This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
File:                     MJAbMGF-hmq8nOULrb6IRl048Dc.mft (raw, json)
Hash identifier:          W39vAC09KXWBso8BtDwxhKv5kRrdAl4RvGf1k33DK5w=
Subject key identifier:   4D:8B:8F:99:2F:71:CC:1C:31:F3:56:0B:9C:D7:27:6B:FE:7A:48:D6
Authority key identifier: 30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37
Certificate issuer:       /CN=30901b30617e866abc9ce50badbe88465d38f037
Certificate serial:       019C427DBE9649EC37060DE9BD4170A38F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
Manifest number:          06AF
Signing time:             Mon 09 Feb 2026 13:01:02 +0000
Manifest this update:     Mon 09 Feb 2026 13:01:02 +0000
Manifest next update:     Tue 10 Feb 2026 13:01:02 +0000
Files and hashes:         1: AhPIKJoDQdgLjGET1BK2dVVDQqc.roa (hash: Q3fb64kGjsH794Do1VZTcE4nKENu+RgVJiY4SIL8Ab0=)
                          2: MJAbMGF-hmq8nOULrb6IRl048Dc.crl (hash: ejGI3vj6E//12CGdFJC5tv2776nrDF9EOUvmhewtNdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:7d:be:96:49:ec:37:06:0d:e9:bd:41:70:a3:8f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30901b30617e866abc9ce50badbe88465d38f037
        Validity
            Not Before: Feb  9 13:01:02 2026 GMT
            Not After : Feb 10 13:01:02 2026 GMT
        Subject: CN=4d8b8f992f71cc1c31f3560b9cd7276bfe7a48d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c5:d9:1f:9f:36:71:e1:7c:88:e4:05:92:37:
                    b3:a2:9c:bf:53:7a:51:c6:54:97:a2:3d:91:c5:22:
                    b0:e1:d4:65:09:54:24:58:03:bc:9c:58:7a:5c:3b:
                    95:e8:88:92:77:3c:00:32:29:64:38:7b:3f:78:b4:
                    bc:f7:69:8a:6c:68:b6:e3:06:f5:17:d6:78:66:aa:
                    8e:d8:d8:16:33:68:fa:bd:79:37:aa:39:6e:1d:c4:
                    54:c3:c7:40:3f:55:9c:2e:4e:33:73:86:b9:45:04:
                    3a:1c:c8:b2:e4:54:81:2f:45:77:ad:1b:c6:44:e6:
                    f0:c7:ad:60:21:c9:c9:ef:fb:78:fa:04:c2:15:9b:
                    58:6f:36:99:41:0d:a8:8d:29:ae:fb:33:c7:41:9e:
                    a3:b6:cf:f0:5d:91:82:07:72:9c:75:0e:ce:80:c0:
                    63:b4:cd:ed:ee:29:cf:cf:3e:04:2a:12:b0:55:a3:
                    bd:5e:0c:50:25:68:ab:52:ed:cc:ca:a3:c6:66:85:
                    ac:6a:54:2b:1f:ea:46:8f:67:44:32:c6:88:63:f3:
                    63:c7:4d:41:ef:49:2b:dd:13:48:44:3a:0c:eb:a0:
                    e2:bd:fa:a7:db:de:6f:48:b1:dc:73:17:92:19:21:
                    59:84:4c:79:03:9a:95:26:e4:ce:ff:76:ca:00:73:
                    d5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8B:8F:99:2F:71:CC:1C:31:F3:56:0B:9C:D7:27:6B:FE:7A:48:D6
            X509v3 Authority Key Identifier:
                keyid:30:90:1B:30:61:7E:86:6A:BC:9C:E5:0B:AD:BE:88:46:5D:38:F0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MJAbMGF-hmq8nOULrb6IRl048Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/3d2031-f4a1-437a-9a7e-97c4bbaf4676/1/MJAbMGF-hmq8nOULrb6IRl048Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:15:52:76:fd:5c:79:3b:cd:58:4a:69:90:09:78:96:47:98:
         ea:be:fd:b8:51:73:af:10:2e:98:a7:e9:b3:65:f7:a0:96:f7:
         71:f2:8c:a1:0d:d1:59:6c:7d:dc:31:15:f8:f0:96:cc:2c:2c:
         b9:6b:c6:62:e2:ae:fb:b2:89:82:71:8d:12:31:6b:02:32:ea:
         c0:35:57:7d:e1:6e:a1:60:cb:47:d3:ee:f3:24:0b:31:95:7e:
         b9:a2:0f:8a:3b:bc:c2:e5:19:9a:66:2e:75:20:d5:51:e7:4a:
         08:e3:eb:78:ec:ec:07:f7:04:14:24:5d:bb:f1:cb:41:6e:4c:
         3b:ea:0d:89:d5:f2:31:0a:98:64:ff:e8:85:20:b4:40:a7:2a:
         91:db:69:60:5d:e0:a0:d2:e1:b5:5a:94:b6:0a:08:6b:5b:1b:
         15:ae:5e:1a:5b:83:b9:f2:3d:6d:8e:47:e4:7c:7d:46:8b:53:
         b9:8c:f0:3d:b1:96:7a:37:a1:3c:d4:51:6b:97:a1:c4:bd:25:
         e9:da:24:fa:87:7d:25:b6:1c:93:57:d2:e4:d4:ca:08:67:c5:
         98:af:d5:9c:88:af:a1:8a:d0:dd:af:12:41:a9:9b:43:96:e5:
         0e:b4:0e:67:e0:73:40:5f:a4:05:92:22:8f:e1:79:75:8c:57:
         52:0f:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 18:32:50 2026 by rpki-client