This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
File:                     mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft (raw, json)
Hash identifier:          jkXeHg9tzwayXjSXXfHnMtIT4z5g/ouwF71IfNsiME0=
Subject key identifier:   EF:F6:5B:9E:3A:02:1A:73:39:18:BA:26:9C:38:F2:49:E6:47:37:E5
Authority key identifier: 99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA
Certificate issuer:       /CN=9923d1040c05f099fb4fedb498bb4a14832798fa
Certificate serial:       019BF79A54E9017BC7F372F5E43EDA180437
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
Manifest number:          06E5
Signing time:             Mon 26 Jan 2026 00:00:45 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:45 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:45 +0000
Files and hashes:         1: 1-in7LMhFpQ3SRGa-Iv12w-L9osE.roa (hash: p5UNy6JSWBgEDxhzbnTAtJTc0CoC4BoiXS2WVhGNjLY=)
                          2: mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl (hash: 5LZUPB+K8XLwdMptnbtcv1gskV/lXSUxSaL8DLvisDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:54:e9:01:7b:c7:f3:72:f5:e4:3e:da:18:04:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9923d1040c05f099fb4fedb498bb4a14832798fa
        Validity
            Not Before: Jan 26 00:00:45 2026 GMT
            Not After : Jan 27 00:00:45 2026 GMT
        Subject: CN=eff65b9e3a021a733918ba269c38f249e64737e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0b:13:42:db:55:92:74:98:44:a7:f2:8a:d1:
                    5a:01:0e:66:57:35:e2:ca:5e:85:27:d4:da:de:3f:
                    c4:44:fb:c2:5c:6f:62:7f:cb:10:c0:bb:a6:ec:88:
                    03:24:f4:c6:9c:59:8b:ef:89:5d:6d:1e:f2:bf:a7:
                    25:49:1a:30:6b:20:a6:63:3a:fd:a3:ee:67:f6:a6:
                    5f:7f:48:4d:46:d5:f0:39:57:79:cb:66:ab:01:1d:
                    94:00:d1:9d:c4:69:04:5f:0d:3d:35:02:82:e7:46:
                    fd:a6:1f:19:41:81:d2:be:6d:f9:48:da:cd:f2:c0:
                    37:1a:bc:24:47:ae:09:0c:8c:62:a0:10:07:96:41:
                    55:1d:1a:51:9d:5e:03:4f:ad:e7:ed:c9:19:d1:0e:
                    cc:b7:c8:56:0e:21:63:d3:56:75:94:10:4d:aa:6d:
                    a1:cf:91:be:e7:08:66:1b:7f:e2:e6:c7:cb:07:d6:
                    22:04:c0:38:bd:66:58:0d:21:b3:ed:55:12:65:cb:
                    9a:81:44:6a:40:47:68:8f:95:f8:6e:a5:8a:7b:c4:
                    bb:02:6b:70:2b:83:12:a2:a6:80:67:a9:61:ad:a6:
                    c1:2d:b2:43:63:8d:86:f5:f8:40:20:18:07:48:84:
                    da:c6:10:30:c2:82:f3:4e:3e:ee:b8:41:fa:7c:77:
                    e0:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:F6:5B:9E:3A:02:1A:73:39:18:BA:26:9C:38:F2:49:E6:47:37:E5
            X509v3 Authority Key Identifier:
                keyid:99:23:D1:04:0C:05:F0:99:FB:4F:ED:B4:98:BB:4A:14:83:27:98:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSPRBAwF8Jn7T-20mLtKFIMnmPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/4d05cf-63b0-46af-9e2c-206e82336cde/1/mSPRBAwF8Jn7T-20mLtKFIMnmPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8c:d4:bf:2e:7a:e2:cb:c1:22:b7:38:86:54:e3:79:7b:59:
         51:a6:37:e2:b5:f1:01:2f:53:07:6e:1b:d9:9d:56:79:a9:b0:
         e9:50:d6:ce:b0:8f:2a:92:dc:8b:c7:04:14:9e:5d:5f:b2:bb:
         c5:ad:80:af:62:f6:fd:18:a1:33:c4:31:69:40:89:56:8f:44:
         6b:cb:9d:7c:77:5e:b4:4c:59:01:be:a2:93:7e:d5:a2:7e:23:
         bd:78:68:f3:7a:d0:7c:ca:03:1e:02:b5:9e:fa:3c:34:ca:cd:
         a0:7a:a4:24:78:99:48:f6:cf:ad:9f:12:58:5d:d0:34:d5:9d:
         be:f7:dc:07:e5:b8:d9:5f:15:58:80:3d:64:1f:6a:d3:ed:c4:
         94:a4:b2:53:ce:61:bb:0c:3f:a3:bb:c3:27:31:22:58:28:97:
         6e:d9:a1:a3:da:d4:93:b7:85:76:9e:e4:14:ce:02:c9:b0:c3:
         59:82:73:a2:f2:28:86:a0:3c:37:1a:97:8f:cc:dd:16:37:4b:
         15:a2:62:26:81:3b:29:09:00:4b:e4:77:33:4c:80:10:f0:e4:
         ec:16:26:0a:87:d3:96:10:3f:82:82:66:4c:7e:be:32:ab:95:
         81:4a:c4:87:33:68:66:e3:72:1f:2d:79:0d:31:2b:3e:30:99:
         ae:f8:e8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 04:46:55 2026 by rpki-client