This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
File:                     5WzVePQvjeBnI2dnxs_CusvBbgU.mft (raw, json)
Hash identifier:          ZxQsW/3u8EorU72lL+AnxKpfs8PeY+/KqlI32Ex0qrQ=
Subject key identifier:   A5:66:1B:ED:26:DD:69:43:96:1F:FD:9D:D1:40:1C:4D:FF:F1:A3:F9
Authority key identifier: E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05
Certificate issuer:       /CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
Certificate serial:       019BF7D24F37E4D8AF1F62198A2BD8E1565F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
Manifest number:          1767
Signing time:             Mon 26 Jan 2026 01:01:53 +0000
Manifest this update:     Mon 26 Jan 2026 01:01:53 +0000
Manifest next update:     Tue 27 Jan 2026 01:01:53 +0000
Files and hashes:         1: 5WzVePQvjeBnI2dnxs_CusvBbgU.crl (hash: WRG6o/GHdNFYYTGfJe8hJlA/aJFZ2zEEB/getmLLgT0=)
                          2: _xb7dLIH6IMlpZq1SYlWl6nvqS4.roa (hash: oZ1UVmQ5z1c0zOrIXMtPyJxvit0yakzMpq+pTeT+fvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d2:4f:37:e4:d8:af:1f:62:19:8a:2b:d8:e1:56:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e56cd578f42f8de067236767c6cfc2bacbc16e05
        Validity
            Not Before: Jan 26 01:01:53 2026 GMT
            Not After : Jan 27 01:01:53 2026 GMT
        Subject: CN=a5661bed26dd6943961ffd9dd1401c4dfff1a3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:e9:5d:fd:42:2b:2d:43:7a:64:52:c5:1b:
                    9c:0b:ef:3b:fb:f9:d1:87:1b:a0:94:74:63:7b:cd:
                    a2:f3:4b:84:76:70:07:5c:25:3a:a3:d3:9f:69:8b:
                    8b:63:2c:c0:38:65:d8:5e:00:aa:02:33:2c:d0:29:
                    88:d0:12:eb:36:09:fb:35:7c:e9:53:e1:c8:f1:90:
                    83:bb:2e:49:d4:56:8a:43:d7:52:dd:37:d0:c4:71:
                    4a:11:73:3c:f9:40:1b:08:61:bd:cc:95:b0:ae:9a:
                    cd:87:7d:e2:c2:1d:7a:45:fe:e8:1d:fb:74:5b:72:
                    8a:1b:73:c2:89:3f:19:c4:1f:69:67:ac:a6:15:b1:
                    93:af:39:cf:04:39:c5:58:32:4a:9f:4b:2f:2a:fa:
                    7b:6e:85:f0:d8:95:ec:3b:9b:74:a4:d5:48:3f:d4:
                    6c:2a:7b:f8:e8:54:6e:ca:90:79:5d:5b:04:1b:23:
                    c6:bd:07:2e:82:54:13:6a:0d:fa:dd:83:6e:ff:2c:
                    25:c0:31:61:37:9a:55:a8:41:cd:7d:d5:08:03:43:
                    c5:86:b9:1a:e2:9a:f9:e6:8d:c5:27:4d:c0:27:1c:
                    7b:e5:37:08:a8:39:d5:66:b9:98:fd:36:95:51:b6:
                    66:8d:28:6a:c1:b0:a5:3a:8f:08:f2:55:bf:e5:7e:
                    c2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:66:1B:ED:26:DD:69:43:96:1F:FD:9D:D1:40:1C:4D:FF:F1:A3:F9
            X509v3 Authority Key Identifier:
                keyid:E5:6C:D5:78:F4:2F:8D:E0:67:23:67:67:C6:CF:C2:BA:CB:C1:6E:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WzVePQvjeBnI2dnxs_CusvBbgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/29de46-c2e9-48fb-92d4-b7a564afb04b/1/5WzVePQvjeBnI2dnxs_CusvBbgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:96:5d:00:ae:f8:d7:ef:af:7a:d3:05:96:10:f5:ac:04:7b:
         05:e1:e9:b7:92:4d:a7:b4:e7:1f:d8:28:16:f7:7a:e8:4e:44:
         ac:9b:7a:a9:42:f8:e9:10:39:d7:79:16:f4:44:5f:d8:a3:4e:
         11:6d:1f:0c:47:b1:21:8b:8a:5d:a5:68:b0:33:94:a3:ca:b7:
         af:63:15:58:11:37:16:f0:a1:77:3a:02:15:30:4f:53:47:48:
         62:ea:ae:32:5b:63:31:5b:7d:64:1d:0c:35:2b:dd:d6:22:80:
         af:37:5d:eb:55:f3:23:30:f1:17:a6:b0:f5:69:98:26:5b:e0:
         f8:b5:ce:85:43:12:24:1c:fc:e1:ed:ee:28:18:ca:02:9d:de:
         ae:0d:da:38:4d:87:31:67:e3:f0:78:9f:6b:f9:f3:d9:86:c2:
         28:e9:3c:90:de:4c:ee:bc:0a:72:c5:e6:06:b0:2d:89:0e:84:
         db:f7:b8:95:9e:8b:b1:18:41:b9:30:70:fd:65:e8:83:8f:a5:
         1d:90:78:51:75:52:4f:94:78:19:61:13:37:e1:14:74:27:f9:
         0f:d9:67:c4:73:6b:3b:9b:f5:89:d4:a5:50:a0:df:45:12:99:
         8c:83:51:49:d7:f5:93:1d:0c:73:f7:7d:7b:07:79:46:36:86:
         d3:a5:4d:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:12:04 2026 by rpki-client