This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
File:                     mnj9TUGkk4S99ufcPrvFAL9m2dU.mft (raw, json)
Hash identifier:          aqjMKhx3PDCQZLnyMx8VFSm07UtwnmEdDExIEiY8GT4=
Subject key identifier:   13:03:24:27:9E:58:19:E7:D9:82:8A:C5:24:BB:B9:14:B1:ED:36:AF
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Certificate issuer:       /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial:       019BF1CF2C63809ED261084A99688F3396F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
Manifest number:          17E6
Signing time:             Sat 24 Jan 2026 21:00:44 +0000
Manifest this update:     Sat 24 Jan 2026 21:00:44 +0000
Manifest next update:     Sun 25 Jan 2026 21:00:44 +0000
Files and hashes:         1: fqe6NyqGeZLZDcQwpvqs6mMdDI0.roa (hash: 2W2OermTlAjnbB1evXIPuqiK3CU6ZGK4qE5cQcpe5Uk=)
                          2: mnj9TUGkk4S99ufcPrvFAL9m2dU.crl (hash: rRNYIY4x4DwwUzUa0owJM9rNXYFamYyI0Z59qHByZKw=)
                          3: x0UL_tHjtGxiEevSxlF8WJ92kng.roa (hash: d2i4QuG0v0Jk1Or2egUFmUz1aiUe0+YuRvWeIsg+YUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:cf:2c:63:80:9e:d2:61:08:4a:99:68:8f:33:96:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
        Validity
            Not Before: Jan 24 21:00:44 2026 GMT
            Not After : Jan 25 21:00:44 2026 GMT
        Subject: CN=130324279e5819e7d9828ac524bbb914b1ed36af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8e:ae:49:53:6c:2c:0c:3d:8c:58:81:31:35:
                    ef:c9:f9:e2:14:84:26:d6:de:03:fb:2e:94:92:96:
                    6f:e5:be:20:ea:90:33:bf:9e:87:28:ba:1c:4a:cc:
                    2d:5c:b7:7f:81:0c:3a:74:82:dc:87:d6:f5:84:f1:
                    e3:63:58:76:9f:0e:57:31:d2:40:d4:21:86:67:5d:
                    08:b7:a1:89:e7:8c:cc:cc:d9:b2:c0:5d:0f:58:4a:
                    36:8c:d3:21:c0:75:5e:c9:a2:e0:7e:7b:16:f5:47:
                    f8:bb:01:7f:37:fc:47:5e:19:e4:2d:6d:e9:58:e0:
                    f7:ed:cb:03:08:1e:d9:11:a5:f7:40:10:ef:2d:28:
                    bf:90:a8:a7:37:c1:d0:2b:de:cb:48:e2:90:60:d1:
                    41:ae:b1:1e:ea:3d:c9:93:96:3b:fb:ee:a6:b1:36:
                    4e:e5:b9:42:29:70:b5:e1:34:b5:d4:a5:36:08:03:
                    53:d6:08:92:00:e5:eb:7f:0c:4e:f0:fe:7c:ec:24:
                    70:24:4d:17:46:1d:98:7c:13:68:e1:cb:05:fb:47:
                    19:5c:17:43:a2:b7:1c:22:05:6f:0b:d6:a0:61:a6:
                    ca:c9:00:19:98:e1:d1:8e:2c:8a:e2:8c:fa:87:7a:
                    2e:ee:ea:19:1a:58:4d:f4:31:ed:a9:b0:3f:4d:eb:
                    24:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:03:24:27:9E:58:19:E7:D9:82:8A:C5:24:BB:B9:14:B1:ED:36:AF
            X509v3 Authority Key Identifier:
                keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:b9:31:16:bb:a4:92:17:c2:6c:2c:96:ab:8f:c8:85:07:
         f4:15:19:7c:50:3d:2a:f0:17:62:df:26:a8:d5:3d:42:f8:ad:
         a0:15:3e:fb:68:43:6f:f2:0e:75:04:89:e4:6e:aa:f9:16:29:
         8f:7d:8e:b2:c0:f3:8e:7d:fa:b4:4a:7d:5e:e9:7e:7c:d9:4d:
         a5:e8:e0:f5:ec:17:a7:12:5c:d1:47:ce:7e:6c:13:f0:e3:5e:
         2c:fb:e2:c8:01:0a:b5:60:e6:b2:3f:0a:1a:70:d7:b5:0e:6f:
         37:3f:40:d0:6b:bb:ad:54:f3:44:a4:b3:ec:38:23:cd:46:b7:
         94:29:50:19:d3:65:21:5a:18:a2:8a:c3:e7:ef:b1:56:62:52:
         ab:8c:15:39:f4:fe:ce:8c:64:f3:99:13:80:af:c7:d1:fd:f2:
         9b:30:97:c3:1c:a8:47:4c:ba:ce:92:27:9e:5f:aa:6c:d0:03:
         3c:19:b0:00:62:12:cc:cc:ca:9b:d6:93:f5:86:88:cb:6c:67:
         fb:ee:1c:40:6e:40:bd:15:6a:ef:77:45:15:88:36:d2:94:25:
         2a:a4:f4:92:40:63:b1:c7:1f:e7:6a:04:f3:cc:57:a0:ac:32:
         7e:3f:84:5a:7a:8c:d4:18:58:97:b2:12:e7:04:d5:ff:e6:ad:
         95:bd:8e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 06:03:56 2026 by rpki-client