This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
File:                     5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft (raw, json)
Hash identifier:          adgzHjaPxjfoaULiEeaZl0PCEjS2WJoxqTYM1WOqXys=
Subject key identifier:   A5:DB:DB:F2:C9:51:74:8A:F0:04:AE:2F:7A:31:85:19:E6:24:62:25
Authority key identifier: E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97
Certificate issuer:       /CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
Certificate serial:       019BF2E1CF1AD177DB0EF38DAB0815CAE87C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
Manifest number:          12C7
Signing time:             Sun 25 Jan 2026 02:00:43 +0000
Manifest this update:     Sun 25 Jan 2026 02:00:43 +0000
Manifest next update:     Mon 26 Jan 2026 02:00:43 +0000
Files and hashes:         1: 5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl (hash: ZSCBRv2bW37P306LlmJa/QRqtA+G3Cs963+pXSPlFUk=)
                          2: IFreR7G3pVUxUHJmvWKSmdyyxV4.roa (hash: 1l0It7YxkUDUXasb2TijXHU9KlO973Zbw1AspnDQIIE=)
                          3: XvO3KugGyIUqy8DdZrWXqALiZv8.roa (hash: yUk7+RcCJLoQMsjAjhgKG5a6qMpWaeW1ZTTyneRurSc=)
                          4: ceyOuOPjIFLM94nq_gIZQX5eqOk.roa (hash: vIPUa1tUzFrPLIwsoGGabQ0ECJy+Q9gJ/RWv+H6Fq+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 02:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f2:e1:cf:1a:d1:77:db:0e:f3:8d:ab:08:15:ca:e8:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4a714ffc598b15647bbafe2c6460a87eafbcf97
        Validity
            Not Before: Jan 25 02:00:43 2026 GMT
            Not After : Jan 26 02:00:43 2026 GMT
        Subject: CN=a5dbdbf2c951748af004ae2f7a318519e6246225
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:27:74:60:dd:80:23:bb:e3:78:bb:04:4a:
                    c6:a8:fd:88:cd:ea:68:d7:a5:78:f5:cf:00:40:fc:
                    3b:69:66:32:a5:2e:cf:08:74:1e:c1:1f:66:b1:34:
                    7a:60:71:17:7d:a1:1b:92:c7:af:d3:0d:63:b1:b3:
                    0c:19:e3:65:ef:88:83:78:25:28:1c:54:4f:3b:37:
                    ff:d7:a4:09:5d:30:95:30:87:17:fd:f2:2f:f3:18:
                    24:d6:0a:9e:bf:30:ac:3b:47:3c:6d:e6:d3:fc:a9:
                    8a:2a:56:0b:ca:1f:74:fa:3d:ab:34:c1:eb:62:20:
                    91:77:8e:85:f9:20:81:55:c7:e4:31:e2:0e:d0:4c:
                    da:a5:97:b3:dc:c1:8a:a8:8a:b7:70:56:10:f8:6a:
                    b4:99:05:ad:34:b7:ec:3a:1a:43:d3:a7:0e:49:01:
                    13:e9:c6:94:33:44:fa:fc:6d:c0:b7:57:00:67:dd:
                    73:d0:7e:b9:89:77:40:ef:50:b0:26:5b:38:5b:2a:
                    5c:0e:e6:59:f8:91:c3:4b:71:4d:2d:00:48:c4:41:
                    79:d5:57:0e:1d:4d:73:99:a0:74:62:c0:6f:ec:68:
                    35:04:5e:4b:59:6d:cc:bc:15:0e:e6:e6:1f:84:b9:
                    f0:8f:c8:4f:a7:ea:0b:9d:73:07:8f:9b:ef:af:48:
                    6f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DB:DB:F2:C9:51:74:8A:F0:04:AE:2F:7A:31:85:19:E6:24:62:25
            X509v3 Authority Key Identifier:
                keyid:E4:A7:14:FF:C5:98:B1:56:47:BB:AF:E2:C6:46:0A:87:EA:FB:CF:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5KcU_8WYsVZHu6_ixkYKh-r7z5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/d96da6-12b2-446e-8d99-7cb345e8541a/1/5KcU_8WYsVZHu6_ixkYKh-r7z5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:23:2e:99:dd:09:98:d7:bd:02:63:79:fe:ca:bc:c9:29:e8:
         7b:7d:59:e2:01:3e:0d:ba:40:16:d3:09:0e:29:5d:77:78:93:
         6f:51:d2:cf:0d:85:d6:c1:d0:08:06:c5:ca:9a:07:d5:ec:8c:
         55:b5:37:88:e8:49:d5:68:3f:4e:aa:b0:86:cb:cf:df:1d:b1:
         bc:ee:56:b3:33:7b:88:a2:63:eb:3e:7f:a2:ca:8b:64:a3:69:
         fa:5b:84:35:d8:f2:68:8d:86:d8:d8:2f:0c:e4:86:b4:42:8e:
         34:af:54:ef:55:8b:f3:e7:86:e7:f1:d6:ab:f7:b9:b1:d4:a2:
         35:16:bc:3b:67:22:4e:91:e3:17:0e:a0:dd:3c:47:95:f5:d1:
         29:62:ba:22:6e:d3:31:65:d4:6b:f5:1a:4b:c9:d4:22:cf:01:
         98:a4:68:9e:ac:78:2d:74:31:ff:82:ce:96:7f:bf:ad:7e:89:
         76:2d:a3:4a:fa:00:ae:a3:bf:ac:96:54:f5:43:85:6e:52:bc:
         38:5e:59:29:f5:92:cb:0f:b3:76:32:38:e0:aa:01:7a:c2:a9:
         72:bc:25:ea:2b:e8:5b:75:3f:5a:08:fd:27:1e:16:e6:d4:99:
         11:dc:98:76:4e:d4:b1:4c:7d:56:a3:ce:d7:4c:50:d8:b3:65:
         e6:18:84:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 12:15:52 2026 by rpki-client