This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          8PQ8TMvDZNCkg+bjMyqQwJLFtklvKuUag6gjuLiDYhc=
Subject key identifier:   DD:67:A9:6D:C2:31:F5:A7:CC:93:27:81:17:B8:06:A7:56:D4:BB:F5
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       019C0668F774C18E10E096A52AA350EAABCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          07CB
Signing time:             Wed 28 Jan 2026 21:01:07 +0000
Manifest this update:     Wed 28 Jan 2026 21:01:07 +0000
Manifest next update:     Thu 29 Jan 2026 21:01:07 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: CArEuBBTXn7tdVX9VCNh2ivOAh0S12i1sZszyJlNSXE=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Jan 2026 18:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:06:68:f7:74:c1:8e:10:e0:96:a5:2a:a3:50:ea:ab:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Jan 28 21:01:07 2026 GMT
            Not After : Jan 29 21:01:07 2026 GMT
        Subject: CN=dd67a96dc231f5a7cc93278117b806a756d4bbf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:81:1e:08:0d:f4:16:30:53:49:9b:e8:a8:
                    5b:d0:15:55:b6:62:9a:26:1b:2d:ec:a1:82:41:8a:
                    40:bf:c9:e7:ef:8d:62:f0:a8:b7:f1:16:fd:b7:1e:
                    2f:de:e7:d4:d3:c2:90:d4:b1:ae:a3:fe:56:b5:5e:
                    64:cd:fa:17:ee:c7:74:63:33:af:e2:7d:7a:60:d6:
                    db:8c:b0:83:98:73:c5:82:eb:f6:64:20:c2:bc:ec:
                    9c:6d:bf:4d:c2:8c:14:db:03:86:8c:dd:eb:06:9f:
                    62:ac:90:40:d7:ba:ac:56:52:f4:12:e1:d9:01:a8:
                    7e:e9:2b:fc:e8:47:d7:c0:51:99:95:03:42:67:45:
                    e0:94:d7:89:42:c8:00:74:d9:3b:db:1d:9e:ae:53:
                    92:7a:c4:b1:72:51:8f:d4:de:6e:6e:92:21:20:6b:
                    b7:ae:cb:7d:40:ca:19:f2:29:f1:0c:99:57:b1:7e:
                    ce:db:27:63:eb:ec:7e:5a:8b:ae:40:fa:cd:22:90:
                    17:e3:b5:b2:f3:a3:04:14:d1:95:4a:de:f4:83:92:
                    19:c8:e6:e9:b9:fc:41:43:1d:00:e8:47:70:1a:ac:
                    b8:50:80:b8:78:79:11:01:2b:b0:c5:0d:93:5f:a1:
                    26:99:89:3f:80:ac:1e:7c:36:78:cf:9f:32:64:93:
                    98:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:67:A9:6D:C2:31:F5:A7:CC:93:27:81:17:B8:06:A7:56:D4:BB:F5
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ce:06:94:68:3b:e5:95:ab:61:8d:50:d9:71:5d:ab:04:ef:
         c8:bf:3d:be:cb:42:52:c1:90:84:e3:be:ba:f2:ac:c8:d7:b1:
         bb:dd:17:fd:c1:dc:17:4b:af:bf:d6:bd:dd:86:30:2b:34:3a:
         44:72:9e:66:df:b3:42:f7:1c:49:a8:b1:13:6a:ae:8a:ad:92:
         8d:ff:c0:06:be:33:17:e1:c2:ea:2b:06:6e:7e:fe:cf:6b:99:
         83:e2:21:b5:2f:65:77:e2:17:f0:99:0c:38:96:7f:92:f3:c1:
         1a:5d:a0:99:67:51:16:61:1e:7c:4b:96:5b:02:cf:39:65:48:
         c7:1b:32:d0:3b:13:c3:49:4b:7d:63:59:80:81:f5:cf:d7:d6:
         3c:cd:97:30:d3:94:b6:83:5f:15:b5:28:bc:b5:dc:d1:f2:1c:
         dc:90:ea:fc:9c:9f:3e:ca:d5:66:48:4a:4d:b2:6e:94:17:15:
         d6:7c:be:b4:c9:49:49:66:1f:51:0a:3f:52:0b:a5:46:e0:8e:
         cf:33:ad:44:f7:66:7c:71:46:2d:21:2f:ec:0c:e5:64:05:12:
         0d:47:e2:dc:c3:be:0f:47:25:0d:4a:05:b5:a7:d5:60:37:67:
         10:d4:17:7d:63:7b:db:a5:c6:9f:0a:cc:27:0a:f1:39:ac:ab:
         ea:60:3c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 29 05:13:09 2026 by rpki-client