This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
File:                     5G6atHypH6EyVlhgvN2aEHugMuQ.mft (raw, json)
Hash identifier:          AwBIe2w8qinGadNU18tOKnoJWEKrzxkyRjWcB4XG0D4=
Subject key identifier:   0C:33:19:C6:F8:27:48:CE:78:91:0C:AE:46:2C:E3:37:E8:B0:56:ED
Authority key identifier: E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4
Certificate issuer:       /CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
Certificate serial:       019BF7D16515B1E662B258349AA45E5D19EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
Manifest number:          0BD2
Signing time:             Mon 26 Jan 2026 01:00:53 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:53 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:53 +0000
Files and hashes:         1: 5G6atHypH6EyVlhgvN2aEHugMuQ.crl (hash: ECvtKBiHrIsiTp408qfUFaSpNNxH2OacfQNcs8ROHj0=)
                          2: QS3mViuWefpzRVuut9BCujNEHBk.roa (hash: pncFDsfj5PoDws+gFKzvHR1BHzgW/TNAwcyb1+Rx/Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:65:15:b1:e6:62:b2:58:34:9a:a4:5e:5d:19:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46e9ab47ca91fa132565860bcdd9a107ba032e4
        Validity
            Not Before: Jan 26 01:00:53 2026 GMT
            Not After : Jan 27 01:00:53 2026 GMT
        Subject: CN=0c3319c6f82748ce78910cae462ce337e8b056ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:0b:bb:68:ab:c4:54:fb:88:5e:f1:92:1b:
                    55:16:31:d9:e3:bf:5e:4c:dd:da:8f:65:eb:06:6b:
                    bf:07:0f:64:36:27:64:45:50:fc:b2:50:b4:cd:1e:
                    d2:67:7a:17:41:23:68:ff:98:64:26:88:c6:63:54:
                    17:c8:fc:4e:33:b6:b6:8c:ca:00:f7:83:1d:07:6f:
                    e1:b8:8a:c2:d7:00:37:18:5c:4f:99:5a:98:2b:13:
                    f3:a7:47:44:09:2b:a6:3a:4e:71:6f:6e:54:ec:8d:
                    51:39:d5:ad:30:3d:a2:4a:6f:83:af:a0:56:a4:23:
                    6f:86:fa:66:8d:2f:01:5b:89:56:a3:92:6b:3d:46:
                    57:ab:13:a2:43:5b:eb:c4:6f:f9:70:84:4e:60:0a:
                    5a:9c:91:10:63:f4:a3:c1:74:c2:63:bd:2c:b6:7c:
                    1b:04:42:45:08:c4:0e:e3:b8:23:ad:44:fe:e2:c2:
                    4c:e3:13:72:f1:d7:f9:26:4b:60:78:5c:fe:05:92:
                    92:00:08:9f:79:f9:45:1b:35:db:be:7b:70:0e:4a:
                    f8:cc:6d:89:0a:13:50:32:76:7f:af:7e:e8:09:3b:
                    55:94:9f:83:19:89:a5:64:a8:ed:c4:e6:05:67:d7:
                    29:43:cd:18:87:c5:e8:10:6e:08:42:45:b1:c0:02:
                    7d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:33:19:C6:F8:27:48:CE:78:91:0C:AE:46:2C:E3:37:E8:B0:56:ED
            X509v3 Authority Key Identifier:
