This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
File:                     Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft (raw, json)
Hash identifier:          UzYN11S+z2elJSSP2igh3Xv3n2nCXipX8PJBv7H+kdM=
Subject key identifier:   56:9C:0A:86:D4:0D:1A:5A:B1:50:CA:01:4C:19:08:FB:4D:E4:8C:8A
Authority key identifier: 5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74
Certificate issuer:       /CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
Certificate serial:       019BF79A7F7EAB44C8F78BAF882B80E01246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
Manifest number:          17EA
Signing time:             Mon 26 Jan 2026 00:00:56 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:56 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:56 +0000
Files and hashes:         1: GqSD-huFyN5KnbmOJE2G9Ex44l8.roa (hash: 3Qs/JfYQSZ6IzynE4ipg87qcZBEyHL3uWN4yF6V7P0w=)
                          2: VS_M4cAagWUGuW9fqRkh-RrWxeM.roa (hash: hZcQF43INC8Yz5JTh0PAiO/K0ZNFR1rzI3rKsJwe74E=)
                          3: Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl (hash: UqvcuPRmNXKj0AG6UYARp+fdlvwE7jdG+a2B6BUkKpc=)
                          4: rwfC2i-yhf4UtPPyaXqIB4OR2c8.roa (hash: 7pkGwTQxoCILPcgqkjDlu2UDM7lXD5BJiZpj+8CPoC8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:7f:7e:ab:44:c8:f7:8b:af:88:2b:80:e0:12:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5eccb7cd1b9d6fc39d7158f2fe9cf5217a12d374
        Validity
            Not Before: Jan 26 00:00:56 2026 GMT
            Not After : Jan 27 00:00:56 2026 GMT
        Subject: CN=569c0a86d40d1a5ab150ca014c1908fb4de48c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:49:b9:37:4f:f6:fc:57:ee:d7:4b:2a:03:df:
                    67:5e:16:d7:41:be:84:26:25:6b:6a:5b:4a:67:68:
                    52:b4:9d:8b:79:bd:8f:97:31:26:44:2a:4b:43:1d:
                    dc:1a:fb:d3:7e:d7:d8:d8:58:52:59:e2:df:16:f2:
                    9e:da:af:b5:b9:8a:c4:48:f6:bd:99:18:0e:ef:49:
                    e9:1a:b5:c0:67:f8:50:6a:90:cb:9f:0e:7c:98:99:
                    d2:5d:f5:6b:c0:95:eb:3b:7c:46:23:6e:9c:a1:cb:
                    6b:7a:7c:2d:c2:d2:94:65:88:2a:53:e5:de:11:82:
                    6c:57:1e:d3:81:e9:e3:12:02:cf:79:d0:16:d0:41:
                    0d:70:b9:67:e0:8b:06:ec:18:6b:e9:70:d0:a2:f2:
                    1f:74:33:fe:91:bf:bc:8b:36:66:5d:57:a0:95:56:
                    3a:e9:50:40:25:b2:09:35:4f:10:b7:12:fe:d2:ee:
                    44:0f:2e:e6:ab:99:76:b5:c9:13:d5:10:34:e7:8f:
                    d4:27:af:f3:88:59:fe:ed:31:62:9f:cd:29:b0:ff:
                    dd:28:21:39:e0:06:e0:a6:70:55:e6:4b:59:b2:f4:
                    43:d5:cc:a2:31:7d:6c:3c:b3:c6:c2:14:7d:86:a1:
                    8f:f8:57:5b:6d:ad:82:2f:98:ef:cc:5a:61:3c:c7:
                    8b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9C:0A:86:D4:0D:1A:5A:B1:50:CA:01:4C:19:08:FB:4D:E4:8C:8A
            X509v3 Authority Key Identifier:
                keyid:5E:CC:B7:CD:1B:9D:6F:C3:9D:71:58:F2:FE:9C:F5:21:7A:12:D3:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xsy3zRudb8OdcVjy_pz1IXoS03Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/edc8f3-0bb2-41ab-ba64-d22967e22ef0/1/Xsy3zRudb8OdcVjy_pz1IXoS03Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e2:09:12:ab:eb:5d:76:b9:c4:b3:be:e2:47:3c:11:8c:2c:
         32:dd:d1:55:fb:8d:3b:d8:a7:15:de:bc:2e:a6:b7:8b:c7:9f:
         39:c5:dc:8c:41:51:35:6f:36:4c:62:6a:58:90:3a:7e:1a:19:
         21:2d:97:2e:63:a6:7d:b0:ba:b8:4b:cb:01:b3:4b:25:aa:f3:
         86:23:c4:19:96:2c:b3:39:35:f9:be:ef:2c:c8:be:e6:2d:1a:
         e3:60:74:8f:54:80:10:49:8d:d7:06:57:21:84:ac:b1:cb:ff:
         ef:70:74:5e:24:38:fa:e0:b1:5b:03:a1:84:43:d9:0d:21:8d:
         c9:e4:54:83:a3:89:ad:10:57:ee:bc:c2:ef:c1:2d:d6:1d:4d:
         42:e5:ac:89:c1:1e:7c:cd:50:b9:b8:3e:0c:64:ed:ce:20:1a:
         db:0b:e7:86:6a:bc:0a:8a:6b:3d:53:0e:f6:7f:82:78:59:fe:
         f4:ff:f2:67:02:2d:15:81:c6:d7:93:97:e1:32:7b:d6:e0:6a:
         73:d9:20:09:d4:d1:de:2d:41:37:9c:7a:67:9f:85:f7:6e:ac:
         d2:a0:88:0a:1a:4a:82:a1:3f:f1:16:6e:e3:c1:91:c4:4c:b6:
         db:90:cb:a5:4c:26:0a:56:07:4b:99:5d:40:4f:93:ea:96:77:
         5f:92:e0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 03:12:16 2026 by rpki-client