This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File:                     mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier:          F4vP1D2UKM9cRw6BdIWjv2kPjoiY8H0A6Fj7y+CeaWM=
Subject key identifier:   6D:93:39:F7:64:EC:11:C0:8E:5E:6F:DB:FF:1C:BE:3C:71:F3:46:B4
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer:       /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial:       019BA6ECEFB60888B9BF14C3AF91194E8DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number:          08B7
Signing time:             Sat 10 Jan 2026 08:01:44 +0000
Manifest this update:     Sat 10 Jan 2026 08:01:44 +0000
Manifest next update:     Sun 11 Jan 2026 08:01:44 +0000
Files and hashes:         1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
                          2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
                          3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
                          4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: TkezAQ7eavPWxCj8FmDY8sOZXB+zRbmJ7j4ceLNzqnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Jan 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a6:ec:ef:b6:08:88:b9:bf:14:c3:af:91:19:4e:8d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
        Validity
            Not Before: Jan 10 08:01:44 2026 GMT
            Not After : Jan 11 08:01:44 2026 GMT
        Subject: CN=6d9339f764ec11c08e5e6fdbff1cbe3c71f346b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:df:cc:fc:9b:8c:fa:66:bf:f1:59:ab:52:e6:
                    d2:bc:4b:5b:38:63:e5:ee:a3:1f:65:41:a0:46:de:
                    81:c4:33:6b:8c:8a:c4:ba:80:bb:e4:61:bd:b0:55:
                    2f:ef:3d:4c:33:cd:65:a6:b9:d5:28:92:eb:c1:31:
                    49:ec:99:b0:9a:e6:e0:35:9d:05:12:d0:b7:f0:80:
                    b8:a3:a0:2f:50:c1:82:2c:89:c2:f8:0c:06:64:a6:
                    a3:50:8b:35:d7:0c:1e:66:55:61:06:fb:0a:c4:c0:
                    af:49:44:e8:75:32:b6:a5:96:c6:77:f5:60:85:90:
                    67:85:45:93:cc:9f:a2:f4:c5:2f:bf:1f:b1:90:ce:
                    a6:43:ef:03:96:6f:9f:c7:58:47:d9:04:ec:9b:fb:
                    9a:34:e9:30:ad:b5:28:dc:9d:58:c8:91:38:36:e9:
                    02:82:20:fa:aa:af:22:8f:2b:55:7c:dc:d7:c2:26:
                    90:7f:03:ce:7f:11:d7:ed:4b:01:2f:11:b0:01:41:
                    eb:c0:5e:4d:78:f9:cb:9e:68:0c:59:85:45:48:c3:
                    e6:f1:e5:36:6f:2e:ff:88:a1:de:5a:c5:c3:44:80:
                    33:17:60:a7:2c:80:b1:84:36:1a:83:b9:e0:b0:fe:
                    a5:79:6a:6c:79:d4:ea:9a:c2:8e:17:71:00:bc:c2:
                    95:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:93:39:F7:64:EC:11:C0:8E:5E:6F:DB:FF:1C:BE:3C:71:F3:46:B4
            X509v3 Authority Key Identifier:
                keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9e:b0:50:e2:83:a7:65:80:b8:c4:8f:c4:3c:1f:ee:51:e1:
         70:8e:54:76:69:ca:24:73:90:ca:21:d8:0b:bb:1a:77:03:b6:
         97:e6:8c:e8:c6:a9:74:d0:0a:54:d4:f3:7c:c4:fc:f1:d3:60:
         fa:1c:54:79:83:e1:68:d0:a3:33:f8:95:56:bb:5a:81:dd:0c:
         11:59:84:5f:d1:44:ab:cc:a0:f4:c0:7d:88:26:d4:29:77:6d:
         4e:59:92:5b:e4:ef:42:3a:2a:2f:f7:82:fe:92:84:48:89:e1:
         51:69:58:d7:51:35:2b:73:06:97:05:a2:a3:12:0c:44:13:94:
         40:56:9c:92:7b:49:84:9e:d3:6d:ae:f5:4f:52:d6:a5:54:fb:
         47:fa:76:b0:bc:4b:e7:40:91:ab:38:28:f0:24:46:d7:e9:c6:
         07:ea:f4:44:1e:9a:24:69:fa:04:c1:23:26:82:d7:1d:6c:ce:
         c0:88:f6:af:1b:66:e5:7d:cb:01:69:fa:9b:70:3a:5b:e7:c2:
         5a:fc:fe:4e:f9:c8:b4:0d:fb:48:1b:4a:24:15:5f:60:11:ed:
         42:8f:b0:95:5d:aa:ff:db:d4:ea:f3:85:18:93:e1:b2:40:1a:
         aa:ee:11:8c:07:59:14:2a:90:99:a7:84:d4:00:c2:9a:a7:21:
         44:8b:26:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 16:28:37 2026 by rpki-client