This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
File:                     mlVQ6QipuWiMKarJiVNT3qg2xFo.mft (raw, json)
Hash identifier:          vMgn4ZYE4OPPB7oznkub3KEFE8ZG+07CrlORr1c8Mm8=
Subject key identifier:   14:00:EA:83:70:B5:4A:66:49:B6:87:9E:A7:C3:F8:0A:34:43:C4:A4
Authority key identifier: 9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A
Certificate issuer:       /CN=9a5550e908a9b9688c29aac9895353dea836c45a
Certificate serial:       019BD9FDE7469E1F70FDAA82F291CD4F9DDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
Manifest number:          17E0
Signing time:             Tue 20 Jan 2026 06:00:54 +0000
Manifest this update:     Tue 20 Jan 2026 06:00:54 +0000
Manifest next update:     Wed 21 Jan 2026 06:00:54 +0000
Files and hashes:         1: 9WusnEA7UsiroKwVXFKCOaUJb3c.roa (hash: fb+KrV1ZjwlDY775gAvNE53AejRLewrgw0HPLBs+ie0=)
                          2: EpVqLX2wGdjg6RHIKlcFAYrzxZM.roa (hash: I+GdKkkhDVqSQlbstKKL56Ml+Mm3LF7CHLrw/iB8Sm0=)
                          3: IkDgMGh9UUmRviqmiJ_OYP1f9S4.roa (hash: RuDafgx85YwCS+Dkl1AZk67UPodQ/qCtU6vOrFp0Dc8=)
                          4: ahiZqqU1sLMyuZr836gd9oxj7Kw.roa (hash: ihPj0GX7KiHEc0nRL0sGVIybPI61K8/7t6F6pKkft+0=)
                          5: mlVQ6QipuWiMKarJiVNT3qg2xFo.crl (hash: cQEEnMhb19MKbu+BkLTBL/hvGu2vy6+8txBQowhnCXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Jan 2026 03:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d9:fd:e7:46:9e:1f:70:fd:aa:82:f2:91:cd:4f:9d:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5550e908a9b9688c29aac9895353dea836c45a
        Validity
            Not Before: Jan 20 06:00:54 2026 GMT
            Not After : Jan 21 06:00:54 2026 GMT
        Subject: CN=1400ea8370b54a6649b6879ea7c3f80a3443c4a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:92:22:76:54:07:c6:3e:89:03:f4:e7:fd:
                    85:fc:1c:50:4b:22:7f:a9:9b:1b:a4:b1:82:70:ae:
                    9a:3d:89:5a:ea:93:ea:3d:f5:67:d9:c9:3f:1e:74:
                    e0:c4:d1:8d:a2:95:d2:df:39:4e:29:95:a6:94:1f:
                    11:70:75:4e:99:47:76:d5:5b:fa:80:21:c1:05:ec:
                    69:a9:67:d6:6f:2b:df:46:a8:89:92:a5:bc:c6:c9:
                    ef:38:9a:95:db:98:89:77:5c:e4:a4:c2:23:c9:d9:
                    a8:e4:cf:d6:3c:e6:c9:24:77:e1:b5:68:af:37:1d:
                    47:9f:39:e2:88:b4:c9:90:68:de:99:a2:64:fd:be:
                    42:ab:cc:4e:ce:82:64:dd:70:2a:0d:eb:fe:f9:97:
                    40:83:b0:68:fd:6e:6a:f4:78:fd:8b:d8:ae:ed:00:
                    99:d2:f0:a1:c6:0d:04:ba:e8:99:fb:71:59:c4:5c:
                    a9:f0:ad:35:55:93:b3:62:0f:55:8d:09:d6:05:8f:
                    9b:17:e5:77:e1:6f:8a:38:42:fa:03:f9:b0:7e:20:
                    6c:d3:c6:86:3a:fb:dc:2d:e3:68:81:c4:4a:d5:58:
                    1f:16:2d:61:82:58:4e:60:b1:6e:6b:50:a1:a9:d2:
                    f9:d6:94:f3:52:4b:ff:e8:02:4e:51:9c:aa:f1:92:
                    7e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:00:EA:83:70:B5:4A:66:49:B6:87:9E:A7:C3:F8:0A:34:43:C4:A4
            X509v3 Authority Key Identifier:
                keyid:9A:55:50:E9:08:A9:B9:68:8C:29:AA:C9:89:53:53:DE:A8:36:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlVQ6QipuWiMKarJiVNT3qg2xFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/bbb30b-2688-4a6e-b2a2-1399a282227a/1/mlVQ6QipuWiMKarJiVNT3qg2xFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:53:53:78:76:2a:ca:62:48:ed:f0:60:db:0b:0a:5e:c1:f1:
         8e:79:e8:7f:f5:df:35:2c:ef:94:cb:c9:49:59:d3:b1:38:a0:
         d0:a6:49:f8:42:0b:d4:5a:fb:81:b1:0e:fe:dd:a1:35:7a:b9:
         d3:54:e1:8a:9e:05:b8:65:1c:ae:b4:f4:82:f7:cf:ee:6f:bf:
         7a:8f:9f:78:0a:85:76:4b:f6:bb:dc:b1:88:ff:33:08:d1:78:
         50:d3:76:07:02:1f:8c:4e:8f:7d:32:52:85:ad:43:f0:a6:6c:
         52:b6:ca:ab:e0:6c:41:7c:c8:d2:cd:42:7f:97:06:e0:5a:4d:
         fc:4d:ba:ec:5e:88:af:73:18:c9:54:93:b8:54:4d:ce:9f:74:
         1d:80:1d:29:c6:73:d7:75:c9:f9:46:ff:f4:4e:d1:55:ed:02:
         49:90:f7:d1:f4:0d:7c:5a:59:a7:d6:29:40:40:39:b6:b7:20:
         6b:b1:1d:25:00:2a:f9:1e:7b:9a:1e:27:04:42:a3:80:d0:52:
         69:3c:df:47:30:bc:f4:9a:d0:15:54:b5:38:0c:9a:a1:19:56:
         19:42:3c:26:e3:04:ae:3d:6d:8e:ac:e5:c0:d8:c3:d0:b8:7c:
         8a:45:85:34:7d:11:b0:16:c2:8e:44:cf:6a:30:da:d9:f6:97:
         e4:4b:4c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 20 09:27:09 2026 by rpki-client