This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          fv3NAZf+TZtPYzlMDhAaiFJDYerFhAMBLZci1JdL3B0=
Subject key identifier:   E4:3A:3A:56:B5:1C:A4:2B:66:BF:F7:F5:A8:79:72:B4:E0:6F:0F:A6
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       019BF462B9C2CF017423ED22F0C10AE41519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          17E9
Signing time:             Sun 25 Jan 2026 09:01:09 +0000
Manifest this update:     Sun 25 Jan 2026 09:01:09 +0000
Manifest next update:     Mon 26 Jan 2026 09:01:09 +0000
Files and hashes:         1: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (hash: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs=)
                          2: KxaC0ruOG2YD5n1zBRmLQRsn3WI.roa (hash: TwtwT6AH74GOn9MuLfl6jj270NvdM2yc+udW6/G1LQc=)
                          3: QkMzWLk5sTK1UV1ynfE6svHoE8U.roa (hash: CorPpj4zU1bBCQT6Z2Gb1cpT/IwtfHvCiSJfVqus6RE=)
                          4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: 2AxbVw3CZI5sL2bAgsT+9S8h/g+SYnWwnlSvxsyRSoc=)
                          5: syri4gMUyb6a13KvMROJjwlBhZg.roa (hash: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=)
                          6: uyOFyGJDHMXG3t3pO277WLsoGqE.roa (hash: BzXP/08Zx0Wir6Qt4Wu5utPmmZQXa+TM9Drawn5Grls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:62:b9:c2:cf:01:74:23:ed:22:f0:c1:0a:e4:15:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Jan 25 09:01:09 2026 GMT
            Not After : Jan 26 09:01:09 2026 GMT
        Subject: CN=e43a3a56b51ca42b66bff7f5a87972b4e06f0fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:46:dc:0b:ce:04:15:51:34:aa:98:0a:32:
                    b8:93:45:5a:bf:d8:67:b9:54:83:de:c0:af:30:50:
                    21:22:e7:ee:f4:9f:fb:18:5a:3a:20:e3:aa:63:35:
                    0c:4f:88:be:ed:75:8d:e3:a7:30:69:a1:d8:6d:04:
                    10:4f:2b:5f:2d:e7:b9:0a:5e:5d:2c:0c:92:82:e8:
                    57:30:ac:7f:86:25:5a:50:18:6d:bd:90:35:86:27:
                    f5:59:d8:66:c8:72:8b:c4:6f:97:1d:c2:ce:37:0d:
                    78:ef:92:4c:ba:80:77:1e:e2:09:e8:75:32:da:aa:
                    d2:3a:83:5e:5c:60:c6:0f:94:7a:63:8f:6c:db:6a:
                    a4:ba:91:91:81:62:71:d5:e7:7f:47:bf:ba:af:7e:
                    24:67:ac:4e:82:90:28:fc:0e:52:ca:ee:14:75:75:
                    d3:7b:f3:21:eb:93:a3:b0:1c:c9:11:2f:7c:b8:60:
                    d6:4b:64:bf:83:d3:5a:39:78:1c:10:06:76:ba:ac:
                    24:0b:66:6d:1b:0f:18:cc:15:45:bf:df:82:58:73:
                    a9:69:28:7a:6e:dd:ab:85:d1:9e:f5:41:1c:ec:94:
                    bf:e5:7f:c8:00:71:26:58:42:ff:6f:6d:15:66:ed:
                    80:73:be:46:f1:89:de:0a:62:48:43:1e:da:f2:44:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3A:3A:56:B5:1C:A4:2B:66:BF:F7:F5:A8:79:72:B4:E0:6F:0F:A6
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5e:71:c0:cb:9b:90:c1:56:0d:81:67:ea:f9:2e:93:a8:b5:
         7c:22:0d:64:41:36:6a:be:be:41:48:65:94:12:82:4c:1b:80:
         4b:59:d1:24:ac:6c:a1:f1:d8:a7:50:1c:a7:53:74:45:fd:6d:
         86:8b:63:97:ff:7f:9e:0e:79:b8:f4:d6:06:4e:7a:c5:df:1e:
         24:55:ab:f2:f4:7e:dd:1c:cf:61:f7:d5:d7:e3:ae:9e:fc:bb:
         5c:0a:79:9e:20:35:08:7d:ad:77:1b:ff:d9:00:ec:dc:7c:24:
         39:04:f9:4d:0a:06:f6:f9:54:27:fd:25:c6:2a:9a:ba:e3:af:
         33:a0:fc:fd:22:a5:b2:20:b7:ee:07:6e:f4:a3:0b:6c:2a:d7:
         85:ca:58:23:07:83:d2:5a:8e:e0:36:f1:b1:57:87:82:fd:61:
         40:36:64:08:15:e1:62:1a:b0:33:6c:04:0b:30:f1:0d:4f:35:
         9f:7b:f6:9e:3a:52:b0:7d:c5:29:1e:1f:f1:f4:44:9f:11:96:
         2d:70:e4:26:33:e4:07:9d:a4:28:ea:4f:7c:7f:3b:e4:f6:2b:
         95:ec:72:e0:ce:55:92:7b:26:5b:d2:cd:35:c5:03:a8:1f:a8:
         85:ad:76:dc:ec:f6:4d:ec:0c:55:42:d6:97:6e:3a:f1:3b:83:
         79:23:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:30:20 2026 by rpki-client