This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
File:                     5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft (raw, json)
Hash identifier:          2q9d71uY/s7MfUFeSCV9OmbyUTtdTaLixWKsIV7hgBY=
Subject key identifier:   08:1E:F0:9C:87:D9:7D:3B:BB:AA:13:D0:41:87:89:45:69:C1:40:D0
Authority key identifier: E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F
Certificate issuer:       /CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
Certificate serial:       019BF79A4F5D2CF67E3842FFD39E9096FDE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
Manifest number:          0C5A
Signing time:             Mon 26 Jan 2026 00:00:43 +0000
Manifest this update:     Mon 26 Jan 2026 00:00:43 +0000
Manifest next update:     Tue 27 Jan 2026 00:00:43 +0000
Files and hashes:         1: 5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl (hash: kK3UzjKiou7Gl1Y8utD5oNzvESIljfIBGTRUlGXm3gI=)
                          2: N0NwAtFb84h0xfganWJihzoCSpE.roa (hash: /Ubv+K+n65IZQaZN4AFBb/50l8Puw9jgWyG9wc4RYFM=)
                          3: OxaeKc7pRBgah12v_9xLvX75AHM.roa (hash: qygdd+Z/MhrVDqAYLLnF2qLBOy48W3eHlGWo3g+C2qA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:9a:4f:5d:2c:f6:7e:38:42:ff:d3:9e:90:96:fd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e5c340ee5b9daf1a6818f0df407fa5975886b10f
        Validity
            Not Before: Jan 26 00:00:43 2026 GMT
            Not After : Jan 27 00:00:43 2026 GMT
        Subject: CN=081ef09c87d97d3bbbaa13d04187894569c140d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:6b:6d:c3:50:00:5e:7e:65:7b:75:d9:51:b2:
                    8a:1e:8e:7f:b4:d4:84:19:82:10:41:5c:4b:3c:82:
                    a0:54:3c:b2:61:9c:23:1b:e2:e6:b4:6a:45:06:e1:
                    d9:41:6f:ef:92:3c:4a:51:b0:40:d9:73:23:cb:d7:
                    97:75:f4:b9:39:14:1e:b3:7e:82:c5:7d:f2:db:5f:
                    ae:c1:fb:6c:ab:6b:2d:6f:15:6d:b1:cc:dc:6e:81:
                    e6:6f:59:8d:2e:6d:20:fc:ea:5c:28:a8:63:76:7a:
                    8e:b1:9d:8b:bb:30:3a:13:eb:ed:9c:cc:d7:c1:4b:
                    63:25:63:79:90:ef:5d:49:a6:f2:ea:87:8f:27:b5:
                    7b:38:1a:e2:07:eb:bb:4e:2b:6c:c2:c4:8b:75:38:
                    53:9b:e2:c4:c2:a3:33:f8:b0:b6:13:1c:db:73:f0:
                    a0:e0:c2:50:26:59:8d:53:10:85:bb:fa:da:40:2f:
                    9d:c3:e8:d7:5c:2d:21:1d:4d:5f:1c:a9:3d:25:0d:
                    3a:23:75:21:81:b0:3b:d3:1e:12:f6:1a:2d:64:5d:
                    b7:4d:d1:b9:05:4c:77:39:d4:99:63:b2:88:06:9b:
                    cb:a8:20:35:ca:a6:09:1a:57:a9:18:c8:31:40:2f:
                    bc:9b:f1:33:ee:08:af:ce:cc:5e:70:25:87:ae:e1:
                    82:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1E:F0:9C:87:D9:7D:3B:BB:AA:13:D0:41:87:89:45:69:C1:40:D0
