This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File:                     MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier:          x8hF+u0kV+T3JVOLADCwyMoc4HusVOFLaaSuGVNpTlg=
Subject key identifier:   93:9A:28:1B:27:6E:C4:29:B1:A1:0F:87:CC:36:EA:C7:C1:38:74:87
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer:       /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial:       019BF6F5C6EE7E0FA6745344AE7B5DD82EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number:          1538
Signing time:             Sun 25 Jan 2026 21:01:00 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:00 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:00 +0000
Files and hashes:         1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
                          2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: 0T8V+j6iCAO8eN6oed0V9OII1IH52rwJxoKTh5wo97o=)
                          3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:c6:ee:7e:0f:a6:74:53:44:ae:7b:5d:d8:2e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
        Validity
            Not Before: Jan 25 21:01:00 2026 GMT
            Not After : Jan 26 21:01:00 2026 GMT
        Subject: CN=939a281b276ec429b1a10f87cc36eac7c1387487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:c4:a7:db:2e:b2:96:c6:e1:12:33:ce:f5:
                    c3:fe:c9:32:a1:26:c6:36:9d:fa:3a:77:f7:95:b3:
                    a2:8b:32:d1:c9:e4:7f:3d:95:26:20:e2:b6:86:ad:
                    1d:10:e4:f2:b0:82:ce:0e:ff:72:40:5e:fa:af:c4:
                    e6:11:04:4e:89:32:27:a1:52:65:46:5c:0d:4f:bd:
                    d8:af:0e:ed:c4:1b:c7:52:6d:36:29:19:8b:7a:89:
                    ce:ca:30:ca:97:96:2b:d6:8d:44:31:40:b2:d5:87:
                    64:93:ee:b7:e7:e9:3a:42:99:42:88:70:c0:7b:3a:
                    16:d9:8c:32:bc:f4:cc:c3:3b:ba:11:c5:88:67:64:
                    0b:e6:6e:1c:fe:dd:5e:14:10:9e:73:29:1b:a6:f3:
                    ed:b1:28:34:96:f9:30:8c:d0:a9:b6:56:bd:24:c6:
                    94:e9:39:9f:13:7b:a0:cb:45:6e:00:bb:10:5e:64:
                    f4:3f:a7:39:78:dd:8a:15:29:f0:dd:c9:54:c1:dc:
                    4a:f1:89:61:09:78:fd:07:f8:45:31:d4:a4:57:09:
                    6c:38:62:29:03:c8:d0:21:b6:9d:9b:b8:24:83:7e:
                    dd:f6:f0:57:63:2b:64:44:0c:da:11:57:0b:7a:a8:
                    fd:fb:6e:7e:1e:37:80:11:70:03:71:47:a9:d7:9e:
                    4b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9A:28:1B:27:6E:C4:29:B1:A1:0F:87:CC:36:EA:C7:C1:38:74:87
            X509v3 Authority Key Identifier:
                keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:0e:d9:ce:23:2b:56:76:d1:47:e9:79:f9:51:d7:21:e6:40:
         a8:fb:e0:e2:f7:77:6f:5f:49:55:fe:79:7a:b0:39:05:73:09:
         62:4e:7e:db:78:e8:27:ce:d5:5e:73:0f:ad:32:f8:9d:3f:f2:
         53:40:cd:c9:5a:64:ca:64:0a:54:a7:a7:d5:3a:e1:9e:1f:f3:
         55:b8:42:22:07:9a:b2:e8:5d:8a:c9:c9:fb:f3:22:d8:32:06:
         db:3f:e7:19:09:58:eb:51:ce:95:78:62:6c:a2:12:14:90:d6:
         81:69:da:72:12:6a:ad:88:db:b3:97:62:ac:8f:6d:bc:0d:8c:
         fb:81:77:a2:39:55:6c:cc:ff:85:cb:03:33:a4:d0:98:57:36:
         d2:e0:03:45:c3:ce:45:da:0f:5f:65:3f:bb:79:01:53:b6:21:
         46:6e:88:92:a0:70:5d:1b:a7:2f:c2:17:68:cc:a0:bd:8e:54:
         92:b8:b1:5a:2e:2d:e7:fc:c4:45:67:33:2f:5c:c8:9a:62:7e:
         59:ed:70:e6:77:7a:28:9e:22:85:13:51:a0:9c:f7:e4:5a:c8:
         2a:b9:39:58:b3:20:6c:de:2f:45:b6:31:b8:62:c5:23:43:58:
         ac:ee:0c:3e:44:6c:ab:88:d5:ea:90:04:fc:33:c2:07:62:41:
         51:d2:0c:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29cbufg+mdFNErntd2C7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZmFjZjVkMDI3MzAyNjhkM2IxZTc2Yzk2YjBmODU4OGQ5
OThiNGYwHhcNMjYwMTI1MjEwMTAwWhcNMjYwMTI2MjEwMTAwWjAzMTEwLwYDVQQD
Eyg5MzlhMjgxYjI3NmVjNDI5YjFhMTBmODdjYzM2ZWFjN2MxMzg3NDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4x3Ep9suspbG4RIzzvXD/skyoSbG
Np36Onf3lbOiizLRyeR/PZUmIOK2hq0dEOTysILODv9yQF76r8TmEQROiTInoVJl
RlwNT73Yrw7txBvHUm02KRmLeonOyjDKl5Yr1o1EMUCy1Ydkk+635+k6QplCiHDA
ezoW2YwyvPTMwzu6EcWIZ2QL5m4c/t1eFBCecykbpvPtsSg0lvkwjNCptla9JMaU
6TmfE3ugy0VuALsQXmT0P6c5eN2KFSnw3clUwdxK8YlhCXj9B/hFMdSkVwlsOGIp
A8jQIbadm7gkg37d9vBXYytkRAzaEVcLeqj9+25+HjeAEXADcUep155L6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOaKBsnbsQpsaEPh8w26sfBOHSHMB8GA1UdIwQY
MBaAFDL6z10CcwJo07HnbJaw+FiNmYtPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAt
OWU0ZTQ2ZjYwYTY4LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9hNGNiOTUtOTEyNy00ODY5LThmOTAtOWU0ZTQ2ZjYwYTY4
LzEvTXZyUFhRSnpBbWpUc2Vkc2xyRDRXSTJaaTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZw7ZziMr
VnbRR+l5+VHXIeZAqPvg4vd3b19JVf55erA5BXMJYk5+23joJ87VXnMPrTL4nT/y
U0DNyVpkymQKVKen1Trhnh/zVbhCIgeasuhdisnJ+/Mi2DIG2z/nGQlY61HOlXhi
bKISFJDWgWnachJqrYjbs5dirI9tvA2M+4F3ojlVbMz/hcsDM6TQmFc20uADRcPO
RdoPX2U/u3kBU7YhRm6IkqBwXRunL8IXaMygvY5UkrixWi4t5/zERWczL1zImmJ+
We1w5nd6KJ4ihRNRoJz35FrIKrk5WLMgbN4vRbYxuGLFI0NYrO4MPkRsq4jV6pAE
/DPCB2JBUdIMqg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 07:11:37 2026 by rpki-client