This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
File:                     miro1LAWhwIbd7h08RDBttv-xlE.mft (raw, json)
Hash identifier:          ynfGOs+2WgHuySAJz635YChQl5okjhl/897AzC2Cfi0=
Subject key identifier:   86:D8:FC:5E:FF:2D:3B:2E:FC:28:F7:AF:A3:BB:5F:83:F9:77:B9:D6
Authority key identifier: 9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51
Certificate issuer:       /CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
Certificate serial:       019B77B7BE06C549C5E1866603FFBDC97145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
Manifest number:          0EB5
Signing time:             Thu 01 Jan 2026 04:01:29 +0000
Manifest this update:     Thu 01 Jan 2026 04:01:29 +0000
Manifest next update:     Fri 02 Jan 2026 04:01:29 +0000
Files and hashes:         1: FEmq_LSCw3qARbc_REHnTueFXv0.roa (hash: w7kLO8zmlwjsil7oxAuK8gh9w7qBy+9fIQiuZhkIXQw=)
                          2: miro1LAWhwIbd7h08RDBttv-xlE.crl (hash: Da2c26bSHQ1YckKfh5vkij1u5Z6uup0dGOe4LIINzqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Jan 2026 00:18:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:77:b7:be:06:c5:49:c5:e1:86:66:03:ff:bd:c9:71:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a2ae8d4b01687021b77b874f110c1b6dbfec651
        Validity
            Not Before: Jan  1 04:01:29 2026 GMT
            Not After : Jan  2 04:01:29 2026 GMT
        Subject: CN=86d8fc5eff2d3b2efc28f7afa3bb5f83f977b9d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:07:b1:bf:12:db:6b:16:3c:39:b9:1d:68:bc:
                    b0:af:6a:64:18:ec:c3:ad:ad:7c:d6:5a:2d:70:37:
                    41:ec:7c:e7:86:63:92:5d:bf:92:63:18:d9:7a:7d:
                    75:23:e9:51:32:3d:dd:22:69:c5:90:37:c4:0f:2c:
                    24:7f:d4:2f:ca:7b:51:16:54:05:79:4e:1e:aa:16:
                    2a:1a:f2:ca:e3:95:bb:7c:14:a8:85:c6:f5:bd:6a:
                    e8:85:cd:e9:78:18:ee:0a:ef:25:a0:05:d1:37:4e:
                    a7:6e:85:8c:34:4b:16:f9:d5:dd:19:a7:97:c8:5f:
                    70:53:59:ad:6c:12:db:b9:9e:af:1b:70:2a:ae:a1:
                    7b:7f:63:36:b4:77:fd:9f:42:6f:ae:cc:de:ee:54:
                    c1:53:69:ec:62:35:c5:b1:ea:ae:84:b9:54:c1:37:
                    74:a6:fd:51:a1:47:9d:cc:d3:1b:ca:f1:be:93:57:
                    cc:2a:4c:f2:ab:8f:07:f2:6a:3e:54:e8:2f:86:80:
                    52:46:8f:bd:46:f0:d9:25:09:62:0e:30:bf:76:5d:
                    11:c5:1b:f3:b3:b2:ab:cf:22:9b:55:2c:4f:e2:d6:
                    8f:79:50:3a:0f:5d:c1:03:48:c0:7b:4d:8f:2b:dd:
                    9f:86:af:d6:45:0a:86:87:4a:c0:86:24:25:1c:61:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:D8:FC:5E:FF:2D:3B:2E:FC:28:F7:AF:A3:BB:5F:83:F9:77:B9:D6
            X509v3 Authority Key Identifier:
