This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
File:                     1-V9aNXOMMini9DlFAMMiyCdal6I.mft (raw, json)
Hash identifier:          7PeAV5SsAvInIYQopGjNVOKIqgdk8aO8kEj1n3rcyik=
Subject key identifier:   AF:63:A7:97:F9:BE:41:6A:CF:B7:45:1D:02:A9:0C:F1:3A:80:A9:0B
Authority key identifier: F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2
Certificate issuer:       /CN=f95f5a35738c3229e2f4394500c322c8275a97a2
Certificate serial:       019BFA9B764648348963135FABD87CE16A1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
Manifest number:          1520
Signing time:             Mon 26 Jan 2026 14:00:50 +0000
Manifest this update:     Mon 26 Jan 2026 14:00:50 +0000
Manifest next update:     Tue 27 Jan 2026 14:00:50 +0000
Files and hashes:         1: 1-V9aNXOMMini9DlFAMMiyCdal6I.crl (hash: kxO45HBcwTO1UTJCKVdi9CfBy9mTgFLL77ga5XTvEYg=)
                          2: 1vQkcMHCkliQRKl9aZ_MI-G0oZg.roa (hash: jJ0Z9gvnHkxzvx7TbvN1q4EtCEWPz3vfe0uvFzwej1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 14:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fa:9b:76:46:48:34:89:63:13:5f:ab:d8:7c:e1:6a:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95f5a35738c3229e2f4394500c322c8275a97a2
        Validity
            Not Before: Jan 26 14:00:50 2026 GMT
            Not After : Jan 27 14:00:50 2026 GMT
        Subject: CN=af63a797f9be416acfb7451d02a90cf13a80a90b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:27:cb:02:84:a5:69:11:6f:f6:cc:b9:d2:5b:
                    9b:67:0a:a0:65:16:e6:99:6f:4a:2c:67:bc:25:10:
                    94:cc:22:c9:c0:8b:7a:4c:31:b3:22:2f:e4:5f:a0:
                    35:52:72:ea:06:8a:27:f3:e5:79:32:d1:06:8f:ba:
                    fa:5f:ba:cd:47:7c:3f:fa:b7:11:72:17:47:86:82:
                    0e:eb:72:27:53:6a:cf:a1:a6:5f:56:cc:a1:30:bd:
                    ae:83:84:56:3b:d0:fd:35:0e:b5:06:cc:7e:47:b7:
                    44:1f:e2:a7:e0:f9:97:56:da:9a:d5:4c:3e:74:fb:
                    1d:21:38:08:62:9b:39:9e:2e:40:93:aa:fc:54:3e:
                    b5:7e:be:f9:f3:d7:fc:e8:98:32:af:a1:23:4f:7f:
                    28:1d:a0:14:aa:c6:0e:b8:a4:31:fe:bb:53:b1:b0:
                    7d:39:ce:58:30:23:fc:cd:ed:85:f7:0e:68:f0:12:
                    34:5c:5c:48:d9:be:78:b9:2a:c3:98:ee:6d:18:3a:
                    6f:d7:fa:7b:d4:63:62:65:e9:45:de:82:5e:fa:39:
                    5e:61:82:59:5b:d9:b8:4d:dd:bf:4a:33:c8:2d:66:
                    26:66:13:d5:ea:90:6c:45:08:95:ab:bb:6e:14:a6:
                    2f:65:01:61:ed:df:38:8a:eb:57:a1:5f:93:c4:3d:
                    14:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:63:A7:97:F9:BE:41:6A:CF:B7:45:1D:02:A9:0C:F1:3A:80:A9:0B
            X509v3 Authority Key Identifier:
