This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
File:                     m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft (raw, json)
Hash identifier:          0RFZkj1xU6TLOOyPvyTSJz21XgZrDGSqAh6KSx+psCc=
Subject key identifier:   45:C1:CE:76:06:AC:32:A1:C3:6D:7D:A9:32:B1:46:94:78:D4:1E:51
Authority key identifier: 9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB
Certificate issuer:       /CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
Certificate serial:       019BF27518DF1C7B6B9E183575818B615583
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
Manifest number:          17E8
Signing time:             Sun 25 Jan 2026 00:01:58 +0000
Manifest this update:     Sun 25 Jan 2026 00:01:58 +0000
Manifest next update:     Mon 26 Jan 2026 00:01:58 +0000
Files and hashes:         1: H8wE76fNQ2hhIjxk4MuG2V875Nw.roa (hash: g7ehk1525yVD63XA8pRRR3E8IFSxP1Zjdo5zOoEU1Rs=)
                          2: KxaC0ruOG2YD5n1zBRmLQRsn3WI.roa (hash: TwtwT6AH74GOn9MuLfl6jj270NvdM2yc+udW6/G1LQc=)
                          3: QkMzWLk5sTK1UV1ynfE6svHoE8U.roa (hash: CorPpj4zU1bBCQT6Z2Gb1cpT/IwtfHvCiSJfVqus6RE=)
                          4: m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl (hash: uZBTkl1vsb3/aP3tyCZecwFk3Yu2sM5TGqhFJNCPodU=)
                          5: syri4gMUyb6a13KvMROJjwlBhZg.roa (hash: /QXVuiiMa3wjoFyt1XhRqNNgHTeCl2azKO31l+7RS+0=)
                          6: uyOFyGJDHMXG3t3pO277WLsoGqE.roa (hash: BzXP/08Zx0Wir6Qt4Wu5utPmmZQXa+TM9Drawn5Grls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:75:18:df:1c:7b:6b:9e:18:35:75:81:8b:61:55:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b89b8cf47f7c485d628d0a359a16a815cd004ab
        Validity
            Not Before: Jan 25 00:01:58 2026 GMT
            Not After : Jan 26 00:01:58 2026 GMT
        Subject: CN=45c1ce7606ac32a1c36d7da932b1469478d41e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ea:ea:1e:de:07:66:6d:7d:e5:31:59:40:81:
                    bc:06:14:5e:e6:8a:c7:bd:53:27:84:8a:b6:94:70:
                    74:9f:47:01:d7:24:83:ca:51:0f:59:4c:3e:97:b7:
                    58:41:3a:53:64:d5:70:af:37:d7:55:71:19:92:3c:
                    fe:75:21:ea:24:7e:24:a4:8c:bc:61:a3:f6:90:c1:
                    81:18:a2:cc:38:2e:91:fd:83:6c:e8:e4:21:61:56:
                    91:e8:65:92:79:54:51:c3:31:01:51:e1:5d:eb:db:
                    b6:14:2f:14:d3:6e:41:d6:65:5b:70:23:af:90:81:
                    98:f3:28:a0:1e:0e:c5:d6:d3:46:81:a6:56:78:31:
                    3b:43:26:d4:91:3e:d3:4a:1d:0d:ec:62:ab:b4:f3:
                    bd:14:50:15:85:5b:6a:a7:6d:1b:44:18:8a:75:45:
                    75:93:b2:a1:0e:e5:18:4f:0d:d7:e8:55:b3:c8:f6:
                    68:21:a2:81:7c:8b:4b:55:ed:02:50:9c:b1:b6:e3:
                    5a:92:11:08:10:c8:8e:d5:37:63:f5:bd:60:80:38:
                    fc:18:2f:60:86:a1:dd:90:82:f5:7c:7e:07:85:85:
                    93:68:c0:c5:37:04:bb:c7:de:19:52:73:c3:63:8e:
                    70:6f:84:f4:ab:f3:5d:38:d2:a9:7b:b7:bd:75:5c:
                    91:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:C1:CE:76:06:AC:32:A1:C3:6D:7D:A9:32:B1:46:94:78:D4:1E:51
            X509v3 Authority Key Identifier:
                keyid:9B:89:B8:CF:47:F7:C4:85:D6:28:D0:A3:59:A1:6A:81:5C:D0:04:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4m4z0f3xIXWKNCjWaFqgVzQBKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/m4m4z0f3xIXWKNCjWaFqgVzQBKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:44:c7:19:55:1d:b9:32:14:35:16:05:71:76:d2:74:bd:15:
         22:d6:d8:a1:31:69:6e:10:35:b1:af:06:26:9c:df:3f:ee:5b:
         5a:35:ed:47:41:86:1b:59:4a:cd:1b:fa:14:e3:07:88:47:6a:
         37:16:bb:89:bb:ea:a4:cf:8e:00:d8:ef:4e:1d:d9:08:0b:1c:
         af:24:30:50:05:0d:c8:0c:fb:a3:6f:31:3e:e8:e6:e8:86:1f:
         b4:70:c3:cf:95:33:75:26:22:5c:0d:33:b1:22:66:9d:91:04:
         0d:0d:75:8a:58:cf:19:85:40:7d:25:db:57:fd:1c:7a:75:40:
         fe:7f:76:7c:a0:ff:d9:47:33:37:18:97:e3:0a:8a:9e:ce:42:
         ea:91:51:09:14:9a:21:f9:30:19:97:f8:68:ed:98:4c:42:a9:
         5b:fa:34:07:94:a3:a0:1e:dd:d1:90:bc:1e:cc:12:38:89:f3:
         d7:a1:14:59:ad:ca:f5:13:87:ba:66:68:77:44:ce:16:d7:ce:
         97:e3:be:62:5b:1c:7f:42:0e:78:a6:b5:a0:fa:68:62:7a:b7:
         df:37:c5:5a:4f:aa:3d:95:68:61:26:65:af:f6:d3:77:18:5f:
         42:88:fe:d9:e5:66:b7:92:3f:b6:e5:71:22:d8:c7:6f:5e:20:
         b4:9c:86:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 09:43:53 2026 by rpki-client