This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File:                     1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier:          C+expLdz7zf7cRO/cMDq/+mhw1XNCE8VWYuxa7CgPUw=
Subject key identifier:   67:92:4C:DD:C6:AF:03:F8:E5:2E:A1:6E:79:6B:60:E8:25:82:8E:93
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer:       /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial:       019BF1982FC571B60A669B12D4FCE905C501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number:          1136
Signing time:             Sat 24 Jan 2026 20:00:41 +0000
Manifest this update:     Sat 24 Jan 2026 20:00:41 +0000
Manifest next update:     Sun 25 Jan 2026 20:00:41 +0000
Files and hashes:         1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: tM1QoSztlOeOnR1BHCfSHAmmE8vT9iIY5yAZjtiSX98=)
                          2: jM4bCus_MOUyOpnMWkBG4DEReus.roa (hash: vMgGiLHRCjWBGhS9GHzMlMhzJpcFt9Lx17KOsSP6sQ8=)
                          3: v4vgN5S5raK6CZzGiAArElrxR7M.roa (hash: xT4jBApJuBPFeaE1dP9JBk2mZGCvg2bKp+Nh1yHS3XY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Jan 2026 20:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f1:98:2f:c5:71:b6:0a:66:9b:12:d4:fc:e9:05:c5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
        Validity
            Not Before: Jan 24 20:00:41 2026 GMT
            Not After : Jan 25 20:00:41 2026 GMT
        Subject: CN=67924cddc6af03f8e52ea16e796b60e825828e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:52:a9:51:ad:f7:37:c9:8a:96:ff:b4:a1:a8:
                    4c:f3:fb:bc:dc:96:e3:a3:98:81:d8:c6:95:53:91:
                    4a:17:90:fd:bf:f2:aa:aa:75:00:ac:dc:15:ac:b6:
                    50:b5:b2:0d:4d:d7:f6:ec:fd:a3:e4:ad:00:2e:9f:
                    57:2b:3b:6a:a1:9b:43:f3:58:88:1e:6f:3c:f1:5d:
                    1e:77:91:cc:a6:15:bf:42:22:34:46:ba:fd:61:a4:
                    b0:c4:04:8e:a7:78:11:0e:55:c9:0b:7e:f2:6d:b9:
                    0d:ab:11:15:22:d4:0c:cd:3f:4a:3f:87:56:39:e7:
                    5f:04:51:6e:f4:84:21:55:ed:cf:c5:af:35:a8:f4:
                    75:db:38:5c:06:cc:a9:e3:a8:3f:0f:15:86:99:09:
                    eb:d2:89:51:54:5e:d5:f4:b9:59:e2:ba:29:6e:d2:
                    45:40:ea:28:bc:f3:59:cf:38:70:c3:41:96:54:99:
                    21:8d:f1:0f:26:3d:2a:88:40:e8:be:92:a5:b4:f7:
                    08:c3:25:a3:43:04:f5:f2:e5:e5:93:c4:9a:4d:79:
                    d5:47:c8:c9:9b:1a:b1:4f:7d:0d:7a:26:42:c7:6f:
                    a8:ac:74:e4:34:b0:98:46:2c:54:31:6d:84:b4:28:
                    3a:f2:5b:0b:4d:0f:0b:5a:99:47:c0:9f:c8:3c:c7:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:92:4C:DD:C6:AF:03:F8:E5:2E:A1:6E:79:6B:60:E8:25:82:8E:93
            X509v3 Authority Key Identifier:
                keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:dc:a7:db:4e:d7:ae:3b:9c:91:5f:ff:76:11:e0:61:9f:09:
         d6:ff:7c:18:84:8a:c3:de:0f:91:62:83:4c:ec:7d:4b:39:af:
         f2:6c:3f:c5:0e:f6:34:bd:b2:3c:ab:55:66:1b:bd:c4:8d:32:
         65:47:e6:31:e9:f4:9c:c9:54:c0:0b:31:39:63:d2:2e:30:1e:
         1d:01:f0:ee:3b:40:7d:db:b4:80:6a:78:9c:a5:c7:38:c6:1d:
         79:49:2b:91:2b:52:0b:ef:ca:1c:5b:2d:da:0c:66:bf:62:54:
         44:42:be:82:37:28:b2:8c:6d:bc:f8:16:d4:24:17:1c:c6:3b:
         ce:d6:43:cb:d2:75:b3:38:07:59:05:8c:4a:e6:d8:07:bb:ac:
         02:31:72:fd:95:ac:c4:9d:01:90:69:20:52:3e:3b:94:88:9f:
         91:18:e9:1d:a9:1d:89:b8:42:87:ec:8e:40:4b:dc:f5:ca:3b:
         d1:c6:8b:8d:7b:cb:67:93:dc:48:e7:5a:3e:07:66:ae:29:5c:
         3b:93:79:7f:86:d7:b1:48:2e:fb:8d:2c:1c:54:c2:6f:79:16:
         6f:47:3f:00:f7:5b:e8:a3:3a:be:bf:dd:35:80:20:c8:7a:64:
         7d:d6:1e:77:2c:b0:90:99:11:c0:43:02:91:c6:53:06:e2:6b:
         0a:62:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 07:28:35 2026 by rpki-client