This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
File:                     rMSPelkSBYjUFw6igV5q5RvmvP8.mft (raw, json)
Hash identifier:          muD5DhBodP661OGv8Y5vSw8L5DF+X073o2rOeLLPvzA=
Subject key identifier:   1F:68:A5:46:04:D5:1F:9D:F1:C4:36:2D:90:A6:F6:D5:39:D5:B6:9C
Authority key identifier: AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF
Certificate issuer:       /CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
Certificate serial:       019BFC1CC3296413F69B4D3D31FEB595A5C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
Manifest number:          0882
Signing time:             Mon 26 Jan 2026 21:01:41 +0000
Manifest this update:     Mon 26 Jan 2026 21:01:41 +0000
Manifest next update:     Tue 27 Jan 2026 21:01:41 +0000
Files and hashes:         1: ALJo2VNkRBohxnFTRb76HQlek4w.roa (hash: oL6ieDNpqz/DwLKJF9Y4lrQM4pX1GlcAf2nFecyaNSM=)
                          2: CuL1FtDvKUET0Va4MczyQRNitSg.roa (hash: B1PuvgUekTJwx+aEl2KBPhFT8zf9S+xcyLzD5s+DNJ4=)
                          3: HC7tyOvxboDjqwx-hgqeRMBVpMU.roa (hash: Oz5SaZbGS2ERy2H8xd9OcxKLPUZL5L8TnBN+RGFNYFc=)
                          4: csyaDpxp-qaEn_l9rVIAGfKG0Fs.roa (hash: 5QfFyBjLv9B3y4ndXnMzTJt//5iA5RA3jDs8H4cBXBI=)
                          5: dJyXOvb9Sr_md9UabI56Iqgc9jc.roa (hash: Jp93biw+G61x1KGOGNadD/xDlSoqq+aMm/ZN8I5dsuE=)
                          6: rMSPelkSBYjUFw6igV5q5RvmvP8.crl (hash: nGJ/YBRUCFUzd8LtFzjicNQh3q+5c94ElmX0Odlj8Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 21:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:1c:c3:29:64:13:f6:9b:4d:3d:31:fe:b5:95:a5:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acc48f7a59120588d4170ea2815e6ae51be6bcff
        Validity
            Not Before: Jan 26 21:01:41 2026 GMT
            Not After : Jan 27 21:01:41 2026 GMT
        Subject: CN=1f68a54604d51f9df1c4362d90a6f6d539d5b69c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:81:8c:0b:10:3e:f8:fc:a7:b5:35:90:bd:
                    76:a4:a4:44:49:2a:66:63:3b:72:db:3e:03:05:c2:
                    6c:b2:57:0d:cd:e3:d3:18:52:82:ad:82:0e:51:46:
                    38:07:30:39:89:7f:32:22:72:2f:96:a5:18:19:14:
                    7f:56:80:3d:8d:c9:2a:dc:30:1d:72:d7:65:c0:1d:
                    2c:8b:c8:f9:c3:99:3d:1a:9a:14:41:75:70:89:19:
                    93:27:8c:5d:ca:63:90:22:23:82:88:d6:d8:e0:70:
                    59:0f:97:bc:d4:32:e0:4d:c6:c6:5e:93:ae:c1:f5:
                    bd:95:f7:eb:c8:84:52:a9:ae:55:d8:d4:34:6e:bc:
                    15:09:7a:b1:6d:99:09:f0:63:a1:27:fe:9e:bf:ab:
                    5f:da:c6:2d:a5:aa:a1:2b:87:46:13:f8:d1:4b:24:
                    4a:cd:97:8b:29:e6:d1:b1:df:c8:8c:6f:ba:bf:5f:
                    5b:9e:85:6d:ad:55:1e:8b:74:f6:be:21:dd:5a:15:
                    2a:47:d2:43:39:2c:8a:39:0a:48:bb:10:d0:66:77:
                    d3:05:7b:9e:b7:f4:61:83:79:74:05:e8:91:8c:67:
                    cd:b6:09:51:3d:4e:14:bd:43:41:d2:8a:05:1a:42:
