This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File:                     mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier:          aKMrVJnu0U8mqz1PHz3hsMM86RiVY2vAR22IZLijoF0=
Subject key identifier:   B7:73:E6:58:8B:D9:D1:BC:AE:F5:A4:F2:F5:28:D6:1E:B3:99:B6:53
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer:       /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial:       019BE6DE24FEB9EDC113279D9510558AAE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number:          1806
Signing time:             Thu 22 Jan 2026 18:01:16 +0000
Manifest this update:     Thu 22 Jan 2026 18:01:16 +0000
Manifest next update:     Fri 23 Jan 2026 18:01:16 +0000
Files and hashes:         1: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=)
                          2: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=)
                          3: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=)
                          4: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=)
                          5: aVt770ox2y_ajisGJcLBAp12qrQ.roa (hash: ppH4GSX2vtSOi+/C8jmwr3Y0jkIjeAyEHZJp5pXIbsA=)
                          6: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=)
                          7: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: 4QOlCX2U4ISJ3tGzhbD2PRi87jqRMNKKy7/C9Pe1GZ4=)
                          8: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=)
                          9: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=)
                          10: qtFUd8UrHAjg1CQzxCUVYh49r34.roa (hash: zeOnhH1WA+57cINQaOKMw3j5q8bJlC2Ele92zkBPv4I=)
                          11: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=)
                          12: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=)
                          13: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Jan 2026 18:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e6:de:24:fe:b9:ed:c1:13:27:9d:95:10:55:8a:ae:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
        Validity
            Not Before: Jan 22 18:01:16 2026 GMT
            Not After : Jan 23 18:01:16 2026 GMT
        Subject: CN=b773e6588bd9d1bcaef5a4f2f528d61eb399b653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:79:7a:6d:0c:92:12:bf:15:58:8d:cd:01:b2:
                    d8:2d:c5:81:d0:96:e5:d0:a9:1c:fd:e5:73:79:91:
                    c0:33:5d:42:61:ec:07:6d:0c:d5:66:a6:4b:49:da:
                    51:2d:d7:af:cd:29:f0:5a:30:4a:05:c9:5c:32:71:
                    13:37:cf:c1:f4:a8:72:54:e5:23:ac:09:25:8e:34:
                    ce:ac:8b:db:44:7a:13:cd:4d:aa:17:ea:75:ae:0c:
                    f3:dc:cd:37:43:d1:b7:4d:31:18:24:ce:10:eb:3d:
                    0a:e1:bd:1b:48:f7:94:7d:87:6a:7b:ed:6a:01:b7:
                    b0:34:d0:b4:67:53:ed:e3:eb:ef:65:eb:8d:84:b3:
                    32:75:11:2e:a0:4a:1c:24:97:cb:30:6b:e4:c3:78:
                    43:2c:23:f6:e6:2b:f2:1a:cf:a9:81:a8:52:e6:c8:
                    8a:d0:d4:3b:ad:d4:c5:bc:19:5c:87:9b:15:3c:78:
                    3b:93:c0:67:e1:70:2a:5e:5b:be:c3:77:a8:97:9a:
                    57:8a:3d:90:8d:2e:8c:0d:d1:ff:74:9b:7e:c6:c0:
                    ba:e8:83:ca:1f:b6:55:9e:60:63:94:8a:fc:fa:ed:
                    00:00:11:93:ad:a8:d7:64:1b:2d:92:14:fd:49:c0:
                    a0:e8:0c:71:70:a5:d0:f2:5a:63:a2:31:7d:2b:b5:
                    30:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:73:E6:58:8B:D9:D1:BC:AE:F5:A4:F2:F5:28:D6:1E:B3:99:B6:53
            X509v3 Authority Key Identifier:
                keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:70:64:dd:e9:6e:16:36:63:6c:17:5b:78:6d:3d:25:b8:0c:
         97:60:9b:1c:80:84:b1:4c:e6:42:f5:78:34:7b:49:91:77:1a:
         b8:10:f1:e2:d5:7d:d2:74:0e:a6:46:0b:76:4b:c2:f0:8d:a8:
         96:a0:de:c6:8c:db:ca:92:36:d9:e4:9d:5b:84:26:a8:c3:30:
         75:91:91:c1:53:c6:d3:f9:9a:ed:c2:7f:56:c1:f3:06:90:9e:
         c4:3d:fb:39:9c:3a:36:f0:dd:91:b7:58:a2:25:f1:a0:31:00:
         db:f9:11:3e:5a:aa:34:2d:dd:ff:13:3b:98:5e:07:e8:9f:da:
         37:8b:15:3b:ff:91:d3:09:dc:63:5f:4d:f7:3d:f1:76:b7:12:
         06:8a:f3:36:67:55:ea:ed:2b:ce:1a:ff:59:78:ec:3f:e8:7f:
         78:05:a7:ce:56:c7:c7:9d:65:de:53:4d:c7:bd:15:cf:a5:7e:
         41:bf:34:9c:07:e7:cf:61:2f:d4:97:11:5e:ad:e2:2a:2c:68:
         0d:03:79:08:5e:41:2d:22:e0:41:7a:99:b8:9e:5c:fd:0e:70:
         06:00:75:21:8a:55:b9:24:41:4e:65:96:c2:95:b7:6a:dc:ef:
         99:42:d0:8c:30:5e:52:98:08:e6:9c:ad:46:72:96:c7:87:36:
         fa:12:0c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 03:32:26 2026 by rpki-client