This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          itTWPU7VV8D/7QfZcXTO5yiLvff1/metvaGK4x/BiQM=
Subject key identifier:   AF:E2:14:DC:E1:4F:20:D2:70:11:DF:F8:08:25:87:50:FE:A6:87:99
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019BF1CFD09B8FD8379E5EACBA6F617F0FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          182D
Signing time:             Sat 24 Jan 2026 21:01:26 +0000
Manifest this update:     Sat 24 Jan 2026 21:01:26 +0000
Manifest next update:     Sun 25 Jan 2026 21:01:26 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: go4pgPUf8M4nHyT6s5six3LYyPAKTpRViqszCt+CdnE=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:cf:d0:9b:8f:d8:37:9e:5e:ac:ba:6f:61:7f:0f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jan 24 21:01:26 2026 GMT
            Not After : Jan 25 21:01:26 2026 GMT
        Subject: CN=afe214dce14f20d27011dff808258750fea68799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bb:94:86:39:1e:33:8b:08:ee:92:dd:c1:23:
                    5a:6d:19:a1:54:d2:98:19:21:aa:76:b2:76:f1:1d:
                    b3:14:ad:8e:c4:89:70:4a:e8:00:0d:44:ca:d8:75:
                    2a:9b:cb:66:f0:4b:67:59:ed:f8:61:64:23:a3:e8:
                    cb:a7:65:61:75:51:c1:de:5f:7b:33:17:95:c7:87:
                    6c:2c:49:e7:38:f4:2a:69:24:7d:00:f4:dc:49:d4:
                    62:52:4c:f1:17:3c:e6:eb:ba:29:e0:d9:88:a5:e1:
                    19:3c:6a:ec:4a:46:5d:7e:54:47:e3:7c:9f:0e:42:
                    30:5e:03:48:74:31:b9:f8:07:56:7c:a7:9d:c3:9d:
                    0c:5c:58:ec:e0:ea:85:e3:37:0c:7e:92:7a:6d:11:
                    a8:63:8c:f3:99:76:24:71:82:12:04:d0:74:1a:c2:
                    2a:47:77:4a:8c:33:3a:ed:6c:8a:d9:66:b2:b5:03:
                    50:e4:72:21:dc:ef:1c:a5:e8:2f:91:fa:ad:53:9e:
                    29:3f:6b:94:2d:9c:e1:ac:5a:64:aa:4e:b1:42:a6:
                    36:3a:53:b6:6b:6b:50:1f:a2:05:da:1c:e1:3c:8a:
                    3a:37:75:c1:09:71:e2:5d:62:99:7b:37:ac:8b:46:
                    71:33:37:61:bd:4f:1d:77:da:42:bf:e5:92:0a:0a:
                    89:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:14:DC:E1:4F:20:D2:70:11:DF:F8:08:25:87:50:FE:A6:87:99
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:34:1c:46:1c:ff:7e:eb:95:78:70:9d:32:9d:22:cd:23:65:
         b2:35:14:01:99:7d:6c:08:b6:5d:e4:7d:f6:6f:28:74:a2:6c:
         4c:1e:53:d9:95:5b:51:75:08:66:49:23:75:4e:db:11:04:a0:
         a1:aa:4f:83:77:fd:75:44:5f:b3:96:13:4a:fb:a1:dd:27:16:
         56:aa:b8:a8:f2:fb:a7:c9:55:57:a9:c5:d2:35:aa:07:59:81:
         c2:d4:08:cd:ee:c5:66:68:6d:5c:f5:1d:f5:17:3e:b1:e1:8c:
         1f:1d:56:96:d3:d8:37:e6:49:3f:61:6b:4e:1d:8f:43:30:94:
         a0:41:f9:46:76:b8:f7:e9:55:ee:d9:f3:4e:84:93:ed:b5:e2:
         f7:12:8b:33:d4:81:f2:2b:ea:4b:14:35:ac:c7:f8:40:81:c3:
         2e:f1:db:dd:ff:d2:59:b9:70:eb:4e:6a:a3:a8:90:9c:58:09:
         9c:00:f7:49:60:98:c4:2f:84:e0:07:22:fa:b9:83:85:ef:3a:
         89:02:fb:af:1c:33:58:36:92:cc:3d:fd:1d:c0:26:e6:1f:20:
         ba:db:d4:65:2b:16:82:3f:56:a4:05:41:d4:c3:a8:05:1a:9b:
         8e:97:43:88:6c:4a:b1:a0:18:1a:64:7f:e9:d3:63:b6:ef:6b:
         6b:8a:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 24 23:25:42 2026 by rpki-client