This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File:                     mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier:          6axkNOT0ee5D3LjSE5Z0GLCTyO7WLWovNsh21Mwo2zA=
Subject key identifier:   BD:45:61:4B:54:08:66:D1:A0:C0:2A:94:56:EB:5A:A1:E0:AB:97:3F
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer:       /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial:       019BF23DC9AA908B31E226893591C0B50568
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number:          17EB
Signing time:             Sat 24 Jan 2026 23:01:34 +0000
Manifest this update:     Sat 24 Jan 2026 23:01:34 +0000
Manifest next update:     Sun 25 Jan 2026 23:01:34 +0000
Files and hashes:         1: enoTM6gddzNV6AawcT6ODLYfj34.roa (hash: mMYkNGNoPneN+t24YBp+2hbpvk7KUHZzjLDr8wEtW1w=)
                          2: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: w+yFhnoiC6u/SDyAWT4d+n/MQyn+FHGdvkV4CiIKFUc=)
                          3: rmNOPXT3TH_OdNQbcAz4GQquDj8.roa (hash: CJTw4qWW8iENRpCpx0jtALeMAEVEmBWeQhDPdUFHBBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:3d:c9:aa:90:8b:31:e2:26:89:35:91:c0:b5:05:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
        Validity
            Not Before: Jan 24 23:01:34 2026 GMT
            Not After : Jan 25 23:01:34 2026 GMT
        Subject: CN=bd45614b540866d1a0c02a9456eb5aa1e0ab973f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:3f:40:a2:6f:79:3d:24:08:6c:a4:00:3b:
                    7f:6e:63:bb:72:b0:4d:fe:59:e9:54:ae:40:ea:2f:
                    df:bf:0e:69:c9:74:08:7e:6a:7d:d9:0c:de:f7:fa:
                    37:e7:58:b4:ee:4e:f5:0f:42:96:e9:43:9e:5b:88:
                    23:45:e2:f1:68:19:b3:7f:ea:98:83:6b:3c:64:18:
                    b3:81:c3:3c:38:69:6e:ba:0c:17:cb:ab:31:98:8b:
                    0b:75:54:b0:83:59:a3:fd:1b:6a:4d:60:51:2c:e6:
                    7d:29:c1:99:b1:67:41:b0:9e:49:f8:74:e1:99:b4:
                    1d:ae:58:79:7f:a2:8f:23:b4:f1:18:c0:e6:53:ab:
                    37:e5:3d:cf:b8:5f:55:a0:3c:e4:fb:fd:44:5a:b9:
                    ed:8f:31:08:d6:7b:1b:1f:ed:a2:c4:80:d5:80:7f:
                    0a:77:cb:89:6e:9d:13:d4:d7:29:ab:02:c1:f3:06:
                    f7:79:5b:7e:16:6d:29:9a:b4:a9:8b:2c:96:86:ed:
                    e3:27:eb:53:ab:c9:a9:41:80:6f:48:5b:50:ae:96:
                    6c:f0:95:9d:f9:3c:7d:56:8a:3b:70:9f:e4:1b:b3:
                    73:73:0e:89:98:ed:be:00:6e:aa:8a:b2:a1:9e:a3:
                    e0:d0:2f:5e:ad:38:5c:0c:f2:3e:ea:9b:23:5e:89:
                    9e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:45:61:4B:54:08:66:D1:A0:C0:2A:94:56:EB:5A:A1:E0:AB:97:3F
            X509v3 Authority Key Identifier:
                keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a0:d7:6b:38:02:99:07:96:c8:af:15:4c:d7:1c:52:c6:19:
         bd:01:57:c1:04:ec:c0:a9:ee:9f:0d:de:d4:58:03:8f:e7:e8:
         4c:23:47:57:33:6b:e4:c9:26:4a:7f:32:33:b1:75:f8:79:ce:
         24:a6:31:6e:ef:5d:f1:1d:b6:a1:bc:87:a8:d4:b6:20:fa:03:
         83:c6:dc:03:07:7b:36:14:8f:9c:94:14:1d:95:25:dc:b7:9f:
         56:ca:73:02:0a:73:b8:4e:60:db:90:4a:5c:53:44:13:1c:42:
         a5:59:91:5b:25:be:f7:f8:60:55:89:6c:33:c6:bd:24:6d:08:
         1b:b9:af:50:fa:89:83:28:e7:5c:91:a9:36:91:e2:69:2f:c3:
         54:87:b8:13:5a:f0:8c:82:cc:9d:b9:0a:73:02:7c:52:79:34:
         58:e8:e1:1d:e0:4d:a5:e5:ea:ea:4f:d1:30:c4:3e:99:5a:49:
         76:47:22:b9:f0:38:28:b5:39:f2:53:d6:f9:e2:6f:96:10:4a:
         8d:9c:bc:2d:a5:cb:06:70:57:cd:ea:11:01:0d:ab:b2:51:6f:
         17:5c:01:49:6a:0e:47:26:0e:61:8a:69:57:34:40:5e:1b:c4:
         13:d0:80:01:3f:80:80:3f:aa:2c:8e:d4:11:e7:54:89:ba:99:
         92:09:06:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 05:40:10 2026 by rpki-client