:             Sun 25 Jan 2026 23:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 23:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 23:00:43 +0000
Files and hashes:         1: 4YRS6EEeuTI9ZfzO53iKNIfSN4s.roa (hash: Tv3HULU0Zra1BolAPc2Q/gu/Km7IonOCAUA8ZpZ63Jo=)
                          2: _RoC_RNXE3s_SWdnfBHgPoNrU2M.roa (hash: wPRRqYY5EWMxD0w+AF1woDBkV71SkgmmKkudFef6WP0=)
                          3: _no2T5wGNnY26JGUD4kdd2oqfik.roa (hash: cAZL1uQQoGuptZEdg5D0yO2UPDl/TjYUL4Qg8BJ2wIg=)
                          4: kt9wkvMfUjDBISQAMhIZ_H3acrA.roa (hash: 2eym/C1FIDZNxIwzhAk1LB/uLTJl3u4Wtgxo8cZEAdo=)
                          5: mxl1igh4doFtwZNh6vHpQS3nP4Y.crl (hash: cSxF0nfWlGBbnx0KbLJUdFEYfXL7O1mfQnp1PTI1KSI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:63:5e:d9:a8:24:c9:13:6a:5a:e6:f4:bf:9b:f4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b19758a087876816dc19361eaf1e9412de73f86
        Validity
            Not Before: Jan 25 23:00:43 2026 GMT
            Not After : Jan 26 23:00:43 2026 GMT
        Subject: CN=a1e16e30d1eb6b4109b3ee23f4b7952d9055f731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:44:84:6e:67:5d:0b:95:5d:be:98:78:40:
                    da:49:b2:94:59:3c:4d:27:a4:e8:73:55:4f:48:81:
                    d2:3c:e9:cb:02:7e:d9:64:2b:fc:a9:4c:04:dc:a1:
                    82:5d:13:37:5f:e4:fd:50:2e:df:b0:1f:6b:3b:e2:
                    ee:b9:78:61:21:f9:39:67:4e:b1:78:49:78:db:98:
                    25:cb:98:a0:17:65:63:4d:08:18:11:73:1c:32:84:
                    85:07:ff:dd:92:ec:32:c3:3e:27:64:2a:bb:d5:53:
                    9e:cf:6d:d8:e6:ca:ad:d2:5b:56:59:df:d4:b3:15:
                    78:2b:bf:1a:f5:db:ae:dd:a5:6c:5c:0a:75:fc:91:
                    77:da:0f:0a:4f:67:2d:22:23:e6:19:10:d1:e5:af:
                    99:96:47:75:b6:d2:ce:64:8d:55:10:3c:b6:1e:9b:
                    d4:75:39:1a:0b:aa:f1:16:36:e9:4e:42:8d:1d:19:
                    be:a5:24:e7:97:40:1e:a5:73:c0:b3:da:80:be:74:
                    38:f7:ab:e0:8f:2a:9d:a9:b7:4b:0f:26:b2:d9:e1:
                    9a:0f:71:ec:de:14:f8:de:3c:ca:f6:3c:20:d1:b7:
                    e9:24:90:4b:38:8b:09:46:3f:6a:36:17:34:04:66:
                    35:95:19:e1:76:93:a7:52:2b:bd:d5:6d:9b:fe:bd:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E1:6E:30:D1:EB:6B:41:09:B3:EE:23:F4:B7:95:2D:90:55:F7:31
            X509v3 Authority Key Identifier:
                keyid:9B:19:75:8A:08:78:76:81:6D:C1:93:61:EA:F1:E9:41:2D:E7:3F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mxl1igh4doFtwZNh6vHpQS3nP4Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ba6f3e-e95b-48d2-8419-413da667a8be/1/mxl1igh4doFtwZNh6vHpQS3nP4Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:74:7d:2e:4d:09:6f:95:1b:f0:e2:e9:61:ad:48:2e:08:9b:
         39:c9:d3:a7:f9:5a:55:c6:a2:96:10:46:0b:9c:5a:1c:e9:60:
         ea:62:2d:8d:46:72:ed:af:dc:0d:ca:9c:e4:96:c9:2c:85:1b:
         cb:cb:51:27:e5:dd:89:f4:5d:e3:e8:87:91:ad:25:2b:db:27:
         28:03:cc:5d:60:96:07:25:b4:67:84:db:6d:4c:02:3d:7c:d4:
         21:aa:1a:98:e6:b2:04:f6:6c:45:62:59:6e:0c:4c:54:d3:9c:
         61:79:9e:8e:f0:8f:e4:28:72:05:3f:ea:c5:2f:d5:82:a6:6b:
         ab:2d:94:b4:e9:56:d0:d0:5c:74:b0:f0:7c:93:00:1a:03:ed:
         f2:ca:05:38:30:49:78:a9:d6:8e:5d:c2:ab:ff:64:b5:0b:a8:
         16:2d:fd:42:4e:da:c8:d1:c1:f3:de:ff:89:4e:76:06:0f:74:
         d7:27:e7:76:28:87:69:0c:fb:d0:9e:fe:6c:90:98:62:15:a3:
         8d:03:6d:c1:2b:a4:3d:36:32:51:2e:b1:0b:fc:49:a6:d1:66:
         f1:47:75:b3:38:bb:14:71:25:e3:a4:a2:85:3a:ad:a9:4c:84:
         cb:81:c3:09:75:5a:ae:0f:10:99:4b:22:f9:26:03:98:75:1d:
         32:0c:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:37:02 2026 by rpki-client