                keyid:9A:2A:E8:D4:B0:16:87:02:1B:77:B8:74:F1:10:C1:B6:DB:FE:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miro1LAWhwIbd7h08RDBttv-xlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/c48a2d-097d-498b-bc62-b513a0c2f353/1/miro1LAWhwIbd7h08RDBttv-xlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4d:7d:39:13:90:f0:32:b3:f2:f8:01:03:41:09:64:18:d0:
         52:ec:2a:04:3c:4d:37:e4:16:05:f1:a2:d2:b0:f3:2a:96:64:
         74:c8:25:4c:6f:20:85:0e:57:3a:81:a2:34:b3:18:fd:3c:08:
         09:93:84:54:c8:80:88:99:18:98:cc:c0:b1:37:e0:58:a9:cb:
         83:e5:c5:9a:00:3f:ea:0d:b2:98:9b:fd:85:73:a4:3e:18:ee:
         21:a8:bc:1a:eb:7a:1e:28:a4:5a:0d:5e:dd:69:cd:85:8e:d6:
         66:55:d6:a7:61:38:4f:ed:fb:e5:fc:2b:1c:88:72:4d:1d:25:
         b7:0c:0a:04:c0:4b:29:6e:2a:7b:e6:b9:91:1f:a5:e5:f3:cd:
         db:de:aa:f6:7c:f9:22:f5:ca:3b:ac:db:ac:65:5e:dc:10:58:
         39:ee:74:66:ff:0d:47:3b:82:8a:c6:64:de:4d:a3:9b:e1:5b:
         b5:1d:c8:cf:c9:1b:ef:21:65:1b:22:56:cb:55:52:3b:ff:dd:
         e6:09:25:24:1f:7a:c5:e4:82:59:11:2b:22:da:9d:6a:73:07:
         42:d0:dc:8d:6b:aa:de:68:62:54:f8:ad:47:56:cc:d3:c3:87:
         ab:9d:79:b2:79:d7:80:84:53:ef:47:08:a9:9d:f9:6e:91:9f:
         0b:6c:29:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZt3t74GxUnF4YZmA/+9yXFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMmFlOGQ0YjAxNjg3MDIxYjc3Yjg3NGYxMTBjMWI2ZGJm
ZWM2NTEwHhcNMjYwMTAxMDQwMTI5WhcNMjYwMTAyMDQwMTI5WjAzMTEwLwYDVQQD
Eyg4NmQ4ZmM1ZWZmMmQzYjJlZmMyOGY3YWZhM2JiNWY4M2Y5NzdiOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgexvxLbaxY8ObkdaLywr2pkGOzD
ra181lotcDdB7HznhmOSXb+SYxjZen11I+lRMj3dImnFkDfEDywkf9QvyntRFlQF
eU4eqhYqGvLK45W7fBSohcb1vWrohc3peBjuCu8loAXRN06nboWMNEsW+dXdGaeX
yF9wU1mtbBLbuZ6vG3AqrqF7f2M2tHf9n0Jvrsze7lTBU2nsYjXFsequhLlUwTd0
pv1RoUedzNMbyvG+k1fMKkzyq48H8mo+VOgvhoBSRo+9RvDZJQliDjC/dl0RxRvz
s7KrzyKbVSxP4taPeVA6D13BA0jAe02PK92fhq/WRQqGh0rAhiQlHGEiXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbY/F7/LTsu/Cj3r6O7X4P5d7nWMB8GA1UdIwQY
MBaAFJoq6NSwFocCG3e4dPEQwbbb/sZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlybzFMQVdod0liZDdoMDhSREJ0dHYteGxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9jNDhhMmQtMDk3ZC00OThiLWJjNjIt
YjUxM2EwYzJmMzUzLzEvbWlybzFMQVdod0liZDdoMDhSREJ0dHYteGxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9jNDhhMmQtMDk3ZC00OThiLWJjNjItYjUxM2EwYzJmMzUz
LzEvbWlybzFMQVdod0liZDdoMDhSREJ0dHYteGxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZk19OROQ
8DKz8vgBA0EJZBjQUuwqBDxNN+QWBfGi0rDzKpZkdMglTG8ghQ5XOoGiNLMY/TwI
CZOEVMiAiJkYmMzAsTfgWKnLg+XFmgA/6g2ymJv9hXOkPhjuIai8Gut6HiikWg1e
3WnNhY7WZlXWp2E4T+375fwrHIhyTR0ltwwKBMBLKW4qe+a5kR+l5fPN296q9nz5
IvXKO6zbrGVe3BBYOe50Zv8NRzuCisZk3k2jm+FbtR3Iz8kb7yFlGyJWy1VSO//d
5gklJB96xeSCWRErItqdanMHQtDcjWuq3mhiVPitR1bM08OHq515snnXgIRT70cI
qZ35bpGfC2wpRQ==
-----END CERTIFICATE-----
Generated at Thu Jan 1 08:46:18 2026 by rpki-client