This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
File:                     1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft (raw, json)
Hash identifier:          llZmcmAyyqQIqZquL6bUOjmHL9LNWMQNfZTwN5o8tmU=
Subject key identifier:   58:28:92:F3:C2:E4:BB:50:79:EC:56:66:52:26:1E:77:4D:FD:CA:CF
Authority key identifier: FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08
Certificate issuer:       /CN=fbd32968aaaa919c52791ffb07f93436b74fd508
Certificate serial:       019BF7D1F5F1B617E1609E068F5A27972CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
Manifest number:          0C42
Signing time:             Mon 26 Jan 2026 01:01:30 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:30 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:30 +0000
Files and hashes:         1: 1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl (hash: /J36VXb8M00zDedgErq/LK/1raSlEKNTGQpPitSk4sA=)
                          2: 3hEZWyItuy9dwAtzmZ-AFWLhT5w.roa (hash: L+BYsmG/Ibo7acCTPtDZVtgHekYwJ5+kmxxZnt4e2i8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:f5:f1:b6:17:e1:60:9e:06:8f:5a:27:97:2c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbd32968aaaa919c52791ffb07f93436b74fd508
        Validity
            Not Before: Jan 26 01:01:30 2026 GMT
            Not After : Jan 27 01:01:30 2026 GMT
        Subject: CN=582892f3c2e4bb5079ec566652261e774dfdcacf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:5b:52:0d:7a:5e:dc:84:b0:e2:36:a8:d8:
                    c3:be:8b:59:92:61:00:25:3e:53:fa:f4:38:90:24:
                    95:25:01:71:7f:35:14:e5:8f:3a:c3:0e:f1:71:7b:
                    07:a3:b5:f7:7b:f0:68:fa:2f:62:32:95:cc:28:ff:
                    cd:5a:51:48:ec:8b:57:d0:6d:89:17:de:51:b7:92:
                    9f:46:8e:a1:a4:d7:6e:71:be:c4:6b:7d:f1:33:7f:
                    10:5b:2a:e9:40:3b:23:2c:28:3e:1e:c9:10:04:e3:
                    8d:b9:4d:1e:fe:6f:f9:a6:6b:bf:ba:46:31:4a:9e:
                    c3:f5:71:17:75:6e:d2:71:e8:7c:bb:96:dc:ec:08:
                    e5:4b:7a:92:9a:5c:35:3a:cd:8b:d1:d9:6e:b1:09:
                    63:a8:9b:53:71:c9:25:20:9f:14:70:7e:fe:c1:d3:
                    55:00:fa:41:4f:07:07:3b:18:75:23:7e:1f:09:fe:
                    5e:6c:e6:11:5f:2f:ef:6b:96:37:08:21:06:99:a3:
                    18:8e:a9:f4:23:be:bb:dd:c6:77:ad:12:8f:f1:52:
                    f3:2a:fd:64:13:ab:46:78:90:cc:17:44:a2:a3:41:
                    bd:5d:b1:90:f6:a4:4c:55:29:37:c2:3b:23:b7:79:
                    d9:52:fd:13:e2:3a:46:b2:65:45:50:44:2c:52:37:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:28:92:F3:C2:E4:BB:50:79:EC:56:66:52:26:1E:77:4D:FD:CA:CF
            X509v3 Authority Key Identifier:
                keyid:FB:D3:29:68:AA:AA:91:9C:52:79:1F:FB:07:F9:34:36:B7:4F:D5:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/723b15-faac-41ff-a1aa-88739e335053/1/1-9MpaKqqkZxSeR_7B_k0NrdP1Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:74:5e:d0:95:fe:3c:c5:90:78:e7:38:fa:23:9d:26:85:b1:
         f8:ab:6b:40:5c:72:a4:34:97:75:94:a1:28:7f:76:7c:9e:08:
         14:19:38:8d:6f:d3:52:33:ca:19:f7:d7:ac:1d:b9:8b:cd:78:
         17:03:0c:bd:80:4b:ab:c0:76:d9:4e:29:3d:e5:da:79:92:bb:
         28:b1:f4:f6:8f:04:95:89:09:5d:40:81:02:ef:6c:38:0d:67:
         0f:5f:fe:3d:8d:49:14:b7:46:7f:30:97:ad:e0:8e:c4:a3:97:
         32:17:5d:b0:22:7f:6a:9e:3a:aa:bd:2f:a3:82:83:3e:9f:f9:
         17:51:f3:c3:d0:43:f4:71:70:fc:ec:70:a8:14:7c:9d:02:61:
         fc:ac:7d:c5:07:21:b7:c4:3a:0c:8a:87:82:a1:e9:80:c1:76:
         29:95:de:76:88:88:07:a7:43:7f:4c:60:cd:06:d3:f7:fa:78:
         77:be:87:16:0f:f5:08:1e:56:3c:ef:c2:99:4b:1f:d6:c4:c0:
         f5:4f:60:38:b8:d5:b5:e5:b4:07:0e:47:bc:37:53:b4:7d:90:
         0a:f6:a5:45:1a:b2:26:4b:2c:3d:7c:c8:03:81:0a:dc:4c:5a:
         84:ce:7c:c6:08:c1:6f:7c:12:1b:e4:7a:1a:20:e5:43:d8:88:
         87:2a:ed:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 06:07:03 2026 by rpki-client