This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          9XuakloNVNjtT9C2WnDCUK8g/jffgwcTrcObrjZDGzk=
Subject key identifier:   CF:C5:15:28:07:31:0F:7E:61:E7:59:B0:46:7E:C1:35:84:14:AA:5C
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019BE97152888FB69C6ABD37AA7967E0D775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          07BC
Signing time:             Fri 23 Jan 2026 06:01:16 +0000
Manifest this update:     Fri 23 Jan 2026 06:01:16 +0000
Manifest next update:     Sat 24 Jan 2026 06:01:16 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: E7oOUOOtyGlYuiQExZrUB0nR9fOMD8Ke9ZATzMDNxCI=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 01:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e9:71:52:88:8f:b6:9c:6a:bd:37:aa:79:67:e0:d7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Jan 23 06:01:16 2026 GMT
            Not After : Jan 24 06:01:16 2026 GMT
        Subject: CN=cfc5152807310f7e61e759b0467ec1358414aa5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:66:df:e5:c4:5f:f2:1e:17:4f:b2:43:20:46:
                    c9:d1:fd:db:9b:c6:a0:0d:b8:e4:4b:06:8e:ec:f3:
                    a6:c5:2d:41:0a:0c:3d:48:1d:91:ba:88:2c:32:1b:
                    48:cd:60:71:f9:a9:1e:b3:09:48:4d:69:8f:95:c3:
                    57:ab:61:d8:12:dc:6f:21:1d:ec:db:22:46:f3:45:
                    20:83:7e:d0:10:5b:1f:85:05:f2:32:b5:dc:50:9e:
                    e5:0b:be:0e:9e:c8:6c:03:1e:9f:a8:7c:bd:bf:bd:
                    d0:85:2f:a8:88:31:ca:83:b0:f2:3a:a3:76:ec:cb:
                    83:37:7c:ed:80:45:f0:e2:a5:19:bf:f5:8e:84:f3:
                    3b:be:85:57:d2:9a:e8:ad:b4:78:5f:d3:b8:63:d5:
                    1c:31:5b:e6:1a:2a:45:ac:76:fe:fe:f0:a3:6b:05:
                    fc:c7:c0:ae:67:99:d1:cc:8f:2d:f0:24:a3:46:f1:
                    96:66:60:38:ef:f5:64:ff:e7:3a:6f:bb:4f:61:08:
                    d9:67:1f:2b:09:9a:85:75:0d:ec:3b:64:d4:3d:c1:
                    c5:0e:70:81:a3:f8:71:aa:a0:af:f8:5d:5d:66:f1:
                    8a:8e:ec:50:2c:0e:75:36:40:34:42:86:23:59:da:
                    c3:57:9c:0c:0a:6f:d4:4b:8e:c3:c6:ef:07:0a:c8:
                    7c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C5:15:28:07:31:0F:7E:61:E7:59:B0:46:7E:C1:35:84:14:AA:5C
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5a:46:d0:b2:6b:b8:63:5f:d4:9d:91:7d:f4:f0:ef:a5:c4:
         57:b1:37:70:cc:0f:2c:82:b0:75:9a:56:e3:ac:4f:8d:5c:51:
         56:83:62:89:74:69:9f:58:6d:43:cb:d8:1f:1c:96:3a:f5:f2:
         a7:7a:24:80:18:05:7d:e9:12:4b:0a:90:de:d9:27:b4:55:b1:
         3e:86:f8:76:7e:d1:f3:07:39:ec:f9:08:ea:b5:f0:29:0c:7b:
         9e:3d:b5:de:ae:74:96:20:1a:75:9f:d7:f6:cf:54:05:08:40:
         9e:cb:69:d5:1c:10:b9:cf:40:ec:c5:b5:32:61:89:ad:73:cd:
         ea:bb:58:44:50:9d:71:d4:78:09:2a:69:68:6d:06:3a:2c:52:
         ea:f7:2c:86:c0:17:7a:9e:56:d7:78:85:a9:22:e9:56:d1:cd:
         bf:3f:d0:3c:eb:a1:f0:ea:a6:b0:6f:e0:4a:b9:b3:53:a7:89:
         dc:a4:2b:3e:75:7a:cb:9d:28:45:fb:7f:8d:03:fc:e8:e4:ad:
         46:38:1c:36:32:04:40:36:5d:1b:88:06:55:70:ba:f3:32:90:
         2d:10:10:79:f8:5c:6d:42:4a:81:4d:7c:25:9b:02:31:49:5d:
         30:92:a0:8f:c8:72:45:a7:1b:b8:74:dc:76:cc:c8:5f:60:48:
         df:a9:69:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 11:36:51 2026 by rpki-client