This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
File:                     9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json)
Hash identifier:          6JZMw/p1+7Do64c6eqWcGNpQopWylo71Epre3zg4Qqg=
Subject key identifier:   AD:10:B6:18:AD:1D:70:05:AC:FA:1E:C2:F9:A2:EC:86:4E:FD:38:47
Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7
Certificate issuer:       /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
Certificate serial:       019BF53DDFD68959725E9E9860901FC478C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
Manifest number:          187D
Signing time:             Sun 25 Jan 2026 13:00:31 +0000
Manifest this update:     Sun 25 Jan 2026 13:00:31 +0000
Manifest next update:     Mon 26 Jan 2026 13:00:31 +0000
Files and hashes:         1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=)
                          2: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=)
                          3: 9QOoNpd76OPVl49TOCbIH5K-Xuc.roa (hash: iHslUv59RlEtWqhiDG50P5ptUXczZiGq5UnFqrvblIU=)
                          4: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: ybLQzH9skUfzf3Ay+qDZLSELyUTmROyCoSlq5P1XRes=)
                          5: OdMVWui-4Jljx26VrFQSjyDGRvo.roa (hash: UGyO9OR6VyOa56rqgYNKLWL4KF44h+tsmx4bpi6i9tw=)
                          6: Xlo2dAjL9Nrixz0iYa0SAY5SYBc.roa (hash: Bg+pB+Sxi3uvjFsg12Ez9WbynlaVnSIe2mie+DFh+2c=)
                          7: ih0mxzFH0MUiJNPNZCziaJJuGMU.roa (hash: Xd9Xc8lt28a42B6a+zDM/Y1fYiUSVn12an9g9QH+NKk=)
                          8: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=)
                          9: zxibd_f4xg8XI9jjPajufCcwE7M.roa (hash: jbQlcexgvpGqLA0AUXCsjYkFmJ4wQU/giRIaoZA7v/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3d:df:d6:89:59:72:5e:9e:98:60:90:1f:c4:78:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7
        Validity
            Not Before: Jan 25 13:00:31 2026 GMT
            Not After : Jan 26 13:00:31 2026 GMT
        Subject: CN=ad10b618ad1d7005acfa1ec2f9a2ec864efd3847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:ad:d3:14:90:cb:8a:51:92:0c:c8:51:54:
                    26:71:9f:30:49:0a:de:b8:34:d7:00:2f:87:d7:55:
                    ff:d0:90:1a:b0:56:ce:a3:bc:82:c0:92:75:67:df:
                    de:df:77:42:d7:9a:21:29:ae:d8:ba:75:81:47:e4:
                    1d:ca:36:2d:d6:fc:be:b2:1c:d4:4b:5b:4d:28:93:
                    a0:33:45:f7:e4:81:98:71:88:3d:06:4d:10:cc:ae:
                    a2:60:af:8c:ae:23:04:9f:da:2c:b2:5c:be:b5:17:
                    58:e8:5d:7d:1d:c1:f7:6f:a4:42:e9:d0:b8:4e:8d:
                    2c:e5:01:80:76:ca:34:15:26:e9:1d:d1:17:76:86:
                    6a:a2:b6:d4:ad:84:5e:50:70:a5:9d:ba:1d:c6:b2:
                    43:62:54:96:aa:3f:42:2e:52:e1:63:39:07:75:27:
                    84:85:5d:c6:5b:e0:03:50:95:5e:04:f9:e2:60:dd:
                    73:8f:e9:c6:8c:7b:f8:52:c6:d5:b0:9a:52:20:dd:
                    59:f2:cf:aa:b6:61:1f:81:92:f8:d7:e9:0f:63:09:
                    15:3a:3a:66:c5:f9:84:76:e4:15:6a:3c:08:09:73:
                    7e:d3:34:17:0d:70:5c:8c:8a:10:7f:43:d0:14:22:
                    4f:82:22:5a:1b:8b:3a:6e:d3:48:1e:e7:2c:c5:0d:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:10:B6:18:AD:1D:70:05:AC:FA:1E:C2:F9:A2:EC:86:4E:FD:38:47
            X509v3 Authority Key Identifier:
                keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:7d:e9:36:bf:7f:d9:43:ca:c6:a1:1b:42:a9:c6:16:97:
         55:17:98:dc:ab:27:03:13:98:be:94:4d:00:06:57:bc:2e:e5:
         be:3a:c2:4a:9b:55:7f:dc:d3:a0:16:4f:9a:5e:39:a6:a2:36:
         01:a4:d8:99:86:58:56:de:4b:cc:74:18:b0:9d:26:cb:b6:43:
         e6:50:16:1d:73:21:3c:4d:f9:a4:81:e7:fc:70:9b:69:71:b0:
         4c:15:e4:6d:9e:4a:8f:e6:0f:1e:54:33:32:c4:02:e6:e2:0b:
         6a:67:6a:00:01:9a:fa:07:fd:86:50:4d:45:29:41:36:e7:f0:
         1c:05:70:6b:d7:29:66:fa:02:d4:5d:2a:fd:28:d2:f9:e1:95:
         fd:e8:b9:ba:df:e4:f8:d2:a1:9e:f6:bd:d9:21:72:82:18:34:
         f3:34:47:d7:5b:a3:36:e7:d4:9b:0b:d2:b5:40:4e:20:f8:16:
         61:6f:a0:fa:1e:f7:8d:b6:03:48:92:71:0f:b8:0d:d2:7c:53:
         d9:ba:f2:55:3b:ab:ae:d7:18:c8:bb:43:54:f4:c9:2a:bb:31:
         47:4e:fe:83:da:83:73:64:1e:ec:aa:67:e4:60:09:b4:2b:29:
         25:3e:ad:4f:ab:39:46:1c:68:d5:aa:c6:7f:7a:a5:fd:9b:9d:
         f0:34:82:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 21:11:01 2026 by rpki-client