This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
File:                     M7GzE5YIPOntUeRiiY4pTtghWuc.mft (raw, json)
Hash identifier:          QsRSj60gVMd30OmjZ00UU5MtxHrqTf08FRk7my6YzE8=
Subject key identifier:   62:A0:D1:5A:5A:2D:50:2C:AC:CD:90:A0:8D:50:24:42:83:54:97:B4
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Certificate issuer:       /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial:       019BF61A128CBE0149F97331FD9384EDE2C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
Manifest number:          0A89
Signing time:             Sun 25 Jan 2026 17:01:02 +0000
Manifest this update:     Sun 25 Jan 2026 17:01:02 +0000
Manifest next update:     Mon 26 Jan 2026 17:01:02 +0000
Files and hashes:         1: 0xMoRPRDdKFYKM7B_N2XLa1Yfwo.roa (hash: TqTXU3diOgpMdV98WOku7S+m8JTsBssMyjNvntJvm+Q=)
                          2: M7GzE5YIPOntUeRiiY4pTtghWuc.crl (hash: 1wHbfWDt84MqrR+OLDs78xCFcBsfz8r0xwxo6QS6sM8=)
                          3: Qqy0-T0gDvxo3rJUa6akV8GYo0o.roa (hash: PE6/9z52FUfBIjZcWDEufdAntL9baKWuH5TFStusU9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:1a:12:8c:be:01:49:f9:73:31:fd:93:84:ed:e2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
        Validity
            Not Before: Jan 25 17:01:02 2026 GMT
            Not After : Jan 26 17:01:02 2026 GMT
        Subject: CN=62a0d15a5a2d502caccd90a08d502442835497b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:d5:cf:90:3c:82:49:5a:4f:80:19:0c:6f:63:
                    09:1a:bf:b7:0e:9d:cf:d5:50:5f:74:ba:70:35:dc:
                    a1:ba:22:3e:2c:d7:03:7b:3b:67:74:ca:8f:5f:43:
                    bc:4e:8f:9f:c3:57:96:04:52:5b:49:a5:e7:59:ca:
                    89:28:7d:e9:fe:3e:d6:69:b5:48:db:63:f0:d4:a0:
                    19:f5:0a:b3:54:b1:f5:5e:6a:11:80:98:8c:89:8d:
                    29:05:86:6e:aa:d3:ab:78:6f:a9:d6:2b:a7:cd:eb:
                    2a:29:fd:24:8c:7a:83:25:fe:2c:27:1e:61:56:f6:
                    19:5d:87:81:1e:64:4f:f2:b6:17:02:5c:c5:dc:b9:
                    2e:f0:60:a1:82:04:04:fc:28:10:93:91:59:46:eb:
                    45:0b:99:f7:3c:9a:e1:48:02:0d:ec:9f:48:7b:2f:
                    41:02:09:1c:ca:6f:a6:cc:d0:f5:e8:05:4b:28:da:
                    a1:e2:41:ef:28:8a:f9:2c:e4:63:fd:d1:d0:50:c1:
                    0f:d9:4c:c5:9c:d1:11:8b:c9:68:fc:8e:af:d1:17:
                    cd:06:3d:cb:f0:5b:6d:ab:ac:8e:b4:51:5e:33:c8:
                    d0:4a:90:d6:5d:b6:1e:72:2a:f5:1c:60:04:91:73:
                    c6:31:62:5d:f4:d1:67:88:3c:42:2a:4b:8a:16:d9:
                    2c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A0:D1:5A:5A:2D:50:2C:AC:CD:90:A0:8D:50:24:42:83:54:97:B4
            X509v3 Authority Key Identifier:
                keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:07:ed:cb:f0:66:4e:93:67:53:e0:51:93:5f:e7:91:36:4f:
         30:42:6b:be:6e:2d:8e:e3:f3:91:10:7a:c3:6c:ae:61:c1:ed:
         b0:0c:c2:0c:d6:92:40:ee:82:c1:83:17:07:82:2f:31:f9:a0:
         19:59:9b:aa:c0:7b:03:15:72:6f:b1:c9:ee:8d:b0:91:1c:39:
         fb:5a:70:48:37:ea:e0:a0:9a:e1:10:c2:a0:b7:e0:43:30:a3:
         9f:09:f1:38:00:77:7f:68:37:9d:f0:fe:5c:46:b6:f6:56:27:
         9c:cc:96:ef:e5:86:05:3a:ac:93:0b:ad:ea:6d:e0:6a:f6:62:
         09:a8:80:60:6b:40:48:e0:55:26:57:b6:c4:d0:09:96:32:cb:
         e8:c0:e5:5d:85:7e:5e:7e:4f:81:9c:39:e9:00:92:c0:ef:b2:
         4e:87:b9:4f:88:4c:38:98:80:66:df:f2:76:a3:ea:5e:80:88:
         b6:c8:5c:66:be:c3:b1:97:b4:0d:67:30:df:2d:71:35:f4:bc:
         38:e9:17:a4:d6:94:7f:6e:b1:38:4a:7f:0d:94:3d:86:91:6b:
         f8:30:11:1b:a4:12:42:ea:46:33:5d:d2:cc:6e:ee:a1:4c:5c:
         b3:07:c7:7e:61:83:ab:5e:01:f8:16:71:ac:09:8b:15:b9:8a:
         47:f7:35:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:32:00 2026 by rpki-client