This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
File:                     MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft (raw, json)
Hash identifier:          Qlsk6N0d0EcCx2M+Cuk385vY59UMbF2aAcba1PB/3yU=
Subject key identifier:   E3:FB:E1:2F:44:C8:11:70:E1:81:97:A6:5B:03:46:4D:3F:7D:98:BB
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Certificate issuer:       /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial:       019BA534D85FDE3BEC1A94DB4022988AF2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
Manifest number:          1805
Signing time:             Sat 10 Jan 2026 00:01:02 +0000
Manifest this update:     Sat 10 Jan 2026 00:01:02 +0000
Manifest next update:     Sun 11 Jan 2026 00:01:02 +0000
Files and hashes:         1: 5lVyPdOyD8P1p-H37rL7Rn9Z9wc.roa (hash: zcBmn6BXQhy14LhJggHGZvgKbvAjqmr1fPEq1IITW2U=)
                          2: MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl (hash: Ql+yU0pdDn9PhXhbFk7qodPs1XsaBKPRAOCchXjuEQM=)
                          3: TpeoXvVAE9ivR_zsDrWpvovB0Pg.roa (hash: pLhv8c1MmuPpN4oSxxyQE6rsdvRh/FjJkEBZ8oB3LdY=)
                          4: a5ChY4q_Rl2LqJ-mYn389m6Ojm8.roa (hash: we3at1HFwLi0LGUOGA4ApVNGwgVs+XxOXd6UNPGdgsY=)
                          5: aAVkA_J7VZ-Vn3jkvnaCXlnFeH8.roa (hash: P6IWduLs8+lEzxc5zHzstOUHtq2Pl9MUd3exHhhXwTw=)
                          6: dtgov4a-299ipMULZRZEpMThwro.roa (hash: k3WsLS94/kslWVMbnhonNuW+5up2Gqn45ks2BvHssDI=)
                          7: hk8pc-tdyFbUrPDUG9zSml_2muo.roa (hash: TuWLAyON0bxAuBXGLp5rn9UKbgfz/FixP/aAIGIFC10=)
                          8: rEoR-mgdOFshp3WK0KrRy38fGME.roa (hash: BUP8/Ijg4vxky0oGy+etXWcemBcfS6atL6F31eVnOgg=)
                          9: zMIsoXgaQV57efVeTJH9bZFkO9Y.roa (hash: 2IYgK5Bn3+JWvjIXskHShuGbtbwIH4msPtr/SJE/DPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Jan 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:a5:34:d8:5f:de:3b:ec:1a:94:db:40:22:98:8a:f2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
        Validity
            Not Before: Jan 10 00:01:02 2026 GMT
            Not After : Jan 11 00:01:02 2026 GMT
        Subject: CN=e3fbe12f44c81170e18197a65b03464d3f7d98bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:13:58:6c:34:0e:b4:25:cb:43:8c:77:8d:35:
                    bf:27:45:8b:f1:56:20:3a:ff:f6:0e:98:ef:58:55:
                    ed:63:8a:15:31:25:2d:bc:b5:20:68:14:70:04:b8:
                    a3:76:42:00:83:42:a8:cf:9d:b3:c0:8d:a9:f1:08:
                    7d:d8:d9:fd:ca:00:88:43:c3:a9:33:50:0a:76:6e:
                    46:9f:ac:74:30:01:8c:3e:13:06:7b:f9:9c:79:ab:
                    d3:b5:63:8c:2d:b1:7e:95:be:5d:ca:5d:d1:8d:2c:
                    8f:51:9f:c9:35:ed:ff:e5:50:cd:0e:86:c2:b5:e7:
                    e6:e5:a0:fd:e8:00:6e:9a:5c:db:d2:ab:57:97:c9:
                    3c:0e:d5:84:02:57:94:ea:a4:c2:03:35:c5:6f:75:
                    4d:c8:71:ba:0a:89:d9:60:72:03:84:0e:25:03:20:
                    50:68:25:1d:ed:17:8e:3a:30:42:43:08:7d:45:f9:
                    01:46:a8:f0:ac:6c:00:09:1d:0e:50:fd:43:fa:b7:
                    39:bb:00:0c:95:7b:56:9d:8a:62:d5:b6:e7:6d:30:
                    62:b0:ce:8a:26:75:93:1c:b0:86:4f:94:bf:0a:a9:
                    b4:0c:a6:76:d3:c3:bb:a1:f4:38:08:8f:6c:26:57:
                    13:99:18:86:ea:b4:b3:2c:5a:6c:90:e5:4e:12:03:
                    6d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:E1:2F:44:C8:11:70:E1:81:97:A6:5B:03:46:4D:3F:7D:98:BB
            X509v3 Authority Key Identifier:
                keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:6b:5f:15:5c:8f:aa:95:61:c9:db:57:6d:88:41:be:79:
         67:c6:ed:ad:03:84:74:7e:ad:e8:3b:b4:62:8a:25:85:f5:81:
         f3:7a:70:d8:dd:84:77:bf:a0:9a:28:4d:59:1a:5c:5d:fa:27:
         ad:c8:02:7c:4e:53:db:0f:92:a7:71:88:d3:0c:27:f6:28:99:
         3b:3d:95:73:db:5e:50:cd:a1:aa:07:30:3f:9e:d2:c2:01:e2:
         46:03:85:b2:31:27:55:42:24:63:0a:81:83:0a:ce:bf:1a:2f:
         ec:65:7b:5b:f6:25:37:30:f4:a4:e6:b1:c9:76:44:fb:9b:bc:
         b7:ca:77:4d:24:97:71:25:ba:b7:8d:24:19:76:da:a7:93:6a:
         11:4a:9f:9c:16:dd:c5:eb:33:af:ca:57:51:0b:11:0f:fc:4a:
         d8:a0:96:e4:36:7d:45:8b:d8:98:5b:a0:6e:72:a6:c4:4d:4d:
         c8:26:2a:66:1c:8a:d4:10:14:c3:11:02:a1:4e:33:b0:d8:2a:
         ed:e4:e7:bd:41:3d:2a:71:5d:16:3d:23:07:82:8e:f1:72:76:
         b9:45:ad:d0:fc:56:9c:03:68:89:f7:34:cf:d5:67:22:f8:38:
         e8:b9:f7:c3:54:26:bd:65:0e:af:fa:3f:3a:1e:ac:68:7c:bf:
         78:8e:90:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 10 09:20:17 2026 by rpki-client