This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
File:                     m0fuHxfJh967LAINi18ti9rb63c.mft (raw, json)
Hash identifier:          6gCEmxhZ8mR2BmM0PKfCQ6cJSlD4K8ywU2QVLuyrMzs=
Subject key identifier:   02:2A:30:E2:98:94:6E:96:05:9A:2D:57:5A:C8:E0:9D:1C:53:BA:29
Authority key identifier: 9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77
Certificate issuer:       /CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
Certificate serial:       019BF1CF18407943235F3ABD59D2DBAC4EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
Manifest number:          0FD1
Signing time:             Sat 24 Jan 2026 21:00:39 +0000
Manifest this update:     Sat 24 Jan 2026 21:00:39 +0000
Manifest next update:     Sun 25 Jan 2026 21:00:39 +0000
Files and hashes:         1: QP9Oe3_zJ6yuF3kAViKnMINjXbE.roa (hash: kIkr4A1mpUTupFUwElbDch1PJM/dciLvNLfYLTlKNU4=)
                          2: m0fuHxfJh967LAINi18ti9rb63c.crl (hash: ZXDsOp1o4IPmgcqBeNvEccW9PvwLHNxWYXHMlz9POn0=)
                          3: ymQkqx6vad1BOcZP1A2ksCcXq8M.roa (hash: Mkk7iKFq74kIN4TjOOrbxIdyK2vnb7PkhTT7pKGa0yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:cf:18:40:79:43:23:5f:3a:bd:59:d2:db:ac:4e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b47ee1f17c987debb2c020d8b5f2d8bdadbeb77
        Validity
            Not Before: Jan 24 21:00:39 2026 GMT
            Not After : Jan 25 21:00:39 2026 GMT
        Subject: CN=022a30e298946e96059a2d575ac8e09d1c53ba29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:68:dd:3b:96:62:99:d7:69:05:be:b5:f4:84:
                    be:17:8c:c6:ab:d6:30:92:d3:44:fe:33:85:a2:1c:
                    47:13:39:ab:53:64:11:21:18:80:f7:99:be:5a:b5:
                    09:75:57:1d:2c:38:10:b7:14:52:6d:3b:a9:6e:97:
                    b4:50:f7:ab:0f:d5:4f:93:4b:08:d6:96:3f:1f:ca:
                    35:9c:f1:b4:65:13:f5:ac:a2:b7:06:11:ea:ed:09:
                    ba:5e:6d:e9:2c:ca:74:d3:68:4d:f5:6d:36:00:5d:
                    2c:d3:09:77:0b:a3:8a:d6:d4:71:40:0f:1b:0a:4a:
                    1c:db:91:44:13:34:79:14:2d:d4:4e:e9:d4:17:76:
                    6f:6e:4d:05:e2:44:37:18:bd:95:c0:23:5e:fd:7f:
                    44:b5:4b:aa:7c:7e:9a:d9:82:d1:9a:ce:69:46:68:
                    84:91:9f:61:a2:00:ac:b6:f2:ae:06:ed:97:c4:3b:
                    80:24:b9:ef:cd:54:c5:09:f7:52:95:93:89:8d:d8:
                    c1:62:27:66:9b:7d:57:49:b3:64:9a:6c:54:55:2c:
                    e3:79:29:dc:1b:dc:08:bf:dc:4b:83:a2:0c:89:a7:
                    70:33:04:aa:30:04:77:93:b6:ce:ca:c2:4c:ac:c3:
                    8a:cb:40:5e:f0:cb:63:37:ce:bf:04:4f:78:8c:79:
                    2a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2A:30:E2:98:94:6E:96:05:9A:2D:57:5A:C8:E0:9D:1C:53:BA:29
