This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File:                     mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier:          FYcVJVbPL+RfnlXgqW1C76KE2IuCed3gyRLl+edHL5E=
Subject key identifier:   38:54:20:AB:45:D6:3B:F2:90:47:4A:00:2B:EA:B2:43:C4:D2:7C:50
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       019BF4D0D1DC11A57ADC48241DE5AF3BF563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number:          180A
Signing time:             Sun 25 Jan 2026 11:01:24 +0000
Manifest this update:     Sun 25 Jan 2026 11:01:24 +0000
Manifest next update:     Mon 26 Jan 2026 11:01:24 +0000
Files and hashes:         1: D0gnpWfBBKSRYWj8s3v4J_aCJMI.roa (hash: 45JN/2vbVLlDusn7s9SwK/NY3HUP/bKxrVAXGIGtMdk=)
                          2: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (hash: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=)
                          3: m72BlK4pK3nz4quwny73cERWUUU.roa (hash: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM=)
                          4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: 26ozLMuMnrsLk/iXr9jYa4LAePyJ7Q0eAFk1bx7Y/2k=)
                          5: nbN6QTJFxRMXWB7BZSEIH-SMH3g.roa (hash: pyiyGBs40xwh8+LBH6NUqQq8ar9YtwxRrDXfuF15LbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f4:d0:d1:dc:11:a5:7a:dc:48:24:1d:e5:af:3b:f5:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Jan 25 11:01:24 2026 GMT
            Not After : Jan 26 11:01:24 2026 GMT
        Subject: CN=385420ab45d63bf290474a002beab243c4d27c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8c:33:3b:2b:54:25:62:69:79:ba:b0:75:4d:
                    38:1f:99:18:d1:29:17:f0:25:25:da:47:de:df:0a:
                    35:7e:31:48:00:2e:88:99:b3:92:3a:03:ba:d0:a6:
                    e3:ca:5e:71:a3:32:24:be:d2:ff:b4:fb:18:57:c1:
                    53:6a:90:1f:9a:f3:30:08:57:81:86:0a:4e:7b:41:
                    76:83:f9:ae:5a:f9:4a:4c:c7:9c:a2:5b:3d:c6:fa:
                    c2:c6:fe:82:f1:a8:ba:f4:56:f0:5b:f7:80:a3:b2:
                    fa:7c:cd:da:5b:1e:55:92:1b:7b:7a:f1:21:54:e8:
                    22:89:d5:ef:5a:43:cf:e7:99:f0:e5:c8:2a:da:c0:
                    6c:1e:cd:d2:56:2d:5b:69:a6:77:fa:2e:d4:57:28:
                    e1:58:37:36:30:01:b7:67:12:ca:11:8c:1e:29:49:
                    39:65:69:41:a4:53:6d:82:ff:2a:73:b7:2b:e5:1e:
                    56:93:71:ff:99:d8:51:2e:a6:1d:45:5b:39:70:82:
                    dd:95:93:f1:2f:82:be:2e:5a:ad:79:0b:8b:c8:1c:
                    d4:63:bf:e1:f4:0b:20:17:7b:b2:06:4c:fa:64:b7:
                    6f:eb:52:ac:0d:4c:56:15:18:56:d8:a0:90:ab:da:
                    32:12:65:36:48:05:31:1e:21:64:89:38:61:96:13:
                    f2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:54:20:AB:45:D6:3B:F2:90:47:4A:00:2B:EA:B2:43:C4:D2:7C:50
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:80:93:2a:67:ba:86:f3:fd:9f:8c:83:25:75:88:a5:8e:b8:
         65:dc:ea:32:7c:a4:3b:09:61:a6:58:b8:74:25:53:3b:36:d6:
         0d:17:a5:2e:fb:be:1b:2e:4f:f5:a0:cb:f0:04:e3:bc:4f:61:
         d1:c9:80:45:fd:93:83:e0:32:de:36:f6:c4:fa:31:b1:7d:64:
         11:57:7c:5e:f0:fe:b7:94:e5:aa:18:8a:a5:01:c3:f8:67:ed:
         b5:5d:3a:dc:59:72:26:94:1a:1e:1f:ed:c6:3c:f6:57:f9:23:
         0b:64:4b:15:6e:fb:f7:ba:75:7d:7a:1a:95:2b:39:b2:fd:52:
         e3:69:e2:be:bf:dd:9b:cc:a9:ce:02:7b:8f:ac:d6:a6:47:af:
         7b:79:ab:41:3b:55:b9:a6:53:2d:68:8d:c6:30:85:36:4f:ce:
         27:99:df:a5:5b:8d:e3:1f:be:8c:57:b1:c7:df:a5:da:ae:52:
         d2:28:64:31:46:ae:ce:88:7b:92:d5:d1:2e:24:29:e0:7a:f2:
         10:26:7c:31:dd:02:44:8b:a6:8e:7b:c8:2f:ae:31:cb:56:26:
         86:b3:b9:0c:26:ab:29:45:5a:a9:7f:0d:2e:1a:95:11:86:80:
         87:ba:21:41:af:18:89:a7:c6:ee:68:ce:8d:a4:6d:90:f2:76:
         33:51:70:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 14:45:16 2026 by rpki-client