This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
File:                     mSgtd8Zi5ou4foMzi3ata-rZMYU.mft (raw, json)
Hash identifier:          k7PaL6OXgrAzvc4RiNjdW9pM2l4QzghiY8TIDrgWiAI=
Subject key identifier:   10:53:DA:14:58:77:AA:C2:07:11:D9:1A:55:CF:E9:78:CE:E2:52:1D
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Certificate issuer:       /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial:       019B808321614D98E5257614BD174D173536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
Manifest number:          17AD
Signing time:             Fri 02 Jan 2026 21:00:35 +0000
Manifest this update:     Fri 02 Jan 2026 21:00:35 +0000
Manifest next update:     Sat 03 Jan 2026 21:00:35 +0000
Files and hashes:         1: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (hash: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg=)
                          2: mSgtd8Zi5ou4foMzi3ata-rZMYU.crl (hash: u1C95vEmenpBPx/I7oM+D3BCfcqoiqTzACiqlo+6Doo=)
                          3: tpWKu4eR85JDF7KBw26Iwlu6TT4.roa (hash: B1xUcL+NqVQqUGxQDr0OwK307/1nuKUDqaxBQpOKHPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Jan 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:80:83:21:61:4d:98:e5:25:76:14:bd:17:4d:17:35:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
        Validity
            Not Before: Jan  2 21:00:35 2026 GMT
            Not After : Jan  3 21:00:35 2026 GMT
        Subject: CN=1053da145877aac20711d91a55cfe978cee2521d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:90:33:d1:ac:19:34:c4:66:e0:fd:67:a5:c9:
                    e7:d6:04:d5:8d:2e:81:8a:b0:14:a5:ad:05:f5:ba:
                    d2:21:f1:c9:8e:ce:ce:65:9c:3f:22:d5:37:bf:2d:
                    5b:fd:73:e7:03:ff:89:bd:69:b9:a2:a3:ea:7e:68:
                    f5:61:50:96:ba:ba:7c:0d:97:55:3b:52:7d:b8:d7:
                    09:79:23:16:53:59:6e:6a:bc:c4:73:57:55:d5:b6:
                    10:c5:e7:6d:ce:a4:4d:31:d1:f0:20:45:56:3c:63:
                    89:bf:ae:ae:16:6e:82:e0:69:e6:e0:8b:4d:77:da:
                    3f:50:a9:0b:78:48:68:ad:74:09:80:e2:85:65:7f:
                    0d:66:00:d8:b3:cc:2e:d0:b1:90:48:ce:28:cb:46:
                    71:3b:f3:e1:50:a7:3e:c3:11:34:e2:10:d8:02:8b:
                    3b:a7:f6:25:8b:cd:ad:0f:6e:c3:45:28:57:ad:e9:
                    7c:40:cc:f3:45:dd:74:4d:14:c2:1d:de:db:fe:a1:
                    f5:cb:29:82:36:ff:32:e6:43:9a:bf:ca:42:72:fe:
                    1f:c9:2b:07:8b:bf:f6:37:fc:3f:19:47:fd:71:f3:
                    a3:ce:12:c4:d7:22:b7:49:5f:23:e9:ad:fe:ff:aa:
                    b5:38:10:b4:ca:49:e1:78:64:93:94:4b:cd:c3:98:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:53:DA:14:58:77:AA:C2:07:11:D9:1A:55:CF:E9:78:CE:E2:52:1D
            X509v3 Authority Key Identifier:
                keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:5b:4b:81:a0:f8:53:55:9f:47:1f:7f:d5:23:3f:6c:79:bd:
         1c:b7:9a:c9:66:b0:bc:2f:91:2d:1b:5a:64:4a:d8:19:f4:c1:
         ff:d8:87:68:e2:d4:a0:bd:c2:42:a9:5f:08:d9:25:84:e5:0c:
         6e:a9:f2:9a:34:b7:eb:2c:80:ed:0a:b8:7b:d7:57:ff:e2:72:
         c9:15:33:c6:58:e5:40:8a:88:ca:86:92:34:25:91:96:5e:93:
         4b:21:ad:ab:e9:5f:6a:fe:99:9c:b7:79:61:08:3e:3d:86:93:
         0e:dd:3e:f1:87:77:30:ce:73:ae:af:5c:5a:16:04:cd:1a:10:
         56:cd:68:96:f9:03:8a:eb:f8:e7:65:d0:b1:e0:fc:17:e0:6e:
         8a:20:69:b7:0a:01:25:fd:79:70:68:a7:0c:45:d6:93:55:5b:
         7e:ee:8a:c3:f8:1e:52:a4:ff:9c:56:66:ee:b7:9e:80:b2:aa:
         bb:e8:db:96:6b:aa:21:e7:9d:e1:10:2a:b7:88:63:aa:55:99:
         bd:4a:a4:80:e3:24:c4:7f:ff:4f:c5:1f:d3:5a:57:c1:30:f8:
         23:62:4a:07:78:39:12:de:f6:b4:05:0d:fe:45:26:7d:5d:4d:
         71:0d:09:92:2f:e7:e6:16:b4:c4:49:79:36:01:cb:2b:7e:8f:
         6f:dd:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 3 04:19:37 2026 by rpki-client