This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
File:                     C5DjdpRNMClN6kHyH7fx4co2ipM.mft (raw, json)
Hash identifier:          IFmSGNdedo153CeUG8Z21SFZdoPrA1Zy8oeP2O/loEU=
Subject key identifier:   17:BE:32:41:B2:1B:74:44:E8:FD:35:42:DB:64:DD:2A:EB:73:CC:D6
Authority key identifier: 0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93
Certificate issuer:       /CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
Certificate serial:       019BF53E8A6146E3BEFFD0685CBF70C6BEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
Manifest number:          0263
Signing time:             Sun 25 Jan 2026 13:01:15 +0000
Manifest this update:     Sun 25 Jan 2026 13:01:15 +0000
Manifest next update:     Mon 26 Jan 2026 13:01:15 +0000
Files and hashes:         1: C5DjdpRNMClN6kHyH7fx4co2ipM.crl (hash: N2FU7Mzyb76IshatLF3J5do24oU2M92TpBk4MyIr66k=)
                          2: TUc2gbf6MWuXY9TL4fj7htCzvew.roa (hash: It/V0gupbk0YCdz0m2E/YgmbfksuMYBsp7YPvJMD+P0=)
                          3: boz2HEWAr2I9MdgKm-5fDjqxBzg.roa (hash: bA5e5p7+fdjhJJLHq6iEFFRrnnb2+YqZFJoCCpP2MWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:3e:8a:61:46:e3:be:ff:d0:68:5c:bf:70:c6:be:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b90e376944d30294dea41f21fb7f1e1ca368a93
        Validity
            Not Before: Jan 25 13:01:15 2026 GMT
            Not After : Jan 26 13:01:15 2026 GMT
        Subject: CN=17be3241b21b7444e8fd3542db64dd2aeb73ccd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a2:76:c0:4a:54:b2:d1:fd:15:ef:16:fb:d5:
                    51:84:1e:15:27:8d:15:e8:13:7b:ec:a8:79:eb:d1:
                    ae:5c:e4:8b:28:01:83:d1:95:ee:dd:fc:e7:99:2f:
                    ac:ae:0e:5a:86:58:e4:50:f5:20:15:f7:5e:37:7c:
                    90:7f:9f:fe:fc:f4:c0:a6:ba:36:fe:9a:ed:2a:93:
                    bd:47:53:a6:7d:06:91:01:3b:2b:bb:87:76:17:94:
                    f1:67:47:39:5e:3d:24:00:e2:24:a6:de:32:db:77:
                    46:31:2c:95:46:54:a7:c4:da:cc:b8:63:62:86:28:
                    d8:18:8b:24:79:ea:df:d1:a9:18:b9:8a:be:a2:7e:
                    23:52:5a:ca:55:21:bc:5b:b9:e9:5d:c9:68:b0:d1:
                    c5:f1:3d:40:37:a6:86:17:71:c0:11:11:ef:ac:c9:
                    4c:fb:c1:d3:87:28:a8:0d:a1:e9:03:f4:e3:4d:a2:
                    34:4a:15:30:4a:2b:1c:0e:c2:64:4f:f7:55:7c:b7:
                    2f:0f:98:22:d5:47:bb:6a:84:cc:43:0d:5c:19:74:
                    d0:b6:b1:56:d8:55:f9:3c:f2:e6:d9:51:06:4b:7b:
                    5d:7f:ad:e9:ed:36:9b:84:ba:9a:79:df:e7:1d:c6:
                    b0:76:31:89:10:32:07:af:b2:56:c7:f0:79:4f:e2:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BE:32:41:B2:1B:74:44:E8:FD:35:42:DB:64:DD:2A:EB:73:CC:D6
            X509v3 Authority Key Identifier:
                keyid:0B:90:E3:76:94:4D:30:29:4D:EA:41:F2:1F:B7:F1:E1:CA:36:8A:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5DjdpRNMClN6kHyH7fx4co2ipM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/820e72-5706-4620-a990-20a3218b98cd/1/C5DjdpRNMClN6kHyH7fx4co2ipM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:c5:df:6b:af:a1:69:9a:a8:ae:f0:ca:89:d2:a6:1d:f2:
         d1:c6:ab:2c:51:34:aa:2e:00:d9:f6:e9:f4:69:16:f2:78:92:
         76:db:9f:0b:45:24:eb:54:9f:b3:5e:46:f1:b2:9e:0b:a1:86:
         7b:c6:7b:cb:61:12:9a:be:9f:b9:be:66:cc:60:d9:8b:be:d0:
         6c:26:23:e0:87:89:82:f6:d5:b6:71:5b:e4:7e:03:52:0c:bd:
         a8:a8:b2:81:ca:df:1f:f4:6e:ec:00:e7:c4:47:be:e4:0c:e7:
         31:56:e8:a7:5f:33:45:6a:07:6d:36:21:47:7a:4f:f0:fc:92:
         b7:5b:5e:89:9d:70:91:2d:aa:08:de:69:7e:e4:b8:6c:3d:4f:
         63:b3:e8:19:28:26:51:d4:27:93:28:80:ee:d6:d3:91:42:7f:
         49:b8:3d:1a:ab:b4:21:db:3a:d4:7e:20:14:57:aa:a6:10:7b:
         c4:ff:29:ae:f5:d1:da:28:73:18:a2:90:58:d3:7d:26:40:49:
         a1:1c:a1:bc:28:d6:31:cf:34:17:b1:7b:4e:5d:7e:38:ca:68:
         30:9d:2b:2e:dd:c9:7b:34:32:7b:7b:dc:21:59:a4:3e:c6:30:
         e3:68:bf:f6:ff:1d:fa:f8:03:f4:50:9b:5e:43:bf:a2:d3:e9:
         8e:e7:6e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:21:49 2026 by rpki-client