                keyid:E4:6E:9A:B4:7C:A9:1F:A1:32:56:58:60:BC:DD:9A:10:7B:A0:32:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5G6atHypH6EyVlhgvN2aEHugMuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/216802-e8f9-4cbc-9d65-b9252cf2cc47/1/5G6atHypH6EyVlhgvN2aEHugMuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:55:63:93:04:2f:47:6c:92:e5:b8:45:a9:3a:4c:31:d7:fd:
         a9:78:76:c8:2a:02:ad:14:0d:a7:8d:3b:72:8c:ee:5b:98:6a:
         44:f2:12:ae:b9:d3:3d:ac:15:06:fa:01:26:db:26:7b:9c:29:
         c7:24:65:5e:aa:fd:1b:98:55:87:c7:0c:21:c2:b6:47:d2:35:
         2b:19:a0:55:0c:ea:66:f2:21:b6:83:d7:d2:2f:61:2d:4b:b0:
         82:9f:73:3c:dd:bd:c9:67:3d:47:51:f5:06:1d:03:54:06:92:
         22:d4:53:8a:72:b2:ed:28:59:33:fb:9a:c6:4b:b5:6b:6d:1a:
         a5:88:f8:a7:5c:fa:75:4f:fc:94:47:88:b2:fe:17:2f:dc:1f:
         a4:e5:87:08:f9:bf:10:4b:d1:de:d3:05:b8:16:e5:2c:21:fc:
         e1:63:27:d3:72:43:07:1c:c1:e3:c4:cb:d6:a4:49:ec:48:bb:
         03:cc:6e:02:8d:ca:4b:32:ae:21:2b:92:f4:26:3d:5a:32:0d:
         9f:78:3f:89:80:19:0b:5c:b9:79:43:37:18:25:00:a3:07:79:
         6c:e6:d9:f5:b1:ca:42:1e:41:b9:98:9c:1f:15:84:c9:fa:f7:
         6e:b8:8d:b2:61:c5:57:54:2e:c9:fc:04:bc:49:a5:68:14:70:
         cf:5a:12:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv30WUVseZislg0mqReXRnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmU5YWI0N2NhOTFmYTEzMjU2NTg2MGJjZGQ5YTEwN2Jh
MDMyZTQwHhcNMjYwMTI2MDEwMDUzWhcNMjYwMTI3MDEwMDUzWjAzMTEwLwYDVQQD
EygwYzMzMTljNmY4Mjc0OGNlNzg5MTBjYWU0NjJjZTMzN2U4YjA1NmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVwLu2irxFT7iF7xkhtVFjHZ479e
TN3aj2XrBmu/Bw9kNidkRVD8slC0zR7SZ3oXQSNo/5hkJojGY1QXyPxOM7a2jMoA
94MdB2/huIrC1wA3GFxPmVqYKxPzp0dECSumOk5xb25U7I1ROdWtMD2iSm+Dr6BW
pCNvhvpmjS8BW4lWo5JrPUZXqxOiQ1vrxG/5cIROYApanJEQY/SjwXTCY70stnwb
BEJFCMQO47gjrUT+4sJM4xNy8df5JktgeFz+BZKSAAifeflFGzXbvntwDkr4zG2J
ChNQMnZ/r37oCTtVlJ+DGYmlZKjtxOYFZ9cpQ80Yh8XoEG4IQkWxwAJ9pwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwzGcb4J0jOeJEMrkYs4zfosFbtMB8GA1UdIwQY
MBaAFORumrR8qR+hMlZYYLzdmhB7oDLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUc2YXRIeXBINkV5VmxoZ3ZOMmFFSHVnTXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yMTY4MDItZThmOS00Y2JjLTlkNjUt
YjkyNTJjZjJjYzQ3LzEvNUc2YXRIeXBINkV5VmxoZ3ZOMmFFSHVnTXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8yMTY4MDItZThmOS00Y2JjLTlkNjUtYjkyNTJjZjJjYzQ3
LzEvNUc2YXRIeXBINkV5VmxoZ3ZOMmFFSHVnTXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ1VjkwQv
R2yS5bhFqTpMMdf9qXh2yCoCrRQNp407cozuW5hqRPISrrnTPawVBvoBJtsme5wp
xyRlXqr9G5hVh8cMIcK2R9I1KxmgVQzqZvIhtoPX0i9hLUuwgp9zPN29yWc9R1H1
Bh0DVAaSItRTinKy7ShZM/uaxku1a20apYj4p1z6dU/8lEeIsv4XL9wfpOWHCPm/
EEvR3tMFuBblLCH84WMn03JDBxzB48TL1qRJ7Ei7A8xuAo3KSzKuISuS9CY9WjIN
n3g/iYAZC1y5eUM3GCUAowd5bObZ9bHKQh5BuZicHxWEyfr3briNsmHFV1QuyfwE
vEmlaBRwz1oSXw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 05:12:12 2026 by rpki-client