This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
File:                     9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft (raw, json)
Hash identifier:          /ZO7g4120rq4J8BsHoHSR46amDc71sBiQ3/iSujxTAo=
Subject key identifier:   37:F7:BE:FA:C1:F7:4D:FE:B8:3B:CA:33:F7:F1:DD:1B:91:8D:F3:05
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Certificate issuer:       /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial:       019BF5E3D0036E16116FDCAC09166EC4C72B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
Manifest number:          180D
Signing time:             Sun 25 Jan 2026 16:01:46 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:46 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:46 +0000
Files and hashes:         1: 2gp85iNI9hOHVMoD-AVmhaVIeZQ.roa (hash: axs71u0qY3GNU78vZgfYXYLH532ZZvavOcB1PlEaAyE=)
                          2: 5V_xONqzwKma1n0RRaZThBrg5gE.roa (hash: z1TwNh3QakcyBUbCZgGTjXYrrx8YDgv/xgtP0R9TjOI=)
                          3: 9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl (hash: f9jqCzw/0ivQYYC8KMSLjcRd1FZMQHZmKj6MqFVjFHk=)
                          4: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (hash: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI=)
                          5: cXWUqdzS90covVjCIpL9JPuIwt0.roa (hash: TfzKHw/Wu63WKrSdKUKOU9Ej6pYDeamVQtNuE6n1LfM=)
                          6: d45O4HaM6_SjO7mjzjskCZEqjmk.roa (hash: dowO/8l4EITYERynybQUVdaXfcQ3f7HwUklnrHDQVKo=)
                          7: fiVTOMWIAL1C2XiZRFiNx2SBNqM.roa (hash: S/2TOdVEhHfoVPnKhpPpBMFYD/MvlT/LDYLlM9jxQwg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:d0:03:6e:16:11:6f:dc:ac:09:16:6e:c4:c7:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
        Validity
            Not Before: Jan 25 16:01:46 2026 GMT
            Not After : Jan 26 16:01:46 2026 GMT
        Subject: CN=37f7befac1f74dfeb83bca33f7f1dd1b918df305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:5b:35:d4:3f:2c:8f:26:75:83:8d:c3:e2:
                    88:16:b0:85:03:75:e8:ac:ea:22:b2:8e:22:e7:75:
                    89:b8:ee:9c:1a:29:6e:c3:bc:ea:f5:56:4b:6f:55:
                    c3:98:86:13:17:2c:f5:c9:ef:22:35:7f:a7:d5:c9:
                    21:ee:fd:9f:a5:ed:96:96:67:c9:c7:c0:db:08:b1:
                    16:e7:ef:13:d1:0c:20:f2:8b:32:8f:c6:e0:ae:df:
                    03:ca:72:58:d8:a3:96:8c:be:58:a8:e9:88:4c:ef:
                    e9:68:bc:ce:34:e4:7b:62:c2:a8:77:0e:1e:3b:eb:
                    eb:68:f5:67:8a:f3:18:6a:c1:1f:49:ad:7c:d2:1a:
                    9f:98:3c:d1:36:c8:57:d9:a2:2e:d6:2e:fc:f3:e8:
                    5d:c1:2f:45:dd:97:77:1b:73:77:e5:f3:46:0c:70:
                    69:05:3b:20:3f:e4:96:ce:3e:bd:ee:81:72:f3:cd:
                    2d:e1:12:d1:56:9f:c8:a9:7e:2d:31:07:44:01:2c:
                    2e:ba:4f:a6:f4:5a:01:20:e5:29:93:10:fd:31:15:
                    e7:9f:c8:d2:28:cb:5b:b9:22:b5:30:e4:b4:f0:e4:
                    52:2a:31:8c:74:dd:ea:4d:be:ab:4b:f2:a8:6e:b8:
                    89:f2:91:54:e7:f6:ee:d7:11:bf:7d:46:12:5d:58:
                    a7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F7:BE:FA:C1:F7:4D:FE:B8:3B:CA:33:F7:F1:DD:1B:91:8D:F3:05
            X509v3 Authority Key Identifier:
                keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:d8:26:61:ad:4f:21:16:42:5f:6a:0a:5f:35:89:af:41:
         9f:5b:20:f0:af:1b:7f:55:fd:7c:8e:52:43:27:cb:bd:74:5d:
         89:a7:80:8f:eb:0e:ea:9e:04:b0:ac:e5:36:f7:61:f0:3c:b7:
         4d:9c:f2:8d:62:4c:21:6f:15:3c:3b:45:65:bf:dc:95:04:9c:
         d9:5a:cb:62:ef:1d:0e:e1:0a:0e:d0:47:84:be:9d:f9:0f:03:
         87:70:f8:a1:1f:c8:6b:4a:91:99:f6:08:3a:32:46:57:95:40:
         f8:a3:1e:a9:a1:0d:31:9f:58:33:5b:3c:a2:f1:ff:67:94:68:
         e4:d8:b2:73:59:98:9f:af:88:d3:ca:24:87:77:72:21:68:74:
         e6:ef:7c:d4:1c:fe:c5:73:4d:d4:97:ea:01:9e:61:bb:cb:15:
         a4:e3:94:e3:b3:03:02:f1:5d:44:26:2e:d9:96:81:dc:3b:ff:
         eb:fd:f3:ea:cb:08:8e:7f:04:ed:01:08:6c:db:75:72:3e:d9:
         92:c3:93:06:29:04:c2:91:96:46:3a:fc:7f:d2:d0:35:c6:2f:
         10:ca:7e:a8:90:01:67:c7:29:67:67:9a:52:58:fd:63:c8:4b:
         70:66:1b:13:21:48:f1:b6:d6:57:7f:ba:cb:9c:83:a3:f0:7f:
         02:a6:95:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 00:27:02 2026 by rpki-client