This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
File:                     t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft (raw, json)
Hash identifier:          AmShHc5GaCfJDdBxh5HxfpDOMDGomUBK99f51HdeMI8=
Subject key identifier:   E0:8F:C4:71:41:5D:D5:0C:66:E3:63:79:60:4C:B2:36:63:21:90:DA
Authority key identifier: B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE
Certificate issuer:       /CN=b754b22c5540508d9629a311ef1e83543657c4ee
Certificate serial:       019BF87614C51C88C15F6C645C1E4C4D12DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
Manifest number:          02FA
Signing time:             Mon 26 Jan 2026 04:00:46 +0000
Manifest this update:     Mon 26 Jan 2026 04:00:46 +0000
Manifest next update:     Tue 27 Jan 2026 04:00:46 +0000
Files and hashes:         1: 1LsBmA-SbOfGa2eleJLL4F-PoS0.roa (hash: fOsQjw7Bt8zL6Bscj5Hp28N4r7Zpof4N2iXErdaa6yA=)
                          2: t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl (hash: yXe2mz/I1zbvvPyHklvBtSvU1j+Bdj5XPJNhTgY2i5I=)
                          3: yUSfqsPPl1YTQhIE73fMTmMnfkE.roa (hash: yAZHs4HcwBg1li8wEtRge9Bo9Q1pztQUu5urOyY+7Fc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 22:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f8:76:14:c5:1c:88:c1:5f:6c:64:5c:1e:4c:4d:12:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b754b22c5540508d9629a311ef1e83543657c4ee
        Validity
            Not Before: Jan 26 04:00:46 2026 GMT
            Not After : Jan 27 04:00:46 2026 GMT
        Subject: CN=e08fc471415dd50c66e36379604cb236632190da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:47:d9:64:de:db:aa:c1:10:c4:31:fa:78:12:
                    ec:07:23:9f:0c:d2:34:d0:1a:6c:1e:e4:8b:a1:d1:
                    86:0d:d0:48:fe:72:18:8f:97:c5:6e:4c:8e:a3:1b:
                    f6:d3:ad:01:4c:d2:4d:7e:30:79:a7:02:3f:3c:48:
                    16:a4:58:9e:54:f1:bf:1d:b8:3b:9c:de:12:73:0f:
                    d9:eb:91:5d:d2:6a:b5:71:88:d8:8d:93:30:97:63:
                    06:08:16:01:7d:37:6a:d1:8a:67:2f:bb:61:49:4d:
                    cf:7a:da:28:0b:0b:1d:9e:1f:72:57:c0:ce:1e:42:
                    14:22:bc:d3:cc:1d:f7:b8:fa:59:34:31:21:d7:13:
                    c0:d5:37:54:b4:b5:42:0f:ce:7a:78:eb:bd:51:2c:
                    b4:ea:59:55:e9:0e:1e:99:e5:e4:34:f4:38:2e:0c:
                    9d:4f:54:e1:bf:fd:d9:fa:5e:23:44:6b:68:08:68:
                    1e:cf:05:83:7f:5b:9b:ae:97:bd:3f:cb:9f:ab:6c:
                    a3:cd:d3:c6:ce:a0:c4:7c:6d:b6:b3:bb:54:77:e0:
                    68:cd:1a:ec:94:32:9b:db:01:02:9f:e5:5c:20:70:
                    f9:fd:16:24:6b:b8:20:cf:fd:f0:e3:b7:ef:af:b0:
                    9b:ea:66:31:86:ea:2a:89:c5:ad:4a:95:86:1f:1e:
                    6d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8F:C4:71:41:5D:D5:0C:66:E3:63:79:60:4C:B2:36:63:21:90:DA
            X509v3 Authority Key Identifier:
                keyid:B7:54:B2:2C:55:40:50:8D:96:29:A3:11:EF:1E:83:54:36:57:C4:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SyLFVAUI2WKaMR7x6DVDZXxO4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b5513a-ba69-48c4-95ee-56ec13269a1c/1/t1SyLFVAUI2WKaMR7x6DVDZXxO4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:04:da:43:b0:c3:b5:23:86:f9:18:60:6c:a3:7a:97:56:a5:
         cc:f6:3f:1d:87:ba:5d:99:a4:c2:d8:0e:38:0e:c6:0d:11:87:
         06:69:6a:fb:d5:59:e0:e0:1c:57:65:7a:c6:04:95:f4:cf:df:
         b4:a1:92:08:8f:0e:9d:79:43:51:ba:e9:d9:ac:b0:05:62:11:
         98:a6:30:40:68:ad:31:1e:08:16:91:cd:d7:8c:9b:88:32:71:
         95:dd:8b:1b:83:36:e4:ee:40:05:66:37:6e:cb:bc:25:78:b5:
         ac:df:ae:28:8b:e5:c1:5a:fe:c9:f2:59:44:63:46:22:42:2a:
         1e:7d:71:e9:0a:01:35:96:54:d6:38:20:95:9b:d2:36:5c:10:
         7b:b5:0f:f6:df:83:5b:21:d8:ee:67:c7:5d:b6:b7:e2:b1:c0:
         8d:93:7a:b5:58:1d:2e:de:bf:f5:28:64:b3:05:52:3d:e5:76:
         3e:3e:66:09:f2:35:76:3b:4f:21:c2:c2:32:ec:4e:e4:dd:55:
         9f:b9:29:e7:c1:cc:3d:1b:36:7b:db:e6:47:1a:26:79:f8:61:
         47:97:8a:9e:91:6c:f8:f9:65:9b:95:b2:16:6f:2e:93:c6:77:
         e2:ed:4f:14:3f:c6:dc:6f:76:5f:5a:33:45:a3:a5:f7:f3:d9:
         5f:74:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 26 07:48:43 2026 by rpki-client