This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
File:                     MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft (raw, json)
Hash identifier:          tHwkNoEQvVpk1ywmka2hD8FRDiJ/lUQsNCz5zVzrp1M=
Subject key identifier:   65:DB:E3:97:C1:01:5B:0D:8D:1E:09:B0:E6:65:FB:4D:11:24:B1:AC
Authority key identifier: 30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4
Certificate issuer:       /CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
Certificate serial:       019BFEE65F4A1AA32253E85E99BCADD73FF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
Manifest number:          1661
Signing time:             Tue 27 Jan 2026 10:01:08 +0000
Manifest this update:     Tue 27 Jan 2026 10:01:08 +0000
Manifest next update:     Wed 28 Jan 2026 10:01:08 +0000
Files and hashes:         1: MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl (hash: 6e45RYJyKyAN4z57mj1CUIL//cHvSYd0eT1Dgl+864k=)
                          2: Yu04gumNqmxDDsAMYIJ-hffsWcY.roa (hash: 8vXideqaEPDtO6JjBhHN3fg9eNVSWDG1rxsZHPrJ598=)
                          3: xxNKD__MfC3tXrljCZUMrUeng0c.roa (hash: FfDe8iy9Ky+2+Rcak20KsuzuWHSUYNBDy8CSykrzm6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:e6:5f:4a:1a:a3:22:53:e8:5e:99:bc:ad:d7:3f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30683cffa061f28a9e1135c9fc30376a6474cbf4
        Validity
            Not Before: Jan 27 10:01:08 2026 GMT
            Not After : Jan 28 10:01:08 2026 GMT
        Subject: CN=65dbe397c1015b0d8d1e09b0e665fb4d1124b1ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:2e:2e:20:f8:85:55:57:82:3f:fc:9a:24:
                    45:81:16:05:38:d1:12:39:95:d5:fc:54:a1:bf:58:
                    b3:ef:7f:3a:80:d7:f9:09:32:24:33:b6:b1:a5:88:
                    20:a6:24:c2:ec:0a:51:23:45:9a:1e:3c:a5:57:58:
                    d1:f7:34:76:e8:8b:d5:68:bb:cb:01:3b:18:ea:37:
                    ca:76:a6:01:0d:04:b1:c5:8d:b6:eb:f9:c6:9e:5d:
                    de:2e:6a:9c:a2:ae:1c:39:a2:f0:1b:1f:c9:a7:85:
                    a9:53:8c:57:76:d9:c6:d4:64:f4:54:71:35:c7:00:
                    ce:91:87:44:9d:12:e7:cc:56:7c:67:32:1e:20:2f:
                    ed:98:ef:aa:1a:c4:76:14:9a:4b:82:41:9f:b9:88:
                    0d:6b:c1:4a:25:ba:62:12:d9:88:6d:9c:4e:82:d2:
                    79:09:30:c7:30:a9:5f:d1:c3:5e:25:b5:34:9b:f3:
                    2d:14:cd:80:7d:78:86:f3:31:8b:49:ac:cf:13:b7:
                    9c:1f:f3:d0:5d:11:35:d0:27:fa:ed:a4:23:75:6b:
                    8a:0d:f5:c9:1b:e9:7d:1a:26:93:1c:23:7b:5c:28:
                    3d:ca:83:26:62:b8:49:bc:08:a2:dd:a0:d0:a3:6a:
                    4e:23:1f:c4:43:01:a8:50:3f:11:fb:04:30:00:6d:
                    53:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DB:E3:97:C1:01:5B:0D:8D:1E:09:B0:E6:65:FB:4D:11:24:B1:AC
            X509v3 Authority Key Identifier:
                keyid:30:68:3C:FF:A0:61:F2:8A:9E:11:35:C9:FC:30:37:6A:64:74:CB:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/01f6ed-7b86-4f76-828f-4e19239f0c35/1/MGg8_6Bh8oqeETXJ_DA3amR0y_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:ed:0f:be:8e:2b:06:03:36:b4:47:a8:cf:1d:41:e9:b2:4b:
         63:8a:5f:af:1c:65:9f:fc:e0:57:69:84:2c:22:68:2c:5a:eb:
         1d:32:a6:e6:33:25:d0:28:9f:6e:7c:60:d1:88:4b:f7:4e:6e:
         c9:9a:fa:9d:a4:d6:87:6c:b4:a7:bb:fe:b3:5f:fa:a7:65:cf:
         fc:04:c4:46:06:65:50:78:5e:b4:53:e3:c2:38:f5:12:5f:15:
         93:29:33:d1:49:e0:b8:7e:20:ca:54:ea:c5:10:3e:43:fb:b3:
         d1:95:04:24:f0:2f:79:7d:a8:d0:8d:66:bf:a4:76:d1:51:02:
         40:21:ef:1f:f5:40:d4:2b:d5:0d:06:6c:1a:ba:d0:37:aa:a2:
         dd:99:17:91:8c:2c:41:56:73:24:74:fc:3d:b7:9b:b8:0b:90:
         14:23:6f:a4:6b:4d:6c:79:5d:be:66:1a:65:96:78:b9:a2:4c:
         7e:12:6d:ea:4b:96:62:af:e3:83:b1:9f:e2:ef:91:b9:b1:74:
         20:e6:34:56:01:df:b5:48:04:51:07:25:47:2c:e5:04:72:9e:
         08:7f:63:84:e3:ff:66:00:34:17:65:6f:1c:08:94:49:33:51:
         1c:cf:d2:5e:e3:67:e8:ad:5f:f8:c2:55:97:26:03:6a:76:aa:
         c5:cb:a0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 16:22:07 2026 by rpki-client