This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File:                     imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier:          La8BSnXsFwK7yjDItket3R8PlAYuxHFGJsrQ3UHppTo=
Subject key identifier:   43:02:D1:86:D7:82:7A:82:9C:62:2E:BB:9D:2A:91:26:DF:15:4F:58
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer:       /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial:       019BD08DA2A8CBBFED364DC7CA2A24AEA80A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number:          0505
Signing time:             Sun 18 Jan 2026 10:01:41 +0000
Manifest this update:     Sun 18 Jan 2026 10:01:41 +0000
Manifest next update:     Mon 19 Jan 2026 10:01:41 +0000
Files and hashes:         1: 5IpNdlCgrUHJ7pHRr0b5ArsqYU0.roa (hash: xr8w8Pcm6xv8Iv8GF0pLNSo2PiY57WXM/44P4LGrF7o=)
                          2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: CrMfXbvcu+sbNWLTg1tHAIJb938o3fwv8waFfWi2sO0=)
                          3: zF9eGkhoLr3CbGy9zOkPy25h_YE.roa (hash: bP090f2Z2EfnMh5UIQSeu1q8lNph+5x0Nm3ux6Ds3vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Jan 2026 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:d0:8d:a2:a8:cb:bf:ed:36:4d:c7:ca:2a:24:ae:a8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
        Validity
            Not Before: Jan 18 10:01:41 2026 GMT
            Not After : Jan 19 10:01:41 2026 GMT
        Subject: CN=4302d186d7827a829c622ebb9d2a9126df154f58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0c:af:c4:de:e2:d6:fa:80:76:e0:df:cd:1e:
                    0d:54:61:1b:bb:0f:27:c3:b5:84:b4:b7:99:b6:44:
                    2b:55:f2:32:91:b7:29:cd:c5:41:de:5c:4b:26:a5:
                    5b:10:d6:db:3b:b3:1d:29:d2:c2:01:0c:3d:89:da:
                    ec:68:0f:16:07:50:a1:98:fd:3a:90:84:79:d3:e7:
                    ab:0c:27:2f:4a:cb:be:ba:36:9e:03:45:1a:3b:29:
                    e0:94:44:cd:43:2c:48:59:9e:9f:07:66:cc:d4:20:
                    f4:5b:82:89:6c:09:9b:a7:d5:aa:c1:46:d6:23:10:
                    60:53:ba:53:fc:79:bf:3c:fb:18:f0:9f:7c:58:3f:
                    ee:f5:84:96:13:86:fc:79:28:17:6d:81:23:ba:88:
                    02:3a:30:12:4e:73:c4:d0:10:79:1f:f4:5f:1c:5d:
                    4c:a6:1f:7b:c8:d4:12:cb:3d:a3:05:b5:79:7f:38:
                    37:89:92:a1:6e:fc:8b:f5:d7:18:7c:bb:3c:14:e9:
                    e5:6c:ce:b4:c9:53:44:cf:34:88:00:9f:87:06:d6:
                    a1:f1:cf:c4:c7:fb:99:9d:66:eb:c2:99:74:28:c9:
                    ea:62:1c:3d:cc:01:d4:0b:5b:2b:2c:09:99:aa:bc:
                    4f:99:c3:e8:13:dc:81:f0:02:f9:a4:11:4f:a0:20:
                    86:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:02:D1:86:D7:82:7A:82:9C:62:2E:BB:9D:2A:91:26:DF:15:4F:58
            X509v3 Authority Key Identifier:
                keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:1f:1e:b0:a6:46:28:d6:43:05:44:b1:77:4b:2c:f6:d9:1f:
         04:2f:1b:98:98:28:22:a3:ef:30:db:58:34:a6:ec:5a:8f:47:
         ee:08:d8:a5:b0:00:f1:df:d0:c3:97:ad:7b:03:6e:5d:e6:d7:
         ef:9b:81:6c:81:59:72:62:85:dd:42:db:7f:8e:52:86:b0:39:
         45:bb:df:6d:af:b8:32:be:76:8c:53:df:37:b7:46:df:eb:ba:
         44:6d:43:3c:5e:73:b3:c9:54:a9:e8:5a:47:31:73:23:c7:fb:
         a1:9a:38:6e:ef:e1:4d:fc:31:19:04:e5:b3:0d:11:3d:76:10:
         8a:3e:d5:1a:01:74:9c:47:40:e2:c8:2d:7e:02:cc:65:8e:0b:
         1a:ed:7d:16:39:ee:75:03:3a:54:3e:43:2b:5d:36:65:5d:ac:
         8d:51:5a:72:83:73:85:fc:38:13:20:2a:c7:5b:60:d5:3e:41:
         0c:3f:91:a7:63:a6:3d:17:6c:2f:07:9c:85:88:3b:f7:78:94:
         02:d1:45:c0:1b:2f:e4:de:8a:87:52:b0:46:f1:cc:c2:9e:22:
         50:b8:cc:37:dd:be:78:63:cb:b5:5d:2e:bc:f9:1b:a4:0e:4c:
         31:c8:2a:3e:f2:8b:ac:6b:6b:95:d6:0d:05:08:7d:a5:10:c8:
         64:08:ab:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 18 16:44:01 2026 by rpki-client