This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
File:                     F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft (raw, json)
Hash identifier:          kdzSKK72Fu20QuSRkBbizsVubDdhPA6uxuVRIMomaXU=
Subject key identifier:   78:ED:00:2B:00:7A:12:6D:B7:AA:11:52:9E:85:12:C3:EE:D9:E1:9D
Authority key identifier: 17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6
Certificate issuer:       /CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
Certificate serial:       019BF6F5FB6E010D69244464F56A945B69B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
Manifest number:          121E
Signing time:             Sun 25 Jan 2026 21:01:14 +0000
Manifest this update:     Sun 25 Jan 2026 21:01:14 +0000
Manifest next update:     Mon 26 Jan 2026 21:01:14 +0000
Files and hashes:         1: F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl (hash: /YwwDQ8wgr7XY6QfaDLzTVNrH4cXX4CrnDJJzElFjAc=)
                          2: MwjqyVMrj31F474MSeKkhNXzvoI.roa (hash: m7bqaTX59YwG3k1du3WuNAO3cJYKNz+DJfHgg5XKNsA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f6:f5:fb:6e:01:0d:69:24:44:64:f5:6a:94:5b:69:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=179239f9913dfc7d7aaaa95ff4c9b61bf42b72d6
        Validity
            Not Before: Jan 25 21:01:14 2026 GMT
            Not After : Jan 26 21:01:14 2026 GMT
        Subject: CN=78ed002b007a126db7aa11529e8512c3eed9e19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:54:0c:cc:e4:cf:6f:c5:13:5a:73:a1:a3:
                    03:bb:29:40:9d:92:b8:db:0d:86:0a:b3:ea:6b:a1:
                    6e:eb:29:32:9f:0b:00:f3:42:e3:c5:5d:9b:67:1c:
                    eb:70:2b:ef:c8:5b:67:10:96:02:8d:50:ca:f3:4e:
                    17:0a:71:66:94:84:47:26:25:ad:19:73:a4:10:d9:
                    87:01:18:77:d2:75:5d:44:93:b1:ae:5a:f1:eb:7c:
                    fc:d8:07:6f:c0:d8:ae:3c:d1:6c:91:99:4e:63:94:
                    11:06:7d:4a:a7:7b:79:2a:28:3c:4e:f6:ca:40:6e:
                    d7:da:7f:e2:9a:79:08:e2:11:70:16:43:43:86:f5:
                    44:a0:09:44:2f:5e:0b:28:97:46:f3:6a:3f:3c:c1:
                    b4:4c:53:84:9b:af:b7:02:65:04:53:48:f1:76:6e:
                    32:42:be:fc:06:e2:b9:8d:5d:7a:e0:92:ab:dc:18:
                    00:23:e7:8f:d2:a5:28:81:3e:99:ea:1e:74:e8:9f:
                    96:b9:df:35:e0:38:11:f7:5a:02:ec:96:85:94:cc:
                    d6:ed:45:5b:4f:be:15:25:28:ad:14:cd:6a:9b:74:
                    40:cd:64:3f:f9:7e:db:7a:6d:2d:80:58:ce:b8:36:
                    d7:9b:29:1e:88:9f:63:81:82:33:ec:83:8b:59:74:
                    31:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:ED:00:2B:00:7A:12:6D:B7:AA:11:52:9E:85:12:C3:EE:D9:E1:9D
            X509v3 Authority Key Identifier:
