This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
File:                     m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft (raw, json)
Hash identifier:          +YcDnidTJf1oHAl8W/86G4kf2sEp07fYxy3Z4Ljtn/8=
Subject key identifier:   34:CE:A7:3A:D0:DF:F6:C6:17:E2:DB:10:E5:ED:B5:E6:42:87:8B:F5
Authority key identifier: 9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3
Certificate issuer:       /CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
Certificate serial:       019BF988F1F13C6C7C637115E94EBE1D8A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
Manifest number:          12FE
Signing time:             Mon 26 Jan 2026 09:01:00 +0000
Manifest this update:     Mon 26 Jan 2026 09:01:00 +0000
Manifest next update:     Tue 27 Jan 2026 09:01:00 +0000
Files and hashes:         1: 7jj42obFD8RD0DjQ1ozNQQKQyX4.roa (hash: nLM/rezqL1i4yqf0Rz+h3pdwMXHwlPmA9MtXcIXiwTY=)
                          2: CCQOO8anG7WZQ-CMnCxWzdFShTs.roa (hash: M83hlMTeAUf+xS69MU+OXr2z18iSzDUopMQnLTo5ras=)
                          3: gzPjxSV5NT3n9pyhl6YdC1VefSA.roa (hash: mmHPwTp+4ezqtnWysDoJTp93kBZueU6MUxs9A6m03vY=)
                          4: m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl (hash: 66H8P5e2GpQ6mHi3f5nIA1Alt0IvEda7Z1XEoYkQoM4=)
                          5: ngZw_Aqalo4a-WBAo61UeGloX7M.roa (hash: s2t7boy4rl1XclJAMGdyD80QMpg5tZS7P2s0Nr+Sbwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 09:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f9:88:f1:f1:3c:6c:7c:63:71:15:e9:4e:be:1d:8a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc6fd3f32ca4594c96075659a7089b27ae3fef3
        Validity
            Not Before: Jan 26 09:01:00 2026 GMT
            Not After : Jan 27 09:01:00 2026 GMT
        Subject: CN=34cea73ad0dff6c617e2db10e5edb5e642878bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:dd:76:67:b8:5b:f5:68:e5:61:f4:61:83:
                    c4:0e:09:9a:92:9e:ff:98:f5:68:33:0e:ca:51:c4:
                    5e:47:b2:ad:1b:98:c9:9f:f7:26:ef:38:fa:fd:88:
                    c0:4d:39:f6:e5:32:01:10:3e:cb:3a:04:53:cd:44:
                    e4:65:42:c6:fa:84:ed:09:28:08:5b:ab:c9:a5:f3:
                    57:ad:3c:9c:8e:3e:0b:b0:a5:f8:5d:7f:21:77:af:
                    2b:ef:e5:8c:18:18:c8:80:4a:e3:b4:0a:ef:fd:df:
                    77:30:b2:fc:5b:24:4c:4a:a7:64:3a:44:ac:b8:3a:
                    c2:30:78:e1:f1:b3:18:6b:08:3e:72:5f:97:03:af:
                    9d:ab:f5:01:0f:9c:97:84:6a:f3:b4:85:0a:68:0d:
                    ec:dd:95:93:d0:3c:24:9d:24:0f:f7:ae:e8:50:84:
                    82:68:b8:41:f6:e1:74:aa:37:44:a5:d5:81:b9:43:
                    86:71:32:09:54:d1:c0:3d:55:03:ef:f2:d3:b5:55:
                    0e:55:14:fd:2e:ca:e2:c7:18:95:4d:9b:eb:af:e4:
                    ec:5e:b5:a2:59:9e:d8:2d:0b:f5:61:e0:d7:bf:a7:
                    52:86:65:3e:36:8e:40:dc:3e:77:03:08:67:3b:72:
                    f5:77:d9:c4:38:f4:4e:23:9b:e3:ea:77:5e:ce:40:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CE:A7:3A:D0:DF:F6:C6:17:E2:DB:10:E5:ED:B5:E6:42:87:8B:F5
            X509v3 Authority Key Identifier:
                keyid:9B:C6:FD:3F:32:CA:45:94:C9:60:75:65:9A:70:89:B2:7A:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8b9PzLKRZTJYHVlmnCJsnrj_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/da2447-b252-4b6a-a82f-dcbe53da7860/1/m8b9PzLKRZTJYHVlmnCJsnrj_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:f0:50:4f:59:9a:cb:a4:71:1e:a8:2d:26:fd:5f:ed:71:04:
         0b:9b:55:b7:31:ba:98:e6:e5:f6:09:64:06:82:80:21:87:64:
         6d:a2:07:0c:45:ac:c6:39:45:53:a4:d9:30:fe:a5:b0:35:3c:
         f1:9b:31:d1:64:b9:d5:87:0a:3c:3a:26:f5:a1:7b:c2:01:3e:
         67:1b:ee:d8:2b:5e:14:0c:18:0a:3d:e2:e6:25:38:75:d4:ab:
         33:d0:5a:bf:4c:60:d6:95:64:c2:d6:c0:0a:30:3b:55:18:77:
         43:b1:b3:12:c4:8d:50:9d:db:f3:78:4f:ef:eb:46:32:6b:30:
         ce:f6:b0:98:79:3a:87:c7:43:63:7d:2f:d3:e3:de:ef:f7:f9:
         94:d1:26:cb:f2:1a:20:2e:06:c2:1a:54:5d:31:2b:76:96:e3:
         6e:f7:27:f3:be:88:7f:33:f2:68:5a:09:5f:a1:8d:d9:87:d6:
         08:bd:33:65:18:c5:43:21:a1:d8:fc:1c:07:eb:84:42:33:31:
         0d:f3:6e:97:93:57:f4:36:9e:91:31:c0:8e:f5:65:01:b4:a3:
         34:f0:ae:90:b0:07:c7:0b:1c:dc:45:6e:4e:86:35:a5:6a:bd:
         15:2a:45:f5:88:4b:5f:1f:d2:a4:60:2f:36:2d:b4:56:c7:21:
         eb:c5:d6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 17:01:37 2026 by rpki-client