This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
File:                     _RGW2Y3s046wP18GtI5VbHTyMfQ.mft (raw, json)
Hash identifier:          KLzlUbIC1NBqW80KwMICEal0/crTkZwZJuJbQlr2vYI=
Subject key identifier:   98:97:01:61:86:45:3C:46:81:16:6D:C2:BC:A0:03:8D:DE:E8:20:3D
Authority key identifier: FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4
Certificate issuer:       /CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
Certificate serial:       019BFC8A51B26F43F6BFF943F33984FE7EEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
Manifest number:          13EA
Signing time:             Mon 26 Jan 2026 23:01:21 +0000
Manifest this update:     Mon 26 Jan 2026 23:01:21 +0000
Manifest next update:     Tue 27 Jan 2026 23:01:21 +0000
Files and hashes:         1: _RGW2Y3s046wP18GtI5VbHTyMfQ.crl (hash: q9138Um1Nb6Ndjitr1UigbF2srMBK86SrYJo5iVR2x8=)
                          2: pAESyPqHIlN4NTJAugrXcjke2nM.roa (hash: eftVyacucHA1lYWjx3ZzoQjWGGcLhPcyZlIC+dbOdko=)
                          3: pYGDQP7z4knn6-l2OGShS12r9vg.roa (hash: OTzBNhKlo1pe/s0so9dkt15EFzXNXt7pIqKb4IqGORk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:8a:51:b2:6f:43:f6:bf:f9:43:f3:39:84:fe:7e:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1196d98decd38eb03f5f06b48e556c74f231f4
        Validity
            Not Before: Jan 26 23:01:21 2026 GMT
            Not After : Jan 27 23:01:21 2026 GMT
        Subject: CN=9897016186453c4681166dc2bca0038ddee8203d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:14:7e:67:ab:bc:9d:dc:b6:d4:bb:20:76:79:
                    e7:c3:61:68:62:ef:62:b0:92:04:46:f0:c6:a8:2c:
                    91:9f:9a:8f:cb:3e:d9:3b:39:59:66:30:2a:1a:9b:
                    08:5b:ff:a1:a1:c4:97:cc:14:55:2f:b6:ea:4f:e2:
                    ca:59:6d:93:f7:34:bf:6a:5d:61:8d:64:ed:f7:2b:
                    f3:f3:b0:dc:63:4d:41:58:56:7e:35:68:58:47:12:
                    0a:eb:10:19:1b:fc:1d:40:de:6b:df:31:f3:cf:61:
                    dd:78:83:b7:67:2a:ac:3e:4b:e3:a3:6d:96:ed:96:
                    c8:9e:9c:de:3d:97:75:0c:e3:25:c9:69:28:38:87:
                    a4:33:56:69:dc:9a:ea:bf:a2:21:89:2e:bf:80:bf:
                    b4:a0:1a:5d:dc:c8:92:a0:54:02:20:19:cc:7d:23:
                    96:0e:02:c8:e4:65:ab:05:68:7d:98:5f:92:0b:e8:
                    92:5c:68:15:dc:80:23:4c:99:3b:77:19:68:16:b1:
                    e5:b9:23:e5:1f:d5:63:45:c5:cf:86:fa:c9:d7:ad:
                    c6:0e:fd:20:c7:4f:f4:c8:ed:fc:54:7c:67:c4:f9:
                    57:e3:5c:46:07:16:1b:ff:6d:6d:03:2c:74:a2:7b:
                    9d:57:5e:fc:20:3c:ad:5a:bb:02:31:29:c7:25:a4:
                    94:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:97:01:61:86:45:3C:46:81:16:6D:C2:BC:A0:03:8D:DE:E8:20:3D
            X509v3 Authority Key Identifier:
                keyid:FD:11:96:D9:8D:EC:D3:8E:B0:3F:5F:06:B4:8E:55:6C:74:F2:31:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RGW2Y3s046wP18GtI5VbHTyMfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4d5660-5364-4454-a9be-4f8902bfe172/1/_RGW2Y3s046wP18GtI5VbHTyMfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:6a:68:c0:ca:e6:ca:f3:d2:ae:5a:0f:ff:a8:94:f5:27:e6:
         33:12:e8:01:8c:76:e6:02:6b:b8:a2:dd:17:0b:9d:d1:f9:66:
         3a:6f:a1:7d:28:27:96:8b:a5:71:01:ca:4e:50:f6:e3:ea:a5:
         5b:b5:15:d9:38:52:07:15:d8:2f:67:70:bd:43:85:39:7d:ee:
         69:9a:00:2a:37:86:f0:f1:df:09:b3:cd:ad:56:1a:4b:c0:6f:
         b6:67:ce:88:45:96:b6:13:a2:59:42:c4:f8:a3:4d:f7:75:e5:
         ad:8d:9b:85:48:c1:8a:00:09:60:e8:6a:22:f1:db:04:27:57:
         00:cf:37:fd:29:91:b5:ce:17:eb:c5:61:52:00:a7:bd:d5:a6:
         14:57:05:79:13:5f:38:01:d5:4a:10:42:94:0f:85:e3:49:5e:
         20:cf:87:d5:7e:d9:6e:c1:3d:c1:08:27:29:63:8d:a6:1d:bb:
         48:0a:ea:f3:b1:b1:5a:e5:8c:96:1a:8b:95:67:55:50:c1:6b:
         19:ee:2f:8b:af:02:d0:3e:8d:b5:55:a8:5c:e5:46:a4:98:b1:
         26:e0:37:11:13:96:f5:60:8e:4f:cd:1c:d0:d9:56:02:ea:ca:
         e6:11:5f:b2:c3:d0:60:9a:95:10:0e:90:2c:b5:1b:c6:bf:21:
         1f:df:5c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 03:55:21 2026 by rpki-client