This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
File:                     mUt9MMHE9iQxgtPs09BTn0L6rP0.mft (raw, json)
Hash identifier:          o+Xke7h+H3aDZlXCbOtKzQ7ELhCB/lI1Og0x5nCrlwU=
Subject key identifier:   78:85:A1:F7:2C:78:DA:99:3D:EF:F2:10:D0:8C:D2:BA:AC:C5:4B:35
Authority key identifier: 99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD
Certificate issuer:       /CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
Certificate serial:       019BF72CE4651231E3EE778316497F444523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
Manifest number:          17EB
Signing time:             Sun 25 Jan 2026 22:01:12 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:12 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:12 +0000
Files and hashes:         1: CALu0k-yKUvKsJUlxYFOoPV6EQE.roa (hash: s+hlryHFuUczKXFccHxAAEsjQzWGHbx1kgIYXL7zsPA=)
                          2: PXebpK4YLmT8v8e6p-on58fn1uc.roa (hash: pxvReLXuX/gX7pvxMUNrcI2WmPqX2d7accaylNqGte4=)
                          3: mUt9MMHE9iQxgtPs09BTn0L6rP0.crl (hash: w+CCHCOoB1MyxkxP1VvLjDxBnNhI4+96VHyUY89vRpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2c:e4:65:12:31:e3:ee:77:83:16:49:7f:44:45:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994b7d30c1c4f6243182d3ecd3d0539f42faacfd
        Validity
            Not Before: Jan 25 22:01:12 2026 GMT
            Not After : Jan 26 22:01:12 2026 GMT
        Subject: CN=7885a1f72c78da993deff210d08cd2baacc54b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:33:b2:70:50:21:2c:03:7c:df:34:e7:25:d3:
                    e1:4d:70:f6:9f:10:71:df:b3:27:3f:cb:9f:f9:04:
                    4e:28:7e:80:ab:ba:d1:2f:a3:3a:a8:39:a4:49:aa:
                    f1:57:df:14:bf:2d:82:fd:5b:19:ef:5a:a9:21:0a:
                    77:27:98:5c:81:6a:6e:80:87:1a:fa:c1:74:71:a2:
                    54:68:e5:fc:0a:34:91:94:be:bb:1c:69:c8:98:69:
                    31:0d:41:a6:02:bc:23:1b:cb:8b:c7:2c:24:70:9d:
                    f5:26:d0:f3:d2:a0:c0:e1:d6:0e:c8:e4:97:2d:cf:
                    92:04:cb:1c:5a:a0:2c:91:ab:68:51:89:ad:9e:82:
                    a5:9d:60:67:e6:74:f3:2a:57:1c:da:34:a1:b0:40:
                    f0:fb:65:17:a9:5c:6c:7c:4e:a7:9c:0a:44:81:26:
                    49:2b:38:85:8e:e1:24:85:ab:ab:5c:61:d3:d4:f5:
                    99:7a:56:d0:e2:05:90:db:9e:32:50:3b:88:4e:ca:
                    ab:c6:50:4a:cb:50:85:19:df:0f:bd:b9:b2:ba:a9:
                    e6:15:b4:1e:aa:6d:61:eb:a8:e4:b8:94:f4:02:4c:
                    12:04:e6:77:a5:31:f4:be:40:57:7c:11:2b:a1:17:
                    c1:39:db:46:5e:65:87:c6:fc:28:06:02:1f:f1:e8:
                    01:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:85:A1:F7:2C:78:DA:99:3D:EF:F2:10:D0:8C:D2:BA:AC:C5:4B:35
            X509v3 Authority Key Identifier:
                keyid:99:4B:7D:30:C1:C4:F6:24:31:82:D3:EC:D3:D0:53:9F:42:FA:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUt9MMHE9iQxgtPs09BTn0L6rP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4ab81e-45b8-41a5-aa5e-5646eedd99bf/1/mUt9MMHE9iQxgtPs09BTn0L6rP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:23:bd:2c:f2:ce:59:af:e5:16:20:c1:41:64:73:7a:3c:85:
         3c:a0:0e:92:90:61:f4:fb:cf:bf:12:4c:d4:cd:83:ba:cd:3b:
         4d:b1:72:fa:aa:48:d0:62:56:41:e0:47:0d:04:38:fb:bc:19:
         37:c1:81:18:3f:63:a4:04:18:a3:ec:bd:83:23:43:28:be:64:
         84:46:3e:06:df:30:72:6d:71:77:5a:d6:58:a8:f5:85:1d:e4:
         c0:ea:0b:24:b7:0f:9a:e9:49:b6:05:88:c3:c0:6d:ef:71:91:
         d7:59:4d:4a:74:27:d2:4b:df:17:43:8d:17:b8:02:61:da:45:
         aa:c7:7e:7c:10:a1:2a:24:59:43:4d:ff:d6:a8:73:0e:47:d3:
         6e:7c:99:27:b6:9e:70:af:43:e5:41:f1:0f:73:fd:5c:22:20:
         2c:11:89:5e:68:fa:dd:8f:93:29:ff:bc:c1:d4:5d:98:cf:f1:
         2d:cb:93:4e:cf:0a:5d:da:a5:2c:49:48:6d:c0:9d:97:ee:41:
         e2:06:f2:54:da:05:fb:32:e7:7c:07:45:f9:8a:44:93:24:e8:
         19:d9:e9:9a:76:e4:37:eb:0f:6c:8b:bd:7c:82:4c:59:51:8c:
         6c:c5:55:a0:c8:2f:dd:3b:5d:92:ef:b8:d6:5c:64:5e:3c:79:
         39:03:00:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:32:59 2026 by rpki-client