This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          b+BWhbs7qfHRNVmv/Qa3ToozYOM9gW90PVcvAEusSp0=
Subject key identifier:   13:1C:35:EF:EE:40:1F:A3:51:9F:1C:0C:0D:A3:21:38:1C:F5:94:5D
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019C009DD71C892EE96DEE1080EA1FF326CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          07C8
Signing time:             Tue 27 Jan 2026 18:01:09 +0000
Manifest this update:     Tue 27 Jan 2026 18:01:09 +0000
Manifest next update:     Wed 28 Jan 2026 18:01:09 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: GmRNLWC1/wa1SCpMB+rv+cR3mMbRRJxMVh4ioFowNVU=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 15:50:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:00:9d:d7:1c:89:2e:e9:6d:ee:10:80:ea:1f:f3:26:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Jan 27 18:01:09 2026 GMT
            Not After : Jan 28 18:01:09 2026 GMT
        Subject: CN=131c35efee401fa3519f1c0c0da321381cf5945d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8c:32:63:7b:e9:c9:ce:6a:2b:6f:5d:98:8b:
                    fd:b4:32:78:7d:71:56:8b:d0:ac:75:f6:9e:20:fd:
                    d2:9d:6e:c0:53:cb:a5:ed:7b:e2:8e:e4:22:a6:33:
                    eb:4b:83:79:9f:49:4f:71:47:32:c7:94:90:bc:b6:
                    25:b0:ec:b8:75:f0:5a:0f:65:77:b3:04:a6:04:70:
                    3e:53:e7:c9:9f:92:44:cd:60:39:bc:c2:86:ad:ad:
                    d3:37:7d:73:b3:01:a2:a5:aa:b5:9c:4a:b7:b8:7e:
                    53:8c:53:88:55:26:0f:b8:77:3a:2b:bb:56:eb:fb:
                    09:0a:42:4e:a1:88:5e:1b:03:6b:2a:be:5f:dc:8f:
                    d3:a9:2d:01:1a:a2:19:e7:3f:03:06:f3:e8:53:fc:
                    b3:a6:48:ef:1a:cf:a1:3d:02:5e:8e:68:4d:0e:df:
                    49:88:76:b7:f0:50:f1:dc:a0:54:5b:1b:16:7b:3e:
                    2e:0f:c3:84:11:89:70:b4:d3:57:c9:d9:de:a1:0e:
                    c7:74:2d:a2:6e:80:27:32:f6:1a:be:35:f3:e2:d1:
                    ef:a2:11:ff:d1:cc:f1:9c:25:c4:30:6d:74:d9:6e:
                    c4:57:dc:f8:79:3d:b4:3d:66:2c:52:35:65:90:e1:
                    24:60:cb:4d:63:db:76:4f:ea:ae:3a:2e:2a:ab:8c:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1C:35:EF:EE:40:1F:A3:51:9F:1C:0C:0D:A3:21:38:1C:F5:94:5D
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:aa:3f:61:2f:6f:77:17:4b:f4:2d:9a:e0:1c:4f:0b:bf:51:
         48:68:39:f9:26:05:66:91:54:6f:9b:fc:22:b1:d7:30:4c:48:
         c7:16:49:e3:31:68:13:c3:7a:97:dd:af:ae:3d:2d:89:42:28:
         d3:25:1c:34:28:9a:7c:1a:80:ed:b4:d0:2e:89:4e:38:67:6c:
         b7:2d:4b:5c:1c:1c:e2:4f:c0:61:62:32:d0:c8:5e:d8:89:92:
         54:d6:8a:46:75:d9:3c:ae:ab:df:fd:7d:6f:24:c7:c1:f8:5c:
         5e:20:dd:be:88:aa:d0:6e:3c:c2:c0:78:eb:2e:bc:f1:77:6a:
         22:fe:81:82:11:5e:b5:d0:4a:3f:af:95:38:c1:ef:44:56:e7:
         bd:9a:70:19:6f:06:60:59:75:ca:da:e6:76:cf:2b:cd:49:4b:
         b3:6f:01:51:33:9c:71:92:10:cb:e4:7d:22:e4:7c:81:89:fe:
         aa:30:0d:bd:79:69:4a:ce:1e:3a:ba:86:13:ee:51:c3:bd:9b:
         f3:07:92:3e:6a:f5:6d:7f:af:66:83:78:bb:2a:72:25:f0:79:
         30:f4:11:8d:f4:c4:d8:75:64:29:a4:cb:22:f0:99:c7:b6:96:
         4e:c5:9c:8c:9c:d6:20:19:06:65:49:c0:7d:d1:b2:0a:fe:fc:
         0d:90:74:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 28 01:20:46 2026 by rpki-client