                keyid:17:92:39:F9:91:3D:FC:7D:7A:AA:A9:5F:F4:C9:B6:1B:F4:2B:72:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5I5-ZE9_H16qqlf9Mm2G_QrctY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/d3149c-f4dc-4837-8b86-c612305cf089/1/F5I5-ZE9_H16qqlf9Mm2G_QrctY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fe:ed:41:3c:fd:a7:e2:c6:cc:18:d9:61:17:ce:38:5e:15:
         12:d4:94:9b:ed:d9:aa:ef:fd:26:8a:9b:cf:40:32:8e:07:10:
         92:31:6f:a8:b4:a3:6f:f6:6a:57:0a:2f:d6:b9:eb:76:57:d8:
         63:a7:8f:cc:c9:b3:23:09:ac:32:3e:17:1d:6b:ea:48:b4:ea:
         c3:1d:86:06:17:30:00:f3:3e:18:cd:dc:16:af:33:01:fa:a2:
         52:a6:39:95:dd:37:7e:2a:f0:0a:d0:26:65:bf:da:43:81:fb:
         76:3c:c3:ee:6b:ea:13:ba:75:4f:6a:bc:1e:44:ca:b8:1a:e2:
         87:a2:9c:03:1e:f5:98:36:08:21:d3:72:00:54:6c:49:a9:2c:
         ba:0e:94:c7:3f:53:45:64:bf:42:c3:86:19:f8:a0:1a:b7:75:
         8d:ec:e1:10:0a:29:09:87:59:9d:04:4d:6d:a5:f4:8a:b2:e6:
         16:02:e5:56:0c:f9:b5:79:db:d2:a3:0c:f7:7c:1c:5f:5f:e4:
         3c:64:ec:05:e3:5f:d4:9d:e6:c6:96:9a:fd:8c:70:96:78:c1:
         17:4f:d7:d0:e1:be:d9:8e:8c:c5:fc:51:f5:1c:26:ab:ea:49:
         38:95:d6:cd:f1:17:49:46:be:45:68:07:a1:f5:b0:d6:08:7a:
         1f:fb:bc:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZv29ftuAQ1pJERk9WqUW2mxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTIzOWY5OTEzZGZjN2Q3YWFhYTk1ZmY0YzliNjFiZjQy
YjcyZDYwHhcNMjYwMTI1MjEwMTE0WhcNMjYwMTI2MjEwMTE0WjAzMTEwLwYDVQQD
Eyg3OGVkMDAyYjAwN2ExMjZkYjdhYTExNTI5ZTg1MTJjM2VlZDllMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlhUDMzkz2/FE1pzoaMDuylAnZK4
2w2GCrPqa6Fu6ykynwsA80LjxV2bZxzrcCvvyFtnEJYCjVDK804XCnFmlIRHJiWt
GXOkENmHARh30nVdRJOxrlrx63z82AdvwNiuPNFskZlOY5QRBn1Kp3t5Kig8TvbK
QG7X2n/imnkI4hFwFkNDhvVEoAlEL14LKJdG82o/PMG0TFOEm6+3AmUEU0jxdm4y
Qr78BuK5jV164JKr3BgAI+eP0qUogT6Z6h506J+Wud814DgR91oC7JaFlMzW7UVb
T74VJSitFM1qm3RAzWQ/+X7bem0tgFjOuDbXmykeiJ9jgYIz7IOLWXQxfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjtACsAehJtt6oRUp6FEsPu2eGdMB8GA1UdIwQY
MBaAFBeSOfmRPfx9eqqpX/TJthv0K3LWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYt
YzYxMjMwNWNmMDg5LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9kMzE0OWMtZjRkYy00ODM3LThiODYtYzYxMjMwNWNmMDg5
LzEvRjVJNS1aRTlfSDE2cXFsZjlNbTJHX1FyY3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX/7tQTz9
p+LGzBjZYRfOOF4VEtSUm+3Zqu/9Joqbz0AyjgcQkjFvqLSjb/ZqVwov1rnrdlfY
Y6ePzMmzIwmsMj4XHWvqSLTqwx2GBhcwAPM+GM3cFq8zAfqiUqY5ld03firwCtAm
Zb/aQ4H7djzD7mvqE7p1T2q8HkTKuBrih6KcAx71mDYIIdNyAFRsSaksug6Uxz9T
RWS/QsOGGfigGrd1jezhEAopCYdZnQRNbaX0irLmFgLlVgz5tXnb0qMM93wcX1/k
PGTsBeNf1J3mxpaa/YxwlnjBF0/X0OG+2Y6MxfxR9Rwmq+pJOJXWzfEXSUa+RWgH
ofWw1gh6H/u8Rw==
-----END CERTIFICATE-----
Generated at Mon Jan 26 04:18:29 2026 by rpki-client