This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          15EIV4mLcEYMnc22UWZo10O+AHB4JupKKjHDiHkws6M=
Subject key identifier:   D3:C7:06:4A:9F:4D:A8:4F:9A:E1:FB:80:0A:15:A9:0F:EB:B8:E7:A5
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       019BF499432F4D79AC22D3905E82C2589FD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          0514
Signing time:             Sun 25 Jan 2026 10:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 10:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 10:00:43 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: jVctVY0alY6dLzcv2Yv83lsocoBA2KOahTRyGJtwlEU=)
                          3: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          4: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          5: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          6: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:99:43:2f:4d:79:ac:22:d3:90:5e:82:c2:58:9f:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Jan 25 10:00:43 2026 GMT
            Not After : Jan 26 10:00:43 2026 GMT
        Subject: CN=d3c7064a9f4da84f9ae1fb800a15a90febb8e7a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2c:7d:c6:2d:3b:5e:27:cb:15:da:81:1c:9d:
                    3e:e7:38:83:b3:2a:64:50:3b:c6:02:58:8e:5b:99:
                    c4:c8:91:0b:c6:cc:28:26:93:34:49:1b:2e:89:72:
                    0d:58:b6:52:c6:b1:d9:81:31:2c:9f:db:7e:76:fc:
                    fa:a1:9d:d7:39:76:2a:8f:a4:8e:e6:10:5e:c3:30:
                    b1:1b:ac:ad:7c:a2:33:b1:89:df:7b:73:2a:6d:61:
                    6b:16:bf:7c:9e:97:94:86:1d:02:81:19:98:4c:05:
                    7f:a7:ee:56:ed:60:05:c8:18:83:aa:37:df:68:3c:
                    08:16:24:92:39:9e:f2:8c:86:02:64:83:13:50:b7:
                    fb:ed:69:83:dd:11:1a:97:73:54:c8:57:b9:b6:21:
                    fa:4c:72:1d:05:d8:fe:05:e4:0e:3e:c4:b2:cb:8e:
                    9b:51:9d:4a:20:7b:aa:6c:9a:cc:2a:6e:ff:e6:2b:
                    7f:05:ae:5c:f7:5d:25:36:aa:67:62:88:92:a8:20:
                    ab:86:85:ed:9f:2b:7b:fe:72:55:46:60:d6:d7:d6:
                    d6:04:12:a2:aa:7a:2d:2e:50:d0:83:bb:ee:02:99:
                    b8:ea:c4:c2:b2:d9:72:f3:e5:83:e5:6f:84:1c:6f:
                    35:d7:26:62:23:45:c6:53:fc:89:a6:0f:4b:32:de:
                    90:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C7:06:4A:9F:4D:A8:4F:9A:E1:FB:80:0A:15:A9:0F:EB:B8:E7:A5
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:78:9e:db:ad:ff:ef:ef:76:1b:5f:da:b1:ce:4b:76:b0:b2:
         ab:f6:3e:d6:bd:3f:f2:72:1c:29:9e:63:50:38:10:b9:55:9e:
         11:ab:9d:db:d4:24:10:5c:62:03:fe:74:b7:4e:1c:ec:b6:4e:
         86:4d:c4:ff:0a:d1:b9:8b:c1:90:3e:23:e3:94:5d:fb:26:cb:
         1b:e0:4b:85:95:79:58:22:f3:d2:d0:03:e2:ec:8e:e4:76:5a:
         40:a7:f5:ca:5a:94:30:db:9b:37:1f:aa:c3:93:9d:97:d8:89:
         01:2c:0e:c1:af:68:dc:56:bb:cb:42:5c:c4:3c:a3:3a:9e:b1:
         33:b2:3a:43:89:53:b4:fd:c3:31:ee:4a:b9:87:69:84:55:b3:
         94:bb:31:31:f6:25:03:5b:b1:7d:d4:2b:5b:64:4b:44:36:69:
         83:0c:fa:4f:16:e5:94:b8:3c:15:08:51:0e:cf:88:31:32:5d:
         45:61:db:0d:cf:3f:74:24:f5:f9:89:5a:cc:3a:21:6c:c9:48:
         8d:a7:c8:2b:67:57:70:22:3e:4b:3a:c7:97:55:75:dd:0c:01:
         de:1f:f5:a5:31:39:d6:d9:a3:ea:94:2f:32:23:33:51:f2:38:
         fb:ef:5c:0b:9c:65:71:63:65:f2:f0:b2:8f:8e:c0:ba:24:c2:
         65:d5:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 13:59:35 2026 by rpki-client