This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
File:                     miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json)
Hash identifier:          khMzcAHA98M0HDa4A33Adgh10O1EkoNLzZ5DG0Vwvx4=
Subject key identifier:   1D:D4:71:DA:8B:D0:3C:08:24:6F:26:B2:BE:DD:CE:80:6B:BF:08:F1
Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00
Certificate issuer:       /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
Certificate serial:       019C24E18E0A29C861EE43EC1E9B9C02A19C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
Manifest number:          09BF
Signing time:             Tue 03 Feb 2026 19:01:27 +0000
Manifest this update:     Tue 03 Feb 2026 19:01:27 +0000
Manifest next update:     Wed 04 Feb 2026 19:01:27 +0000
Files and hashes:         1: 2ZJ5kTbDkQFVGBUeLd0y5apLGk4.roa (hash: ZODc+kCP5UyKJRVzZyQVG4BaAWWyOIufRaMmAMzRM8g=)
                          2: 7ibKB30ikwfEiMsV2kX9XK2sS90.roa (hash: i/Ur2RhEA0n4safE13RlA94Dx6t9AGiAwPHx1ymDZ/8=)
                          3: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=)
                          4: Duy_rM8zgDjySYe4ZSDOg73tPCE.roa (hash: X8/ksNeJf+bfGjtKgbxWuhpWvkDUusV0gttXbiXMo/w=)
                          5: R8X5AbpjXigqoDLQcs2jZb0art0.roa (hash: 6tLBQj47sZHpt2bBLVz4/BKKuOKu1jSSpYa6awOZikM=)
                          6: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: KeKP3gmY3ipi8QGK9ZkcFG1qp4r1GNvtCtKizDPFOdU=)
                          7: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=)
                          8: zPI2dAwZCeRJxOtOl0Q4FV5K-VM.roa (hash: 7EdIt7WNjOWwD3LAs62jBK2d7T5ICCKDQV4IeNUeDeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Feb 2026 19:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:24:e1:8e:0a:29:c8:61:ee:43:ec:1e:9b:9c:02:a1:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800
        Validity
            Not Before: Feb  3 19:01:27 2026 GMT
            Not After : Feb  4 19:01:27 2026 GMT
        Subject: CN=1dd471da8bd03c08246f26b2beddce806bbf08f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:30:a5:d1:ba:98:87:e7:9a:b2:c3:10:12:ba:
                    36:2a:fd:45:02:96:db:76:ff:ac:a7:65:08:64:6d:
                    db:28:72:9f:c7:ef:16:b4:74:fd:b0:d2:3d:ca:4b:
                    bb:89:cc:35:21:e2:17:10:4b:b7:ba:72:bb:d0:20:
                    86:08:48:7c:e7:76:c8:37:60:60:12:8a:f6:df:d1:
                    30:02:b9:27:ff:1d:a9:e1:d1:e3:ff:4d:e1:20:1d:
                    21:6c:b6:dc:de:14:0d:b8:0c:3a:f8:bd:14:be:3a:
                    bd:37:d9:b9:d6:bc:1a:81:9c:10:41:5f:f8:62:d3:
                    a0:cb:a2:ca:78:f2:02:32:d3:f3:7f:12:90:99:aa:
                    d9:75:28:a9:72:97:ab:74:b3:86:d6:54:ee:57:6c:
                    38:da:10:7a:d3:56:3a:bd:5d:c9:66:93:5d:06:c8:
                    c3:af:ad:e7:47:3d:9a:27:63:74:d0:c4:68:3f:0d:
                    20:50:26:eb:68:73:1b:eb:d3:d4:a4:a2:8c:3c:ff:
                    51:33:ec:d1:aa:48:8f:57:98:08:ff:ca:86:d3:07:
                    76:09:5b:d2:dd:81:e7:e4:21:f8:ec:d3:a5:59:0d:
                    27:c1:16:17:e3:dd:91:5c:7a:f9:22:64:ce:20:77:
                    b5:5d:bf:33:6c:11:0e:16:97:0d:b9:b9:51:c2:0c:
                    95:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:D4:71:DA:8B:D0:3C:08:24:6F:26:B2:BE:DD:CE:80:6B:BF:08:F1
            X509v3 Authority Key Identifier:
                keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:33:81:b6:f8:9c:a6:3a:f8:41:28:b3:23:e4:df:e8:66:c9:
         21:18:e1:d3:16:a4:ae:32:3f:a1:77:07:66:c9:a6:f1:65:ef:
         94:76:b9:42:e3:9a:37:19:b3:9f:91:3d:1b:bb:4e:a1:e9:7b:
         8a:20:9e:1c:f4:09:d4:d7:88:05:f9:49:45:62:8a:39:04:dd:
         46:37:64:03:32:f6:b0:cf:ed:2f:08:b9:0f:c4:7f:71:83:28:
         7e:29:b0:0a:81:e5:76:26:50:50:f2:0a:33:2a:dc:3e:21:de:
         6c:6d:5c:f8:78:6c:52:cf:ac:5d:30:c6:b0:7b:9c:21:d3:5a:
         c5:c5:2c:dd:f2:51:2e:9a:76:b6:38:81:dc:d5:b6:d6:fc:72:
         ed:c7:cc:d6:ba:64:d2:c0:68:46:9d:d3:b4:a2:ee:7d:79:04:
         21:93:6b:42:db:49:24:57:cd:2d:f2:2e:40:12:ea:fc:57:fc:
         0f:72:9d:f7:da:6c:38:47:bd:c7:c7:fc:fb:41:f4:fe:8f:bf:
         f5:5a:49:47:fa:42:86:5a:27:ff:50:c6:7a:aa:13:ff:a7:b0:
         19:a8:60:d3:2b:44:5f:55:96:27:ec:4f:85:59:6b:42:38:ad:
         51:c4:ec:9e:73:9c:99:bb:f8:27:14:46:78:11:f1:20:e5:c9:
         43:ca:3c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 4 02:16:46 2026 by rpki-client