            X509v3 Authority Key Identifier:
                keyid:9B:47:EE:1F:17:C9:87:DE:BB:2C:02:0D:8B:5F:2D:8B:DA:DB:EB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m0fuHxfJh967LAINi18ti9rb63c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/9b16f3-0100-4964-9ec9-e5ec2cc647aa/1/m0fuHxfJh967LAINi18ti9rb63c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:32:be:12:85:97:b5:85:d1:b9:dd:b5:bd:e4:e0:3a:fa:34:
         13:b0:89:0f:cc:be:f8:57:76:da:af:47:95:9e:b7:6e:5b:af:
         a4:5b:5b:07:9c:3e:ca:b5:dd:f6:fa:e3:5f:e3:23:2e:e3:e1:
         bc:a8:7d:37:9e:e7:02:96:99:74:72:a7:c4:5a:cb:68:4b:0a:
         de:6d:85:a2:35:6b:04:44:2a:13:ad:a3:2a:9e:db:ff:50:64:
         a4:e2:03:77:ca:0b:41:58:4f:4d:d9:b0:93:21:f2:1c:3a:5b:
         a7:cf:df:2e:99:23:1d:4a:3b:24:03:dd:27:0d:85:64:8b:d6:
         c3:d9:63:29:09:b4:ea:15:08:63:a8:de:73:7d:ce:0b:37:b1:
         d9:39:82:22:35:84:25:44:98:5e:00:6d:f0:a9:a7:ae:ae:4a:
         25:f7:15:0a:c9:a9:b8:46:ea:57:c0:7b:b6:b1:59:e2:85:90:
         cb:be:a4:b4:d0:cd:07:f6:ad:2a:83:f0:b6:eb:de:ea:1d:b6:
         e0:28:4f:7a:18:f5:f5:59:25:fe:19:08:f8:30:73:ba:83:b4:
         db:a2:eb:54:6b:20:68:32:4c:b6:49:8b:1f:05:22:06:2f:f8:
         23:40:1e:f2:e3:c9:7e:9b:8a:12:5c:46:57:9d:dd:69:ad:fb:
         5c:e8:0b:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvxzxhAeUMjXzq9WdLbrE6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNDdlZTFmMTdjOTg3ZGViYjJjMDIwZDhiNWYyZDhiZGFk
YmViNzcwHhcNMjYwMTI0MjEwMDM5WhcNMjYwMTI1MjEwMDM5WjAzMTEwLwYDVQQD
EygwMjJhMzBlMjk4OTQ2ZTk2MDU5YTJkNTc1YWM4ZTA5ZDFjNTNiYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12jdO5ZimddpBb619IS+F4zGq9Yw
ktNE/jOFohxHEzmrU2QRIRiA95m+WrUJdVcdLDgQtxRSbTupbpe0UPerD9VPk0sI
1pY/H8o1nPG0ZRP1rKK3BhHq7Qm6Xm3pLMp002hN9W02AF0s0wl3C6OK1tRxQA8b
Ckoc25FEEzR5FC3UTunUF3Zvbk0F4kQ3GL2VwCNe/X9EtUuqfH6a2YLRms5pRmiE
kZ9hogCstvKuBu2XxDuAJLnvzVTFCfdSlZOJjdjBYidmm31XSbNkmmxUVSzjeSnc
G9wIv9xLg6IMiadwMwSqMAR3k7bOysJMrMOKy0Be8MtjN86/BE94jHkqtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIqMOKYlG6WBZotV1rI4J0cU7opMB8GA1UdIwQY
MBaAFJtH7h8XyYfeuywCDYtfLYva2+t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzkt
ZTVlYzJjYzY0N2FhLzEvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS85YjE2ZjMtMDEwMC00OTY0LTllYzktZTVlYzJjYzY0N2Fh
LzEvbTBmdUh4ZkpoOTY3TEFJTmkxOHRpOXJiNjNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPDK+EoWX
tYXRud21veTgOvo0E7CJD8y++Fd22q9HlZ63bluvpFtbB5w+yrXd9vrjX+MjLuPh
vKh9N57nApaZdHKnxFrLaEsK3m2FojVrBEQqE62jKp7b/1BkpOIDd8oLQVhPTdmw
kyHyHDpbp8/fLpkjHUo7JAPdJw2FZIvWw9ljKQm06hUIY6jec33OCzex2TmCIjWE
JUSYXgBt8Kmnrq5KJfcVCsmpuEbqV8B7trFZ4oWQy76ktNDNB/atKoPwtuve6h22
4ChPehj19Vkl/hkI+DBzuoO026LrVGsgaDJMtkmLHwUiBi/4I0Ae8uPJfpuKElxG
V53daa37XOgLwQ==
-----END CERTIFICATE-----
Generated at Sun Jan 25 09:09:01 2026 by rpki-client