This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
File:                     mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json)
Hash identifier:          xzzrtV1DEXMKfoJ6jtqh8XmJRMFf8gtk4DUeYfZT5Oc=
Subject key identifier:   BF:EF:3A:53:83:07:EA:09:A3:F6:02:94:5E:26:69:76:19:1C:C1:A5
Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0
Certificate issuer:       /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
Certificate serial:       019BF2AAD9B28E1A52A91638E8687647CD72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
Manifest number:          1863
Signing time:             Sun 25 Jan 2026 01:00:41 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:41 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:41 +0000
Files and hashes:         1: 2nUwwPJNj_s9fBPQ7yo03MqL_q4.asa (hash: CsSUMWf2oxlwJkwV4aRI69KhfP/gEtcH8Nazof9pyiY=)
                          2: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=)
                          3: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=)
                          4: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=)
                          5: S80TpmMDEDlG_oVstXDtQDYfT48.roa (hash: jZSQkaiCbuv+uvY1vuqOn1jvU4dPfhAJzK6O+BcjXNA=)
                          6: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: XYPmCHGHACI8hzbaVSTd4F5BphnINHx5xjLtJwreJxc=)
                          7: ui51XHUFpfxoecFvT4ZbcqKc5iY.roa (hash: da6ufJ9bXMD7myfVTTwqLlgukGg80tnNiHNQQSUgwz4=)
                          8: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=)
                          9: xbEhOdTGtK79EP0Hua6zp2g53GY.roa (hash: UhufiohNKNchaGiqQq0NBGvPLk1S1fa3tNlXBIgXEyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:aa:d9:b2:8e:1a:52:a9:16:38:e8:68:76:47:cd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0
        Validity
            Not Before: Jan 25 01:00:41 2026 GMT
            Not After : Jan 26 01:00:41 2026 GMT
        Subject: CN=bfef3a538307ea09a3f602945e266976191cc1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:08:66:f5:91:02:b5:12:27:e3:53:d4:d4:
                    7d:73:ef:02:00:28:76:48:5f:99:b0:61:77:74:d5:
                    e1:38:ab:f1:2b:a0:a4:34:8d:5e:b6:be:00:ba:f8:
                    dd:cc:16:1e:06:69:a7:df:64:4b:40:a9:3b:23:bf:
                    3f:a1:20:9b:0f:94:09:b9:16:4d:6f:72:9d:b7:c2:
                    ed:c4:4c:b7:9b:d2:b9:39:7d:5a:d1:cd:ec:d7:fd:
                    19:1e:e9:8c:a6:3e:03:47:f6:d8:39:cf:cc:19:43:
                    31:20:e7:94:1f:06:ae:04:3d:0f:c3:cc:54:3e:87:
                    88:ee:94:2b:c9:7c:ca:55:0a:0b:2f:56:b7:4b:8e:
                    98:65:3a:72:f1:48:b2:c1:41:fd:51:eb:6e:21:db:
                    41:3b:48:3e:2d:f5:9b:55:2b:6c:ec:82:dc:a1:2b:
                    c8:74:06:c2:8b:22:c3:7b:01:ec:2b:69:aa:9d:e1:
                    6a:9f:5d:b3:48:77:0d:30:87:d7:e9:88:65:4c:e3:
                    3b:39:c1:35:99:0d:67:05:97:14:6b:cc:93:4d:51:
                    be:38:52:77:1a:bc:69:f4:d7:56:f7:47:b3:bd:f0:
                    e0:5a:45:92:75:66:27:33:c4:33:a3:07:e5:4b:36:
                    80:b7:e2:3f:f9:26:6c:cb:42:43:a6:e9:1c:b4:69:
                    5f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:EF:3A:53:83:07:EA:09:A3:F6:02:94:5E:26:69:76:19:1C:C1:A5
            X509v3 Authority Key Identifier:
                keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:0d:22:ad:4b:b4:f4:b8:6e:59:32:fd:77:6a:5e:df:45:47:
         be:3b:1b:41:c4:ce:e1:5e:73:6a:ba:3e:ec:f6:32:a7:7a:55:
         12:fa:e0:47:67:47:aa:91:90:11:92:c9:3c:af:21:c2:bd:9b:
         a8:12:ca:2e:cd:b5:9c:06:72:52:54:be:2c:f2:87:8d:b3:11:
         69:50:c8:b3:9c:28:c5:c0:b3:f6:89:92:8b:c9:91:a5:5e:47:
         1a:05:5d:37:75:16:b3:17:58:20:a4:87:42:e9:2f:24:91:d3:
         33:cd:08:e7:f6:57:66:64:e3:b6:8f:5e:3b:45:29:3c:98:d7:
         7e:07:af:e7:0a:93:2a:e0:34:1e:04:76:1a:c1:40:d4:24:0d:
         dd:f9:ff:45:f9:ac:72:c2:c2:4f:6a:44:4d:2e:b7:b4:6f:a7:
         0c:dd:13:83:50:db:9a:49:53:bf:d6:e4:70:a5:8c:43:86:b4:
         b4:4a:2a:98:76:10:28:0c:8d:56:f4:b9:aa:65:4f:d6:57:bb:
         09:f8:eb:aa:2f:e3:08:e6:52:ac:df:a2:ed:8a:0b:a9:c0:f2:
         19:0d:0a:c7:d6:8b:e7:79:db:0a:6f:a4:66:e8:6a:32:b0:7c:
         16:97:e9:47:2b:c0:e2:92:8a:24:31:10:98:e2:8f:80:ab:7c:
         1a:45:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 10:38:59 2026 by rpki-client