This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
File:                     Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft (raw, json)
Hash identifier:          mNDUtO6eOJoq2lb13ewfyUjjczfATdUWfMSt40kQhNQ=
Subject key identifier:   4D:0A:D7:CF:9C:57:03:D8:F4:C2:1C:68:54:23:70:35:B3:A7:6F:B8
Authority key identifier: 49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12
Certificate issuer:       /CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
Certificate serial:       019BFC8A874FB58ED9FA333DB11C5CC5EC1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
Manifest number:          175B
Signing time:             Mon 26 Jan 2026 23:01:35 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:35 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:35 +0000
Files and hashes:         1: 4MLoPrvWwEvlvkXdgMCtTF8VC3E.roa (hash: s0ibJrg3ZFVdVfAiEwCQ+OIFm/y57l65fC2BAHH9VCc=)
                          2: Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl (hash: 0oGcf45DOMyCHz2tWVpwPZrbNq13dwY0kE5SMdLorr0=)
                          3: TlmEOt0-y-w49AgNxJOZ0wNCvZ8.roa (hash: 9QB2O9CF6AxN2XHx+5Fgp4F7JBjPl+H/+qk8ZUWd/Og=)
                          4: gJauMi46QPPzyKWqDiA5ddI3Cho.roa (hash: 8cj4UlqGZgB6E6848rUjL+1fRW7cZLYn+yIARbioPjA=)
                          5: hs-AzdnIKl__cAx33Gis1dnFwQw.roa (hash: HkOzeRN5x0MI5F+tRIRhpZumHAlvuvmNzxwstCGaN70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:87:4f:b5:8e:d9:fa:33:3d:b1:1c:5c:c5:ec:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49ee1194bd81d1946c39f10f7fdfdf22d1a03112
        Validity
            Not Before: Jan 26 23:01:35 2026 GMT
            Not After : Jan 27 23:01:35 2026 GMT
        Subject: CN=4d0ad7cf9c5703d8f4c21c6854237035b3a76fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:80:7d:5a:8b:8c:d4:f1:3d:41:13:82:57:
                    d4:9c:75:d4:51:54:65:fc:b2:e7:57:c7:7c:05:bd:
                    f7:88:9e:16:12:b9:ab:4e:27:18:0e:d1:d1:e4:4f:
                    e2:b8:47:0d:a8:e4:63:fb:28:39:61:81:e1:2b:97:
                    9d:77:31:cd:19:1b:5c:6d:c4:dd:1c:e2:75:5c:3c:
                    7b:f9:01:e1:bf:36:be:d2:8d:da:83:e5:d0:e7:cf:
                    1b:df:30:1d:ba:21:28:86:43:98:f1:e3:c1:98:4f:
                    8b:8d:5c:7d:46:29:82:29:aa:04:db:a4:bb:2b:db:
                    7d:9e:6a:31:8d:03:53:cb:c9:57:08:37:9e:e2:54:
                    d7:5d:c3:5e:59:eb:e2:59:1a:d4:28:98:89:0c:c0:
                    aa:65:20:a1:29:bd:76:4b:85:ce:d4:ff:fb:a1:35:
                    45:9c:b2:1e:9e:aa:90:9b:06:9b:92:41:0d:db:24:
                    99:9d:31:8a:9f:c9:11:c2:3f:98:00:ed:86:9d:2d:
                    cb:32:9a:49:da:95:13:63:fa:85:f4:6a:32:f8:2e:
                    6e:71:f0:9f:da:f3:e6:59:a0:8d:0a:06:98:a8:0b:
                    8b:1d:56:89:27:c4:02:9c:be:4b:de:ba:0a:12:e4:
                    05:52:e3:b9:48:75:9b:ca:14:74:fc:e3:c2:44:35:
                    84:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:0A:D7:CF:9C:57:03:D8:F4:C2:1C:68:54:23:70:35:B3:A7:6F:B8
            X509v3 Authority Key Identifier:
                keyid:49:EE:11:94:BD:81:D1:94:6C:39:F1:0F:7F:DF:DF:22:D1:A0:31:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Se4RlL2B0ZRsOfEPf9_fItGgMRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a324f4-9770-4a58-a6ef-d62fa6319fd4/1/Se4RlL2B0ZRsOfEPf9_fItGgMRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:ac:28:f2:01:08:41:39:9c:7e:16:e9:42:06:82:c7:fd:14:
         c5:42:bd:9c:03:46:2f:2c:af:b8:8d:2f:e0:70:56:d7:15:c5:
         e0:39:02:58:83:dd:f4:2d:45:f3:ed:25:b0:c7:74:74:22:64:
         91:3a:44:f8:0d:2b:d4:c7:12:9f:9f:19:f7:3a:e2:b1:32:d4:
         30:c7:b9:ae:77:83:b5:dd:88:8c:27:a5:53:e5:a2:58:cb:65:
         4a:3a:82:23:d2:d5:d2:c8:75:67:8e:46:d5:9d:ca:2a:0c:f5:
         47:46:68:8a:54:95:8d:2a:60:3c:90:30:59:ab:87:f6:a4:0c:
         16:9b:38:a4:24:4d:90:4f:ba:19:3a:1c:bb:66:b6:41:80:8c:
         11:0d:50:c5:66:5f:42:50:d8:88:89:42:a2:84:c2:2e:5d:23:
         2b:7f:9d:c5:69:59:d7:f0:c3:70:07:ed:ad:8e:15:58:a4:c4:
         66:6a:d4:15:85:5f:b3:e3:6c:c5:74:5c:fd:22:3b:e8:49:85:
         f4:02:d0:80:68:32:4b:53:fc:d9:64:dd:5f:28:d0:70:79:9a:
         a9:ca:f1:c3:c8:ca:cf:c0:b6:cd:e4:81:49:d0:c1:e3:a5:ae:
         ad:d2:60:07:81:48:70:dc:fd:e1:63:6e:66:3f:6c:ca:a6:b6:
         49:22:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 06:06:27 2026 by rpki-client