This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
File:                     MvrPXQJzAmjTsedslrD4WI2Zi08.mft (raw, json)
Hash identifier:          4d1XjvZeMUoTX+1A95kwS2MjaNn/rIWsBXKGpJEAkZc=
Subject key identifier:   46:EC:50:19:3A:BC:B7:3B:10:CA:D6:D3:DB:D8:23:3A:1D:ED:02:CC
Authority key identifier: 32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F
Certificate issuer:       /CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
Certificate serial:       019BFCC11E4AA10132B935C078239F2CD709
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
Manifest number:          153B
Signing time:             Tue 27 Jan 2026 00:01:12 +0000
Manifest this update:     Tue 27 Jan 2026 00:01:12 +0000
Manifest next update:     Wed 28 Jan 2026 00:01:12 +0000
Files and hashes:         1: 5gNENNsVRr6Z3Z2kDivAVxx-WQg.roa (hash: jTpmttv4j/3i6QtQ6v5DJnqHH5NP5RbZJYeJEXUUVHc=)
                          2: MvrPXQJzAmjTsedslrD4WI2Zi08.crl (hash: Tv1sQsUdBa3ps1nXc+3sOjeNjnD8EYgatgeZEjgzxXY=)
                          3: e4_jL8KhurdfWGIKdZ4NxeDCLAY.roa (hash: x4bxfJaUc0PN6qNdfp4xGbKJbKuhcjLAJVJr8mf8ECY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Jan 2026 20:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fc:c1:1e:4a:a1:01:32:b9:35:c0:78:23:9f:2c:d7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32facf5d02730268d3b1e76c96b0f8588d998b4f
        Validity
            Not Before: Jan 27 00:01:12 2026 GMT
            Not After : Jan 28 00:01:12 2026 GMT
        Subject: CN=46ec50193abcb73b10cad6d3dbd8233a1ded02cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:b8:f7:bb:f6:cd:25:4a:bc:2f:66:20:db:
                    6e:25:62:6e:61:1c:ff:ac:4b:e8:49:b4:e8:65:0e:
                    ed:92:dc:1b:b1:47:ef:2f:92:f6:5b:a2:cf:45:0a:
                    74:bb:3a:8e:b4:a3:87:bc:8f:d9:af:a5:0f:3a:08:
                    3b:50:1d:bb:4a:a2:f2:31:c1:ba:41:51:6e:7b:7d:
                    92:24:13:ab:56:ff:7a:f5:47:72:2a:fd:20:be:7f:
                    b2:b5:3c:16:53:56:29:ba:bf:07:10:de:68:ff:6d:
                    7d:0f:98:b4:c2:bc:90:a2:3a:04:0d:23:a1:dd:b5:
                    98:28:fb:70:61:2a:ac:5d:c9:c4:1b:0f:ae:12:bd:
                    9b:2b:78:5d:73:dd:ab:8e:61:f0:8e:69:62:1a:de:
                    a7:ec:28:91:85:94:ce:1a:1d:e8:03:75:7e:cb:c7:
                    a4:28:f7:16:bb:76:f2:71:9c:bb:3e:8c:06:7b:17:
                    9a:16:3f:90:47:85:f0:62:e1:f1:89:68:e2:04:f8:
                    e9:5f:59:ef:aa:1d:89:07:0d:73:ac:af:b3:00:d2:
                    dd:a2:e6:7d:b6:cf:9d:e3:d1:70:19:3b:6e:61:eb:
                    12:e5:4b:bd:5d:62:71:a3:6f:e1:13:80:92:fb:92:
                    26:ff:75:5c:7c:51:22:e5:dc:a3:ab:72:8e:70:4d:
                    1e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EC:50:19:3A:BC:B7:3B:10:CA:D6:D3:DB:D8:23:3A:1D:ED:02:CC
            X509v3 Authority Key Identifier:
                keyid:32:FA:CF:5D:02:73:02:68:D3:B1:E7:6C:96:B0:F8:58:8D:99:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvrPXQJzAmjTsedslrD4WI2Zi08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a4cb95-9127-4869-8f90-9e4e46f60a68/1/MvrPXQJzAmjTsedslrD4WI2Zi08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:71:4b:a8:bb:f4:32:47:80:cd:fb:af:c6:f1:39:22:6f:2a:
         e5:06:9e:21:12:2c:e6:dd:eb:59:e0:7c:c1:63:3c:90:86:bd:
         a5:47:f5:9c:92:c1:0c:05:fd:8f:55:53:92:8a:2a:0b:c9:e3:
         76:c4:e0:3d:3c:91:b7:21:e8:49:c0:92:b0:4a:9d:77:f6:16:
         6c:98:ae:b2:69:e7:80:c6:e7:15:6b:ab:1f:87:30:19:74:46:
         7d:73:fa:e7:1b:fa:bf:92:6e:fb:06:77:ec:da:e1:b2:a0:bc:
         60:0a:b7:24:04:22:ac:bf:1f:10:4e:c5:69:99:32:66:af:17:
         fc:3b:93:62:f8:b0:65:e1:dc:5f:19:24:3c:00:28:15:37:57:
         57:8d:ff:5c:1e:b3:40:18:e8:33:8d:5b:ed:84:f4:8d:47:3f:
         26:41:81:4a:84:6e:07:f4:1c:0e:41:de:de:27:b0:cf:56:d4:
         8f:c8:5d:49:90:6c:1b:21:74:29:44:22:db:7e:b6:dc:2a:d4:
         44:93:15:c7:8d:fe:72:db:fb:60:cf:d7:eb:6f:ca:dc:a7:d1:
         2a:5c:1b:b7:c8:48:fd:c1:55:c4:a2:f2:3a:03:cf:56:e1:29:
         d9:4e:ff:1d:35:be:69:0a:9b:e2:e2:50:c1:04:77:8b:7b:1c:
         63:03:41:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 02:35:06 2026 by rpki-client