This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          6JX4h0zVPor4+P15rcQ4+dFvzZbrBSMyy+w6BTqhcWA=
Subject key identifier:   A0:48:AF:B3:5F:2F:0F:B9:FC:7E:F3:A3:DF:40:63:4C:50:36:7B:DA
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       019BF2AB013781C429589F89DFBF7BB67F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          0513
Signing time:             Sun 25 Jan 2026 01:00:51 +0000
Manifest this update:     Sun 25 Jan 2026 01:00:51 +0000
Manifest next update:     Mon 26 Jan 2026 01:00:51 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: 7SMU9Bmq4ZXRDUTtk//c9KzW4sluQFtuOSUG4U8lDnQ=)
                          3: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          4: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          5: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          6: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:ab:01:37:81:c4:29:58:9f:89:df:bf:7b:b6:7f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Jan 25 01:00:51 2026 GMT
            Not After : Jan 26 01:00:51 2026 GMT
        Subject: CN=a048afb35f2f0fb9fc7ef3a3df40634c50367bda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:67:c8:9d:d1:c5:3f:24:97:78:cd:fe:a1:ba:
                    cd:84:f1:a3:a6:10:5c:2a:e8:a0:e0:1a:88:aa:40:
                    f3:ef:de:59:9e:a1:42:fc:17:26:fe:2e:5f:7f:c2:
                    f8:0d:85:1a:87:3e:3c:28:d2:7c:fb:4e:5a:10:61:
                    bc:03:25:37:58:5c:6f:cf:a7:6b:da:12:2c:53:91:
                    4b:32:c4:9b:97:95:38:00:4e:a6:0d:a5:cb:58:94:
                    d0:f7:62:28:e4:4b:fb:40:27:89:43:d9:2f:bf:2f:
                    3f:42:3b:13:13:4f:96:b4:30:d5:6a:43:93:70:97:
                    fa:d0:30:20:c9:b6:40:76:28:df:e6:94:ac:84:a2:
                    4b:d2:43:0e:b0:63:68:06:e2:7a:b8:fe:a3:49:41:
                    06:0a:8b:64:00:9c:2a:1d:3b:fb:c6:e3:5c:82:5b:
                    be:cc:78:08:f3:f2:5d:f4:1a:63:6e:6e:3a:92:7d:
                    35:c7:a4:a3:38:3c:96:ba:2d:42:33:a1:4b:20:85:
                    8e:6b:fb:70:d7:c7:e2:8f:a3:0d:4f:4c:99:f0:a7:
                    54:af:41:02:88:69:e9:03:af:0b:a9:5a:19:11:97:
                    26:ee:09:e1:8a:88:74:15:fd:c2:12:fa:83:1a:98:
                    0f:54:7c:37:65:8f:34:be:9c:c6:dc:c8:dc:91:9a:
                    df:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:48:AF:B3:5F:2F:0F:B9:FC:7E:F3:A3:DF:40:63:4C:50:36:7B:DA
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:52:20:9f:42:40:28:d5:5c:2e:1a:11:49:dd:a6:ee:b9:ea:
         f5:5d:78:3f:15:ca:e1:7c:26:33:53:c8:74:07:0c:e5:6c:93:
         d0:cb:e2:c5:d4:db:cd:cf:9c:af:06:0b:0e:65:bb:81:e5:d9:
         87:10:ea:14:6a:6d:eb:c5:f7:3f:71:7a:8f:f8:40:ce:25:da:
         f9:08:d7:82:dc:ae:70:4b:2c:0d:76:67:ba:04:29:5f:1c:66:
         e7:02:ce:39:d4:d5:02:c0:5d:e6:62:4b:33:b4:5c:c7:52:c8:
         3c:45:b1:cd:cb:81:f0:92:fa:16:17:b1:7f:f1:6e:24:3d:ab:
         3f:0b:2c:34:f2:d7:de:4d:98:5c:7e:86:1b:77:03:ec:b3:9a:
         a4:a3:26:3a:6f:be:dc:ae:95:8b:8d:86:34:7a:e1:0f:4c:30:
         a2:e7:ed:ba:28:1e:b0:fd:3f:cc:a9:c7:1d:b2:39:28:e8:a8:
         e3:01:0e:07:8a:c6:cb:e1:9d:88:99:01:ff:c4:9c:a8:0e:9b:
         87:1b:ab:de:25:94:6a:a8:ca:d0:09:87:1a:13:fd:05:35:4c:
         4d:af:59:b6:c1:89:4c:97:38:82:db:5b:f0:38:c9:39:50:9b:
         71:9a:a5:a3:cc:64:a3:b5:1f:70:77:54:c7:d7:38:c6:e6:40:
         5f:6e:74:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZvyqwE3gcQpWJ+J3797tn8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNGY5ZjgzZDJkNzRjMGMwZmQwMGRhNzM1NTc4ZjczN2Rk
N2RhMDMwHhcNMjYwMTI1MDEwMDUxWhcNMjYwMTI2MDEwMDUxWjAzMTEwLwYDVQQD
EyhhMDQ4YWZiMzVmMmYwZmI5ZmM3ZWYzYTNkZjQwNjM0YzUwMzY3YmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWfIndHFPySXeM3+obrNhPGjphBc
Kuig4BqIqkDz795ZnqFC/Bcm/i5ff8L4DYUahz48KNJ8+05aEGG8AyU3WFxvz6dr
2hIsU5FLMsSbl5U4AE6mDaXLWJTQ92Io5Ev7QCeJQ9kvvy8/QjsTE0+WtDDVakOT
cJf60DAgybZAdijf5pSshKJL0kMOsGNoBuJ6uP6jSUEGCotkAJwqHTv7xuNcglu+
zHgI8/Jd9Bpjbm46kn01x6SjODyWui1CM6FLIIWOa/tw18fij6MNT0yZ8KdUr0EC
iGnpA68LqVoZEZcm7gnhioh0Ff3CEvqDGpgPVHw3ZY80vpzG3MjckZrfAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBIr7NfLw+5/H7zo99AY0xQNnvaMB8GA1UdIwQY
MBaAFDNPn4PS10wMD9ANpzVXj3N919oDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgt
ZWZkMjBmNmMyZWMzLzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85YzVmMDYtNTlhNy00NTg4LWFjMjgtZWZkMjBmNmMyZWMz
LzEvTTAtZmc5TFhUQXdQMEEybk5WZVBjMzNYMmdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVIgn0JA
KNVcLhoRSd2m7rnq9V14PxXK4XwmM1PIdAcM5WyT0MvixdTbzc+crwYLDmW7geXZ
hxDqFGpt68X3P3F6j/hAziXa+QjXgtyucEssDXZnugQpXxxm5wLOOdTVAsBd5mJL
M7Rcx1LIPEWxzcuB8JL6Fhexf/FuJD2rPwssNPLX3k2YXH6GG3cD7LOapKMmOm++
3K6Vi42GNHrhD0wwouftuigesP0/zKnHHbI5KOio4wEOB4rGy+GdiJkB/8ScqA6b
hxur3iWUaqjK0AmHGhP9BTVMTa9ZtsGJTJc4gttb8DjJOVCbcZqlo8xko7UfcHdU
x9c4xuZAX250Og==
-----END CERTIFICATE-----
Generated at Sun Jan 25 10:46:44 2026 by rpki-client