This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
File:                     1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json)
Hash identifier:          bMd1mytbsOwV2DFY1zPw8YLPHUGG7iD0Q4WU5n3qjkc=
Subject key identifier:   0D:0D:F0:B9:69:CD:C1:46:D1:3D:55:B2:BC:71:DF:31:86:F5:4F:30
Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7
Certificate issuer:       /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
Certificate serial:       019BF5071AD2E88071359720DC03DFBAD6F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
Manifest number:          177D
Signing time:             Sun 25 Jan 2026 12:00:42 +0000
Manifest this update:     Sun 25 Jan 2026 12:00:42 +0000
Manifest next update:     Mon 26 Jan 2026 12:00:42 +0000
Files and hashes:         1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: irK2Ha483WLJaRs+Ue3ONUSIEHYIF4jR8yWej/3W5rk=)
                          2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:07:1a:d2:e8:80:71:35:97:20:dc:03:df:ba:d6:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7
        Validity
            Not Before: Jan 25 12:00:42 2026 GMT
            Not After : Jan 26 12:00:42 2026 GMT
        Subject: CN=0d0df0b969cdc146d13d55b2bc71df3186f54f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:47:87:75:be:1e:2e:3b:a0:5c:81:b9:88:f8:
                    49:7e:4f:34:28:4c:33:94:82:6d:c9:f9:de:1f:66:
                    c7:57:aa:4c:06:99:fb:1a:54:60:c9:9f:46:8d:40:
                    f0:2c:b9:5a:03:b3:b5:47:ea:82:49:93:ce:bd:96:
                    07:a0:61:95:d5:ef:b4:a0:32:2a:20:2f:48:11:2a:
                    54:0a:40:17:de:65:d5:be:03:a8:fe:3e:25:e1:7f:
                    38:e3:ae:a3:6a:87:f0:70:3a:56:83:59:cd:d1:80:
                    97:6a:4c:35:42:6d:5f:c2:de:ef:29:ee:d5:02:5f:
                    97:f3:05:28:94:41:b2:2f:0b:47:a0:0f:39:08:9d:
                    e8:2e:65:6e:d6:c1:0e:5f:e2:d4:e1:2f:84:01:59:
                    10:bb:43:6c:dc:29:08:f4:62:ac:fc:44:c0:56:e5:
                    ce:96:fe:8a:5d:8c:e1:9a:0d:a2:c4:25:f5:57:62:
                    f3:a8:ac:54:33:59:8f:18:e2:ff:a7:d2:68:8f:34:
                    41:07:a6:56:7c:2b:33:0c:e1:40:be:60:d5:6e:4a:
                    d2:3a:20:06:d6:e4:4f:9a:72:57:6b:1c:2a:b0:74:
                    98:39:6d:d8:8c:e1:ee:78:9f:a6:d3:66:e8:f7:1c:
                    85:c4:4a:49:73:b5:63:d5:c6:f5:58:e9:ab:33:e7:
                    9b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:0D:F0:B9:69:CD:C1:46:D1:3D:55:B2:BC:71:DF:31:86:F5:4F:30
            X509v3 Authority Key Identifier:
                keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b5:93:ec:64:c3:de:14:6a:69:7e:b1:76:b5:de:4a:99:41:
         90:e4:c7:52:70:09:77:a7:73:03:d7:da:e4:bf:81:3c:df:5e:
         3c:fa:d6:af:88:e5:5b:9b:26:11:92:8b:30:b2:62:98:59:24:
         27:cb:7d:14:20:94:a8:c3:98:9b:55:68:d9:31:8f:74:78:c2:
         91:91:81:b0:f7:1f:fa:2d:cd:75:2a:47:98:21:0a:ee:1f:9d:
         48:21:5e:3c:3f:92:b5:c8:cf:33:01:d4:f9:c6:2f:8d:4f:11:
         98:11:10:56:4f:30:be:e0:39:23:ad:20:81:c0:37:2f:86:e6:
         f4:f3:8f:d3:20:ce:c6:4e:43:15:97:c5:30:1f:36:7c:06:c3:
         c3:7b:eb:09:64:a0:8b:27:0c:74:85:d9:7f:18:f6:1a:7f:02:
         c5:af:b7:a8:8e:8b:65:3e:a8:e4:ef:54:47:e5:37:cc:6e:b2:
         52:b3:9e:2a:3a:7e:fe:f2:23:5e:6e:92:fa:81:f3:50:03:c3:
         5f:46:0d:b8:ef:b9:04:56:32:e2:c7:08:e2:30:07:dd:e5:c7:
         85:e4:82:7c:72:66:44:a9:0e:05:a0:65:af:2d:bd:6b:62:76:
         0d:e7:ac:55:ae:fd:09:65:04:64:1a:2c:5a:c3:1b:f9:8c:a0:
         3b:8c:a0:8a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZv1BxrS6IBxNZcg3APfutb1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw
ZWQ0YzcwHhcNMjYwMTI1MTIwMDQyWhcNMjYwMTI2MTIwMDQyWjAzMTEwLwYDVQQD
EygwZDBkZjBiOTY5Y2RjMTQ2ZDEzZDU1YjJiYzcxZGYzMTg2ZjU0ZjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUeHdb4eLjugXIG5iPhJfk80KEwz
lIJtyfneH2bHV6pMBpn7GlRgyZ9GjUDwLLlaA7O1R+qCSZPOvZYHoGGV1e+0oDIq
IC9IESpUCkAX3mXVvgOo/j4l4X84466jaofwcDpWg1nN0YCXakw1Qm1fwt7vKe7V
Al+X8wUolEGyLwtHoA85CJ3oLmVu1sEOX+LU4S+EAVkQu0Ns3CkI9GKs/ETAVuXO
lv6KXYzhmg2ixCX1V2LzqKxUM1mPGOL/p9JojzRBB6ZWfCszDOFAvmDVbkrSOiAG
1uRPmnJXaxwqsHSYOW3YjOHueJ+m02bo9xyFxEpJc7Vj1cb1WOmrM+ebmwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFA0N8LlpzcFG0T1Vsrxx3zGG9U8wMB8GA1UdIwQY
MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2
LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JjLzQ5YWQ5Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3
YzMvMS8xLW1NTVBTUEdCR3d2R240TWo4eTlnLUlPMU1jLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobWT
7GTD3hRqaX6xdrXeSplBkOTHUnAJd6dzA9fa5L+BPN9ePPrWr4jlW5smEZKLMLJi
mFkkJ8t9FCCUqMOYm1Vo2TGPdHjCkZGBsPcf+i3NdSpHmCEK7h+dSCFePD+StcjP
MwHU+cYvjU8RmBEQVk8wvuA5I60ggcA3L4bm9POP0yDOxk5DFZfFMB82fAbDw3vr
CWSgiycMdIXZfxj2Gn8Cxa+3qI6LZT6o5O9UR+U3zG6yUrOeKjp+/vIjXm6S+oHz
UAPDX0YNuO+5BFYy4scI4jAH3eXHheSCfHJmRKkOBaBlry29a2J2DeesVa79CWUE
ZBosWsMb+YygO4ygig==
-----END CERTIFICATE-----
Generated at Sun Jan 25 22:36:29 2026 by rpki-client