This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
File:                     MxcGuRW6uNrCtVR_vIet62Hmrt4.mft (raw, json)
Hash identifier:          5JbCv9Xe5x2QeSmpNqvMl9jsawzQrdQ9TiMs9JKIrFw=
Subject key identifier:   F2:EC:2D:E9:A5:90:41:88:DD:67:96:07:E9:E2:BE:0F:90:9E:52:EA
Authority key identifier: 33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE
Certificate issuer:       /CN=331706b915bab8dac2b5547fbc87adeb61e6aede
Certificate serial:       019BF83F2D27B5FFD03117BA353984D71955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
Manifest number:          0A7B
Signing time:             Mon 26 Jan 2026 03:00:48 +0000
Manifest this update:     Mon 26 Jan 2026 03:00:48 +0000
Manifest next update:     Tue 27 Jan 2026 03:00:48 +0000
Files and hashes:         1: BkXp8AK4gi5wS729-28eNPv2clw.roa (hash: IGnSob0aivxnivdFv8Ee6hD4F6yznooZSCntFsvJ7T0=)
                          2: MxcGuRW6uNrCtVR_vIet62Hmrt4.crl (hash: dwOYK/wS0vskv2Vq5vbTUYxyTcScsmD4p3UDxtBHDRw=)
                          3: aeDzx5OZ5nrqDyalLd44Mli20M0.roa (hash: YvIsuZu1NjopXi6drfMwbN1RzZ1Wd5bDJc2KrnbAMKY=)
                          4: nkFi4zOTIt8Fj-eCjPg6D7Iy51o.roa (hash: UdJTiJsgedTzEhhlzmy6WzaUSyV+MLTP+RugLowZfx8=)
                          5: ru20yXWKcuSb8yiErGf7n0imH6E.roa (hash: aXYw/wc/DM9OgiGO7U/ACoFSS6X7zq7LzSd0JumekOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:3f:2d:27:b5:ff:d0:31:17:ba:35:39:84:d7:19:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=331706b915bab8dac2b5547fbc87adeb61e6aede
        Validity
            Not Before: Jan 26 03:00:48 2026 GMT
            Not After : Jan 27 03:00:48 2026 GMT
        Subject: CN=f2ec2de9a5904188dd679607e9e2be0f909e52ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:63:94:2f:ca:6e:c0:a4:70:70:bc:49:46:62:
                    68:32:d5:43:2d:68:af:8b:98:cb:35:44:d4:fb:a0:
                    60:b9:e4:b5:99:cc:77:ab:cb:ce:96:bd:34:4e:4b:
                    bd:33:9c:5f:57:da:61:bd:37:63:d0:f1:63:63:e4:
                    b9:1a:56:eb:95:dc:b0:72:3f:5a:ec:fd:b2:8c:32:
                    eb:58:bc:9b:d5:80:dd:dc:b3:4a:7c:71:c2:c1:38:
                    54:a4:21:23:69:b8:80:87:2f:a6:06:19:03:ef:88:
                    1d:fa:4e:fe:5b:58:8c:6a:95:af:30:50:73:cf:5e:
                    25:41:b4:18:b6:e7:37:ff:c9:70:f6:88:1f:8c:aa:
                    24:39:bf:ea:63:25:83:0e:7d:ee:11:2a:5a:1c:5b:
                    87:cf:4f:94:cd:31:3f:1f:ef:90:55:77:bc:23:eb:
                    18:40:67:82:e4:3b:a9:f9:2f:4f:1e:16:47:a1:96:
                    9f:df:e4:47:ff:06:ad:bc:7c:10:8c:13:c5:c5:23:
                    5c:3c:37:66:d1:cf:b3:9c:3e:25:db:ea:88:a4:94:
                    53:ec:ed:11:16:94:4c:b4:f6:7a:ab:d8:2f:35:df:
                    95:64:2f:7c:81:4a:ae:7d:3b:c8:2a:7d:4a:72:d1:
                    89:d8:bb:98:dc:49:34:d0:08:bb:35:15:bd:15:47:
                    6d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:EC:2D:E9:A5:90:41:88:DD:67:96:07:E9:E2:BE:0F:90:9E:52:EA
            X509v3 Authority Key Identifier:
                keyid:33:17:06:B9:15:BA:B8:DA:C2:B5:54:7F:BC:87:AD:EB:61:E6:AE:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MxcGuRW6uNrCtVR_vIet62Hmrt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/112ce7-7415-4c5d-a890-ec95148fd236/1/MxcGuRW6uNrCtVR_vIet62Hmrt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ca:e1:6f:5d:19:af:77:ea:17:5e:f5:36:f0:01:a4:a7:c3:
         6b:eb:2a:62:99:d8:e3:0b:6d:24:23:a8:d8:2d:a8:82:8b:65:
         58:43:9f:fa:1a:a3:9c:64:ff:22:8a:ef:be:72:23:61:06:1e:
         e3:e9:ad:0c:9e:b7:b4:21:81:59:00:17:fd:b4:7f:81:f1:f1:
         43:08:c2:46:fe:0c:ee:23:67:8e:27:c1:92:c0:29:c2:5e:d1:
         67:a7:6b:3c:f3:e2:46:16:50:de:86:03:8a:da:50:ad:82:51:
         c3:ed:08:c7:5c:29:81:d5:a9:c8:e8:e7:c8:cf:ad:a8:5d:c4:
         fd:15:83:76:29:73:5f:f5:9e:6d:1e:4f:7f:7d:50:3d:ca:b2:
         fa:a4:e5:de:5e:0d:c0:68:7f:ef:66:41:e6:70:ec:dc:82:47:
         2e:eb:2c:cb:1e:97:34:3d:bb:64:e2:5e:64:9a:ca:7d:da:41:
         d0:e6:07:c1:80:97:f5:c7:a0:56:cc:0b:2d:d3:4a:2b:67:da:
         60:9a:c1:04:97:12:21:cf:5b:65:75:9a:9c:5d:c5:5b:03:c4:
         02:dc:8c:ea:aa:8b:7e:d2:29:52:71:c5:e0:46:7b:bb:13:d6:
         eb:d7:99:71:0b:ef:f4:e7:a8:fe:c7:8e:71:87:dc:3a:ca:10:
         fa:f6:d4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:13:28 2026 by rpki-client