This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          3pROalcdfVYdl0IxyI4VkvQsFC6PCTZBeUyySHTVhOM=
Subject key identifier:   61:B3:B1:EE:86:75:5F:D3:DE:61:5E:1A:16:A6:C9:79:63:7C:CF:3E
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       019BF2E1E1E21742282403C80BDDA1587467
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          12CC
Signing time:             Sun 25 Jan 2026 02:00:48 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:48 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:48 +0000
Files and hashes:         1: 6JYQqrzS3UTPcgvWPbO4TgCoS3k.roa (hash: iOMk6cfEftH8+M5zAq6J+7nYiKbK2CplnfrSukCWdkM=)
                          2: KiViUlRdp1iVIBpAgxyCpxxK3gQ.roa (hash: Yk/aBj6tG6In28XxnbyhWgRKpfIGrGy/o9iiuy0VDDg=)
                          3: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: BxBFLDDM6kam7InCCAbbL9o9hODtc7/3jfs32FlhM8Q=)
                          4: aZwxLLe27uK7ns0bAgvQ0s7Mqt4.roa (hash: IJFNHlYozh1R/6V0WKyYnkoCMR+po4mStHpa7SQZbq4=)
                          5: qM92mL8g634Yh9KwZjRzI5vZ9l8.roa (hash: f+n6LoAwAduArbfX5BlVpkBMLZF56N90CkVkSMu7mrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:e1:e2:17:42:28:24:03:c8:0b:dd:a1:58:74:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: Jan 25 02:00:48 2026 GMT
            Not After : Jan 26 02:00:48 2026 GMT
        Subject: CN=61b3b1ee86755fd3de615e1a16a6c979637ccf3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:08:21:e7:e2:55:8f:27:ae:c7:0b:97:09:
                    05:2f:5d:2a:67:6c:81:35:98:6d:24:58:f3:91:64:
                    36:ea:07:c0:8e:89:b2:ef:ac:e4:45:31:f4:7a:ee:
                    a7:eb:22:d3:fc:84:b4:fd:d8:6a:ce:34:c9:88:2f:
                    d9:d7:f8:11:1b:47:ed:47:22:13:29:6e:b4:79:a8:
                    7e:08:ab:49:e9:40:f0:6c:08:41:65:41:1d:1a:c7:
                    1b:61:eb:7e:12:b4:f9:e3:f8:2e:78:f7:5e:f7:b9:
                    a3:8e:7e:fe:89:d9:af:fb:47:97:5b:11:c7:87:25:
                    3a:a0:6d:a1:9e:35:6e:75:25:bf:c9:99:06:f7:ea:
                    89:fe:46:dd:08:51:c2:a5:0d:18:5f:64:e3:eb:73:
                    62:db:a6:31:01:30:33:49:b2:9a:97:6e:d2:bd:1a:
                    2b:fc:62:51:57:b8:68:14:c4:70:7c:16:d7:39:27:
                    e7:12:82:15:1d:d1:a7:92:c0:99:28:ac:48:c4:87:
                    1d:13:78:39:48:d3:e7:b8:12:66:66:87:da:96:fd:
                    ca:4e:b5:3b:5a:d8:75:55:e2:2a:e6:7a:74:6c:fe:
                    85:7f:20:73:58:90:d6:5a:5d:9d:18:c9:2c:9d:cf:
                    d4:31:db:ca:f9:07:40:16:98:fa:85:ae:1c:04:83:
                    05:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B3:B1:EE:86:75:5F:D3:DE:61:5E:1A:16:A6:C9:79:63:7C:CF:3E
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:3f:7d:79:81:4b:01:63:a0:88:68:2f:3f:09:96:30:e1:d7:
         69:06:87:58:2d:af:91:17:f9:73:22:c5:98:ad:d7:d1:0b:56:
         bb:84:f2:f0:e1:af:2c:3b:d3:4b:69:0b:c4:0a:e6:75:41:b0:
         05:d1:c8:57:e7:73:1c:b5:3b:5d:27:92:d4:58:f1:20:46:a1:
         4d:81:46:9d:15:cc:00:b6:1f:dc:de:40:3d:0c:6b:67:93:f0:
         17:2d:7a:fd:b1:a3:e2:c2:dc:82:0d:e2:57:10:0f:03:e9:04:
         f6:13:bf:26:bf:6e:4a:fc:ac:f5:0f:d1:c5:2f:d4:6c:fc:98:
         55:ba:f6:7a:e6:89:f2:bb:1b:ec:cc:51:35:8a:b7:af:e0:d2:
         5d:e9:d7:9b:37:0c:fe:6c:d1:62:8b:ae:65:8f:a0:73:ff:65:
         a0:0d:33:89:1c:af:f5:57:10:2f:4f:5e:33:6b:a9:2f:c8:14:
         e4:ad:9b:54:d7:b1:dc:52:76:30:ff:d1:23:02:20:e8:d9:8c:
         c2:4f:aa:5b:c4:f3:77:f4:26:be:a7:f8:14:f7:17:02:0a:df:
         d4:7e:41:1d:35:50:41:2a:9f:50:06:7b:ff:35:cb:b0:b3:67:
         52:82:b7:54:ce:28:7c:db:6c:ed:2a:d5:9b:e4:98:2e:51:c9:
         26:1f:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:16:27 2026 by rpki-client