This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
File:                     gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft (raw, json)
Hash identifier:          8kwkNQ6slRYmC4rTVDyzpJ9ec1AC8WkBfW2DKsrV+/U=
Subject key identifier:   60:9C:4E:A9:56:EA:31:7E:E3:60:E5:01:61:DB:EB:AB:5C:8D:41:6F
Authority key identifier: 81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53
Certificate issuer:       /CN=813e051cb831d1989607bb76c0bc5693ff947b53
Certificate serial:       019BF5E3FAF53AE19A2ECE858DA2935AAA78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
Manifest number:          17F5
Signing time:             Sun 25 Jan 2026 16:01:57 +0000
Manifest this update:     Sun 25 Jan 2026 16:01:57 +0000
Manifest next update:     Mon 26 Jan 2026 16:01:57 +0000
Files and hashes:         1: gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl (hash: Aaviv9cS8GxVuX/YsoohsZ7uFcqmQGDWKoxCntZHUyg=)
                          2: hI6blJ5kjyHb7biy4lfSirS37zs.roa (hash: mqWBp2AFnHxwb8q7BdrL6WW9+Na4SaPzQGePE+5iXFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 13:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f5:e3:fa:f5:3a:e1:9a:2e:ce:85:8d:a2:93:5a:aa:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=813e051cb831d1989607bb76c0bc5693ff947b53
        Validity
            Not Before: Jan 25 16:01:57 2026 GMT
            Not After : Jan 26 16:01:57 2026 GMT
        Subject: CN=609c4ea956ea317ee360e50161dbebab5c8d416f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e5:70:f6:cd:d3:9d:25:bb:04:a4:22:42:97:
                    de:84:e4:0e:0f:d9:2f:3b:4a:03:24:a8:98:00:3f:
                    b2:ce:d2:ae:2d:ad:a6:07:31:d3:98:10:30:58:a2:
                    79:59:49:dc:b7:cb:c9:b6:86:d6:7b:9d:a2:e6:cd:
                    02:e1:df:13:bd:06:d1:4d:cf:a5:06:38:de:82:80:
                    55:9d:4d:95:74:04:22:6a:23:a2:74:61:09:33:9d:
                    74:a3:bd:96:1a:e5:08:61:a1:c2:06:a9:53:6a:bf:
                    0b:dc:56:e2:74:4a:d3:04:e2:42:66:d5:90:df:78:
                    c3:f0:bb:a3:bb:8c:50:d9:b3:08:76:66:a0:e0:28:
                    bd:ba:81:1b:95:4b:64:c3:3e:62:56:a0:77:01:b8:
                    5e:73:b4:97:75:e4:65:16:99:b8:45:8b:2a:a2:15:
                    c4:31:95:ec:26:49:7a:79:ea:92:0c:90:ba:73:14:
                    92:d3:83:3e:a4:5e:a2:d7:8f:16:04:75:0d:e9:25:
                    03:39:99:a4:b0:43:a1:d0:6b:40:b8:c8:dc:4e:1c:
                    57:43:ae:9d:c3:7b:f3:55:b5:a3:10:92:99:3e:45:
                    6e:5c:74:5f:57:0b:67:23:b7:6b:24:a5:3b:7a:0e:
                    ce:a0:74:df:56:f2:a2:aa:8e:51:b1:0b:0a:77:9e:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9C:4E:A9:56:EA:31:7E:E3:60:E5:01:61:DB:EB:AB:5C:8D:41:6F
            X509v3 Authority Key Identifier:
                keyid:81:3E:05:1C:B8:31:D1:98:96:07:BB:76:C0:BC:56:93:FF:94:7B:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/e45ad6-e5ae-4819-9f24-f577aa46de83/1/gT4FHLgx0ZiWB7t2wLxWk_-Ue1M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:4d:6e:23:cf:67:8e:7a:ed:f9:0c:37:f3:5f:3a:41:da:b3:
         2b:b4:b7:b3:c4:4d:c9:d3:84:d5:27:1d:14:4e:9f:d0:9a:84:
         50:0c:2e:9a:3b:4b:47:5e:02:70:2b:61:bf:37:dc:fe:a0:cc:
         63:fe:b1:ec:2c:81:d6:7f:11:84:69:21:5f:2c:02:49:b3:27:
         b9:f0:df:e9:3c:9b:d1:ea:1f:2b:dc:08:ef:5c:27:da:d7:39:
         c7:36:72:f4:ed:db:24:28:98:d1:4a:2d:ff:e4:76:04:c2:d7:
         40:b1:83:af:98:ea:83:a9:38:11:07:f3:9a:ee:c1:e1:9f:2a:
         74:a4:be:b2:d1:ad:99:80:e5:e4:4f:45:a2:99:3f:e7:28:10:
         0e:0a:96:90:f1:fc:21:5f:c9:b5:a1:82:d3:95:d2:78:c3:9f:
         91:4f:0f:3b:3a:3f:29:94:4b:13:db:39:6f:87:d1:2c:37:3c:
         da:ab:7a:f7:14:19:fd:10:b1:89:3b:e3:48:f5:06:17:94:09:
         ff:7c:4e:a8:01:7f:31:35:c3:6f:a8:ea:f9:d1:1d:ae:c0:97:
         66:11:f6:50:1d:2f:69:d1:29:b7:db:28:b4:dc:5a:f2:ac:90:
         ec:8a:e3:1a:55:e8:3f:72:35:d9:3d:33:10:b7:61:3c:56:cb:
         b8:38:4c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 22:35:37 2026 by rpki-client