This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
File:                     1-14u6ugu75tlf-J5UmcmECD5RMk.mft (raw, json)
Hash identifier:          7nvMWO4/tTb+jf4Vh1zK713Tl3cxaiBmoGoYTRTc2k4=
Subject key identifier:   F5:09:54:F8:1D:A9:E2:99:D3:7E:F8:35:0C:6C:45:7B:CF:32:9D:08
Authority key identifier: FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9
Certificate issuer:       /CN=fb5e2eeae82eef9b657fe2795267261020f944c9
Certificate serial:       019BF7D14BE1A0ECAD5EA1082F790BCF0CDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
Manifest number:          0373
Signing time:             Mon 26 Jan 2026 01:00:47 +0000
Manifest this update:     Mon 26 Jan 2026 01:00:47 +0000
Manifest next update:     Tue 27 Jan 2026 01:00:47 +0000
Files and hashes:         1: 1-14u6ugu75tlf-J5UmcmECD5RMk.crl (hash: xWTay/M6cGmDwJS0OCWEZhR+LZzQq4wY4DspV2CVjYs=)
                          2: zTtjoNNmqNJk4uedDe7ahXQuOF8.roa (hash: dHODXqFZoANMRWjrQgYBV+M06zr2Vxc9B/4+ABxunPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f7:d1:4b:e1:a0:ec:ad:5e:a1:08:2f:79:0b:cf:0c:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5e2eeae82eef9b657fe2795267261020f944c9
        Validity
            Not Before: Jan 26 01:00:47 2026 GMT
            Not After : Jan 27 01:00:47 2026 GMT
        Subject: CN=f50954f81da9e299d37ef8350c6c457bcf329d08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8c:62:37:df:52:ba:3a:84:a6:ea:11:a9:f7:
                    73:6e:cd:60:d4:8e:78:69:5e:8a:c7:47:5c:b8:66:
                    df:fa:21:f9:1a:7f:d9:b9:78:67:2f:0c:51:ed:1e:
                    22:37:52:b4:99:65:03:ed:f8:65:f0:a5:6e:a7:88:
                    7b:1e:62:c8:06:a2:8a:d9:91:9b:43:05:f8:f4:1b:
                    1f:1c:f5:1f:9b:3d:0a:75:3f:0c:57:55:07:18:a8:
                    f6:cf:6c:78:f4:b2:ae:3f:75:04:59:89:1a:2d:a7:
                    f9:3e:ee:3d:27:3e:c4:c4:e2:07:95:13:4c:d5:d4:
                    e4:7e:46:38:e8:25:2d:4d:12:3e:97:8d:99:9d:53:
                    86:5e:5e:1e:4a:9c:f9:ba:08:e0:77:bf:99:1a:d3:
                    ee:a8:ba:1a:0d:01:54:68:42:f0:2c:42:c6:d7:c5:
                    74:1a:74:11:cd:16:1e:e3:b2:77:1b:77:90:c2:34:
                    cc:ab:c9:8b:44:00:e2:41:83:4f:59:38:e5:2e:8d:
                    ba:8b:84:86:fe:48:cf:c5:61:92:0f:8c:e2:13:42:
                    26:50:8a:ae:86:a7:15:d6:7b:1d:a5:73:f0:1f:a5:
                    e9:b9:72:97:01:f2:36:93:db:be:e5:68:82:f1:38:
                    83:98:a0:a4:2a:9c:d5:89:33:78:76:b8:57:bd:f1:
                    53:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:09:54:F8:1D:A9:E2:99:D3:7E:F8:35:0C:6C:45:7B:CF:32:9D:08
            X509v3 Authority Key Identifier:
                keyid:FB:5E:2E:EA:E8:2E:EF:9B:65:7F:E2:79:52:67:26:10:20:F9:44:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-14u6ugu75tlf-J5UmcmECD5RMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/cc0692-cc99-4545-bc50-eaf3ddb0a1bb/1/1-14u6ugu75tlf-J5UmcmECD5RMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:b9:bc:d7:69:2d:9e:78:88:24:8b:b2:f0:fb:b4:ef:82:4a:
         e1:2d:60:85:e3:ad:66:a7:eb:33:65:9c:f2:9d:4c:25:8c:45:
         62:a2:99:95:09:85:f8:ea:89:f5:ca:31:89:8d:e4:cd:58:3c:
         7b:be:44:a4:b5:0f:ee:0e:3e:87:be:ad:e7:8e:1a:d7:3a:83:
         3a:6d:e9:cc:d1:a5:31:8c:a2:90:fd:29:d8:dd:29:95:f4:4b:
         4a:cf:d3:ae:cd:d7:d9:0d:93:40:b3:89:01:3b:67:3a:2e:c0:
         cb:aa:63:b7:e3:7e:9e:5a:96:fd:91:7a:91:28:d9:33:71:15:
         61:6a:e6:b0:38:af:02:37:a7:54:b0:f7:a8:96:69:b5:5d:b8:
         2e:ce:e4:21:93:32:ac:24:b0:26:97:af:13:65:3a:7d:6c:dd:
         41:34:d1:e3:10:a6:5e:49:95:40:f2:72:38:03:f5:ff:11:55:
         55:ed:66:9e:98:1d:fc:14:78:ff:03:34:42:a1:fb:ae:36:33:
         0b:d8:a5:29:2e:3c:a9:dc:81:a9:4b:06:41:09:cc:86:43:84:
         e9:25:39:e2:52:82:a9:46:3d:c4:e0:93:27:06:62:8e:bb:04:
         8f:c0:03:c4:9d:46:1a:95:e7:9c:af:ca:fa:f1:04:f8:a9:83:
         68:7f:19:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 05:36:42 2026 by rpki-client