            X509v3 Authority Key Identifier:
                keyid:E5:C3:40:EE:5B:9D:AF:1A:68:18:F0:DF:40:7F:A5:97:58:86:B1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5cNA7ludrxpoGPDfQH-ll1iGsQ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d5104c-f64a-44ca-a37b-6e1f2f6851cf/1/5cNA7ludrxpoGPDfQH-ll1iGsQ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f9:b1:31:57:a2:1b:82:8d:dc:80:c3:e8:57:2d:4d:c6:0a:
         35:32:c4:7c:33:56:21:d6:1a:18:0b:b9:be:5b:8b:c3:ca:26:
         28:c2:6d:4b:c2:f5:0b:04:bf:6e:a7:22:93:90:3c:d6:56:e6:
         b7:12:58:e8:d5:9f:38:e0:87:89:e0:87:65:fe:90:53:a2:79:
         4c:74:8e:a1:4c:f6:e2:19:f1:2e:38:34:73:26:e0:54:08:08:
         e7:b6:26:6a:60:c0:cf:90:d4:42:56:c2:29:fd:f2:3d:57:ef:
         2b:9c:2a:9d:32:d6:d6:86:d3:68:cb:e7:be:8e:41:4b:a9:ee:
         67:fa:71:07:a7:41:00:09:63:e6:bc:0f:9a:39:6f:7f:28:f5:
         90:80:eb:8c:44:ba:d9:ee:cb:67:1e:e0:20:45:6b:11:e2:85:
         6e:20:26:c2:77:c8:e8:41:34:4b:bb:fb:2a:ee:80:1a:96:08:
         78:56:b2:12:51:35:22:c8:ab:3f:7a:dd:7a:2f:40:46:bc:72:
         ec:b7:c1:6b:bf:9c:1a:11:d6:e4:53:b5:cd:3a:72:fb:6f:6e:
         a8:bb:59:1a:6e:6e:08:38:69:dc:8a:b7:6f:f6:e5:5b:dc:1d:
         00:13:38:e8:4d:e2:6b:11:0b:5a:4c:c5:43:32:63:97:25:06:
         9e:d5:cc:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv3mk9dLPZ+OEL/056Qlv3pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YzM0MGVlNWI5ZGFmMWE2ODE4ZjBkZjQwN2ZhNTk3NTg4
NmIxMGYwHhcNMjYwMTI2MDAwMDQzWhcNMjYwMTI3MDAwMDQzWjAzMTEwLwYDVQQD
EygwODFlZjA5Yzg3ZDk3ZDNiYmJhYTEzZDA0MTg3ODk0NTY5YzE0MGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGttw1AAXn5le3XZUbKKHo5/tNSE
GYIQQVxLPIKgVDyyYZwjG+LmtGpFBuHZQW/vkjxKUbBA2XMjy9eXdfS5ORQes36C
xX3y21+uwftsq2stbxVtsczcboHmb1mNLm0g/OpcKKhjdnqOsZ2LuzA6E+vtnMzX
wUtjJWN5kO9dSaby6oePJ7V7OBriB+u7TitswsSLdThTm+LEwqMz+LC2Exzbc/Cg
4MJQJlmNUxCFu/raQC+dw+jXXC0hHU1fHKk9JQ06I3UhgbA70x4S9hotZF23TdG5
BUx3OdSZY7KIBpvLqCA1yqYJGlepGMgxQC+8m/Ez7givzsxecCWHruGCfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAge8JyH2X07u6oT0EGHiUVpwUDQMB8GA1UdIwQY
MBaAFOXDQO5bna8aaBjw30B/pZdYhrEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2It
NmUxZjJmNjg1MWNmLzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9kNTEwNGMtZjY0YS00NGNhLWEzN2ItNmUxZjJmNjg1MWNm
LzEvNWNOQTdsdWRyeHBvR1BEZlFILWxsMWlHc1E4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdPmxMVei
G4KN3IDD6FctTcYKNTLEfDNWIdYaGAu5vluLw8omKMJtS8L1CwS/bqcik5A81lbm
txJY6NWfOOCHieCHZf6QU6J5THSOoUz24hnxLjg0cybgVAgI57YmamDAz5DUQlbC
Kf3yPVfvK5wqnTLW1obTaMvnvo5BS6nuZ/pxB6dBAAlj5rwPmjlvfyj1kIDrjES6
2e7LZx7gIEVrEeKFbiAmwnfI6EE0S7v7Ku6AGpYIeFayElE1IsirP3rdei9ARrxy
7LfBa7+cGhHW5FO1zTpy+29uqLtZGm5uCDhp3Iq3b/blW9wdABM46E3iaxELWkzF
QzJjlyUGntXM1g==
-----END CERTIFICATE-----
Generated at Mon Jan 26 03:11:47 2026 by rpki-client