This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
File:                     M4nguKL_gqI7SN1ubnYXa0zTgy4.mft (raw, json)
Hash identifier:          5XA2C/gjigKHBf0oUwmqp9DJ4uwIrWvSAyr/zdqQJZU=
Subject key identifier:   54:57:22:8B:53:7F:D2:DC:EB:DF:01:F5:66:82:70:77:CA:7D:9A:6E
Authority key identifier: 33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E
Certificate issuer:       /CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
Certificate serial:       019BFE790C39B8472087667A64326647B5FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
Manifest number:          1744
Signing time:             Tue 27 Jan 2026 08:01:44 +0000
Manifest this update:     Tue 27 Jan 2026 08:01:44 +0000
Manifest next update:     Wed 28 Jan 2026 08:01:44 +0000
Files and hashes:         1: M4nguKL_gqI7SN1ubnYXa0zTgy4.crl (hash: dzkcmBj7C+JgsvlaoLVmtJYyAP0eQDaj35XuemuWynA=)
                          2: jO9rf4-cCHZRF2KoiLta2NyAQgU.roa (hash: UwmPs36c2ef9tHjcukHaPVItxdtDMmpbGOtpHRoCvf0=)
                          3: xn4i-fiHxOz0VUsB8YhWKLghbLs.roa (hash: Ptihx8qc04YVHI7Uz+aNOpCGFom4Sx5jCTJsyxvgVYs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Jan 2026 08:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:fe:79:0c:39:b8:47:20:87:66:7a:64:32:66:47:b5:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3389e0b8a2ff82a23b48dd6e6e76176b4cd3832e
        Validity
            Not Before: Jan 27 08:01:44 2026 GMT
            Not After : Jan 28 08:01:44 2026 GMT
        Subject: CN=5457228b537fd2dcebdf01f566827077ca7d9a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8c:0f:7b:c8:8f:35:d2:6c:6f:c3:22:25:03:
                    95:6c:26:e7:7b:0a:c9:97:9d:55:96:3d:ef:fb:ba:
                    b5:da:8e:88:97:dc:aa:e8:6d:38:e4:46:b4:e2:5c:
                    48:93:95:e7:82:5b:4c:67:fd:d9:10:8c:61:cf:78:
                    25:2b:0a:ed:0e:e3:7e:b7:22:41:f5:f2:34:29:f6:
                    3a:70:45:f0:83:59:8e:e2:e6:e6:2a:e0:d5:44:b3:
                    0d:ab:5f:ac:1f:54:b9:e4:91:80:e1:25:f6:39:35:
                    a2:e2:f1:79:ad:88:9f:8c:13:20:b1:2c:1f:7a:6b:
                    91:58:87:c7:24:f5:ee:ad:4f:fa:ed:77:6e:0b:63:
                    f7:91:27:ea:66:31:33:6a:3b:be:71:12:9c:d1:f2:
                    2a:ca:5d:d5:b8:af:52:f2:8e:91:2a:15:34:d3:22:
                    2b:54:ad:43:da:cc:54:8a:5c:4c:d1:5e:3d:73:7b:
                    3d:b2:1d:db:22:c9:4e:f1:26:04:01:26:5c:e4:80:
                    31:cf:b8:cd:76:4d:9a:79:69:8e:5a:65:c5:32:fe:
                    c0:3b:40:e1:d4:d5:76:4d:e1:6b:62:39:2b:bf:96:
                    7f:54:b9:56:91:06:81:ef:6a:5d:dc:4e:b3:56:4c:
                    e9:dd:03:16:68:4a:ce:a3:b9:03:33:a1:cf:b7:21:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:57:22:8B:53:7F:D2:DC:EB:DF:01:F5:66:82:70:77:CA:7D:9A:6E
            X509v3 Authority Key Identifier:
                keyid:33:89:E0:B8:A2:FF:82:A2:3B:48:DD:6E:6E:76:17:6B:4C:D3:83:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M4nguKL_gqI7SN1ubnYXa0zTgy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/7a4402-f3f5-4f3a-98a8-2337a81b1f78/1/M4nguKL_gqI7SN1ubnYXa0zTgy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:7d:ba:0d:19:2f:79:e5:3a:5e:1a:1b:ec:0b:7a:75:bc:57:
         2f:18:34:63:1d:86:a5:d4:d6:6d:be:fe:f2:54:85:77:e4:c6:
         17:64:13:b2:f5:ed:96:0f:ec:43:33:55:ad:ae:29:0a:99:1b:
         27:dd:9e:72:3f:5d:0c:d6:90:6d:58:09:73:db:6a:33:8c:b3:
         c4:45:d4:93:1f:d0:b3:c7:7d:0d:30:f7:0b:b7:dc:37:40:5d:
         a7:7f:0a:56:88:bb:d6:9b:8a:96:97:08:04:50:88:1b:00:d8:
         6e:47:e6:1f:77:93:14:29:7a:63:6e:d9:0f:01:a2:28:ca:b2:
         0b:ef:1c:ae:df:b9:91:f1:12:2a:53:17:5c:ac:46:c6:9b:a5:
         83:5b:5b:ef:34:16:67:b4:17:dd:8d:1c:9c:4d:d9:ba:5f:d3:
         81:7d:f6:fb:03:dd:bc:02:38:69:dd:d4:e9:a9:bb:71:cf:86:
         1b:94:d7:b9:13:1b:c2:00:14:6d:c4:6b:ed:25:8a:d9:03:d2:
         da:be:10:ae:fb:ae:d4:85:4f:0a:82:d0:3c:07:cc:35:e1:86:
         a7:08:72:df:2c:fa:a7:b0:8a:9b:34:7c:f9:86:43:24:d0:21:
         9c:a2:fc:eb:a4:ec:67:79:8f:23:bf:35:d5:93:8b:f2:90:74:
         a8:3e:a7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 27 17:18:45 2026 by rpki-client