This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          iI7TAWbFoQswmciW0g9i1FGuXIYpQ3j5fseu72T7i0s=
Subject key identifier:   1E:7B:10:C4:6D:68:46:2F:CC:A3:A7:B5:7F:F4:4C:0E:00:DB:C8:88
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019BE8276D0815D3EA133424ED8A7C6DDD01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1828
Signing time:             Fri 23 Jan 2026 00:00:56 +0000
Manifest this update:     Fri 23 Jan 2026 00:00:56 +0000
Manifest next update:     Sat 24 Jan 2026 00:00:56 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: DyFprKEgCMCP_9_Be-mhtXu71Jk.roa (hash: ktyPBS12R1087Yo49pjux2WW0LgADp2Ex+bpb97ldjU=)
                          3: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: lX33HPkMAASYtNhazOGzzlX0pnrYej9LLQ/rwb7eabg=)
                          4: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          5: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          6: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          7: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          8: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          9: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          10: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Jan 2026 00:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:e8:27:6d:08:15:d3:ea:13:34:24:ed:8a:7c:6d:dd:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jan 23 00:00:56 2026 GMT
            Not After : Jan 24 00:00:56 2026 GMT
        Subject: CN=1e7b10c46d68462fcca3a7b57ff44c0e00dbc888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5b:e2:0c:fc:79:3c:65:30:73:a1:e0:ad:0a:
                    15:15:1d:a7:f2:e3:a4:80:36:1d:20:ed:3e:6c:b0:
                    8c:65:9b:f0:fe:49:3b:45:5e:ba:7e:67:ac:7d:3e:
                    9f:a5:7b:00:ae:dd:54:dc:16:2e:a2:90:f9:be:68:
                    24:87:bf:0f:9f:a1:73:59:63:27:7e:40:51:33:0a:
                    32:fa:31:ed:86:8d:6c:24:7d:29:76:5a:27:3d:b4:
                    0c:4d:5c:f4:d1:2d:bf:70:5a:23:05:36:96:88:a6:
                    e0:02:12:fd:2b:23:2e:76:d6:53:b3:e2:27:84:62:
                    ca:4b:0c:bc:0e:0e:a1:90:66:55:8b:fa:c3:4e:fc:
                    8e:9d:f6:29:31:00:64:94:e6:43:ce:7d:3d:fe:55:
                    a0:da:7f:1e:1a:5e:77:41:34:f8:76:8a:9b:0b:66:
                    47:67:02:7d:29:ec:b8:f8:0b:3c:15:0c:e3:7d:ef:
                    c0:f1:4d:81:b1:97:02:1c:b3:54:10:31:64:47:f6:
                    e8:8d:59:86:09:96:db:e3:64:8f:84:92:dc:7f:df:
                    e0:c2:34:c6:a5:a5:3e:f0:91:d9:ca:fa:71:95:c7:
                    71:f7:f5:53:4d:20:4f:93:07:23:f2:eb:d3:9c:18:
                    a1:b1:a3:b8:84:ce:3f:cb:cc:8a:de:c5:71:ec:3c:
                    89:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:7B:10:C4:6D:68:46:2F:CC:A3:A7:B5:7F:F4:4C:0E:00:DB:C8:88
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f5:58:02:f1:66:83:8c:26:2f:d8:0f:61:a0:86:b0:8a:94:
         50:3c:6b:5b:2b:14:f6:20:b7:2b:91:0e:d1:e0:c7:73:a5:a5:
         05:89:c4:54:56:27:ac:e0:7d:95:73:58:59:54:ac:4b:b9:23:
         35:5d:94:8b:fe:56:6c:3d:c6:da:6f:f3:23:8c:bb:ba:5e:67:
         8e:7f:8d:d7:24:f5:a3:5d:ac:77:dc:25:bb:cb:ae:23:3f:0b:
         c1:7b:2c:1b:96:58:aa:5b:f9:31:ee:92:f9:32:36:6e:b5:39:
         5e:9e:a5:54:fb:20:7a:51:99:e2:3e:fd:1c:a6:8e:d2:21:e2:
         46:e1:75:91:48:ab:92:e8:34:56:9f:12:44:99:12:24:3d:b8:
         da:fe:60:51:5a:4e:ba:c1:70:e1:92:00:c2:04:33:73:cf:57:
         d8:61:3c:b6:08:c6:b6:4c:01:47:84:7b:52:04:01:6a:a2:a2:
         9c:db:2b:46:ed:ab:84:58:f3:a2:51:e7:43:00:ea:b0:97:2f:
         d2:c9:48:22:a8:71:04:9b:57:96:f8:c3:07:4c:cd:28:3b:5b:
         57:8a:db:82:fe:5f:05:33:26:fb:33:50:af:d8:bf:5c:ab:59:
         a8:36:7e:12:91:e6:f6:5c:7c:ae:4a:d0:ad:1a:0e:2e:75:97:
         66:f5:bf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jan 23 08:20:52 2026 by rpki-client