                keyid:F9:5F:5A:35:73:8C:32:29:E2:F4:39:45:00:C3:22:C8:27:5A:97:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V9aNXOMMini9DlFAMMiyCdal6I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d49c21-dead-4dc4-9478-a10b7cc98bc8/1/1-V9aNXOMMini9DlFAMMiyCdal6I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b5:2a:88:ec:d7:f7:13:b8:6e:bc:8b:20:f4:d7:20:a0:2b:
         92:9e:3e:6f:9d:cc:f5:fc:8c:79:5a:ec:8c:14:16:24:58:55:
         f4:a0:7e:b7:d5:31:c2:14:78:ea:2e:f4:49:54:05:df:c6:9c:
         be:cb:62:b4:67:4e:b0:87:a6:ce:17:0c:3b:4a:53:72:65:7b:
         a2:3b:d9:3f:95:15:f1:ed:c5:58:6d:33:5d:ae:41:19:27:f5:
         58:1d:2d:be:3b:c9:29:3d:ab:5d:51:24:7a:34:2f:8b:7f:3e:
         b2:e0:e5:45:92:55:47:7b:7a:f2:e9:8b:41:e3:8f:e4:a7:1c:
         ee:5e:32:44:50:66:b2:c9:d3:5e:7a:7a:d7:9b:6f:3e:ce:f4:
         9e:09:de:bf:3e:aa:76:92:64:0f:83:64:83:79:ab:9c:8a:0a:
         6d:e6:36:c0:8e:13:6c:65:9e:6c:6d:14:51:2b:17:42:b0:d6:
         a4:12:c9:4a:12:ad:5f:d3:a4:32:36:0f:8c:f6:96:93:30:ca:
         8c:e5:2b:8e:5f:d4:0a:71:fd:0e:35:c9:1a:1f:bb:c9:ad:72:
         d5:1f:29:9c:c9:b0:37:5f:6e:54:bd:b0:ab:43:80:c3:b0:04:
         0a:00:6b:f1:10:f5:84:97:f2:08:bd:7c:44:6a:ef:5e:80:3a:
         ae:ff:87:02
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZv6m3ZGSDSJYxNfq9h84WofMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWY1YTM1NzM4YzMyMjllMmY0Mzk0NTAwYzMyMmM4Mjc1
YTk3YTIwHhcNMjYwMTI2MTQwMDUwWhcNMjYwMTI3MTQwMDUwWjAzMTEwLwYDVQQD
EyhhZjYzYTc5N2Y5YmU0MTZhY2ZiNzQ1MWQwMmE5MGNmMTNhODBhOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyfLAoSlaRFv9sy50lubZwqgZRbm
mW9KLGe8JRCUzCLJwIt6TDGzIi/kX6A1UnLqBoon8+V5MtEGj7r6X7rNR3w/+rcR
chdHhoIO63InU2rPoaZfVsyhML2ug4RWO9D9NQ61Bsx+R7dEH+Kn4PmXVtqa1Uw+
dPsdITgIYps5ni5Ak6r8VD61fr7589f86Jgyr6EjT38oHaAUqsYOuKQx/rtTsbB9
Oc5YMCP8ze2F9w5o8BI0XFxI2b54uSrDmO5tGDpv1/p71GNiZelF3oJe+jleYYJZ
W9m4Td2/SjPILWYmZhPV6pBsRQiVq7tuFKYvZQFh7d84iutXoV+TxD0UtQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFK9jp5f5vkFqz7dFHQKpDPE6gKkLMB8GA1UdIwQY
MBaAFPlfWjVzjDIp4vQ5RQDDIsgnWpeiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1WOWFOWE9NTWluaTlEbEZBTU1peUNkYWw2SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDEvZDQ5YzIxLWRlYWQtNGRjNC05NDc4
LWExMGI3Y2M5OGJjOC8xLzEtVjlhTlhPTU1pbmk5RGxGQU1NaXlDZGFsNkkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2QxL2Q0OWMyMS1kZWFkLTRkYzQtOTQ3OC1hMTBiN2NjOThi
YzgvMS8xLVY5YU5YT01NaW5pOURsRkFNTWl5Q2RhbDZJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrUq
iOzX9xO4bryLIPTXIKArkp4+b53M9fyMeVrsjBQWJFhV9KB+t9UxwhR46i70SVQF
38acvstitGdOsIemzhcMO0pTcmV7ojvZP5UV8e3FWG0zXa5BGSf1WB0tvjvJKT2r
XVEkejQvi38+suDlRZJVR3t68umLQeOP5Kcc7l4yRFBmssnTXnp615tvPs70ngne
vz6qdpJkD4Nkg3mrnIoKbeY2wI4TbGWebG0UUSsXQrDWpBLJShKtX9OkMjYPjPaW
kzDKjOUrjl/UCnH9DjXJGh+7ya1y1R8pnMmwN19uVL2wq0OAw7AECgBr8RD1hJfy
CL18RGrvXoA6rv+HAg==
-----END CERTIFICATE-----
Generated at Mon Jan 26 18:22:19 2026 by rpki-client