This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
File:                     s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft (raw, json)
Hash identifier:          uTQ7sno5jwa94A49R2SkaIoVy2ii3KoxADJ5TBGspdk=
Subject key identifier:   3D:71:36:0F:27:8E:A2:51:72:49:00:AF:1C:2A:3B:B7:C2:1B:85:85
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Certificate issuer:       /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial:       019BF72D944E25BCCE4C1DB869F017519D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
Manifest number:          11C6
Signing time:             Sun 25 Jan 2026 22:01:57 +0000
Manifest this update:     Sun 25 Jan 2026 22:01:57 +0000
Manifest next update:     Mon 26 Jan 2026 22:01:57 +0000
Files and hashes:         1: 7_HY5yB8d3Njtf3VZahbVmixIZU.roa (hash: H45Wi9cbUIzhStJ6D1qNpJlOHim13UV0HCf2YP0fQEc=)
                          2: FiLe_I9IP6W7MphiOr_CiL0bjSs.roa (hash: q1TJFvUMkjNyX0aSOs41/td1gkb7//YLN5yBHlFxZC4=)
                          3: JIIXr3X9vCQszAbNslU1l97JDHE.roa (hash: 1cSDQwO2+YC255/v6AV3wkUxgfk6+iiyEcMIh68CJvY=)
                          4: LFK2KZYQdm49lMZGq09_QCx1zKM.roa (hash: nYysAfjey6lKN0HP83k5T3J+7jNUAsnWPGq1zi3IPys=)
                          5: ZQoXdMphcAyX_vSWGtLFp2lvoas.roa (hash: iFh6LchnjC6OiPt1RjLveej4KNPbVSeFQ+5l4ZDpv0s=)
                          6: pZS2FuCyE0ac7bgviGBWTjEjxK8.roa (hash: BY2QLyJHYDD23aKTMOr6Dhb2Ou5jiMnicXO1uDe86kk=)
                          7: s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl (hash: c+DbUjacQ0g3QANdW2Ni+8l17mfekIFJEoNaFiNHOzw=)
                          8: wDNBjtjhirmC6HysMhN91EuISE4.roa (hash: VJdL+BcRDNdb1Ls5gcb7MknnthUWMMrUmAyuqY4kqkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:2d:94:4e:25:bc:ce:4c:1d:b8:69:f0:17:51:9d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
        Validity
            Not Before: Jan 25 22:01:57 2026 GMT
            Not After : Jan 26 22:01:57 2026 GMT
        Subject: CN=3d71360f278ea251724900af1c2a3bb7c21b8585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:97:b7:21:fb:31:06:a3:10:0f:54:b2:bf:30:
                    39:66:16:ff:f9:2f:9b:02:7a:b5:cc:b5:e0:69:16:
                    a4:97:04:8b:79:80:2c:b0:41:da:d2:66:f4:a7:ae:
                    0f:3c:e4:34:a6:15:80:6d:94:e1:fc:1d:a7:3a:3e:
                    7a:cd:76:ed:17:79:2e:43:43:51:9b:77:13:e8:ee:
                    ac:b6:16:80:1c:f0:71:8f:7e:36:63:3f:36:08:e5:
                    da:8d:62:ee:ac:aa:11:83:27:53:21:19:90:2b:64:
                    fa:65:26:85:c9:1b:f8:ff:5b:8f:8f:1a:dc:4a:58:
                    02:a7:47:ca:6f:b0:e4:4f:ef:a6:50:56:44:6d:db:
                    7b:72:b6:91:9d:63:b6:a2:b0:2f:dc:f9:46:62:fb:
                    af:ed:92:17:c3:dc:fa:41:5c:64:2a:3a:c7:d7:7a:
                    f5:02:3f:28:1c:ef:38:40:2b:93:ec:59:5a:6c:b8:
                    e9:3e:3b:24:93:0a:89:f7:30:bb:88:dc:31:a3:27:
                    35:bc:99:d7:2b:37:aa:23:29:74:32:96:a1:81:cf:
                    1a:21:50:33:fb:90:19:17:e5:93:07:39:40:3e:c0:
                    de:48:e8:a4:0f:db:a2:e5:f6:e7:e4:89:c8:d6:b4:
                    7a:a1:04:11:51:fa:82:5c:03:c6:07:87:99:12:bb:
                    98:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:71:36:0F:27:8E:A2:51:72:49:00:AF:1C:2A:3B:B7:C2:1B:85:85
            X509v3 Authority Key Identifier:
                keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:de:bf:06:bd:f1:e3:31:98:1e:44:a1:ca:a0:71:0c:d2:14:
         1b:47:b6:25:83:a9:94:6d:27:52:f7:1f:0e:e6:fe:47:84:26:
         41:99:ec:d1:35:52:a0:70:9c:35:cd:78:07:9b:95:09:4d:9f:
         af:d1:63:9a:74:1e:f4:3a:34:2e:28:77:0e:fb:06:bb:c7:07:
         10:56:23:e9:7e:c7:2c:a5:ae:67:5d:8e:36:b7:ef:64:08:ea:
         51:e8:70:84:f7:38:6a:83:10:6f:a8:2c:76:e0:2b:0e:b3:af:
         f6:9e:9a:5a:12:21:ce:a7:00:0e:0a:35:7e:da:6c:b5:9a:f0:
         70:52:85:74:b3:46:be:d0:1e:fa:d0:b0:55:96:e5:9c:f1:d7:
         ce:f2:06:cb:88:f9:e6:33:95:c3:06:c0:1d:62:ec:17:1c:f9:
         63:69:ac:c9:f4:57:e4:77:dc:d5:c3:aa:73:4a:5e:d5:cf:4f:
         19:e1:4a:cf:33:12:d4:2c:ff:f4:c5:13:95:a7:ab:99:fb:6c:
         86:66:b8:1d:6b:63:4e:74:a7:bd:68:e3:61:76:72:cf:cc:e8:
         68:f2:d8:93:59:f1:0a:6f:36:2d:2f:02:94:f6:f2:0b:e5:8a:
         41:34:82:83:36:b0:18:f4:b9:3e:3d:0e:f9:91:6d:68:d9:49:
         95:26:00:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 01:47:58 2026 by rpki-client