                    66:d7:cc:c3:b2:a2:35:e7:f6:30:3e:26:d1:dc:c4:
                    df:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:68:A5:46:04:D5:1F:9D:F1:C4:36:2D:90:A6:F6:D5:39:D5:B6:9C
            X509v3 Authority Key Identifier:
                keyid:AC:C4:8F:7A:59:12:05:88:D4:17:0E:A2:81:5E:6A:E5:1B:E6:BC:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMSPelkSBYjUFw6igV5q5RvmvP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d8679e-46bb-44f5-ba52-b52b3a236fa7/1/rMSPelkSBYjUFw6igV5q5RvmvP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:b9:37:e6:16:ee:ed:f1:37:c0:90:72:df:d8:19:21:cb:
         e0:28:45:59:4d:55:a4:a1:0c:2f:ba:d4:b3:2c:5a:e9:8c:fd:
         05:9a:c3:c6:e0:08:46:54:4e:a0:db:93:45:ff:8a:35:41:5e:
         98:40:5c:11:e7:fb:05:19:e2:66:35:8f:2e:59:25:ed:e7:db:
         be:82:75:49:ec:ac:1b:f8:83:ab:7a:7a:43:54:5a:2c:0d:53:
         96:63:71:a3:4d:ad:db:31:1e:ad:b5:fe:52:e4:17:8a:bf:00:
         16:7d:1a:d0:c5:1d:1c:01:8b:a5:48:b7:a6:bd:5e:00:cb:09:
         57:a2:41:a3:a7:2e:b9:34:2c:c4:5e:a5:7b:24:6e:d1:c1:1e:
         da:5f:59:22:10:83:f3:17:06:8e:c8:1c:64:9d:5c:a8:c9:2d:
         52:03:3b:58:d4:28:fd:79:3a:aa:8f:f6:4b:26:de:16:6e:14:
         4b:d1:c2:d0:5a:c1:08:c6:40:10:12:b3:17:c1:11:b1:e9:08:
         eb:fb:74:4c:f8:a0:55:1e:b6:1e:51:b4:c3:1d:a8:92:56:69:
         b7:57:1d:76:98:03:67:5a:db:3c:45:8f:c6:4e:5e:86:33:85:
         4b:8e:10:17:c3:d6:11:78:9c:ba:70:8b:96:41:cb:c5:80:b2:
         52:f4:aa:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv8HMMpZBP2m009Mf61laXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYzQ4ZjdhNTkxMjA1ODhkNDE3MGVhMjgxNWU2YWU1MWJl
NmJjZmYwHhcNMjYwMTI2MjEwMTQxWhcNMjYwMTI3MjEwMTQxWjAzMTEwLwYDVQQD
EygxZjY4YTU0NjA0ZDUxZjlkZjFjNDM2MmQ5MGE2ZjZkNTM5ZDViNjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOOBjAsQPvj8p7U1kL12pKRESSpm
Yzty2z4DBcJsslcNzePTGFKCrYIOUUY4BzA5iX8yInIvlqUYGRR/VoA9jckq3DAd
ctdlwB0si8j5w5k9GpoUQXVwiRmTJ4xdymOQIiOCiNbY4HBZD5e81DLgTcbGXpOu
wfW9lffryIRSqa5V2NQ0brwVCXqxbZkJ8GOhJ/6ev6tf2sYtpaqhK4dGE/jRSyRK
zZeLKebRsd/IjG+6v19bnoVtrVUei3T2viHdWhUqR9JDOSyKOQpIuxDQZnfTBXue
t/Rhg3l0BeiRjGfNtglRPU4UvUNB0ooFGkJm18zDsqI15/YwPibR3MTfYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9opUYE1R+d8cQ2LZCm9tU51bacMB8GA1UdIwQY
MBaAFKzEj3pZEgWI1BcOooFeauUb5rz/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTIt
YjUyYjNhMjM2ZmE3LzEvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kODY3OWUtNDZiYi00NGY1LWJhNTItYjUyYjNhMjM2ZmE3
LzEvck1TUGVsa1NCWWpVRnc2aWdWNXE1UnZtdlA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADO+5N+YW
7u3xN8CQct/YGSHL4ChFWU1VpKEML7rUsyxa6Yz9BZrDxuAIRlROoNuTRf+KNUFe
mEBcEef7BRniZjWPLlkl7efbvoJ1SeysG/iDq3p6Q1RaLA1TlmNxo02t2zEerbX+
UuQXir8AFn0a0MUdHAGLpUi3pr1eAMsJV6JBo6cuuTQsxF6leyRu0cEe2l9ZIhCD
8xcGjsgcZJ1cqMktUgM7WNQo/Xk6qo/2SybeFm4US9HC0FrBCMZAEBKzF8ERsekI
6/t0TPigVR62HlG0wx2oklZpt1cddpgDZ1rbPEWPxk5ehjOFS44QF8PWEXicunCL
lkHLxYCyUvSqMg==
-----END CERTIFICATE-----
Generated at Tue Jan 27 07:17:25 2026 by rpki-client